Checkpoint Training Courses

• Management I - NGX
• Management II - NGX
• Management III - NGX
• Mgmt I/II - Smart Bundle
• Mgmt I/II/III - Guru Bundle

CCSA NGX : VPN-1/FireWall-1 Management I - NGX

Overview
Check Point Security Administration NGX I is a foundation course for Check Point's flagship product, VPN-1/FireWall-1. This course covers configuring VPN-1/FireWall-1, and provides hands-on training managing a VPN-1/FireWall-1 installation.

Who Should Attend
Systems administrator, security manager, network engineer who manages VPN-1/FireWall-1 gateway deployments and individuals seeking to earn Check Point Certified Security Administrator (CCSA) NGX certification.

What You Will Learn

• VPN-1/FireWall-1 architecture
• VPN-1/FireWall-1 component deployment
• How to define a Security Policy using SmartDashboard
• How to deploy and manage distributed gateways, using Check Point's SmartUpdate and Secure Internal Communications
• How to administer and troubleshoot VPN-1/FireWall-1 Security Policies
• How to enable SmartDefense global protection mechanisms
• How to set up User Authentication in a VPN-1/FireWall-1 environment
• How to implement Network Address Translation
• How to protect your network with backups
  How to upgrade VPN-1/FireWall-1
• How to license VPN-1/FireWall-1

About The Labs

• Defining VPN-1/FireWall-1 rules, objects, and users
• Establishing basic VPN-1/FireWall-1 Security Policies
• Setting up User Authentication
• Configuring SmartDefense
• Configuring Network Address Translation
• Using SmartUpdate for VPN-1/FireWall-1 installation

• Working knowledge of Windows NT and/or UNIX
• Basic networking knowledge
• Experience with TCP/IP and the Internet

Additional Course Information

• Management I - Sample Chapter (PDF)

CCSE NGX : VPN-1/FireWall-1 Management II - NGX

Overview
Check Point Security Administration NGX II offers advanced training on VPN-1/FireWall-1, and delivers in-depth information on VPN and encryption technologies. This course is designed for Security Administrators and resellers, who require in-depth knowledge of VPN-1/FireWall-1 that goes beyond basic installation, setup, and methodologies.

Who Should Attend
Systems administrator, security manager, or network engineer implementing VPN-1/FireWall-1 for VPN deployments and individuals seeking to earn Check Point Certified Security Expert (CCSE) NGX certification.

What You Will Learn

• Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform
• Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
• Use advanced NGX features to minimize the information-security management burden, when working with objects and rules
• Determine whether Database Revision Control or Policy Package Management is the appropriate solution, given a variety of scenarios
• Identify the features and limitations of Management High Availability
• Use fw monitor to capture and view packets
• Use fw ctl pstat to verify the health of the NGX Security Gateway and SmartCenter Server
• Review VPN-1 debugging and troubleshooting commands, including cpinfo
• Given a variety of Check Point QoS configurations, determine how bandwidth will be allocated
• Identify situations where Low Latency Queueing and Differentiated Services are an appropriate part of a QoS solution
• Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway
• Identify different modes in ClusterXL configuration, and configure ClusterXL VPN
• Configure a Policy Server and SecureClient Rule Base
• Configure route-based VPN and dynamic VPN routing

About The Labs

• Installing VPN-1/FireWall-1
• Setting up SecuRemote and SecureClient for remote-access VPNs
• Configuring logical servers for load balancing
• Using content security to enable Java blocking, URL filtering and anti-virus checking
• Configuring two-gateway IKE encryption

Prerequisite

• Check Point Security Administration NGX I, or equivalent knowledge and experience

Additional Course Information

• Management II - Table of Contents (PDF)
• Management II - Sample Chapter (PDF)

NGX VPN-1/FireWall-1 Management III

Overview
Check Point Security Administration NGX III offers comprehensive training to enhance enterprise knowledge of VPN-1 NGX, network planning, route-based VPN, and troubleshooting procedures.

Who Should Attend
Systems administrator, security manager, network engineer who manages VPN-1/FireWall-1 gateway deployments and individuals seeking to earn Check Point Certified Security Administrator (CCSA & CCSE) NGX certification.

What You Will Learn

• UCCSE Plus NGX Management III
• Troubleshooting NGX product problems using troubleshooting guidelines
• Using cpinfo and log files for file management
• Using protocol analyzers to capture and analyze network traffic
• Troubleshooting NGX problems using NGX debugging tools
• Using fw and fw advanced commands for troubleshooting
• Troubleshooting specific Security Server issues
• Using VPN log files and vpn debug to troubleshoot VPN connections
• Capturing traffic flow using ike debug, sr_service debug, and srfw monitor
• Identifying differences between route- and domain-based VPNs
• Identifying, debugging, and using relevant commands to troubleshoot Eventia Reporter problems

About The Labs

• Collecting configuration files from an NGX installation
• Review and analyzing cpinfo output in InfoView
• Using GuiDBedit to create services and objects, and modify an object's global properties
• Using fw logswitch to switch active and audit logs # Using fwm logexport to export logs
• Comparing client- and server-side NAT using fw monitor
• Using fwm and cpd debugging to troubleshoot a stand-alone installation problem
• Generating and interpreting a file containing fw ctl pstat information
• Using fw stat to verify a Gateway's Policy installed status
• Using fw unloadlocal to uninstall a Security Policy
• Using fwm load to install a Policy
• Running ike debug on Gateways, and analyzing output using IKEview
• Observing IKE by running ike debug
• Running srfw monitor on a SecureClient desktop
• Configuring route-based VPNs for VPN redundancy
• Configuring dynamic routing using OSPF through VPN tunnels

Prerequisite

• Check Point Security Administration NGX I  and Check Point Security Administration NGX II  or equivalent knowledge and experience

NGX VPN-1/FireWall-1 Management I & II

Overview
Check Point Security Administration NGX I is a foundation course for Check Point's flagship product, VPN-1/FireWall-1. This course covers configuring VPN-1/FireWall-1, and provides hands-on training managing a VPN-1/FireWall-1 installation.

Check Point Security Administration NGX II offers advanced training on VPN-1/FireWall-1, and delivers in-depth information on VPN and encryption technologies. This course is designed for Security Administrators and resellers, who require in-depth knowledge of VPN-1/FireWall-1 that goes beyond basic installation, setup, and methodologies.

Who Should Attend
Systems administrator, security manager, network engineer who manages VPN-1/FireWall-1 gateway deployments and individuals seeking to earn Check Point Certified Security Administrator (CCSA & CCSE) NGX certification.

What You Will Learn

• CCSA NGX Management I
• VPN-1/FireWall-1 architecture
• VPN-1/FireWall-1 component deployment
• How to define a Security Policy using SmartDashboard
• How to deploy and manage distributed gateways, using Check Point's SmartUpdate and Secure Internal Communications
• How to administer and troubleshoot VPN-1/FireWall-1 Security Policies
• How to enable SmartDefense global protection mechanisms
• How to set up User Authentication in a VPN-1/FireWall-1 environment
• How to implement Network Address Translation
• How to protect your network with backups
• How to upgrade VPN-1/FireWall-1
• How to license VPN-1/FireWall-1
• CCSE NGX Management II
• Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform
• Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
• Use advanced NGX features to minimize the information-security management burden, when working with objects and rules
• Determine whether Database Revision Control or Policy Package Management is the appropriate solution, given a variety of scenarios
• Identify the features and limitations of Management High Availability
• Use fw monitor to capture and view packets
• Use fw ctl pstat to verify the health of the NGX Security Gateway and SmartCenter Server
• Review VPN-1 debugging and troubleshooting commands, including cpinfo
• Given a variety of Check Point QoS configurations, determine how bandwidth will be allocated
• Identify situations where Low Latency Queueing and Differentiated Services are an appropriate part of a QoS solution
• Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway
• Identify different modes in ClusterXL configuration, and configure ClusterXL VPN
• Configure a Policy Server and SecureClient Rule Base
• Configure route-based VPN and dynamic VPN routingg

About The Labs

• Defining VPN-1/FireWall-1 rules, objects, and users
• Establishing basic VPN-1/FireWall-1 Security Policies
• Setting up User Authentication
• Configuring SmartDefense
• Configuring Network Address Translation
• Using SmartUpdate for VPN-1/FireWall-1 installation
• Installing VPN-1/FireWall-1
• Setting up SecuRemote and SecureClient for remote-access VPNs
• Configuring logical servers for load balancing
• Using content security to enable Java blocking, URL filtering and anti-virus checking
• Configuring two-gateway IKE encryption

Prerequisite

• Working knowledge of Windows NT and/or UNIX
• Basic networking knowledge
• Experience with TCP/IP and the Internet
• Check Point Security Administration NGX I, or equivalent knowledge and experience

NGX VPN-1/FireWall-1 Management I, II & III Guru Bundle

Overview
Check Point Security Administration NGX I is a foundation course for Check Point's flagship product, VPN-1/FireWall-1. This course covers configuring VPN-1/FireWall-1, and provides hands-on training managing a VPN-1/FireWall-1 installation.

Check Point Security Administration NGX II offers advanced training on VPN-1/FireWall-1, and delivers in-depth information on VPN and encryption technologies. This course is designed for Security Administrators and resellers, who require in-depth knowledge of VPN-1/FireWall-1 that goes beyond basic installation, setup, and methodologies.

Check Point Security Administration NGX III offers comprehensive training to enhance enterprise knowledge of VPN-1 NGX, network planning, route-based VPN, and troubleshooting procedures.

Who Should Attend
Systems administrator, security manager, network engineer who manages VPN-1/FireWall-1 gateway deployments and individuals seeking to earn Check Point Certified Security Administrator (CCSA, CCSE CCSE Plus) NGX certification.

What You Will Learn

• UCCSA NGX Management I
• VPN-1/FireWall-1 architecture
• VPN-1/FireWall-1 component deployment
• How to define a Security Policy using SmartDashboard
• How to deploy and manage distributed gateways, using Check Point's SmartUpdate and Secure Internal Communications
• How to administer and troubleshoot VPN-1/FireWall-1 Security Policies
• How to enable SmartDefense global protection mechanisms
• How to set up User Authentication in a VPN-1/FireWall-1 environment
• How to implement Network Address Translation
• How to protect your network with backups
• How to upgrade VPN-1/FireWall-1
• How to license VPN-1/FireWall-1
• CCSE NGX Management II
• Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform
• Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
• Use advanced NGX features to minimize the information-security management burden, when working with objects and rules
• Determine whether Database Revision Control or Policy Package Management is the appropriate solution, given a variety of scenarios
• Identify the features and limitations of Management High Availability
• Use fw monitor to capture and view packets
• Use fw ctl pstat to verify the health of the NGX Security Gateway and SmartCenter Server
• Review VPN-1 debugging and troubleshooting commands, including cpinfo
• Given a variety of Check Point QoS configurations, determine how bandwidth will be allocated
• Identify situations where Low Latency Queueing and Differentiated Services are an appropriate part of a QoS solution
• Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway
• Identify different modes in ClusterXL configuration, and configure ClusterXL VPN
• Configure a Policy Server and SecureClient Rule Base
• Configure route-based VPN and dynamic VPN routing

About The Labs

• Defining VPN-1/FireWall-1 rules, objects, and users
• Establishing basic VPN-1/FireWall-1 Security Policies
• Setting up User Authentication
• Configuring SmartDefense
• Configuring Network Address Translation
• Using SmartUpdate for VPN-1/FireWall-1 installation
• Installing VPN-1/FireWall-1
• Setting up SecuRemote and SecureClient for remote-access VPNs
• Configuring logical servers for load balancing
• Using content security to enable Java blocking, URL filtering and anti-virus checking
• Configuring two-gateway IKE encryption # Collecting configuration files from an NGX installation
• Review and analyzing cpinfo output in InfoView
• Using GuiDBedit to create services and objects, and modify an object's global properties # Using fw logswitch to switch active and audit logs
• Using fwm logexport to export logs
• Comparing client- and server-side NAT using fw monitor
• Using fwm and cpd debugging to troubleshoot a stand-alone installation problem
• Generating and interpreting a file containing fw ctl pstat information
• Using fw stat to verify a Gateway's Policy installed status
• Using fw unloadlocal to uninstall a Security Policy
• Using fwm load to install a Policy
• Running ike debug on Gateways, and analyzing output using IKEview
• Observing IKE by running ike debug # Running srfw monitor on a SecureClient desktop
• Configuring route-based VPNs for VPN redundancy
• Configuring dynamic routing using OSPF through VPN tunnels
• CCSE Plus NGX Management III
• Troubleshooting NGX product problems using troubleshooting guidelines
• Using cpinfo and log files for file management
• Using protocol analyzers to capture and analyze network traffic
• Troubleshooting NGX problems using NGX debugging tools
• Using fw and fw advanced commands for troubleshooting
• Troubleshooting specific Security Server issues
• Using VPN log files and vpn debug to troubleshoot VPN connections
• Capturing traffic flow using ike debug, sr_service debug, and srfw monitor
• Identifying differences between route- and domain-based VPNs
• Identifying, debugging, and using relevant commands to troubleshoot Eventia Reporter problems

Prerequisite

• Working knowledge of Windows NT and/or UNIX
• Basic networking knowledge
• Experience with TCP/IP and the Internet
• Check Point Security Administration NGX I Rev 1.1 and Check Point Security Administration NGX II Rev 1.1 or equivalent knowledge and experience