CCSA /CCSE

ccsa-cover

Successsful Careeer

RSTForum has trained more than 100,000 students to date. Many students have gone on to successful careers in a variety of industries, while others have harnessed the entrepreneurial spirit and knowledge they acquired in RST Forum to start their own businesses and create new jobs.

Labs on cloud

RSTForum uses Cloud computing to efficiently provide “Platform As A Service” (PAAS) to its students enabling them to quickly access Technology Racks over the internet and practice lab exercise from home These Racks are populated with latest equipment's required for practical exercises'.

Web Forums

RST Forum’s web based forum allows its users to ask, hundreds of technical experts about their technology and certification problem. RST forum is a tight knit community of working professionals that provide timely help on technical, certification and design related queries.

Checkpoint Certified System Administrator/ Expert

Introduction

Checkpoint Certified Security Administrator (CCSA) course is designed for administrators who need to manage daily operations of Check Point Software Blades and Management systems and desire to accomplish Checkpoint security certifications. Check Point Certifications validate your expertise on the technology that secures the internet for all Fortune and Global 100 companies.

Check Point Certified Security Expert (CCSE) course is designed for professionals who need to effectively build, modify, deploy and troubleshoot Check Point Security systems on the Gaia OS. This course includes firewall processes and takes a close look at kernel processing and Stateful Inspection. Labs include configuring security gateways, implementing VPNs, and performing advanced troubleshooting tasks on the firewall. Cisco® Application Centric Infrastructure (ACI) can integrate with Check Point Next Generation Security Gateway to incorporate a full range of security protections into modern data centers. Cisco ACI can automatically configure Check Point Security Gateway and service routing paths between workloads. This capability helps you protect and accelerate your application deployments with the latest security technology, reduce management complexity, and insert security into scalable multitenant data centers.

Course Highlights

This 10 day (Weekdays – 3hrs.) OR 6-week (Sunday/Saturday) instructor led Checkpoint Certification (CCSA) and (CCSE) course is designed to provide professionals with extensive network and Infrastructure security knowledge to accomplish their day to day job and certification. The key to a high success rate is based on the program’s objectives as follows:

  • Assigned project manager will manage this program and drive the program from its registration stage to monitoring and tracking of the candidates’ performance.
  • Curriculum is based on certification outlines.
  • The Instructor-led certified courses is designed for the candidates with an aim to build theoretical knowledge supplemented by ample hands-on lab exercises.
  • 6 week or 10 days per module, of intensive training + exams/labs design is as follows:
  • Optimal balance of theory classes and practical labs every week to ensure maximum absorption of technology by participants.
  • Industry Experienced Certified instructors.
  • The course is customized keeping in mind the ultimate aim of achieving technology expertise and CHECKPOINT certification.
  • Customized tests at the end of course to be attempted by every participant.
  • Stringent passing standards with progress report of each participant.
  • Facility of Lab on cloud available.(based on booking).
  • Repeating or lectures allowed (based on seat availability).
  • Boot camp includes intensive workshop to improve time-management & troubleshooting skills.
  • Optimal balance of theory classes and practical labs every week to ensure maximum absorption of technology by participants.
  • Regular evaluation.
  • Project manager will track Progress and performance of the candidates for Checkpoint.
Course Objectives

After you complete this course Checkpoint CCSA you will be able to:

  • Describe Check Point’s unified approach to network management, and its key elements.
  • Design a distributed environment.
  • Install the Security Gateway in a distributed environment.
  • Perform a backup and restore the current Gateway installation from the command line.
  • Identify critical files needed to purge or backup, import and export users and groups and add or delete administrators from the command line.
  • Deploy Gateways using the Gaia web interface.
  • Create and configure network, host and gateway objects.
  • Verify SIC establishment between the Security Management Server and the Gateway using SmartDashboar.
  • Create a basic Rule Base in SmartDashboard that includes permissions for administrative users, external services, and LAN outbound use.
  • Configure NAT rules on Web and Gateway servers.
  • Evaluate existing policies and optimize the rules based on current corporate requirements.
  • Maintain the Security Management Server with scheduled backups and policy versions to ensure seamless upgrades with minimal downtime.
  • Use Queries in SmartView Tracker to monitor IPS and common network traffic and trouble¬shoot events using packet data.
  • Use packet data to generate reports, trouble¬shoot system and security issues, and ensure network functionality.
  • Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications.
  • Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways.
  • Upgrade and attach product licenses using SmartUpdate.
  • Centrally manage users to ensure only authenticated users securely access the corporate network either locally or remotely.
  • Manage users to access the corporate LAN by using external databases.
  • Use Identity Awareness to provide granular level access to network resources.
  • Acquire user information used by the Security Gateway to control access.
  • Define Access Roles for use in an Identity Awareness rule.
  • Implement Identity Awareness in the Firewall Rule Base.
  • Configure a pre-shared secret site-to-site VPN with partner sites.
  • Configure permanent tunnels for remote access to corporate resources.
  • Configure VPN tunnel sharing, given the difference between host-based, subunit-based and gateway-based tunnels.

After you complete this course Checkpoint CCSA you will be able to:

  • Perform a backup of a Security Gateway and Management Server using your understanding of the differences between backups, snapshots and update-exports.
  • Upgrade and troubleshoot a Management Server using a database migration.
  • Upgrade and troubleshoot a clustered Security Gateway deployment.
  • Use knowledge of Security Gateway infrastructures, chain modules, packet flow and kernel tables to perform debugs on firewall processes.
  • Build, test and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network.
  • Build, test and troubleshoot a ClusterXL High Availability deployment on an enterprise network.
  • Build, test and troubleshoot a management HA deployment on an enterprise network.
  • Configure, maintain and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement.
  • Using an external user database such as LDAP, configure User Directory to incorporate user information for authentication services on the network.
  • Manage internal and external user access to resources for Remote Access or across a VPN.
  • Troubleshoot user access issues found when implementing Identity Awareness.
  • Troubleshoot a site-to-site or certificate based VPN on a corporate gateway using IKE View, VPN log files and command-line debug tools.
  • Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions.
Course Topics

Following Topics will be covered in Checkpoint CCSA Course.

  • Introduction to Check Point Technology.
  • Deployment Platforms.
  • Introduction to the Security Policy.
  • Monitoring Traffic and Connections.
  • Network Address Translation.
  • Using SmartUpdate.
  • User Management and Authentication.
  • Identity Awareness.
  • Introduction to Check Point VPNs.
  • Installing GAiA.
  • Linking the Manager & Firewall.
  • Pushing Policy.
  • NAT.
  • Policy Packages & Database Versions.
  • SmartView Tracker.
  • SmartView Monitor.
  • LDAP.
  • Identity Awareness.
  • App Control and URL Filtering.
  • HTTPS Inspection.
  • CLI.
  • IPsec VPNs (Site to Site).
  • Backup & Recovery.
  • Smart Updates.
  • Additional Checkpoint Features.

Following Topics will be covered in Checkpoint CCSE Course:

  • Advanced and in-depth explanation of Check Point firewall technology.
  • Key tips and techniques for troubleshooting Check Point firewall technology.
  • Advanced upgrading concepts and practices.
  • Clustering firewall, management concepts and practices.
  • Software acceleration features.
  • Advanced VPN concepts and implementations.
  • Reporting tools, deployment options and features.
  • Introduction.
  • Management High Availability.
  • HA Cluster.
  • Load sharing Clusters.
  • Cluster Trouble Shooting.
  • Link Aggregation- Etherchannel.
  • Encryption.
  • IKE & IPSec.
  • PKI.
  • Domain Based VPN.
  • SSL VPN.
  • Remote Access VPN.
  • Route Based VPN.
  • CLI for Different Features.
  • Recovery.
Lab Topics

Following hands-on Labs session will be provided to Checkpoint CCSA
Course Students:

  • Distributed Installations.
  • Stand-alone Security Gateway Installations.
  • Common Tools.
  • Building a Security Policy.
  • Configure the DMZ.
  • Configure NAT.
  • Monitor with SmartView Tracker.
  • Client Authentication.
  • Identity Awareness.
  • Site-to-Site VPN between corporate and branch office.

Following hands-on Labs session will be provided to Checkpoint CCSE Course Students:

  • Upgrade to Check Point R77.
  • Core CLI elements of firewall administration.
  • Migrate to a clustering solution.
  • Configure SmartDashboard to interface with Active Directory.
  • Configure site-to-site VPNS with third-party certificates.
  • Remote access with Endpoint Security VPN.
  • SmartEvent and SmartReporter.

Enroll for this course now and get ahead in your career.

Course Fees:

₹10000

Virtual Classroom

  • Instructor led online training is an ideal vehicle for delivering training to individuals anywhere in the world at any time.
  • This innovative approach presents live content with instructor delivering the training online.
  • Candidates will be performing labs remotely on our labs on cloud in presence of an online instructor.
  • Rstforum uses microsoft lync engine to deliver instructor led online training.
  • Advances in computer network technology, improvements in bandwidth, interactions, chat and conferencing, and realtime audio and video offers unparalleled training opportunities.
  • Instructor led online training can helps today’s busy professionals to perform their jobs and upgrade knowledge by integrating self-paced instructor led online training in their daily routines.

Miscellaneous

  • Minimum batch size required for batch is 10 participants in the this course.
  • The RST Forum reserves the right to cancel/postpone the class.
  • Course schedule will be provided before commencement of the course.
  • Certificate of participation will be awarded to participants with a minimum 90% attendance.
  • All attendees are to observe the Copyright Law on intellectual properties such as software.
  • and courseware from respective vendors.
  • The RST Forum reserves the right to include external participants in the program either for the entire course or individual courses.
  • The RST Forum reserves the right to change/alter the sequence of courses. RST FORUM published Book would be given at 50% discounted rate to the forum students.