Check Point Security Administration I NGX

network

Course: Check Point Security Administration I NGX
Length 3 days* (recommended)
Prerequisites Basic networking knowledge, knowledge of Windows Server and/or UNIX, and experience with TCP/IP and the Internet
Take this class if

•You are a systems administrator, security manager, or network engineer who manages NGX R65 Security Gateway deployments
•Want to earn Check Point Certified Security Administrator (CCSA) NGX R65 certification


More Details
Table of Contents

Sample Chapter

Course Objectives



Check Point Security Administration I NGX (R65) is a foundation course for Check Point's flagship product, VPN-1 (NGX R65). This course provides an understanding of basic concepts and skills necessary to configure VPN-1. During this course, students will configure a Security Policy, and learn about managing and monitoring a secure network.

**With the addition of the optional Check Point Security Administration I NGX on UTM-1/Power-1 supplement, the Check Point Certified Security Administrator NGX (CCSA NGX) certification candidate also learns the basic skills for configuring VPN-1 NGX on a Check Point UTM-1/Power-1 Appliance during the course.

You will learn

How VPN-1 components and Check Point’s three-tier architecture works to secure your network
How to perform command-line operations using Check Point’s SecurePlatform operating system
How to back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCenter Servers
How to create objects and rules and modify a Security Policy’s properties
How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
How to configure network-bandwidth requirements and interpret the results
How to use Network Address Translation to overcome IP addressing limitations
How to verify the identity of users logging in to VPN-1 using authentication schemes
How to implement LDAP, and integrate it with a SmartCenter Server
How to protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
How to configure Web-filtering and antivirus settings on a Gateway to ensure traffic content is inspected for specific conditions.
Exercises

Installing and configuring the SmartCenter Server
Installing SecurePlatform Pro on the Security Gateway
Configuring the Security Gateway using the WebUI
Configure an interface as your management connection using the sysconfig utility
Backing up a current configuration from the command line
Create network objects
Establish trust between a Gateway and SmartCenter Server
Develop a network model using SmartMap
Create a Policy Package to configure a Rule Base
Enable Static NAT on a network
Simulate a malicious network intrusion, and blocking the attack
Enforce the Suspicious Activity Rule with SmartView monitor
Create user templates and define users
Test Client Authentication
Configure SmartDirectory using Microsoft Active directory to authenticate users
Configure QoS rules to support traffic-priority requirements
Configure SmartDefense to detect port scans and successive multiple-connection attempts
Configure Web Intelligence to detect a simple worm signature
Take advantage of the latest special offers on NGX classes, and then register for training with an ATC near you!

*Course length and price may vary by ATC. Please contact your local ATC for detailed information.

network

Course: Check Point Security Administration II NGX
Length 2 days* (recommended)
Prerequisites Check Point Security Administration I NGX (R65), or equivalent knowledge and experience
Take this class if

•You are a systems administrator, security manager, or network engineer implementing VPN-1 (NGX R65) for VPN deployments
•Want to earn Check Point Certified Security Expert (CCSE NGX R65 certification


More Details
Table of Contents

Sample Chapter

Course Objectives



Check Point Security Administration II NGX (R65) provides an understanding of upgrading and advanced configuration of VPN-1 (NGX R65), installing and managing VPN-1 (on both internal and external networks), gaining the maximum security from Security Gateways, and resolving Gateway performance issues.

You will learn

How to use NGX tools to upgrade to VPN-1 (NGX R65)
How to configure VPNs, using IKE encryption and Check Point's simplified VPN setup
How to use VPN-1 SecuRemote/SecureClient to configure remote access
How to identify the features and limitations of Check Point High Availability solutions

Exercises

User SmartUpdate to add a package to an NGX Installation
Establish a VPN between two networks, encrypting traffic
Establish a VPN between two networks, encrypting traffic with Certificates
Configure a Security Gateway for hybrid IKE SecuRemote connections
Test VPN-1 SecuRemote and Secure Server using the IKE encryption scheme
Configure an Office Mode IP pool
Connect and authenticate via Office Mode IP addressing using SecureClient
Deploy and test ClusterXL by creating a Gateway cluster
Deploy and test ClusterXL New Mode HA
Deploy and test Cluster XL for Load Sharing Unicast mode
Deploy and test Cluster XL for Load Sharing Multicast mode
Implement Office Mode
Take advantage of the latest special offers on NGX classes, and then register for training with an ATC near you!

*Course length and price may vary by ATC. Please contact your local ATC for detailed information.

network

Check Point Security Administration NGX III (R65)

Length	4 days* (recommended)
Prerequisites	Check Point Security Administration I NGX (R65) and Check Point Security Administration II NGX (R65)
Take this class if You are a system administrator, security manager, or network engineer supporting installations of VPN-1 NGX, and who needs the tools to troubleshoot and maintain these installations. A CCSE seeking their Check Point Certified Security Expert Plus NGX (CCSE Plus NGX) certification

More details Table of Contents Sample Chapter Course Objectives

Check Point Security Administration III NGX (R65) offers comprehensive training to enhance enterprise knowledge of VPN-1 NGX, network planning, route-based VPN, and troubleshooting procedures.


You Will Learn

• How to troubleshoot NGX product problems using troubleshooting guidelines
• How to monitor and evaluate security gateway and OS performance
• How to back up, restore, and upgrade a SmartCenter Server and VPN-1 Pro Security Gateway
• How to troubleshoot NGX problems using troubleshooting utilities
• How to perform NGX kernel debugging
• How to perform user level process debugging
• How to troubleshot security server issues
• How to use VPN debugging tools
• How to troubleshoot remote access VPN issues
• How to configure advanced VPNs
• How too troubleshot ClusterXL problems

Exercises

• Enable SCP on SecurePlatform
• Configure SNMP
• Recover a SmartCenter Server
• Work with cpinfo
• Analyze cpinfor in InforView
• Use Object Filter
• Work with client-side and server-side NAT
• Work with fw ctl debug
• Work with cpd and fwm debugging
• Troubleshoot site-to-site VPNsaintain
• Work with UDP encapsulation
• Work with SNX network extender
• Work with route-based VPNs
• Work with dynamic routing
• Run cphastat-d
• Work with manual failover
• Work with state sync

Take advantage of the latest special offers on NGX classes, and then register for training with an ATC near you!
*Course length and price may vary by ATC. Please contact your local ATC for detailed information.

菜刀叔叔

这个应该升级 了哈。。。