This accelerated course provides an understanding of the concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. This course only covers topics in the current CCSA R70 course that are not covered in previous CCSA versions. During the course, you will configure, manage, monitor and maintain a corporate and branch office network. In addition, you will upgrade and configure a Security Gateway to implement a virtual private network (VPN) for both internal and external users while implementing IPS and Messaging and Content Security.

Take this class if:
You have a prior CCSA certification and want an accelerated path to achieve CCSA R70 certification.

Netzwerk-, System- und Security-Administratoren

You will learn:

• Select the best security solution for your corporate environment.
  
• Perform a backup and restore current Gateway installation from the command line.
  
• Identify critical files to purge or backup, import and export users and groups, and add or delete administrators from the command line.
  
• Use command line utilities to troubleshoot problems on the Security Gateway.
  
• Maintain the Security Management Server with scheduled backups and policy versions.
  
• Use queries in SmartView Tracker to monitor IPS and troubleshoot events.
  
• Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications.
  
• Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways.
  
• Upgrade and attach product licenses using SmartUpdate.
  
• Perform a pre-installation compatibility assessment before upgrading to R70.
  
• Given R70 licensing instructions, obtain a license key.
  
• Install a Contract File on Windows, SecurePlatform, Linux, Solaris and IPSO.
  
• Select the most appropriate encryption algorithm when securing communication over a VPN, based on corporate requirements.
  
• Establish VPN connections to partner sites to access a central database by configuring Advanced IKE properties.
  
• Configure a pre-shared secret site-to-site VPN with partner sites.
  
• Configure a certificate based site-to-site VPN using one partner’s internal CA..
  
• Configure permanent tunnels for remote access to corporate resources.
  
• Configure VPN tunnel sharing.
  
• Configure Check Point Messaging Security.
  
• Configure a Web-filtering and antivirus policy to filter and scan traffic.
  
• Implement profiles to designated Gateways in the corporate network.
  
• Manage profiles by tracking changes to the network, including performance degradation, and troubleshoot issues with the network.
  
• Create and install IPS policies.
  

Exercises:

• Distributed Installation
  
• Branch Office Security Gateway Installation
  
• Defining Basic Objects and Rules
  
• Configure the DMZ
  
• Configuring NAT
  
• Using SmartUpdate
  
• Upgrade a Security Gateway locally
  
• Configure a Site-to-Site VPN
  
• Two Gateway IKE Encryption using Certificates
  
• Remote Access and Office Mode
  
• Messaging and Content Security
  
• Implement the IPS
  

Besuch des Check Point CCSA Kurses (CCSA NG, NGAI oder NGX)

3 Tage

Die theoretischen Kursmodule werden durch viele praxisorientierte Labor-Übungen ergänzt.

Eine ausführliche Dokumentation (Original Check Point Unterlagen) in englischer Sprache wird den Teilnehmern abgegeben.

Die Kurssprache ist standardmässig deutsch. In Abstimmung mit den Kursteilnehmern kann der Kurs auch englisch oder französisch erfolgen (z.B. für firmeninterne Kurse).

In der Kursgebühr ist die Dokumentation, Pausenverpflegungen und das Mittagessen inbegriffen.

Dieser Kurs kann auch firmenintern bei Ihnen durchgeführt werden.

Nehmen Sie bitte mit uns Kontakt auf !

www.checkpoint.com/services/education/training/courses/ccsa-r70-update.html