Check Point Security Administration I NGX (R65) is a foundation course for Check Point's flagship product, VPN-1 (NGX R65). This course provides an understanding of basic concepts and skills necessary to configure VPN-1. During this course, students will configure a Security Policy, and learn about managing and monitoring a secure network.
Those wishing to sit the CCSE NGX II R65 exam must have this qualification.

Length - 3 days

Target Audience:

• Systems administrator, security manager, or network engineer who manages VPN-1/FireWall-1 gateway deployments.
• Students wanting to achieve Check Point Certified Security Administrator (CCSA) NGX I  R65 Certification.

Prerequisites:

Basic networking and Windows Server and/or UNIX knowledge, experience with TCP/IP and the Internet.  

Skills Gained:

• How to use NGX tools to upgrade to VPN-1 NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
• How to use NGX tools to install VPN-1 NGX on Windows Server 2003 and SecurePlatform
• How to work with Security Policy rules and NGX objects, using NGX object cloning and Database Revision Control features
• How to use VPN-1 SecuRemote/SecureClient to configure remote access
• How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
• How to implement LDAP, and integrate it with an NGX SmartCenter Server
• How to allocate bandwidth, given a variety of Check Point QoS configurations
• How to identify the features and limitations of Check Point High Availability solutions

Key Topics:

• Upgrading NG with AI R55 to VPN-1 NGX
• Installing VPN-1 NGX in a distributed deployment
• Installing VPN-1 Pro Gateway on SecurePlatform Pro
• Creating objects using object cloning
• Using Database Revision Control
• Configuring remote access in an IKE VPN
• Installing VPN-1 SecuRemote
• Using VPN-1 SecuRemote in an IKE VPN
• Implementing Office Mode
• Blocking intruder connections
• Setting up a Suspicious Activity Rule in SmartView Monitor
• Checking status in SmartView Monitor
• Configuring LDAP authentication with SmartDirectory
• Configuring a Check Point QoS Policy
• Deploying Management High Availability
• Deploying New Mode High Availability
• Configuring Load Sharing Unicast (Pivot) mode