Check Point Certified Security Engineering (CCSE) 2013 (R76) — A 3 day course

contact usEnquire about this course
Retired Course; no longer available


This course has been replaced with Check Point Certified Security Engineering (CCSE) R77 , please review the details here.

Check Point Security Engineering is an advanced 3-day course that teaches how to effectively build, modify, deploy and troubleshoot Check Point Security systems on the GAiA OS. We will study firewall processes and take a close look at user and kernel processing and Stateful Inspection. Labs include configuring security gateways, implementing VPNs, and performing advanced troubleshooting tasks on the firewall.


Suitable For

This course is designed for expert users who need to perform advanced deployment configurations of a security gateway. This could include the following:


Successful completion of this course depends on knowledge of multiple disciplines related to network-security activities including UNIX and Windows operating systems, Certificate management, system administration, networking (TCP/IP) knowledge, and Check Point Security Administration course/CCSA Certification.


This course helps prepare for CCSE exam #156-315.13 available at VUE Test Centres. It contains 90 multiple-choice, scenario-based questions. A passing score is 70% or higher in 120 minutes. The exam is based on 80% course materials and 20% hands-on experience with Check Point products. Students must have a valid CCSA certification before challenging the CCSE exam.

The exam in not taken as part of the course nor it is included in the course fee.


This course has been retired and is no longer available.


Perform a backup of a Security Gateway and Management Server using your understanding of the differences between backups, snapshots and update-exports Upgrade and troubleshoot a Management Server using a database migration Upgrade and troubleshoot a clustered Security Gateway deployment Use knowledge of Security Gateway infrastructures, chain modules, packet flow and kernel tables to perform debugs on firewall processes Build, test and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network Build, test and troubleshoot a ClusterXL High Availability deployment on an enterprise network Discuss simplified VRRP deployment on an enterprise network Build, test and troubleshoot a management HA deployment on an enterprise network Configure, maintain and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement Using an external user database such as LDAP, configure User Directory to incorporate user information for authentication services on the network Manage internal and external user access to resources for Remote Access or across a VPN Troubleshoot user access issues found when implementing Identity Awareness Troubleshoot a site-to-site or certificate-based VPN on a corporate gateway using IKE View, VPN log files and command-line debug tools Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions Manage and test corporate VPN tunnels to allow for greater monitoring and scalability with multiple tunnels defined in a community including other VPN providers Create events or use existing event definitions to generate reports on specific network traffic using SmartReporter and SmartEvent to provide industry compliance information to management Troubleshoot report generation given command-line tools and debug-file information

Lab Exercises Include:

Upgrade to Check Point R76 Core CLI elements of firewall administration Migrate to a clustering solution Configure SmartDashboard to interface with Active Directory Configure site-to-site VPNS with third-party certificates Remote access with Endpoint Security VPN SmartEvent and SmartReporter Optional Appendix Lab for Simplified VRRP