CCSA NGX R71 Course Overview
- 1. Check Point Security Administration NGX ICourse Overview
- 2. Course DescriptionObjectivesDescribe Check Point’s unified approach to network management, and the key elements of this architectureDesign a distributed environment using the network detailed in the course topologyInstall the Security Gateway version R71 in a distribute environment using the network detailed in the course topologyGiven Check Point’s latest integration of CoreXL technology, select the best security solution for your corporate environmentGiven network specifications, perform a backup and restore the current Gateway installation from the command lineCheck Point Security Administration NGX R71 I
- 3. Course DescriptionObjectivesIdentify critical files needed to purge or backup, import and export users and groups and add or delete administrators from the command lineDeploy Gateways using sysconfig and cpconfig from the Gateway command lineUse the Command Line to assist support in troubleshooting common problems on the Security GatewayGiven the network topology, create and configure network, host and gateway objectsVerify SIC establishment between the SmartCenter Server and the Gateway using SmartDashboardCreate a basic Rule Base in SmartDashboard that includes permissions for administrative users, external services, and LAN outbound useCheck Point Security Administration NGX R71 I
- 4. Course DescriptionObjectivesConfigure NAT rules on Web and Gateway serversEvaluate existing policies and optimize the rules based on current corporate requirementsMaintain the Security Management Server with scheduled backups and policy versions to ensure seamless upgrades and minimal downtimeUse queries in SmartView Tracker to monitor IPS and common network traffic and troubleshoot events using packet dataUsing packet data on a given corporate network, generate reports, troubleshoot system and security issues, and ensure network functionalityUsing SmartView Monitor, configure alerts and traffic counters, view a Gateway's status, monitor suspicious activity rules, analyze tunnel activity and monitor remote user access based on corporate requirementsCheck Point Security Administration NGX R71 I
- 5. Course DescriptionObjectivesMonitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modificationsUse SmartUpdate to apply upgrade packages to single or multiple VPN-1 GatewaysUpgrade and attach product licenses using SmartUpdateCentrally manage users to ensure only authenticated users securely access the corporate network either locally or remotelyManage users to access to the corporate LAN by using external databasesSelect the most appropriate encryption algorithm when securing communication over a VPN, based on corporate requirementsCheck Point Security Administration NGX R71 I
- 6. Course DescriptionObjectivesEstablish VPN connections to partner sites in order to establish access to a central database by configuring Advanced IKE propertiesConfigure a pre-shared secret site-to-site VPN with partner sitesConfigure a certificate based site-to-site VPN using one partner's internalConfigure a certificate based site-to-site VPN using a third-party CAConfigure permanent tunnels for remote access to corporate resourcesConfigure VPN tunnel sharing, given the difference between host-based, subnet-based and gateway-based tunnelsCheck Point Security Administration NGX R71 I
- 7. Course DescriptionObjectivesConfigure Check Point Messaging Security to test IP Reputation, content based anti-spam, and zero hour virus detectionBased on network analysis disclosing threats by specific sites, configure a Web-filtering and antivirus policy to filter and scan trafficImplement default or customized profiles to designated Gateways in the corporate networkCheck Point Security Administration NGX R71 I
- 8. Course LayoutCourse RequirementsPrerequisitesCheck Point Certified Security Administrator (CCSA)Check Point Security Administration NGX R71 I
- 9. The course is geared towardsSystem administatorsSupport analystsNetwork engineersCourse Requirements
- 10. Each delegate should have :General knowledge of TCP/IPWorking knowledge of Windows and/or UnixWorking knowledge of network technologyWorking knowledge of the InternetPre-requisites
- 11. Course MapModule 1: Check Point Technology OverviewModule 2: Deployment PlatformsModule 3: Introduction to the Security PolicyModule 4: Monitoring Traffic and ConnectionsModule 5: Using SmartUpdateModule 6: Upgrading to R71Module 7: User Management and AuthenticationModule 8: Encryption and VPNsModule 9: Introduction to VPNsModule 10: Messaging and Content SecurityCourse Map
- 12. Lab SetupLab TopologyIP AddressesLab TermsLab StationsLab Setup
- 13. Lab Topology
- 14. NGX R71 Security Software Containers by Platform
- 15. NGX R71 Security Gateway Software Blades by Platform
- 16. NGX R71 Security Management Software Blades by Platform
- 17. NGX R71 Minimum RequirementSecurity Management Server
- 18. NGX R71 SmartConsoleHardware Requirements
- 19. EndEnd of Course Overview