SEC201V5SUSUSESU-SEC201V55<p>Attendees will be taught how to:</p> <ul> <li>Differentiate container and microservice network vulnerabilities from traditional application attack surfaces</li><li>Deploy and automate security profiles across single or multi-cluster environments using Fleet and Helm</li><li>Shift security left by integrating automated vulnerability and compliance scanning into CI/CD build pipelines</li><li>Enforce admission controls to validate and intercept resource creation based on critical risk criteria</li><li>Implement zero-trust protection by auto-learning and locking down process profiles, network rules, and file paths</li><li>Intercept advanced threats utilizing built-in network attack detection alongside custom DLP and WAF sensors</li><li>Federate global security policies centrally from a primary cluster down to all managed downstream environments</li><li>Manage programmatically using example REST API scripts and the containerized Management CLI</li><li>Integrate SIEM operations by forwarding structured log notifications to Webhooks and external Syslog servers</li></ul><p>Participants need a basic understanding of containerization principles, Kubernetes orchestrator operations, and fundamental container development processes. Additionally, practical comfort working inside a standard Linux terminal shell is required.</p><p>This course is specifically targeted at container software developers, IT cloud operators, security administrators, and DevOps personnel responsible for managing, auditing, and improving security compliance postures for containerized microservices.</p><h5>Section 1: Course Overview</h5><h5>Section 2: Introduction to Container Security</h5><ul> <li>The Need for Container Security</li><li>Threat and Vulnerability Management</li><li>SUSE Security</li></ul><h5>Section 3: Deploying SUSE Security</h5><ul> <li>Deployment Methods</li><li>Deploying SUSE Security using SUSE Rancher Prime</li><li>Deploying SUSE Security using Fleet</li></ul><h5>Section 4: SUSE Security Management Console User Interface</h5><ul> <li>Navigation within the Management Console</li><li>Security Risk Score</li><li>Assets</li><li>Network Activity</li></ul><h5>Section 5: SUSE Security Management Console Basic Configuration</h5><ul> <li>Configure SUSE Security Management Console Settings</li><li>Manage Local Users and Roles</li><li>Enable Authentication from External Directories</li></ul><h5>Section 6: Supply Chain Security with SUSE Security</h5><ul> <li>Vulnerability Scanning</li><li>Compliance Scanning</li><li>Admission Controls</li></ul><h5>Section 7: Runtime Security with SUSE Security</h5><ul> <li>Runtime Scanning</li><li>Threat Based Controls</li><li>Zero-Trust Controls</li><li>Runtime Security Management with SUSE Security</li></ul><h5>Section 8: Multi-Cluster Management with SUSE Security</h5><ul> <li>Federation</li><li>Multi-Cluster Policies</li></ul><h5>Section 9: SUSE Security API and Command Line Management</h5><ul> <li>REST API</li><li>SUSE Security Management CLI</li></ul><h5>Section 10: Logging and Reporting</h5><ul> <li>External Logging Services</li><li>SUSE Security Reports</li></ul>Attendees will be taught how to: - Differentiate container and microservice network vulnerabilities from traditional application attack surfaces - Deploy and automate security profiles across single or multi-cluster environments using Fleet and Helm - Shift security left by integrating automated vulnerability and compliance scanning into CI/CD build pipelines - Enforce admission controls to validate and intercept resource creation based on critical risk criteria - Implement zero-trust protection by auto-learning and locking down process profiles, network rules, and file paths - Intercept advanced threats utilizing built-in network attack detection alongside custom DLP and WAF sensors - Federate global security policies centrally from a primary cluster down to all managed downstream environments - Manage programmatically using example REST API scripts and the containerized Management CLI - Integrate SIEM operations by forwarding structured log notifications to Webhooks and external Syslog serversParticipants need a basic understanding of containerization principles, Kubernetes orchestrator operations, and fundamental container development processes. Additionally, practical comfort working inside a standard Linux terminal shell is required.This course is specifically targeted at container software developers, IT cloud operators, security administrators, and DevOps personnel responsible for managing, auditing, and improving security compliance postures for containerized microservices.Section 1: Course Overview Section 2: Introduction to Container Security - The Need for Container Security - Threat and Vulnerability Management - SUSE Security Section 3: Deploying SUSE Security - Deployment Methods - Deploying SUSE Security using SUSE Rancher Prime - Deploying SUSE Security using Fleet Section 4: SUSE Security Management Console User Interface - Navigation within the Management Console - Security Risk Score - Assets - Network Activity Section 5: SUSE Security Management Console Basic Configuration - Configure SUSE Security Management Console Settings - Manage Local Users and Roles - Enable Authentication from External Directories Section 6: Supply Chain Security with SUSE Security - Vulnerability Scanning - Compliance Scanning - Admission Controls Section 7: Runtime Security with SUSE Security - Runtime Scanning - Threat Based Controls - Zero-Trust Controls - Runtime Security Management with SUSE Security Section 8: Multi-Cluster Management with SUSE Security - Federation - Multi-Cluster Policies Section 9: SUSE Security API and Command Line Management - REST API - SUSE Security Management CLI Section 10: Logging and Reporting - External Logging Services - SUSE Security Reports2 days1450.001450.001450.001450.001450.002400.003310.00