• Title Page
• Introduction & Preface
• Logging into the FireSIGHT System
• Using Objects and Security Zones
• Managing Devices
• Setting Up an IPS Device
• Setting Up Virtual Switches
• Setting Up Virtual Routers
• Setting Up Aggregate Interfaces
• Setting Up Hybrid Interfaces
• Using Gateway VPNs
• Using NAT Policies
• Getting Started with Access Control Policies
• Blacklisting Using Security Intelligence IP Address Reputation
• Tuning Traffic Flow Using Access Control Rules
• Controlling Traffic with Network-Based Rules
• Controlling Traffic with Reputation-Based Rules
• Controlling Traffic Based on Users
• Controlling Traffic Using Intrusion and File Policies
• Understanding Traffic Decryption
• Getting Started with SSL Policies
• Getting Started with SSL Rules
• Tuning Traffic Decryption Using SSL Rules
• Understanding Intrusion and Network Analysis Policies
• Using Layers in Intrusion and Network Analysis Policies
• Customizing Traffic Preprocessing
• Getting Started with Network Analysis Policies
• Using Application Layer Preprocessors
• Configuring SCADA Preprocessing
• Configuring Transport & Network Layer Preprocessing
• Tuning Preprocessing in Passive Deployments
• Getting Started with Intrusion Policies
• Tuning Intrusion Rules
• Tailoring Intrusion Protection to Your Network Assets
• Detecting Specific Threats
• Limiting Intrusion Event Logging
• Understanding and Writing Intrusion Rules
• Blocking Malware and Prohibited Files
• Logging Connections in Network Traffic
• Working with Connection & Security Intelligence Data
• Analyzing Malware and File Activity
• Working with Intrusion Events
• Handling Incidents
• Configuring External Alerting
• Configuring External Alerting for Intrusion Rules
• Introduction to Network Discovery
• Enhancing Network Discovery
• Configuring Active Scanning
• Using the Network Map
• Using Host Profiles
• Working with Discovery Events
• Configuring Correlation Policies and Rules
• Using the FireSIGHT System as a Compliance Tool
• Creating Traffic Profiles
• Configuring Remediations
• Using Dashboards
• Using the Context Explorer
• Working with Reports
• Understanding and Using Workflows
• Using Custom Tables
• Searching for Events
• Managing Users
• Scheduling Tasks
• Managing System Policies
• Configuring Appliance Settings
• Licensing the FireSIGHT System
• Updating System Software
• Monitoring the System
• Using Health Monitoring
• Auditing the System
• Using Backup and Restore
• Specifying User Preferences
• Importing and Exporting Configurations
• Purging Discovery Data from the Database
• Viewing the Status of Long-Running Tasks
• Command Line Reference
• Security, Internet Access, and Communication Ports
• Third-Party Products
• glossary