Check Point Security Administration II NGX (R65) provides an understanding of upgrading and advanced configuration of VPN-1 (NGX R65), installing and managing VPN-1 (on both internal and external networks), gaining the maximum security from Security Gateways, and resolving Gateway performance issues.

Take this class if:

• You are a Check Point CCSE NG, or CCSE NG with Application Intelligence professional
• Want to earn Check Point Certified Security Expert (CCSE NGX R65) certification Exam # 156-915.65

Systems Administrator, Security Manager and Network Engineer

• Installing and Upgrading VPN-1
• Introduction to SecurePlatform
• SmartUpdate
• Monitoring Traffic and Connections
• Basic SmartDefense and Content Inspection
• Site-to-Site VPNs
• Remote Access VPNs
• High Availability and ClusterXL

You will learn:

• How VPN-1 components and Check Point’s three-tier architecture works to secure your network
• How to perform command-line operations using Check Point’s SecurePlatform operating system
• How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
• How to configure network-bandwidth requirements and interpret the results
• How to use Network Address Translation to overcome IP addressing limitations
• How to protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
• How to configure Web-filtering and antivirus settings on a Gateway to ensure traffic content is inspected for specific conditions.
• How to use SmartUpdate to add a package to an NGX Installation
• How to establish a VPN between two networks, encrypting traffic
• How to configure a Security Gateway for hybrid IKE SecuRemote connections
• How to test VPN-1 SecuRemote and Secure Server using the IKE encryption scheme
• How to configure an Office Mode IP pool
• How to connect and authenticate via Office Mode IP addressing using SecureClient
• How to deploy and test ClusterXL
• How to implement Office Mode

Exercises:

• Install and configuring the SmartCenter Server
• Install SecurePlatform on the Security Gateway
• Configure the Security Gateway using the WebUI
• Configure an interface as your management connection using the sysconfig utility
• Enable Static NAT on a network
• Simulate a malicious network intrusion, and block the attack
• Enforce the Suspicious Activity Rule with SmartView Monitor
• Configure SmartDefense to detect port scans and successive multiple-connection attempts
• Configure Web Intelligence to detect a simple worm signature
• Establish a VPN between two networks, encrypting traffic
• Deploy and test VPN-1 SecuRemote and Secure Server
• Configure an Office Mode IP Pool
• Connect and authenticate via Office Mode IP addressing using SecurClient
• Deploy and test Cluster XL

You are a Check Point CCSE NG, or CCSE NG with Application Intelligence professional.

2 days

The course is carried out as a combination of presentation and workshop. The individual modules are initiated by an introductory presentation. They are then extended by a various "live" demonstrations / exercises.
All participating PCs have an Internet connection, SW analyser, port scanner,...


The participants receive comprehensive documentation (original Check Point courseware).

The course fees include this documentation, as well as refreshment during intervals and lunch.

The course can also be carried out as an internal company course.

Please contact us for more information!

www.checkpoint.com/services/education/training/courses/accel_ccse_ngx65.html