The Check Point Certified Security Administrator

Learn the fundamentals of Check Point Security Administration and gain practical skills to secure your network. This comprehensive course covers everything you need to know to configure and manage a robust Check Point security infrastructure.

Key Skills You'll Master:

• Check Point Architecture: Understand Check Point's unified network management approach and its core components.
• Security Policy Configuration: Design and implement effective security policies to protect your network.
• Network Deployment: Design a distributed network environment using practical topology examples.
• Security Gateway Installation & Management: Install and configure Check Point R77 Security Gateways in distributed environments.
• Command Line Administration: Perform essential tasks like backups, restores, user/group management, and administrator control using the command line.
• Configuration Management: Deploy Gateways efficiently using sysconfig and cpconfig.
• Object Management: Create and configure network, host, and gateway objects for streamlined policy creation.
• Security Management Server Verification: Verify secure communication between the Security Management Server and Gateways using SmartDashboard.
• Rule Base Development: Create and optimize a basic rule base in SmartDashboard for administrative users, external services, and LAN access.
• Policy Optimization: Evaluate and refine existing security policies to meet evolving corporate requirements.
• Security Management Server Maintenance: Implement scheduled backups and policy versioning for seamless upgrades and minimal downtime.
• NAT Configuration: Configure Network Address Translation (NAT) rules on Web and Gateway servers.
• Traffic Monitoring & Troubleshooting: Utilize SmartView Tracker Queries to monitor IPS and network traffic, and troubleshoot events with packet data analysis.
• Reporting & Issue Resolution: Generate reports using packet data to troubleshoot system and security issues, ensuring optimal network functionality.
• Real-time Monitoring with SmartView Monitor: Configure alerts, traffic counters, and monitor Gateway status, suspicious activity, tunnel activity, and remote user access.
• Remote Gateway Management: Use SmartUpdate to manage remote Gateways, including upgrades, new installations, and license modifications.
• License Management: Upgrade and attach product licenses efficiently using SmartUpdate.
• Centralized User Management: Implement centralized user management to ensure secure access to the corporate network, both locally and remotely.
• External Database Integration: Manage user access to the corporate LAN using external databases.
• Identity Awareness: Leverage Identity Awareness for granular access control to network resources.
• User Information Acquisition: Acquire user information used by the Security Gateway for enhanced access control.
• Access Role Definition: Define Access Roles for use within Identity Awareness rules.
• Identity Awareness Rule Implementation: Implement Identity Awareness within the Firewall Rule Base.
• Site-to-Site VPN Configuration: Configure pre-shared secret site-to-site VPNs with partner sites.
• Remote Access VPN Configuration: Configure permanent tunnels for secure remote access to corporate resources.
• VPN Tunnel Sharing: Understand and configure VPN tunnel sharing, including host-based, subunit-based, and gateway-based tunnels.

This course provides the essential knowledge and hands-on experience to become proficient in Check Point Security Administration, ensuring a secure and reliable network environment.