Course Outline

Check Point Security Engineering is an advanced 3-day course that teaches how to effectively build modify deploy and troubleshoot Check Point Security systems on the Gaia OS. We will study firewall processes and take a close look at user and kernel processing and Stateful Inspection. Labs include configuring security gateways implementing VPNs and performing advanced troubleshooting tasks on the firewall.

Prerequisites & Audience

Successful completion of this course depends on knowledge of multiple disciplines related to network-security activities including UNIX and Windows operating systems Certificate management system administration networking (TCP/IP) knowledge and Check Point Security Administration course/CCSA Certification.

Target Audience
This course is designed for expert users and resellers who need to perform advanced deployment configurations of a security gateway. This could include the following: System Administrators support analysts and network engineers.

Course Objectives

• Perform a backup of a Security Gateway and Management Server using your understanding of the differences between backups snapshots and update-exports
• Upgrade and troubleshoot a Management Server using a database migration
• Upgrade and troubleshoot a clustered Security Gateway deployment
• Use knowledge of Security Gateway infrastructures chain modules packet flow and kernel tables to perform debugs on firewall processes
• Build test and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network
• Build test and troubleshoot a clusterXL
• High Availability deployment on an enterprise network
• Build test and troubleshoot a management HA deployment on an enterprise network
• Configure maintain and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement
• Using an external user database such as LDAP configure User Directory to incorporate user information for authentication services on the network
• Manage internal and external user access to resources for Remote Access or across a VPN
• Troubleshoot user access issues found when implementing Identity wareness
• Troubleshoot a site-to-site or certificatebased VPN on a corporate gateway using IKE View VPN log files and command-line debug tools
• Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions
• Manage and test corporate VPN tunnels to allow for greater monitoring and scalability with multiple tunnels defined in a community including other VPN providers
• Create events or use existing event definitions to generate reports on specific network traffic using SmartReporter and SmartEvent to provide industry compliance information to management
• Troubleshoot report generation given command-line tools and debugfile information

Course Topics

• Advanced and in-depth explanation of Check Point firewall technology
• Key tips and techniques for troubleshooting
• Check Point firewall technology
• Advanced upgrading concepts and practices
• Clustering firewall management concepts and practices
• Software acceleration features
• Advanced VPN concepts and implementations
• Reporting tools deployment options and features

Certification

CCSE