This core course covers the fundamentals needed to deploy, configure, and manage daily operations of Check Point Security Gateways and Management Software Blades that run on the Gaia operating system.

After completing this course, you will be able to:

• Identify basic interfaces used to manage the Check Point environment.
• Identify the types of technologies that Check Point supports for automation.
• Explain the purpose of the Check Management High Availability (HA) deployment.
• Identify the workflow followed to deploy a Primary and solution Secondary servers.　
• Explain the basic concepts of Clustering and ClusterXL, including protocols, synchronization, connection stickyness.
• Identify how to exclude services from synchronizing or delaying synchronization.
• Explain the policy installation flow.
• Explain the purpose of dynamic objects, updatable objects, and network feeds.
• Understand how to manage user access for internal and external users.
• Describe the Identity Awareness components and configurations.
• Describe different Check Point Threat Prevention solutions.
• Articulate how the Intrusion Prevention System is configured.
• Obtain knowledge about Check Point’s IoT Protect.
• Explain the purpose of Domain-based VPNs.
• Describe situations where externally managed certificate authentication is used.
• Describe how client security can be provided by Remote Access.
• Discuss the Mobile Access Software Blade.
• Explain how to determine if the configuration is compliant with the best practices.
• Define performance tuning solutions and basic configuration workflow.
• Identify supported upgrade and migration methods and procedures for Security Management Servers and dedicated Log and SmartEvent Servers.
• Identify supported upgrade methods and procedures for Security Gateways.

Topics:

1. Advanced Deployments
2. Management High Availability
3. Advanced Gateway Deployment
4. Advanced Policy Configuration
5. Advanced User Access Management
6. Custom Threat Protection
7. Advanced Site-to-Site VPN
8. Remote Access VPN
9. Mobile Access VPN
10. Advanced Security Monitoring
11. Performance Tuning
12. Advanced Security Maintenance

Exercises:

1. Navigating the Environment and Using the Management API
2. Deploying Secondary Security Management Server
3. Configuring a Dedicated Log Server
4. Deploying SmartEvent
5. Configuring a High Availability Security Gateway Cluster
6. Working with ClusterXL
7. Configuring Dynamic and Updateable Objects
8. Verifying Accelerated Policy Installation and Monitoring Status
9. Elevating Security with HTTPS Inspection
10. Deploying Identity Awareness
11. Customizing Threat Prevention
12. Configuring a Site-to-Site VPN with an Interoperable Device
13. Deploying Remote Access VPN
14. Configuring Mobile Access VPN
15. Monitoring Policy Compliance
16. Reporting SmartEvent Statistics
17. Tuning Security Gateway Performance

Technical Professionals who architect, upgrade, maintain, and support Check Point products.

CCSA Training or Certification, fundamental Unix and Windows knowledge, certificate management experience, system administration and networking knowledge.