www.roman.ch auf Deutsch   www.roman.ch - go to the english version
Check Point Security Administrator R70 (CCSA R70) Upgrade
Duration of course: 3 days
Price CHF: 3'500.00 dkdkdk
Price EUR: 2'905.00
Course dates:
     
This course is carried out upon request. The course dates, the type of course (e.g. workshop) and the location are arranged to suit your requirements. Please contact us for more information!
Subject/Goal:
This accelerated course provides an understanding of the concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. This course only covers topics in the current CCSA R70 course that are not covered in previous CCSA versions. During the course, you will configure, manage, monitor and maintain a corporate and branch office network. In addition, you will upgrade and configure a Security Gateway to implement a virtual private network (VPN) for both internal and external users while implementing IPS and Messaging and Content Security.

Take this class if:
You have a prior CCSA certification and want an accelerated path to achieve CCSA R70 certification.
Audience:
systems administrator, security manager, or network engineer
Content of course:
You will learn:

  • Select the best security solution for your corporate environment.
  • Perform a backup and restore current Gateway installation from the command line.
  • Identify critical files to purge or backup, import and export users and groups, and add or delete administrators from the command line.
  • Use command line utilities to troubleshoot problems on the Security Gateway.
  • Maintain the Security Management Server with scheduled backups and policy versions.
  • Use queries in SmartView Tracker to monitor IPS and troubleshoot events.
  • Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications.
  • Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways.
  • Upgrade and attach product licenses using SmartUpdate.
  • Perform a pre-installation compatibility assessment before upgrading to R70.
  • Given R70 licensing instructions, obtain a license key.
  • Install a Contract File on Windows, SecurePlatform, Linux, Solaris and IPSO.
  • Select the most appropriate encryption algorithm when securing communication over a VPN, based on corporate requirements.
  • Establish VPN connections to partner sites to access a central database by configuring Advanced IKE properties.
  • Configure a pre-shared secret site-to-site VPN with partner sites.
  • Configure a certificate based site-to-site VPN using one partner’s internal CA..
  • Configure permanent tunnels for remote access to corporate resources.
  • Configure VPN tunnel sharing.
  • Configure Check Point Messaging Security.
  • Configure a Web-filtering and antivirus policy to filter and scan traffic.
  • Implement profiles to designated Gateways in the corporate network.
  • Manage profiles by tracking changes to the network, including performance degradation, and troubleshoot issues with the network.
  • Create and install IPS policies.



Exercises:

  • Distributed Installation
  • Branch Office Security Gateway Installation
  • Defining Basic Objects and Rules
  • Configure the DMZ
  • Configuring NAT
  • Using SmartUpdate
  • Upgrade a Security Gateway locally
  • Configure a Site-to-Site VPN
  • Two Gateway IKE Encryption using Certificates
  • Remote Access and Office Mode
  • Messaging and Content Security
  • Implement the IPS

Requirements:
Participation on a Check Point CCSA course (CCSA NG, NGAI, or NGX)
Duration of course:
3 days
Additional information:
The course is carried out as a combination of presentation and workshop. The individual modules are initiated by an introductory presentation. They are then extended by a various "live" demonstrations / exercises.
All participating PCs have an Internet connection, SW analyser, port scanner,...

The participants receive comprehensive documentation (original Check Point R70 courseware).

The course fees include this documentation, as well as refreshment during intervals and lunch.

The course can also be carried out as an internal company course.

Please contact us for more information!
Further Information:

  

 
 
  © 1993-2024 ROMAN - Consulting & Engineering AG | Alle Rechte vorbehalten | Haftungsausschluss