Home » HPE » Zoek: 01121644   |   01121644

Configuring Aruba Introspect (1121644)


Plan and implement an enterprise security solution using Aruba IntroSpect.

This course teaches how to plan & implement an enterprise security solution using Aruba IntroSpect.  The material covers integrating & monitoring wired & wireless networks into the product. Hands-on labs will lead you through the configuration and integration with ClearPass as well as other network servers. Configuration of log sources to monitor network traffic & authentication. You will get an introductory primer on conducting threat hunting and evaluating the analytics provided by User & Entity Behavior Analytics (UEBA). Aruba’s best practices in establishing a security monitoring infrastructure are presented. Candidates will acquire the skills to assess a company’s security requirements & then design a monitoring solution to meet them. Learn to integrate IntroSpect into campus LAN, WLAN, & multi-site environments. Exposures to security analytics on warehouse and IoT networks.

The 3 day course is approximately 55% lecture & 45% hands-on lab exercises. Giving students the skills required to implement IntroSpect.

Lees meer »Lees minder «

Bereidt voor op deze certificeringen:

  HPE Product Certified - Aruba IntroSpect Specialist

Vereiste voorkennis bij deze training

There are no certification prerequisites for this course. Participants should understand basic networking technologies and design concepts. Participants should be familiar with the Microsoft domain structure and authentication concepts, as well as a basic knowledge of Aruba ClearPass.  It is also recommend that a participant in this class be familiar with the features of the Aruba Mobility Controller and the firewall.


Typical candidates for this course are Aruba implementation partners who will be installing IntroSpect into customer networks or customer Administrators and Network Architects who will design and plan and maintain the IntroSpect system.

Lijst van onderwerpen

Security Basics
- Characteristics of an Attack
- Indicators of Compromise
- Cyber Attacks and the Cyber Kill Chain

Introduction to IntroSpect
- IntroSpect Overview
- Analytics Tools and Dashboards
- AI and Machine Learning in IntroSpect

System Installation
- IntroSpect Analyzer Configuration
- IntroSpect Packet Processor Configuration

Analyzer Deployment Architecture
- Fixed Configuration vs Scale-out Deployments
- Licensing
- Deployment Scenarios
- Overview of How IntroSpect Uses Logs and Data

Log Sources
- Introduction to the Log Processing Chain
- Configuring Log Sources
- Customizing Log Sources

ClearPass Integration
- IntroSpect as an External Context Server in ClearPass
- Configuring ClearPass Log Sources in IntroSpect
- Configuring ClearPass API and Client for IntroSpect
- Quarantine Users / Entities from IntroSpect

Configuring Analytics
- Introduction to Analytics and the Analyzer Dashboard
- Entity360
- Monitoring Strategies
- Data Validation

Alert Investigation
- Alert Investigation and Baselines
- Alert Notifications and Chaining Alerts
- Analyzing Alerts and Conversations

Administrative Tasks
- Software Upgrade
- IntroSpect Analyzer Health Checks
- Data Retention Tuning
- Administrative User Management
- IntroSpect Analyzer Logs and Tech Support

- System Alarms
- Debugging the ETL Pipeline
- Evaluating Log Sources and Alerts Errors

The price for this course excludes any costs for taking an exam. If an exam voucher is taken after the training, an additional invoice will be sent.




€ 2025
excl. BTW

Niet gepland

Neem contact op met ons op via info@lai.nl
of +31 10 2042220.

Onze trainingscoördinator kan u informeren over de mogelijkheden om deze training bij LAI of op uw locatie te plannen.