CheckPoint Certified Security Expert
(R70)
| |
Class |
Duration |
Cert |
Prereq |
| |
CCSE (R70) |
5
Days |
CCSE
|
CCSA (R70) |
Course Overview
The Check Point Security Expert
course provides an understanding of advanced concepts and skills
necessary to configure Check Point Security Gateway and
Management Software Blades. During this course, you will process
a Change Request, implement Provisioning, and configure SSL VPN
remote access. In addition, you will deploy HA, and configure
your network for advanced routing features such as VTIs, while
employing the Eventia suite for advanced reporting and
monitoring options.
The
course is further enhanced by WCP Instructors with additional
trouble-shooting labs. Various break case scenarios are analyzed
and you will be taught how to troubleshoot and resolve the
issues.
|
Take
this class if:
|
- You
are a systems administrator, security manager, or network
engineer implementing VPN-1/FireWall-1 for VPN deployments
- Want
to earn Check Point Certified Security Expert (CCSE R70) certification
|
Prerequisites
Check
Point Security Administration R70, or equivalent knowledge and
experience
|
CCSE (R70)
- Course
Contents
-
Define Management Portal aides
-
Extend access to network policy
settings
-
Use SmartWorkflow to track,
approve and audit Security
Policy changes
-
Assess policy life-cycle and
change management
-
Use SmartProvisioning as a
centralized management tool
-
Define SmartProvisioning
deployment and management
scenarios
-
Use profile-based management
-
Identify SSL VPN roles
-
Assess security acceleration
requirements
-
Assess multi-core CPU with
SecureXL benefits
-
Identify High Availability
limitations
-
Set up multiple Security Gateway
cluster configurations
-
Use Advanced Routing protocols
-
Apply Load Balancing
configurations
-
Produce network-traffic audit
reports
-
Apply intrusion event analysis
-
Monitor and analyze alerts to
track and identify network
intrusions
|
CCSE(R70) - Labs
-
Lab Environment
Setup
-
Build the Management
Server
-
Build Gateways
-
Install and configure
NTP
-
Upgrade to R70.1
-
Establish SIC
-
Management Portal
-
Configure Management
Portal on corporate site
-
Test Management Portal
access
-
Configure Management
Portal access on partner
site
-
Test Management Portal
-
SmartWorkflow
-
Create New
Administrators
-
Configure SmartWorkflow
-
Open and Submit a
Session for Approval
-
Disapprove the Session
and Request a
Modification
-
Approve the Session and
Install the Policy
-
Disable SmartWorkflow
-
SmartProvisioning
-
Enable SmartProvisioning
-
Create New Profile
-
Assign Profile to
Gateways
-
Verify Profile Changes
-
SSL VPN
-
Configure Connectra R66
Gateway
-
Enable Connectra Gateway
in SmartDashboard
-
Create a file-share
application in the SSL
VPN tab
-
Create an Internal User
-
Assign file-share access
to User Group
-
Update Rule Base for DMZ
traffic
-
Verify file-share access
through the User Portal
-
Configure embedded RDP
-
Shutdown and remove
Connectra Server
-
SecureXL
-
Enable and Configure
SecureXL on the Gateway
-
Open connections and
verify acceleration
-
Deploying New Mode
HA
-
Create and configure a
secondary cluster member
-
Configure
Gateway-Cluster object
-
Configure ClusterXL
properties
-
Modify the Rule Base
-
Pass traffic through the
cluster
-
Observe cluster status
in SmartView Monitor
-
Perform test failovers
-
Load Sharing Modes
-
Configure Load Sharing
Unicast mode
-
Test Load Sharing
Unicast mode
-
Configure Load Sharing
Multicast mode
-
Test Load Sharing
Multicast mode
-
VPN with Sticky
Decision Function
-
Configure VPN in a
Cluster
-
View a packet capture of
FTP connections without
Sticky Decision function
-
View a packet capture of
FTP connections with
Sticky Decision function
-
Configure Check
Point QoS Policy
-
Enable and Configure
Check Point QoS
-
Create Check Point QoS
Rules and adjust Rule
weights
-
Verify and install
Policy
-
Test QoS Policy
-
Route-based VPNs
with Static Routes
-
Configure Gateway and
VPN Community objects
-
Add participating
Gateway to Community
-
Configure VTI’s on
participating Gateways
-
Add Static Routes for
internal networks
-
Eventia Analyzer
-
Install the Eventia
Suite on CG_Corporate
-
Configure the network
object in SmartDashboard
-
Configure Eventia
-
Monitor events with
Eventia
|
|
|
|
|
| |
|
|
| |
|
|
|
|
|
