We are happy to advise you!
0845 470 1000     Contact

Instructor-Led Online Training (ILO)
Live Online Classes in the Virtual Classroom

Find out more and view dates

ArcSight ESM Advanced Administrator (ESM310)


Who should attend

This course is intended for any system administrators who need to:

  • Install, administer, maintain and troubleshoot ArcSight ESM components
  • Design and implement integrations between ArcSight ESM and other ArcSight appliances
  • Proactively investigate the health of the ArcSight ESM CORRE environment


To be successful in this course, you should have the following prerequisites or knowledge.

  • Common security devices such as IDS and firewalls
  • Common network device functions, such as routers, switches, and hubs
  • TCP/IP functions such as CIDR blocks, subnets, addressing, and communications
  • Basic Windows operating system tasks and functions
  • Possible attack activities, such as scans, man in the middle, sniffing, DoS, and possible abnormal activities, such as worms, Trojans, and viruses
  • SIEM terminology, such as threat, vulnerability, risk, asset, exposure, and safeguards
  • Completed the ArcSight ESM Administrator and Analyst course, or have at least 6 months experience administering ArcSight ES

Course Objectives

Upon successful completion of this course, you should be able to:

  • Review ArcSight enterprise solutions o Hierarchical, high availability and fail over capabilities DCC
  • Install multiple SmartConnectors to provide peer to peer and fail over connections
  • Configure a hierarchical multi-manager setup using the ArcSight forwarding connector

Configure ArcSight ESM CORRE to:

  • o Provide password lock out criteria
  • Allow for larger log files
  • Provide for single session logins
  • Deploy a new ArcSight license
  • Custom Console functionality
  • Categorize specific network events
  • Import assets using the Asset Import FLEX Connector
  • Personalize the ArcSight Web interface
  • Review the Manager and Connector to troubleshoot your ArcSight environment

Course Content

This course provides you with techniques to proactively analyze and troubleshoot the ESM 7.0 Database and Manager to provide efficient services to your organization. This course shows you how to design and deploy hierarchical, fault tolerant manager implementations as well integration strategies between ArcSight ESM and other ArcSight appliances such as Logger, Connector Appliance, Command Center and the other ArcSight products.

Online Training

Duration 5 days

Price (excl. VAT)
  • £ 3,500.-
Classroom Training

Duration 5 days

Price (excl. VAT)
  • United Kingdom: £ 3,500.-


Instructor-led Online Training:   This computer icon in the schedule indicates that this date/time will be conducted as Instructor-Led Online Training.
1 hour difference
08/02/2021 ― 12/02/2021 Online Training Time zone: Central European Time (CET)
10/05/2021 ― 14/05/2021 Online Training Time zone: Central European Summer Time (CEST)