SNCF-300-710 · Module
Configuration: Security Policies and the Snort Engine
10 lessons, 0 written.
SNCF-300-710 Lessons in This Module
01 M4 · Lab 1: Policy Bench - Attacker, Identity Sources and a Policy-Ready FMC In Production 02 Firepower: Packet Processing & Policies In Production 03 Snort 3 Inside Threat Defense: Inspectors, Binders, Rule Syntax and Snort 2 Migration In Production 04 Intrusion Rules as Objects: Writing, Importing and Grouping Custom Snort Rules In Production 05 Firepower: Policies - Prefilter In Production 06 Access Control Policy in Depth: Hierarchy, Inheritance, Rule Expansion and Logging Strategy In Production 07 Security Intelligence and the DNS Policy: Feeds, Sinkholes and Encrypted DNS In Production 08 Identity Policy: Realms, Passive Auth via ISE/pxGrid and Active Captive Portal In Production 09 Network Analysis Policy: Preprocessors, Inline Normalization and Custom NAP Tuning In Production 10 Intrusion Policy Tuning: Rule Groups, Recommendations, Thresholds and Variable Sets In Production Lab state
Where this module picks the lab up, and what it hands on.
🔬 At module entry
Continues from sncf-zero-trust-access.
💾 At module exit
The lab is left at the end state of Intrusion Policy Tuning: Rule Groups, Recommendations, Thresholds and Variable Sets. Tear nothing down — the next module builds on it.
Devices in scope: FTD-EDGE-01 · FMC-01 · WS-ADMIN-01 · WS-INSIDE-01 · SRV-WEB-01 · R-ISP-01 · SW-ACCESS-01 · ATK-KALI-01 · AD-01 · ISE-01
Workbook & cheat sheet
The printable module cheat sheet is not built yet — the print stylesheet is listed as open work in DESIGN-SYSTEM.md §7.