Implementing and Configuring Cisco Cyber Vision Fundamentals (ICCVF v1.0)

With minimal prerequisites such as basic understanding of typical network operations, the course aims to inform and guide the student in understanding the benefits of advanced network security within the OT network environment and how to position Cyber Vision in the security system solution.

Section 1: Course Introduction & Overview

• Course Introduction

• Introducing Cyber Vision

• Cisco Cyber Vision Use Cases

• Describing Cisco Cyber Vision Functions

Section 2: Industrial Networking Concepts and Components Review 

• Exploring the Functions of Networking 

• Cisco Enterprise Architecture Model 

  • Components of a Data Network

  • Characteristics of a Data Network

• Industrial Networking Concepts and Components 

• The Convergence of IT and OT

  • Contrasting Enterprise and Industrial Environments

  • Industrial Ethernet Architecture

  • Industrial and Enterprise Architectures

  • Converging Reference Models

Section 3: Introducing Cisco Cyber Vision 

• Cyber Vision Component Overview

• Cyber Vision Deployment Models

• Cyber Vision Licensing Requirements

• Installing Cyber Vision

• Configuring Cyber Vision Users & Administrators

• Configuring Cyber Vision System Settings

• Cyber Vision integration with other products & protocols

Section 4: Explore Cisco Cyber Vision Basic Features/Functions 

• Basic architecture principles and sensor location

• Map organization

• Sensor provisioning (filters, active disc; offline mode.)

• Investigation / assessment

• Use of the API (optional)

• Administration & tuning for assessment, simple health checks

• Introduction to baselines, active discovery, a couple of detection examples

• SIEM and other systems integration

Section 5: Cisco Cyber Vision Advanced Features 

• DPI done by sensors

• Online and offline data

• Cyber Vision baselines concept

• Tags and use for searching and filtering

• Presets and assets, searching data

• Activities and flows

• Security features overview: baselines, snort, integration

• Global Center concept and overview

• Knowledge DB: content, update

• Sensors models, CenterDPI sensor

Section 6: Cisco Cyber Vision Operations Case study 

• Introducing Cyber Vision Case Study

Section 7: Cyber Vision Administration & Troubleshooting 

• Cyber Vision Knowledge Base management

• Cyber Vision Center Software Updates, Upgrades, Maintenance

• Cyber Vision basic troubleshooting

Lab 1: Cyber Vision Center GUI orientation

Lab 2: Introduction to inventory, tags, and presets

Lab 3: Organizing the network using groups and presets

Lab 4: Identifying possible issues through tag and property investigation

Lab 5: Exploring the Active Discovery feature

Lab 6: Cyber Vision anomaly detection using baselines

Lab 7: Cyber Vision Malware detection 1

Lab 8: Cyber Vision Malware detection 2