In this advanced course for Check Point's Security Gateway and Management Systems, you will receive hands-on training to achieve the advanced skills necessary to manage and troubleshoot R75 Check Point Software Blades, including advanced firewall, advanced user management and clustering, advanced IPsec and VPN and remote access. During this course, you will perform debugs on firewall processes and optimize VPN performance.

Certification:

This course helps you prepare for the Check Point Certified Security Expert (CCSE) R75 exam.

What You'll Learn

• Advanced firewall troubleshooting and management
• Advanced user management and clustering
• Advanced IPsec
• Advanced VPN and remote access

Who Needs to Attend

Technical personnel, including systems administrators, system engineers, security managers, and network engineers, who support, install, deploy, or administer Check Point Software Blades

Prerequisites

CCSA or equivalent knowledge, including knowledge of network concepts and Windows Server and/or UNIX and experience with TCP/IP and the Internet

Follow-On Courses

There are no follow-ons for this course.

Course Outline

1. Perform debugs on firewall processes using your knowledge of Security Gateway infrastructures including chain modules, packet flow, and kernel tables

2. Perform a backup of a Security Gateway and Management Server using the differences between backups, snapshots, and upgrade-exports

3. Upgrade and troubleshoot a Management Server using a database migration

4. Upgrade and troubleshoot a clustered Security Gateway deployment

5. Configure SmartDirectory to incorporate user information for authentication services on the network

6. Manage internal and external user access to resources for remote access across a VPN

7. Troubleshoot user access issues found when implementing Identity Awareness

8. Build, test, and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network

9. Build, test, and troubleshoot a ClusterXL High Availability (HA) deployment on an enterprise network

10. Build, test, and troubleshoot a management HA deployment on an enterprise network

11. Configure, maintain, and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement on the firewall

12. Troubleshoot a site-to-site or certificate-based VPN on a corporate gateway using IKEView, VPN log files, and command-line debug tools

13. Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions

14. Manage and test corporate VPN tunnels to allow for greater monitoring and scalability with multiple tunnels defined in a community including other VPN providers

15. Create events or use existing event definitions to generate reports on specific network traffic using SmartReporting and SmartEvent in order to provide industry compliance information to management

16. Using your knowledge of SmartEvent architecture and module communication, troubleshoot report generation given command-line tools and debug0file information

Labs

Lab 1: Upgrading to R75

Lab 2: Migrating to a Clustering Solution

Lab 3: VPNs with Third-Party Certificates

Lab 4: Active Directory Configuration

Lab 5: Remote Access with Endpoint Security VPN

Lab 6: SmartEvent and SmartReporter