Unit of competency Outline

Date retreived
22/07/2026 10:41 PM AWST

Whilst all efforts are made to provide accurate and timely information from the relevant source/documentation, please be aware that the information supplied may not be the most current version. The accuracy of the detail has not been confirmed by the Department and therefore should not be relied upon without first confirming the contents.

Configure and manage intrusion prevention system on network sensors

Configure and manage intrusion prevention system on network sensors

Unit of competency
National Code
ICTNWK622
State Code
OBT38
TGA Status
Current
DTWD Status
Approved
Current Release Number
1.00
Current Release Date
21/07/2020
View on TGA
State Implementation and Classification
Approved Date
15/01/2021
Field of Education
020113 - Networks And Communications
Original Release Date
15/01/2021
Nominal Hours
40
Description
This unit describes the skills and knowledge required to use required tools, equipment and software to implement an intrusion prevention system (IPS) on IPS sensors to mitigate network attacks.It applies to individuals with advanced Information and Communications Technology (ICT) skills who are working as certified IPS specialists, network security specialists and network security managers.No licensing, legislative or certification requirements apply to this unit at the time of publication.
Notes
Elements and Performance Criteria
1. Evaluate ways IPS sensors are used to mitigate network attacks
  • 1.1 Evaluate inline operations network system requirements according to industry standards and organisational requirements
  • 1.2 Evaluate inline to promiscuous mode sensor operations and IPS devices network protection capability
  • 1.3 Evaluate and determine ways IPS can defeat evasive network hacking methods
  • 1.4 Evaluate selection considerations, placement and deployment of network IPS and IPS signature
2. Select, install and configure IPS sensors
  • 2.1 Install, initialise and configure sensor interfaces, interface pairs, virtual local area network (VLAN) pairs and VLAN groups
  • 2.2 Configure management access to sensor appliance and create required user accounts
  • 2.3 Set up, manage and monitor sensor communications with external management and monitoring systems and use built-in tools
  • 2.4 Upgrade IPS sensor parameters and licensing requirements and maintain network integrity
  • 2.5 Plan mitigation of specific network vulnerabilities and exploits according to organisational requirements
3. Tune IPS sensor advanced system parameters
  • 3.1 Tune sensor signatures and provide optimal protection of network
  • 3.2 Create custom and meta signatures and align to mitigation performance requirements
  • 3.3 Configure passive operating system (OS) fingerprinting gateway
  • 3.4 Configure external product interface to receive and process information from external security and management products
  • 3.5 Configure a virtual sensor and anomaly detection
4. Manage IPS security and network response attacks
  • 4.1 Monitor IPS events and determine network attack response 4.2 Assess IPS effectiveness against security intrusion
  • 4.2 Report on security and response attacks according to organisational requirements
No information
No information
Replaces
State Code National Code Title Type
AUV31 ICTNWK609 Configure and manage intrusion prevention system on network sensors Unit of competency