Forcepoint Data Loss Prevention (DLP) System Engineer

On this accelerated Forcepoint Data Loss Prevention (DLP) System Engineer course, you will create and test a Forcepoint DLP deployment, perform in- depth analysis of DLP component architecture, integrate Forcepoint DLP with local and cloud based products, build policies, leverage configurable script classifiers, create and fine tune fingerprint and machine learning classifiers, configure discovery tasks to crawl files and databases, build, install, and manage DLP endpoints, use data endpoints for application control, encryption and discovery, manage incident data through security manager as well as through SQL, and perform maintenance tasks, such as dealing with failovers, upgrades and troubleshooting of all of the above, including advanced debugging of DLP logs.

Upon completion of this course you will also be able to:

• Summarize the history of Forcepoint DLP.
• Identify the primary Forcepoint DLP components.
• Describe the Forcepoint DLP installation process.
• Configure the DLP base environment.
• Install the Analytics Engine to enable data analysis.
• Install Protector for web scanning.
• Describe DLP Policy Engine architecture and event lifecycle.
• Summarize the DLP Policy structure and test a DLP policy.
• Describe the Analytics Engine architecture
• Explain and test incident data flow.
• Describe the benefits of deploying a Supplemental Server.
• Install and configure a Supplemental Server.
• Create and test Fingerprinting and Machine Learning.
• Install F1E to protect your sensitive data.
• Test F1E anti-tampering and temporary bypass functions.
• Identify Endpoint log files.
• Trace Endpoint agent issues.
• Exclude applications from DLP Endpoint.
• Debug F1E using log files.
• Create and run a Network Discovery task and an Endpoint Discovery task.
• Run DLP reports.
• Configure DLP roles.
• Generate Discovery reports and troubleshoot the crawler.
• Identify and run remediation scripts.
• Describe the DLP component update process.
• Describe automatic DLP component synchronization.
• Configure backup and restore procedures.
• Use the upgrade validation tool and upgrade DLP.
• Describe the infrastructure database
• Investigate Policy Engine timeouts

At the end of this course, you’ll achieve your Forcepoint Data Loss Prevention (DLP) System Engineer certification.

Through Firebrand’s Lecture | Lab | Review methodology you’ll certify at twice the speed of traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

This course is ideal for:

• System engineers, high level system administrators, IT staff, professional services, and technical support
• Consultants, sales engineers, system architects, network architects, implementation specialists, deployment specialists

Module 1: The Evolution of Forcepoint DLP

• Data security story
• Forcepoint story

Module 2: Installing Forcepoint DLP

• Identifying the primary Forcepoint DLP components
• Preparing for installation
• Installing Forcepoint Security Manager
• Configuring DLP base environment
• Configuring Protector for email scanning
• Performing initial testing of DLP

Module 3: Installing Additional DLP Components

• DLP module review
• Installing Analytics Engine
• Installing Protector for web

Module 4: DLP Policy Engine

• Describing Policy Engine architecture and event life cycle
• Summarizing DLP policy structure
• Testing Policy Engine Module 5: Analyzing data
• Describing the Analytics Engine architecture and algorithm
• Running Analytics Engine manually
• Testing Analytics Engine

Module 6: Supplemental Server

• Describing the benefits of deploying Supplemental Server.
• Installing Supplemental Server.

Module 7: Configuring Fingerprinting and Machine Learning

• Describing the classifiers created by crawlers
• Configuring advanced file fingerprint
• Configuring advanced database fingerprinting
• Configuring machine learning

Module 8: Forcepoint One Endpoint (F1E)

• Describing Endpoint Server architecture and endpoint communication
• Installing Forcepoint One Endpoint (F1E) to include anti-tampering
• Using Forcepoint One Endpoint (F1E)

Module 9: Troubleshoot DLP Endpoint Scanning

• Troubleshooting endpoint agents
• Tracing endpoint agent issues
• Excluding applications from DLP endpoint
• Debugging F1E

Module 10: DLP Discovery tasks

• Discovering hidden data
• Load balancing the crawler
• Creating a Network Discovery task
• Using Endpoint Discovery

Module 11: DLP Maintenance

• Identifying and running reports
• Configuring DLP roles
• Generating Discovery task reports
• Deleting a discovery job
• Identifying types of remediation script
• Running a remediation script
• Inspecting a remediation script
• Updating DLP components
• Moving and replacing forensics
• Describing automatic DLP component synchronization
• Recording fingerprint task
• Configuring DLP backup and DSS restore procedures
• Performing a DLP backup
• Using the upgrade validation tool
• Fixing common SQL issues
• Describing the Forcepoint infrastructure
• Investigating Policy Engine timeouts

Module 12: Complex Classifiers

• Identifying types of classifier
• Building a data security policy
• Combining multiple classifiers
• Describing nested transactions logic

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

Forcepoint Data Loss Prevention (DLP) System Engineer

This course prepares you for the Certified Forcepoint DLP System Engineer exam.

A minimum score of 80% is required to obtain certification.

Before attending this accelerated course, you will ideally have:

• Completion of the Forcepoint DLP Administrator Course and certification
• Intermediate knowledge of networking and computer security concept

Your accelerated course includes:

• Accommodation *
• Meals, unlimited snacks, beverages, tea and coffee *
• On-site exams **
• Exam vouchers **
• Practice tests **
• Certification Guarantee ***
• Courseware
• Up-to 12 hours of instructor-led training each day
• 24-hour lab access
• Digital courseware **

* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Seven reasons why you should sit your course with Firebrand Training

• Two options of training. Choose between residential classroom-based, or online courses
• You'll be certified fast. With us, you’ll be trained in record time
• Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
• Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
• You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
• You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
• You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals

*For residential training only. Doesn't apply for online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts

Think you are ready for the course? Take a FREE practice test to assess your knowledge!  Free Practice Test