Check Point NGX R65 Security Administration on Nokia IP Security Platforms — A 5-day course

 Open Public Course Closed In-House Course

Synopsis

This is a 4-day, instructor-led course, which covers configuring and implementing Check Point NGX on Nokia IP Security Platforms. The course provides the information and experience necessary to deploy and manage Internet firewalls on the Nokia family of security products. Hands-on exercises enable students to demonstrate a thorough knowledge of the platform operations, effectively configure security policies, and successfully deploy Internet security solutions.

Course Objectives

On completion of this course, delegates will be able to:

• Define Nokia Security Platform features and routing terminology
• Identify the fundamental design considerations for the Nokia IP Security Platform
• Deploy VPN-1 NGX modules and components
• Define a security policy using the VPN-1 NGX Security Dashboard, incorporating the SmartMap
• Implement network address translation (NAT)
• Set up user authentication in a VPN-1 NGX environment
• Enable high availability using Virtual Router Redundancy Protocol (VRRP)
• Use troubleshooting tools and administrative procedures

Suitable for

• People who will be responsible for the installation, implementation or maintenance of a Check Point NGX-protected site using a Nokia Security Appliance
• Systems administrators, security managers, or network engineers who manage Checkpoint NGX Gateway deployments
• Those who seek Nokia Security Administrator (NO0-002 and/or CCSA NGX #156-215.1 certifications

Prerequisites

• Basic knowledge of networking concepts and topologies, and an understanding of the OSI model is required
• Working knowledge of internetworking concepts and an understanding of TCP/IP, network addressing and subnet masks
• Knowledge of basic router concepts as they relate to Layer 3 of the OSI model, including RIPv1 and v2, and static routes

Publicly scheduled dates, locations, and prices

Contents:

Identify overall features and benfits of the NSP line

Review the Nokia IPSO design and file structure

Execute the initial setup process of an NSP

Describe the tools available to monitor the status of an NSP

Configure the SSH and SSL

Describe the architectire of VPN-1 NGX

Create and modify an NGX Security Policy

Configure and use SmartView Tracker and Smartview monitor

Configure and use SmartDefense

Configure Hide and Static Network Address Translation (NAT)

Explain encryption for VPNs, comparing and constrasting common encryption methods

Configure User, Client, and Session Authentication

Implement LDAP and integrate it with an NGX SmartCenter Server

Select the appropriate backup strategy to mee disaster-recovery requirements

Use NGX upgrade tools and SmartUpdate to upgrade to NGX

Maintain an NSP, installing, upgrading, and backing up Nokia components

Determine the licensing process for VPN-1 NGX

Configure VRRP and SVRRP

Exercises:

Integrate and NSP into an existing network

Configure an NSP using Nokia Network Voyager

Monitor and report statistical information regarding the status of an NSP

Enable SSH and configure SSH options

Configure SSL/TLS communication using Voyager

Configure and NGX Security Gateway for a dstributed environment

Implement a distributed installation of VPN-1 NGX

Launch Check Point's SmartDashboard and verify Internal Certificate Authority configuration

Use SmartDashboard to define network objects and groups

Set up anti-spoofing parameters on an NGX gateway object

Use Check Points SmartMap to convert the logical layout of an organization into a graphical schematic

Configure an NGX Rule Base for proper network functionality, based on specific requirements

Use NGX object cloing to create cloned objects

Use Database Revision Contol to save an NGX Security Policy into several versions

Use Check Point's SmartView Monitor to block a malicious user's network activities

Enfore the Suspicious Activity Rule (SAM Rule) with Smartview Monitor

Identify changes in NGX System status, using SmartView Monitor

Configure Check Point's SmartDefese to detect port scans and multiple connection atte,ps

Enable Hide and Static NAT on a network

Demonstrat the math and mechanics that go into encrypted communication

Create an NGX user template to add users

Make changes to a gateway object, to allow the use of NGX authentication features

Define users who can authenticate to an NGX Gateway

Test User Authentication using a Check Point password

Add fully automatic Client Authentication to a Policy

Configure Check Point's SmartDirectory to interact with Microsoft Active Directory

Use available tools to back up and restore your NGX installation

Configure an NSP to perform a scheduled backup

Configure VRRP and State Synchronization, and implement high availability