Seminarinhalt
Vermittlung der fortgeschrittenen Konzepte und Fähigkeiten, die für die Automatisierung und Koordinierung von Aufgaben im Zusammenhang mit der Verwaltung von Check Point-Sicherheitsrichtlinien erforderlich sind.
Programm
- Understand the concept and demand for Scalable Platforms
- Recognize the main characteristics of Scalable Platforms
- Describe how Maestro uses Hyperscale Technology
- Identify the essential components of the Maestro system
- Understand and explain how the Orchestrator’s downlinks, uplinks, management, and sync ports function
- Learn how to create, delete, and modify Security Groups
- Understand the basics of the Dual-Site environment
- Describe how the Gaia Command Line Interface (CLI) supports the configuration of MHO appliances
- Perform diagnostic troubleshooting using the CLI
- Describe the purpose of the Security Group Database
- Learn how to configure interfaces using CLISH
- Evaluate how traffic flows through a Maestro environment
- Demonstrate how to use traffic monitoring commands
- Understand the four distribution modes that Maestro uses to assign packets to a Security Gateway Module
- Describe the basic use of the asg diag command to collect system diagnostics
- Describe how Dual-Site Orchestrators are configured
- Recognize how to account for Dual-Site fail-overs
- Identify how Virtual System Extension (VSX) works
- Learn the advantages of using VSX in a Dual-Site Orchestrator environment
- Describe the different layers of the OSI model involved when debugging the SGM
Exercices
- Creating Security Groups
- Working in a Dual Orchestrator Environment
- Configuring Security Groups
- Working with Multiple Security Groups
- Understanding Traffic Distribution Modes
- Managing Traffic Flow
- Running System Diagnostics
- Creating a Dual-Site Environment
- Deploying VSX in a Dual-Site Environment
Zielgruppen
Dieser Kurs bereitet IT-Fachleute auf ihre Zertifizierung als Check Point Certified Maestro Expert (CCME) vor.
Vorkenntnisse
- Praktische Kenntnisse von UNIX und/oder Windows OS und Netzwerk-TCP/IP
- fortgeschrittene Kenntnisse von Check Point Security-Produkten
- CCSA-Schulung/Zertifizierung

