Check Point Security Expert is an advanced course for Check Point’s Security Gateway and Management Systems. This 3-day course provides hands-on training to achieve advanced skills necessary to manage and troubleshoot R77 Check Point Software Blades including advanced firewall, advanced user management and clustering, advanced IPsec and VPN and remote access. During this course, students will perform debugs on firewall processes and optimize VPN performance.
| Length | 3 days |
| Prerequisites | Persons attending this course should have CCSA or equivalent knowledge including networking concepts, Windows Server and/or UNIX, and experience with TCP/IP and the Internet. |
| Who should attend? | Technical persons who support, install, deploy or administer Check Point Software Blades should attend this course. This could include the following: • System Administrators • System Engineers • Security Managers • Network Engineers • Anyone seeking CCSE certification |
| Course topics | • Advanced Firewall • Advanced Upgrading • Advanced User Management • Advanced Clustering • Advanced Acceleration • Advanced IPsec VPN • Remote Access • Auditing and Reporting |
| Objectives include | • Perform debugs on firewall processes using your knowledge of Security Gateway infrastructures including chain modules, packet flow and kernel tables • Perform a backup of a Security Gateway and Management Server using the differences between backups, snapshots and upgrade-exports • Upgrade and troubleshoot a Management Server using a database migration • Upgrade and troubleshoot a clustered Security Gateway deployment • Configure SmartDirectory to incorporate user information for authentication services on the network • Manage internal and external user access to resources for Remote Access of across a VPN • Troubleshoot user access issues found when implementing Identity Awareness • Build, test and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network • Build, test and troubleshoot a ClusterXL High Availability deployment on an enterprise network • Build, test and troubleshoot a management HA deployment on an enterprise network • Configure, maintain and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement on the firewall • Troubleshoot a site-site or certificate-based VPN on a corporate gateway using IKEView, VPN log files and command-line debug tools • Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions • Manage and test corporate VPN tunnels to allow for greater monitoring and scalability with multiple tunnels defined in a community including other VPN providers • Create events or use existing event definitions to generate reports on specific network traffic using SmartReporting and SmartEvent in order to provide industry compliance information to management • Using your knowledge of SmartEvent architecture and module communication, troubleshoot report generation given command-line tools and debug0file information |
| Exercises include |
• Upgrading to R77 • Migrating to a clustering solution • VPNs with 3rd-party certificates • Active Directory configuration • Remote Access with Endpoint Security VPN • SmartEvent and SmartReporter |
