Check Point Security Expert R71

Check Point Security Expert R71 =

Introduction

This course prepares the participants to appear for the certification exam CC= SE R71

The Check Point Security Expert R71 course provides an underst= anding of advanced concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. During this course, you will proces= s a Change Request, implement SmartProvisioning, DLP, and configure SSL VPN rem= ote access. In addition, you will deploy HA, and configure your network for advanced routing features such as VTIs, with advanced reporting and monitor= ing options.

Duration

4 Days

Prerequisites

Check Point Security Administration R70/R71, or equivalent knowledge and experien= ce

Who Should Attend?

System administrator, security manager, or network engineer who deploys R70/R71 Security Gateways on open servers, IP appliances, UTM-1 appliances, or Power-1 appliances and individuals seeking the Check Point Certified Security Exp= ert (CCSE) R71 certification

Course Objectives

Ø Management Portal

&= sect; Co= nfigure Administrative access to the Security Management server from an offsite mac= hine to facilitate remote management of corporate Security Gateways.<= /span>

&= sect; De= fine how the Management Portal aids in managing and troubleshooting security configurations.

&= sect; De= scribe how to extend access to network policy settings to outside auditors.

Ø SmartWorkflow

&= sect; Pr= ocess a change request based on an organization’s existing management infrastructure.

&= sect; Id= entify the advantages of SmartWorkflow in tracking, approving, and auditing securi= ty policy changes.

&= sect; As= sess the benefits of policy life-cycle management and change management.<= /span>

&= sect; De= termine typical SmartWorkflow administrative and use processes.

Ø SmartProvisioning

&= sect; De= termine and implement the appropriate SmartProvisioning deployment scenario based on corporate requirements.

&= sect; Mo= dify different properties on remote Gateways (i.e., DNS, Networking) per corpora= te requirements.

&= sect; Id= entify the advantages of SmartProvisioning as a centralized management tool.<= /o:p>

&= sect; De= termine typical SmartProvisioning deployment scenarios.

&= sect; De= scribe profile based management as it applies to SmartProvisioning.

Ø SSL Portal-based VPN

&= sect; Co= nfigure applications for SSL VPN remote access based on corporate and user requirements.

&= sect; De= scribe the security features of SSL VPN.

&= sect; Id= entify the role of the SSL VPN in common deployment scenarios.

Ø Acceleration

&= sect; Co= nfigure and verify that traffic throughput is enhanced using SecureXL on a SecurePlatform Pro Security Gateway.

&= sect; Id= entify the advantages of SecureXL with intense security processing requirements.

&= sect; As= sess the benefits of multi-core CPU combined with SecureXL security acceleration.

Ø High Availability
&= sect; De= ploy New Mode HA on a new cluster member.

&= sect; Id= entify the features and limitations of Management High Availability.=

Ø Clustering

&= sect; Co= nfigure ClusterXL in a corporate network.

&= sect; De= termine typical multiple Security Gateway cluster configurations using ClusterXL.

&= sect; Li= st the advantages of implementing the Sticky Decision Function in a clustered environment, and determine the circumstances that it would be most benefici= al.

Ø Advanced Networking - Routing<= /span>

&= sect; Co= nfigure VPN in a clustered environment, and demonstrate VPN failover.

&= sect; Co= nfigure and test VPN Tunnel Interfaces (VTIs) for a clustered environment.

&= sect; Id= entify the advantages of Advanced Routing protocols for scalability, fault-toleran= ce, and security.

Ø Advanced Networking – Load Balancin= g

&= sect; Co= nfigure Load Sharing Unicast (Pivot) and Multicast Mode on a cluster member.

&= sect; De= termine typical Load Balancing configurations using Advanced Networking.=

Ø Advanced Networking – QoS

&= sect; Co= nfigure and verify the best QoS configuration using the Advanced Networking Software Blade for your corporate environment, and verify the Policy.

&= sect; Le= arn QoS architecture and typical configurations.

Ø Check Point IPS

&= sect; Im= plement default or customized profiles to the Gateways in the corporate network.

&= sect; Ma= nage profiles by tracking changes to the network, including performance degradat= ion, and troubleshoot issues with the network related to specific IPS policy rul= es.

&= sect; Cr= eate and install IPS policies.

Ø Data Loss Prevention

&= sect; De= ploy and manage DLP

&= sect; Co= nfigure DLP Data Types in a rule

&= sect; Mo= nitor and adjust DLP policies

&= nbsp;

Ø SmartReporter

&= sect; Gi= ven logged data, produce reports by viewing the consolidation policy, creating a consolidation session, and changing a predefined report that provides an au= dit of network traffic.

&= sect; In= stall and configure the Eventia Suite to chart events and correlate logs into mea= ningful data.

&= sect; De= fine the purpose for Reporting.

&= sect; Gi= ven logged data, produce reports that provide an audit of network traffic.=

Ø SmartEvent

&= sect; Mo= nitor and analyze alerts to track and identify network intrusions.

&= sect; Ba= sed on reports, modify the IPS Policy to improve system bandwidth and protections.=

&= sect; De= fine the need for intrusion event analysis.

§ Mo= nitor and analyze alerts to track and identify network intrusions.

Ø = Troubleshooting and Debugging

§ Use standard Check Point troubleshooting procedures to see and resolve issues

§ Us= e common debugging tools to investigate and test for problems