Take this class if:

• You are a systems administrator, security manager, or network engineer implementing VPN-1/FireWall-1 for VPN deployments
• Want to earn Check Point Certified Security Expert (CCSE NGX) NGX certification

• Troubleshooting NGX product problems using troubleshooting guidelines
• Using cpinfo and log files for file management
• Using protocol analyzers to capture and analyze network traffic
• Troubleshooting NGX problems using NGX debugging tools
• Using fw and fw advanced commands for troubleshooting
• Troubleshooting specific Security Server issues
• Using VPN log files and vpn debug to troubleshoot VPN connections
• Capturing traffic flow using ike debug, sr_service debug, and srfw monitor
• Identifying differences between route- and domain-based VPNs
• Identifying, debugging, and using relevant commands to troubleshoot Eventia Reporter problems
  

• Collecting configuration files from an NGX installation
• Review and analyzing cpinfo output in InfoView
• Using GuiDBedit to create services and objects, and modify an object’s global properties
• Using fw logswitch to switch active and audit logs
• Using fwm logexport to export logs
• Comparing client- and server-side NAT using fw monitor
• Using fwm and cpd debugging to troubleshoot a stand-alone installation problem
• Generating and interpreting a file containing fw ctl pstat information
• Using fw stat to verify a Gateway’s Policy installed status
• Using fw unloadlocal to uninstall a Security Policy
• Using fwm load to install a Policy
• Running ike debug on Gateways, and analyzing output using IKEview
• Observing IKE by running ike debug
• Running srfw monitor on a SecureClient desktop
• Configuring route-based VPNs for VPN redundancy
• Configuring dynamic routing using OSPF through VPN tunnels
  
  

• Check Point Security Administration NGX I Rev 1.1 and Check Point Security Administration NGX II Rev 1.1 or equivalent knowledge and experience

• You are a systems administrator, security manager, or network engineer implementing Provider-1 NGX in an enterprise setting
• You are challenging exam #156-815 as part of Check Point Certified Managed Security Expert NGX (CCMSE NGX) certification

• Describe the Provider-1 architecture
• Describe the installation requirements for the Provider-1 components
• Successfully install Provider-1
• List and describe MDS configuration options
• List and describe Customer Management Add-On (CMA) configuration options
• Identify the features and functions of the MDG
• Describe Provider-1 log-management features
• Create and assign Global Policies to multiple CMAs
• Use advanced tools to manage multiple Customer sites
  

• Install the MDS as a Manager and Container, then configure the MDS to function as a primary MDS
• Install the Provider-1 SmartConsole and MDG client
• Configure CMAs for city sites
• Establish SIC between CMAs and the remote Security Gateways they manage
• Adjust Provider-1 default settings to customize the system for your configuration
• Create basic objects and Rule Bases for CMAs in your configuration
• Create additional Administrators and show the differences in privilege levels
• Deploy GUI clients at remote sites, and grant different access to clients with different privileges
• Remotely install a Check Point software package on the Gateways in your lab configuration
• Disconnect a rogue client from your primary MDS
• Define network objects and rules for a NOC Gateway
• Install and configure a secondary MDS to be an MDS Multi-Log Module (MLM)
• Create objects and rules applied to each CMA in a Global Policy.
  Define a Global VPN Community
• Migrate an existing SmartCenter Server into your existing Provider-1 setup
• Install and configure a secondary MDS for Management High Availability (HA)
• Mirror a configured MDS to a second MDS in your setup
• Configure a secondary MDS for CMA level HA in a Provider-1 setup
• Back up MDS files using Provider-1 archiving commands.Restore MDS files using archiving commands