Online training in the virtual classroom
E-Learning offers and more

Find out more

Implementing Aruba Introspect (IAI)


Course Overview

This course teaches how to plan & implement an enterprise security solution using Aruba IntroSpect. The material covers integrating & monitoring wired & wireless networks into the product. Hands-on labs will lead you through the configuration and integration with ClearPass as well as other network servers. Configuration of log sources to monitor network traffic & authentication. You will get an introductory primer on conducting threat hunting and evaluating the analytics provided by User & Entity Behavior Analytics (UEBA). Aruba’s best practices in establishing a security monitoring infrastructure are presented. Candidates will acquire the skills to assess a company’s security requirements & then design a monitoring solution to meet them. Learn to integrate IntroSpect into campus LAN, WLAN, & multi-site environments. Exposures to security analytics on warehouse and IoT networks.

The 3 day course is approximately 55% lecture & 45% hands-on lab exercises. Giving students the skills required to implement IntroSpect.

Who should attend

Typical candidates for this course are Aruba implementation partners who will be installing IntroSpect into customer networks or customer Administrators and Network Architects who will design and plan and maintain the IntroSpect system.


There are no certification prerequisites for this course. Participants should understand basic networking technologies and design concepts. Participants should be familiar with the Microsoft domain structure and authentication concepts, as well as a basic knowledge of Aruba ClearPass. It is also recommend that a participant in this class be familiar with the features of the Aruba Mobility Controller and the firewall.

Course Objectives

After you successfully complete this course, expect to be able to:
  • Understand the architecture of the IntroSpect system.
  • Determine the appropriate IntroSpect deployment for customer situations.
  • Determine the most effective locations to monitor traffic on the network.
  • Configure log sources to gather data for analytics.
  • Configure IntroSpect Packet Processor to forward log data to the IntroSpect Analyzer.
  • Configure effective analytics on the IntroSpect Analyzer.
  • Integrate IntroSpect with ClearPass for a complete security solution.
  • Review and evaluate user and entity behavior characteristics.
  • Identify common indicators of compromise.
  • Administer and update the IntroSpect system.

Course Content

  • Security Basics
  • Introduction to IntroSpect
  • System Installation
  • Analyzer Deployment Architecture
  • Log Sources
  • ClearPass Integration
  • Configuring Analytics
  • Alert Investigation
  • Administrative Tasks
  • Troubleshooting
Online Training
Modality: L

Duration 3 days

Price (excl. tax)
  • Eastern Europe: 1,500.- €
Classroom Training
Modality: C

Duration 3 days



Time zone CEST
02/12/2020 ― 04/12/2020 Online Training Time zone: CET
This computer icon in the schedule indicates that this date/time will be conducted as Instructor-Led Online Training.