Arrow Electronics, Inc.

Check Point Certified Security Expert (CCSE) R81.X (includes 180 days lab access)

CODE: CKT_CCSE_R81.X

LENGTH: 3 day(s)

PRICE: £1,795.00

Description

This advanced 3-day course teaches how to build, modify, deploy and troubleshoot the R81.10 Check Point Security Systems on the GAiA operating system.

Hands-on lab exercises teach how to debug firewall processes, optimize VPN performance and upgrade Management Servers.


Validate and enhance your skills and optimally manage Check Point advanced security management systems.

 

Topics:


 

• Management Upgrade and Migration
• Management High Availability
• Security Gateway Upgrades
• Advanced Check Point Maintenance
• Security Gateway Operations
• Policy Installation
• Gaia and Management APIs
• Acceleration
• Site-to-Site VPN
• Remote Access VPN
• Mobile Access VPN
• Clustering
• Advanced Logs and Monitoring

 


 

Objectives

• Provide an overview of the upgrade service and options available.
• Explain how to perform management upgrade and migration.
• Articulate the process using CPUSE features.
• Articulate the purpose and function of Management High Availability.
• Explain Primary vs Secondary, Active vs Standby and Synchronization.
• Explain disaster recovery steps in case the primary management server becomes unavailable.
• Provide overview of Central Deployment in SmartConsole.
• Articulate an understanding of Security Gateway cluster upgrade methods.
• Explain about Multi Version Cluster (MVC) upgrades.
• Discuss Gaia Commands and how they are used.
• Explain the main processes on s and s.
• Describe how to work with scripts and SmartTasks to configure automatic actions.
• Explain the Management Data Plane Separation (MDPS).
• Explain kernel operations and traffic flow.
• Articulate Dynamic and Updatable Objects in Security Gateways.
• Explain the policy installation flow and files used.
• Describe the use of policy installation history.
• Explain concurrent and accelerated install policy.
• Describe an overview of APIs and ways to use and authenticate.
• Explain how to make changes in GAIA and management configuration.
• Explain how to install policy using API.
• Explain how the SecureXL acceleration technology enhances and optimizes Security Gateway performance.
• Describe how the CoreXL acceleration technology enhances and improves Security Gateway performance.
• Articulate how utilizing multiple traffic queues can make traffic handling more efficient.
• Discuss Site-to-Site VPN basics, deployment and communities.
• Describe how to analyze and interpret VPN tunnel traffic.
• Explain Link Selection and ISP Redundancy options.
• Explain tunnel management features.
• Discuss Check Point Remote Access solutions and how they differ from each other.
• Describe how client security can be provided by Remote Access .
• Explain authentication methods including machine authentication.
• Explain Multiple Entry Point (MEP).
• Discuss the Mobile Access Software Blade and how it secures communication and data exchange during remote connections.
• Describe Mobile Access deployment options.
• Discuss various features in Mobile Access like Portals, Link Translation, running Native Applications, Reverse Proxy and more.
• Explain basic concepts of Clustering and ClusterXL.
• Explain about Cluster Control Protocol (CCP) and synchronization.
• Describe advanced ClusterXL functions and modes like Load Sharing, Active-Active, VMAC mode etc.
• Discuss Cluster Correction Layer (CCL) to provide connection stickyness.
• Advanced Logs and Monitoring
• Explain how to determine if the configuration is compliant with the best practices.
• Explain how to set action items to meet the compliance.
• Discuss how SmartEvent functions to identify critical security issues.
• Describe the components of SmartEvent and their deployment options.
• Discuss how SmartEvent can assist in reporting security threats.
• Explain how to customize event definitions and set an Event Policy.

Audience

Technical professionals who perform advanced deployment configurations of Check Point products.

Prerequisites

CCSA training and/or certification with a working knowledge of Windows and/or UNIX, networking technology, the Internet and TCP/IP.

Programme

• Prepare for a Security Management Server Upgrade
• Upgrade the Security Management Server
• Deploy a Secondary Security Management Server
• Configure a Distributed Log Server
• Upgrade a Security Gateway from SmartConsole
• Work with the Command Line
• Use Scripts and SmartTasks
• Configure Dynamic Objects
• Monitor Traffic
• Verify Policy Installation and Status
• Work with Gaia and Management APIs
• Work with Acceleration Features
• Configure a Locally Managed Site to Site VPN
• Configure a Site to Site VPN with an Interoperable Device
• Configure Remote Access VPN
• Configure Mobile Access VPN
• Configure a High Availability Cluster
• Work with ClusterXL
• Configure Policy Compliance
• Deploy SmartEvent

Follow on courses

Attend two Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master (CCSM).

 

Attend four Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master Elite (CCSM Elite).

 

• Check Point Certified Endpoint Specialist (CCES)
• Check Point Certified Troubleshooting Administrator (CCTA)
• Check Point Certified Automation Specialist (CCAS)
• Check Point Certified Cloud Specialist (CCCS)
• Check Point Certified MDSM Specialist (CCMS)
• Check Point Certified VSX Specialist (CCVS)
• Check Point Certified Troubleshooting Expert (CCTE)
• Check Point Certified Maestro Expert (CCME)
• Check Point Certified Cloud Network Security Expert for AWS (CNSE-AWS)
• Check Point Certified Cloud Network Security Expert for Azure (CNSE-AZURE)

Test and Certification

Prepare for exam #156-315.81 at www.VUE.com/checkpoint

 

Exam vouchers are available at an additional cost from educationteam.ecs.uk@arrow.com (0870 251 1000)

 

Full information on Check Point’s Certification Program can be viewed at https://www.checkpoint.com/downloads/training/check-point-certification-faq.pdf

 

Further Information

Please note that Check Point only offer e-kit courseware for training courses. Each delegate will be provided with an official set of e-kit courseware.

 

Arrow ECS are a Check Point Platinum Elite Authorised Training Company (ATC) Partner and participate in the Check Point Learning Credits (CLCs) and Partner Coop Training Program.

Session Dates
Date
Location
Time Zone
Language
Type
Guaranteed
PRICE

04 Jul 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

01 Aug 2022

London - Dowgate Hill

BST

English

Classroom

£ 1,795.00

01 Aug 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

15 Aug 2022

London - Dowgate Hill

BST

English

Classroom

£ 1,795.00

15 Aug 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

05 Sep 2022

London - Dowgate Hill

BST

English

Classroom

£ 1,795.00

05 Sep 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

19 Sep 2022

London - Dowgate Hill

BST

English

Classroom

£ 1,795.00

19 Sep 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

17 Oct 2022

London - Dowgate Hill

BST

English

Classroom

£ 1,795.00

17 Oct 2022

Virtual Classroom

BST

English

Instructor Led Online

£ 1,795.00

14 Nov 2022

London - Dowgate Hill

GMT

English

Classroom

£ 1,795.00

14 Nov 2022

Virtual Classroom

GMT

English

Instructor Led Online

£ 1,795.00

12 Dec 2022

London - Dowgate Hill

GMT

English

Classroom

£ 1,795.00

12 Dec 2022

Virtual Classroom

GMT

English

Instructor Led Online

£ 1,795.00

We also offer sessions in other countries