Lecture and Lab, 1 day

This one day course gives participants an understanding of DNS-based threat mitigation as implemented in the Nominum Vantio Malicious Domain Redirection (MDR) Service Delivery Module (SDM). Using commercial blacklists directly to configure MDR enforcement and aggregating sources of "bad" Internet destinations with Nominum Centris are covered. Hands-on experience reinforces the material covered in lecture. This course is essential for administrators who will configure and operate the MDR SDM.

Please see our training schedule for information on class dates.

Who should attend?

This course is designed for system administrators and network administrators responsible for managing DNS infrastructure.

Course Topics

• Fundamentals
  • Leveraging the DNS
  • Feeds and Reputation Sources
  • Data Flow
  • Use Case: Conficker
• Basic MDR Features
  • Manual domain entry
  • Analyzing MDR effects without redirection
  • Hashed Domains and Exclusions
  • Operations and Troubleshooting
• Advanced Centris Features
  • Downloaders
    • url_cat
    • rsync_uribl_url
    • rsync_bare_rbldns
  • Understanding Handlers
  • Encoding with Overlay and masking
  • Whitelists
• Integrating MDR and Centris
  • Configuration of zone transfers
  • Local versus Feed scope
  • Operations and Troubleshooting
• Using Real Time Visibility with MDR
• Best Practices

Prerequisites

Attendees should have completed the Nominum Vantio with Real Time Visibility course or have equivalent experience. They should have a basic understanding of the Internet and be comfortable with editing files and installing software on a UNIX operating system.

More Information

To register for this class or to find out more information, please send email to sales@nominum.com or call +1 877.249.1559 (toll free in US) or +1 650.381.6060.