Check Point Security Administration I NGX(R70)
|
Code: |
CCSAR70 |
|
Type: |
IT InstructorLed Courses |
| Category: |
CheckPoint
|
|
|
Check Point Security Administration I NGX (R70) is a foundation course for Check Point's flagship product, VPN-1 (NGX R70). This course provides an understanding of basic concepts and skills necessary to configure VPN-1. During this course, students will configure a Security Policy, and learn about managing and monitoring a secure network.
|
|
|
|
|
Duration: |
3 days, 21 hours |
|
Location: |
EDITC & MMC Conference Center, 16 Imvrou Street, 1055 Nicosia |
|
Language: |
English |
|
Attendance: |
4-16 |
|
Speaker: |
|
|
|
|
|
|
|
|
|
Topics
Part 1: Getting Started
Chapter 1: Introduction to VPN-1
Chapter 2: Introduction to SecurePlatform
Part 2: Security Policy
Chapter 3: Introduction to the Security Policy
Part 3: Access Control and Management
Chapter 4: Monitoring Traffic and Connections
Chapter 5: Authentication Create and configure users in SmartDirectory for access to your
LAN.
Chapter 6: Check Point QoS
Part 4: SmartDefense
Chapter 7: Basic SmartDefense and Content Inspection
Who Should Attend
•Systems administrator, security manager, or network engineer who manages NGX R65 Security Gateway deployments
•Systems administrator, security manager, or network engineer implementing VPN-1 (NGX R65) for VPN deployments
•Delegates that want to earn Check Point Certified Security Administrator NGX(CCSA) NGX R65 certification
Objectives
After completing this course the participants will gain knowledge on:
•How VPN-1 components and Check Point’s three-tier architecture works to secure your network
•How to perform command-line operations using Check Point’s SecurePlatform operating system
•How to back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCenter Servers
•How to create objects and rules and modify a Security Policy’s properties
•How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
•How to configure network-bandwidth requirements and interpret the results
•How to use Network Address Translation to overcome IP addressing limitations
•How to verify the identity of users logging in to VPN-1 using authentication schemes
•How to implement LDAP, and integrate it with a SmartCenter Server
•How to protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
•How to configure Web-filtering and antivirus settings on a Gateway to ensure traffic content is inspected for specific conditions.
Prerequisites
Basic networking knowledge, knowledge of Windows Server and/or UNIX, experience with TCP/IP and Internet supporting TS
Methodology
1. Training
2. Discusions
3. Labs
4. Exercises
Equipment
1. Training material in english language
2. Personal Computers
3. Video Projector
4. Virual Labs
4. Whiteboard and flip charts
TimeTable
DAY 1
•Installing and configuring the SmartCenter Server
•Installing SecurePlatform Pro on the Security Gateway
•Configuring the Security Gateway using the WebUI
•Configure an interface as your management connection using the sysconfig utility
•Backing up a current configuration from the command line
•Create network objects
DAY 2
•Establish trust between a Gateway and SmartCenter Server
•Develop a network model using SmartMap
•Create a Policy Package to configure a Rule Base
•Enable Static NAT on a network
•Simulate a malicious network intrusion, and blocking the attack
•Enforce the Suspicious Activity Rule with SmartView monitor
DAY 3
•Create user templates and define users
•Test Client Authentication
•Configure SmartDirectory using Microsoft Active directory to authenticate users
•Configure QoS rules to support traffic-priority requirements
•Configure SmartDefense to detect port scans and successive multiple-connection attempts
•Configure Web Intelligence to detect a simple worm signature
|