CheckPoint Certified Security Expert NGX III
(R65)
| |
Class |
Duration |
Price |
Promotion |
Cert |
Prereq |
| |
NGX
III |
3
Days |
$2,995 |
Free
Hotel |
CCSE+ |
NGX
I/II |
Course Overview
Designed
for more experienced security professionals, NGX II&III certification is one
of the most highly recognized and respected vendor-specific security
certifications available.
This course is for professionals who
already have working knowledge of the CheckPoint Firewall-1 and would like
to get more hands-on, trouble-shootng experience.
It provides more in-depth skills and expertise in managing and supporting Check
Point products. Proficiencies include configuring and managing
VPN-1/FireWall-1 as an Internet security solution and virtual private
network (VPN), using encryption technologies to implement site-to-site and
remote access VPNs, and configuring content security by enabling Java
blocking and anti-virus checking.
It delves into trouble-shooting techniques, using network
analyzers, reading sniffer traces, how to use "fw
monitor" and other tools.
The
course is further enhanced by WCP Instructors with additional
trouble-shooting labs. Various break case scenarios are analyzed
and you will be taught how to troubleshoot and resolve the
issues.
|
Take
this class if:
|
- You
are a systems administrator, security manager, or network
engineer implementing VPN-1/FireWall-1 for VPN deployments
- Want
to earn Check Point Certified Security Expert (CCSE
NGX) NGX certification
|
Prerequisites
Check
Point Security Administration NGX I, or equivalent knowledge and
experience
|
|
|
|
|
|
NGX
III - Course Contents
|
| What
You Will Learn |
- Troubleshooting NGX
product problems using troubleshooting guidelines
- Using cpinfo and log
files for file management
- Using protocol
analyzers to capture and analyze network traffic
- Troubleshooting NGX
problems using NGX debugging tools
- Using fw and fw
advanced commands for troubleshooting
- Troubleshooting
specific Security Server issues
- Using VPN log files
and vpn debug to troubleshoot VPN connections
- Capturing traffic flow
using ike debug, sr_service debug, and srfw monitor
- Identifying
differences between route- and domain-based VPNs
- Identifying,
debugging, and using relevant commands to troubleshoot
Eventia Reporter problems
|
| About
The Labs |
- Collecting
configuration files from an NGX installation
- Review and analyzing
cpinfo output in InfoView
- Using GuiDBedit to
create services and objects, and modify an object’s
global properties
- Using fw logswitch to
switch active and audit logs
- Using fwm logexport to
export logs
- Comparing client- and
server-side NAT using fw monitor
- Using fwm and cpd
debugging to troubleshoot a stand-alone installation
problem
- Generating and
interpreting a file containing fw ctl pstat
information
- Using fw stat to
verify a Gateway’s Policy installed status
- Using fw unloadlocal
to uninstall a Security Policy
- Using fwm load to
install a Policy
- Running ike debug on
Gateways, and analyzing output using IKEview
- Observing IKE by
running ike debug
- Running srfw monitor
on a SecureClient desktop
- Configuring
route-based VPNs for VPN redundancy
- Configuring dynamic
routing using OSPF through VPN tunnels
|
|
|
|
