Check Point Security Administration NGX I (R65) — A 3-day course

 Open Public Course Closed In-House Course

Synopsis

Check Point Security Administration NGX I (R65) is a foundation course for Check Point's flagship product, VPN-1 NGX. This course covers configuring VPN-1 NGX, and provides hands-on training managing a VPN-1 NGX installation.

This course meets the requirements for the CCSA NGX certification. A separate examination (not part of the course) is available for delegates who wish to have formal certification.

Course Objectives

On completion of this course, delegates will be able to:

• Show how VPN-1 NGX components and Check Point's Secure Virtual Network Architecture protect critical information assets
• Create rules and modify the Security Policy's properties
• Install, configure and maintain R65 SecurePlatform (SPLAT)
• Back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCenter Servers
• Use advanced NGX features to minimize the information-security management burden, when working with objects and rules
• Use NAT private IP-address allocation and unregistered internal addressing schemes, to overcome IP addressing limitations
• Understand how to configure NGX R65 to allow VoIP traffic
• Use monitoring tools to track, monitor and account for all connections logged
• Protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
• Given a variety of Check Point QoS configurations, determine how to allocate bandwidth
• Identify situations where Low Latency Queuing and Differentiated Services are an appropriate part of a QoS solution
• Verify the identity of users logging in using NGX authentication schemes
• Implement LDAP, and integrate it with NGX SmartCenter Server
• Distribute content security to Security Gateways, screen URLs, block suspicious Web data, and enable Antivirus checks

Suitable for

• Systems administrators, security managers, or network engineers who manage VPN-1/FireWall-1 gateway deployments
• Those who want to earn Check Point Certified Security Administrator (CCSA) NGX certification

Prerequisites

• Basic network knowledge, knowledge of Windows Server and/or UNIX, and experience with TCP/IP and the Internet

Publicly scheduled dates, locations, and prices

Contents:

VPN-1/FireWall-1 architecture

VPN-1/FireWall-1 component deployment

Introduction to the NGX R65 SecurePlatform (SPLAT)

How to protect your network with backups

How to define a Security Policy using SmartDashboard

How to administer and troubleshoot VPN-1/FireWall-1 Security Policies

How to configure NGX R65 for VoIP traffic

How to implement Network Address Translation

How to monitor traffic and block intruder connections

How to set up User Authentication in a VPN-1/FireWall-1 environment

Using LDAP authentication with NGX R65

How to configure QOS

How to enable SmartDefense and Content Inspection mechanisms

Using NGX R65 Antivirus