This course provides students with the advanced knowledge, skills, and hands-on experience needed to deploy, manage, and monitor existing Quantum Security Environments. Students will learn how to deploy Management High Availability, provide advanced policy management, configure Site-to-Site VPN, provide advanced security monitoring, upgrade a Security Gateway, use Central Deployment tool to install hotfixes, perform an import of a Primary Security Management Server, and Deploy ElasticXL Cluster.

• Security Engineers
• Security Analysts
• Security Consultants
• Security Architects

Base Knowledge

• Unix-like and/or Windows OS
• Internet Fundamentals
• Networking Fundamentals
• Networking Security
• System Administration
• TCP/IP Networking
• Text Editors in Unix-like OS
• Minimum of 6-months of practical experience with the management of a Quantum Security Environment.

Check Point Courses

• Check Point Certified Security Administrator (required)
• Check Point Deployment Administrator (suggested)

Module 1: Management High Availability

• Explain the purpose of Management High Availability.
• Identify the essential elements of Management High Availability.
Lab Tasks
• Deploy and configure Management High Availability
• Ensure the failover process functions as expected

Module 2: Advanced Policy Management

• Identify ways to enhance the Security Policy with more object types.
• Create dynamic objects to make policy updatable from the Gateway.
• Manually define NAT rules.
• Configure Security Management behind NAT.
Lab Tasks
• Use Updatable Objects
• Configure Network Address Translation for server and network objects
• Configure Management behind NAT for Branch Office connections

Module 3: Site-to-Site VPN

• Discuss site-to-site VPN basics, deployment, and communities.
• Describe how to analyze and interpret VPN tunnel traffic.
• Articulate how pre-shared keys and certificates can be configured to authenticate with third-party and externally managed VPN Gateways.
• Explain Link Selection and ISP Redundancy options.
• Explain tunnel management features.
Lab Task
• Configure Site-to-Site VPN with internally managed Security Gateways

Module 4: Advanced Security Monitoring

• Describe the SmartEvent and Compliance Blade solutions, including their purpose and use.
Lab Tasks
• Configure a SmartEvent Server to monitor relevant patterns and events
• Demonstrate how to configure Events and Alerts in SmartEvent
• Demonstrate how to run specific SmartEvent reports
• Activate the Compliance Blade
• Demonstrate Security Best Practice settings and alerts
• Demonstrate Regulatory Requirements Compliance Scores

Module 5: Upgrades

• Identify supported upgrade options.
Lab Task
• Upgrade a Security Gateway
• Use Central Deployment tool to install Hotfixes

Module 6: Advanced Upgrades and Migrations

• Export/import a Management Database.
• Upgrade a Security Management Server by freshly deploying the new release or using a new appliance.
Lab Task
• Prepare to perform an Advanced Upgrade with Database Migration on the Primary Security Management Server in a distributed environment
• Perform an import of a Primary Security Management Server in a distributed Check Point environment

Module 7: ElasticXL Cluster

• Describe the ElasticXL Cluster solution, including its purpose and use.
Lab Tasks
• Deploy an ElasticXL Security Gateway Cluster

Certification
Exam: 156-315.82
vue.com/checkpoint