Provide an understanding of the advanced concepts and skills necessary to automate and orchestrate tasks relating to managing Check Point Security Policies.

To give you the best possible learning experience our instructor will run labs as a demo-only, explaining the steps and being open for questions. Students are watching and following the steps from the material.

• Introduction to Check Point Maestro
• Maestro Security Groups
• Dual Orchestrator Environment
• Using the Command Line Interface and WebUI
• Working with Security Group Modules
• System Diagnostics
• Dual-Site Environment
• Incorporating VSX
• Traffic Flow
• Troubleshooting

This course is designed for administrators and Check Point resellers that offer Hyperscale Network Security as business and technical requirements change to accommodate massive network traffic growth. This course equips IT professionals as they work towards their Check Point Certified Maestro Expert (CCME) certification.

Working knowledge of UNIX and/or Windows OS, Working knowledge of Networking TCP/IP, CCSA training/ certification, Advanced knowledge of Check Point Security products

• Understand the concept and demand for Scalable Platforms

• Recognize the main characteristics of Scalable Platforms

• Describe how Maestro uses Hyperscale Technology

• Identify the essential components of the Maestro system

• Understand and explain how the Orchestrator’s downlinks, uplinks, management, and sync ports function

• Learn how to create, delete, and modify Security Groups

• Understand the basics of the Dual-Site environment

• Describe how the Gaia Command Line Interface (CLI) supports the configuration of MHO appliances

• Perform diagnostic troubleshooting using the CLI

• Describe the purpose of the Security Group Database

• Learn how to configure interfaces using CLISH

• Evaluate how traffic flows through a Maestro environment

• Demonstrate how to use traffic monitoring commands

• Understand the four distribution modes that Maestro uses to assign packets to a Security Gateway Module

• Describe the basic use of the asg diag command to collect system diagnostics

• Describe how Dual-Site Orchestrators are configured

• Recognize how to account for Dual-Site fail-overs

• Identify how Virtual System Extension (VSX) works

• Learn the advantages of using VSX in a Dual-Site Orchestrator environment

• Describe the different layers of the OSI model involved when debugging the SGM

 
EXERCISES

• Creating Security Groups

• Configuring Security Groups

• Working with Multiple Security Groups

• Understanding Traffic Distribution Modes

• Managing Traffic Flow

• Running System Diagnostics

• Creating a Dual-Site Environment

• Deploying VSX in a Dual-Site Environment