Check Point Certified Security Administrator (CCSA)

Check Point Check Point Training

3442

Check Point Certified Security Administrator (CCSA)

$3,000

Classroom

$3,000

Live Virtual

for

Private/On Site

In this course, you will learn the basic concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. During this course, you will configure a security policy and learn about managing and monitoring a secure network, upgrading and configuring a security gateway, and implementing a virtual private network (VPN).

Related Certification:

This course helps prepare for CCSA exam #156-215.77 available at VUE test centers www.vue.com/checkpoint. It contains 90 multiple-choice, scenario-based questions. A passing score is 70% or higher. The exam is based on 80% course materials and 20% hands-on experience with Check Point products. Students should have at least six months experience with Check Point products before taking the exam.

Check Point Certified Security Administrator (CCSA)

  • Check Point technology
  • Deployment platforms
  • Introduction to the security policy
  • Monitoring traffic and connections
  • Network Address Translation (NAT)
  • Using SmartUpdate
  • User management and authentication
  • Identity Awareness
  • Check Point VPNs

Technical persons who support, install, deploy, or administer Check Point Software Blades should attend this course. This could include the following:

  • System administrators
  • Support analysts
  • Security managers
  • Network engineers
  • Anyone seeking CCSA certification

Required Prerequisites:
  • General knowledge of TCP/IP
  • Working knowledge of Windows, UNIX, network technology, and the Internet
Follow-on Courses:

Outline

  • Check Point''s unified approach to network management and its key elements
  • Design a distributed environment
  • Install the Security Gateway in a distributed environment
  • Perform a backup and restore the current Gateway installation from the command line
  • Identify critical files needed to purge or backup, import and export users and groups, and add or delete administrators from the command line
  • Deploy Gateways using the GAiA web interface
  • Create and configure network, host, and gateway objects
  • Verify SIC establishment between the Security Management Server and the Gateway using SmartDashboard
  • Create a basic Rule Base in SmartDashboard that includes permissions for administrative users, external services, and LAN outbound use
  • Configure NAT rules on Web and Gateway servers
  • Evaluate existing policies and optimize the rules based on current corporate requirements
  • Maintain the Security Management Server with scheduled backups and policy versions to ensure seamless upgrades with minimal downtime
  • Use Queries in SmartView Tracker to monitor IPS and common network traffic and trouble-shoot events using packet data
  • Use packet data to generate reports, trouble-shoot system and security issues, and ensure network functionality
  • Using SmartView Monitor, configure alerts and traffic counters, view a Gateway''s sta-tus, monitor suspicious activity rules, analyze tunnel activity and monitor remote user access
  • Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications
  • Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways
  • Upgrade and attach product licenses using SmartUpdate
  • Centrally manage users to ensure only authenticated users securely access the corporate network either locally or remotely
  • Manage users to access the corporate LAN by using external databases
  • Use Identity Awareness to provide granular level access to network resources
  • Acquire user information used by the Security Gateway to control access
  • Define Access Roles for use in an Identity Awareness rule
  • Implement Identity Awareness in the Firewall Rule Base
  • Configure a pre-shared secret site-to-site VPN with partner sites
  • Configure permanent tunnels for remote access to corporate resources
  • Configure VPN tunnel sharing, given the difference between host-based, subunit-based and gateway-based tunnels

Labs

Lab 1: Distributed Installations
Lab 2: Stand-alone Security Gateway Installations
Lab 3: Common Tools
Lab 4: Building a Security Policy
Lab 5: Configure the DMZ
Lab 6: Configure NAT
Lab 7: Monitor with SmartView Tracker
Lab 8: Client Authentication
Lab 9: Identity Awareness
Lab 10: Site-to-Site VPN between Corporate and Branch Office

Upcoming Classes

Dates Location GTR  
Dec 12-14 (10am-6pm) EST
Jan 9-11 (10am-6pm) EST
Jan 23-25 (10am-6pm) EST
Jan 30-Feb 1 (10am-6pm) EST
Feb 13-15 (10am-6pm) EST
Feb 27-Mar 1 (10am-6pm) EST
Mar 13-15 (10am-6pm) EST
Mar 27-29 (10am-6pm) EST

Questions?

Whether you need assistance scheduling a class for yourself or for your group, GCA's Education Account Manager's will craft a customized training solution to meet the needs of your organization.