Course Description

This course provides you with the knowledge required to successfully and effortlessly upgrade your ArcSight infrastructure. By the end of the course all students will be aware of all the pitfalls, processes, pre-reqs and steps required to get those upgrades working first time, every time.

Students will have the opportunity to upgrade components themselves in our lab environment, where they can build confidence in the upgrade process in a non-production environment.

Modules

1. The importance of upgrading your ArcSight components

2. Considerations before upgrading

   • Following an appropriate change process

   • Understanding the risks

   • Contingency planning

3. Creating and following an upgrade plan

   • Understanding the upgrade path for each component

   • Gathering the required software

   • Running backups

   • Completing pre-upgrade tasks

   • Running the upgrade

   • How to verify the upgrade was successful

   • Competing post-upgrade tasks

4. Demonstrations of upgrading the following components

   • EMS

   • Logger

   • ArcMC

   • SmartConnectors

Intended Audience

This course is designed for Security Professionals and SOC Administrators, who are responsible for deploying and administrating the ArcSight product suite within their environment.

Recommended Skills

• Familiarity working with command line tools

• Experience deploying applications in Windows and Linux environments

• Completion of TITAN-ARC-001: An Introduction to Protective Monitoring