Check Point Security Administration (CCSA) R70 Upgrade

Prerequisites:

Delegates should have a prior CCSA certification and want an accelerated path to achieve CCSA R70 certification.

Course Description:

This accelerated course provides an understanding of the concepts and skills necessary to configure Check Point Security Gateway and Management Software Blades. This course only covers topics in the current CCSA R70 course that are not covered in previous CCSA versions. During the course, you will configure, manage, monitor and maintain a corporate and branch office network. In addition, you will upgrade and configure a Security Gateway to implement a virtual private network (VPN) for both internal and external users while implementing IPS and Messaging and Content Security.

On completion of this course, delegates will be able to:

• Select the best security solution for your corporate environment.
• Perform a backup and restore current Gateway installation from the
• Identify critical files to purge or backup, import and export users and groups, and add or delete administrators from the command line.
• Use command line utilities to troubleshoot problems on the Security Gateway.
• Maintain the Security Management Server with scheduled backups and policy versions.
• Use queries in SmartView Tracker to monitor IPS and troubleshoot events.
• Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license modifications.
• Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways.
• Upgrade and attach product licenses using SmartUpdate.
• Perform a pre-installation compatibility assessment before upgrading to R70.
• Install a Contract File on Windows, SecurePlatform, Linux, Solaris and IPSO.
• Select the most appropriate encryption algorithm when securing communication over a VPN, based on corporate requirements.
• Establish VPN connections to partner sites to access a central database by configuring Advanced IKE properties.
• Configure a pre-shared secret site-to-site VPN with partner sites.
• Configure a certificate based site-to-site VPN using one partner's internal CA.
• Configure permanent tunnels for remote access to corporate resources.
• Configure VPN tunnel sharing.
• Configure Check Point Messaging Security.
• Configure a Web-filtering and antivirus policy to filter and scan traffic.
• Implement profiles to designated Gateways in the corporate network.
• Manage profiles by tracking changes to the network, including performance degradation, and troubleshoot issues with the network.
• Create and install IPS policies.

This course includes the following modules:

Course Contents

• Distributed Installation
• Branch Office Security Gateway Installation Defining Basic Objects and Rules
• Configure the DMZ
• Configuring NAT
• Using SmartUpdate
• Upgrade a Security Gateway locally
• Configure a Site-to-Site VPN
• Two Gateway IKE Encryption using Certificates Remote Access and Office Mode
• Messaging and Content Security
• Implement the IPS