Check Point Security Administration R70 is a foundation course for Check Point's Security Management Systems, Security Gateway Systems, and deployment platforms. This course provides an understanding of basic concepts and skills necessary to configure Check Point Software Blades.

This is a short course and is not design to replace the full 5 day course if you do not have a prior CCSA NG, NGAI, or NGX certification.

Length - 3 days

Overview:

This accelerated course provides an understanding of the concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. This course only covers topics in the current CCSA R70 course that are not covered in previous CCSA versions. During the course, you will configure, manage, monitor and maintain a corporate and branch office network. In addition, you will upgrade and configure a Security Gateway to implement a virtual private network (VPN) for both internal and external users while implementing IPS and Messaging and Content Security.

Target Audience:

• You have a prior CCSA certification and want an accelerated path to achieve CCSA R70 certification..

Prerequisites:

• CCSA NG, NGAI, or NGX - You must have a previous Check Point CCSA certification.

Skills Gained:

• Design and install version R70 in a distributed environment
• Select the best security solution for your corporate environment.
• Perform a backup and restore current Gateway installation from the command line.
• Identify critical files to purge or backup, import and export users and groups, and add or delete administrators from the command line.
• Use command line utilities to troubleshoot problems on the Security Gateway.
• Maintain the Security Management Server with scheduled backups and policy versions.
• Use queries in SmartView Tracker to monitor IPS and troubleshoot events.
• Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications.
• Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways.
• Upgrade and attach product licenses using SmartUpdate.
• Perform a pre-installation compatibility assessment before upgrading to R70.
• Given R70 licensing instructions, obtain a license key.
• Install a Contract File on Windows, SecurePlatform, Linux, Solaris and IPSO.
• Select the most appropriate encryption algorithm when securing communication over a VPN, based on corporate requirements.
• Establish VPN connections to partner sites to access a central database by configuring Advanced IKE properties.
• Configure a pre-shared secret site-to-site VPN with partner sites.
• Configure a certificate based site-to-site VPN using one partner’s internal CA..
• Configure permanent tunnels for remote access to corporate resources.
• Configure VPN tunnel sharing.
• Configure Check Point Messaging Security.
• Configure a Web-filtering and antivirus policy to filter and scan traffic.
• Implement profiles to designated Gateways in the corporate network.
• Manage profiles by tracking changes to the network, including performance degradation, and troubleshoot issues with the network.
• Create and install IPS policies.

Key Excercises

• Distributed Installation
• Branch Office Security Gateway Installation
• Defining Basic Objects and Rules
• Configure the DMZ
• Configuring NAT
• Using SmartUpdate
• Upgrade a Security Gateway locally
• Configure a Site-to-Site VPN
• Two Gateway IKE Encryption using Certificates
• Remote Access and Office Mode
• Messaging and Content Security
• Implement the IPS