Check Point (CCSA and CCSE) - Course Topics
Describing Information Security Concepts
- Information Security Overview.
- Assets, vulnerabilities, threat and countermeasures.
Describing Network Security Technologies.
- Defense-in-Depth Strategy.
- Defending across the attack continuum.
- Statefull firewall overview.
- Threat information standardization.
- Network-based malware protection overview.
- Intrusion Prevention System (IPS) overview.
- Next Generation firewall.
Check Point Security Concepts and Deployment
- Interpret the concept of firewall and understand the mechanisms used for controlling network traffic.
- Describe the key elements of Check Point’s unified, 3-tiered architecture.
- Describe the essential elements of a unified security policy.
- Understand Check Point deployment options.
- Gateway installation.
- Management Server installation.
- Smart Console installation.
- Recognize Smart Console features, functions and tools.
- Adding gateway into management server.
- Create and configure network, host and gateway objects.
- Create and confirm admin users for the network.
- Create multiple administrators and apply different roles/permissions for concurrent administration.
- Create and configure network, host and gateway objects.
- Evaluate and manipulate rules in a unified Access Control Security Policy.
- Apply policy layers and analyze how they affect traffic inspection.
- Prepare and schedule backups for the gateway.
- Recall how to implement Check Point backup techniques.
- Understand how traffic inspection takes place in a unified security policy.
- Validate existing licenses for products installed on your network.
- Generate network traffic and use traffic visibility tools to monitor the data
- Compare and contrast various tools available for viewing traffic.
- Prepare and scheduled backups for the gateway.
- Recall how to implement Check Point backup techniques.
- Deploying NAT (STATIC, HIDE, MANUAL).
- Identity awareness.
- Recognize how to define users and user groups for your environment.
- Describe the basic concept of ClusterXL technology and its advantages.
- Install and configure ClusterXL with a High Availabilty Configuration.
- Recognize how to effectively create, customize and generate network activity reports.
- URL filtering.
- Understand VPN deployments and Check Point Communities.
- Configure and deploy a site-to-site VPN.
- Test the VPN connection and analyze the tunnel traffic.
- Identify basic interfaces used to manage the Check Point environment.
- Identify the types of technologies that Check Point supports for automation.
- Explain the purpose of the Check Management High Availability (HA) deployment.
- Identify the workflow followed to deploy a Primary and solution Secondary servers.
- Explain the basic concepts of Clustering and ClusterXL, including protocols, synchronization, connection stickyness.
- Identify how to exclude services from synchronizing or delaying synchronization.
- Explain the policy installation flow.
- Explain the purpose of dynamic objects, updatable objects, and network feeds.
- Understand how to manage user access for internal and external users.
- Describe the Identity Awareness components and configurations.
- Describe different Check Point Threat Prevention solutions.
- Articulate how the Intrusion Prevention System is configured.
- Obtain knowledge about Check Point’s IoT Protect.
- Explain the purpose of Domain-based VPNs.
- Describe situations where externally managed certificate authentication is used.
- Describe how client security can be provided by Remote Access.
- Discuss the Mobile Access Software Blade.
- Explain how to determine if the configuration is compliant with the best practices.
- Define performance tuning solutions and basic configuration workflow.
- Identify supported upgrade and migration methods and procedures for Security Management Servers and dedicated Log and SmartEvent Servers.
- Identify supported upgrade methods and procedures for Security Gateways.