Das Training bereitet auf die Prüfung Check Point Certified Security Expert (CCSE) R81 vor. Die Prüfungskosten sind nicht im Trainingspreis inkludiert.
Inhalt des Trainings
Powered by Arrow ECS GmbH
Der dreitägige Fortgeschrittenentraining lehrt, wie die R81.10 Check Point Security Systems auf dem GAiA-Betriebssystem erstellt, modifiziert, bereitgestellt und Fehler behoben werden. In praktischen Übungen erfahren Sie, wie Sie Firewall-Prozesse debuggen, die VPN-Leistung optimieren und Verwaltungsserver aktualisieren.
Nach Abschluss dieses Trainings haben die Teilnehmer*innen Wissen zu folgenden Themen aufgebaut:
Backup your R81.1 Security Gateway and Management Server
Build, test and troubleshoot a clustered Security Gateway
Upgrade and troubleshoot a Management Server
Configure and maintain security acceleration solutions
Manage, test and optimize corporate VPN tunnels
Zielgruppen
Personen die Check Point Produkte supporten, warten und upgraden.
Vorkenntnisse
Erfahrung mit Windows, UNIX, Netzwerktechnologie und TCP/IP
CCSA Ausbildung/Zertifizierung
Detail-Inhalte
Objectives:
Provide an overview of the upgrade service and options available.
Explain how to perform management upgrade and migration.
Articulate the process using CPUSE features.
Articulate the purpose and function of Management High Availability.
Explain Primary vs Secondary, Active vs Standby and Synchronization.
Explain disaster recovery steps in case the primary management server becomes unavailable.
Provide overview of Central Deployment in SmartConsole.
Articulate an understanding of Security Gateway cluster upgrade methods.
Explain about Multi Version Cluster (MVC) upgrades.
Discuss Gaia Commands and how they are used.
Explain the main processes on s and s.
Describe how to work with scripts and SmartTasks to configure automatic actions.
Explain the Management Data Plane Separation (MDPS)
Explain kernel operations and traffic flow
Articulate Dynamic and Updatable Objects in Security Gateways
Explain the policy installation flow and files used.
Describe the use of policy installation history.
Explain concurrent and accelerated install policy.
Describe an overview of APIs and ways to use and authenticate.
Explain how to make changes in GAIA and management configuration.
Explain how to install policy using API.
Explain how the SecureXL acceleration technology enhances and optimizes Security Gateway performance.
Describe how the CoreXL acceleration technology enhances and improves Security Gateway performance.
Articulate how utilizing multiple traffic queues can make traffic handling more efficient.
Discuss Site-to-Site VPN basics, deployment and communities.
Describe how to analyze and interpret VPN tunnel traffic.
Explain Link Selection and ISP Redundancy options.
Explain tunnel management features.
Discuss Check Point Remote Access solutions and how they differ from each other.
Describe how client security can be provided by Remote Access .
Explain authentication methods including machine authentication.
Explain Multiple Entry Point (MEP).
Discuss the Mobile Access Software Blade and how it secures communication and data exchange during remote connections.
Describe Mobile Access deployment options.
Discuss various features in Mobile Access like Portals, Link Translation, running Native Applications, Reverse Proxy and more.
Explain basic concepts of Clustering and ClusterXL.
Explain about Cluster Control Protocol (CCP) and synchronization.
Describe advanced ClusterXL functions and modes like Load Sharing, Active-Active, VMAC mode etc.
Discuss Cluster Correction Layer (CCL) to provide connection stickyness.
Advanced Logs and Monitoring
Explain how to determine if the configuration is compliant with the best practices.
Explain how to set action items to meet the compliance.
Discuss how SmartEvent functions to identify critical security issues.
Describe the components of SmartEvent and their deployment options.
Discuss how SmartEvent can assist in reporting security threats.
Explain how to customize event definitions and set an Event Policy.
Exercises
Prepare for a Security Management Server Upgrade
Upgrade the Security Management Server
Deploy a Secondary Security Management Server
Configure a Distributed Log Server
Upgrade a Security Gateway from SmartConsole
Work with the Command Line
Use Scripts and SmartTasks
Configure Dynamic Objects
Monitor Traffic
Verify Policy Installation and Status
Work with Gaia and Management APIs
Work with Acceleration Features
Configure a Locally Managed Site to Site VPN
Configure a Site to Site VPN with an Interoperable Device
Tolles Seminar, Perfekte Mischung aus Theorie und Praxis.
— Gerhard M.Check Point Certified Security Expert R81.X
21.04.2022Tolles Seminar, Perfekte Mischung aus Theorie und Praxis.
— Gerhard M.Sehr informativ und perfekt vorgetragen!
— Martin R.Check Point Certified Security Expert R81.X
11.03.2021Sehr informativ und perfekt vorgetragen!
— Martin R.