Course: Check Point Security Administration NGX I
Rev 1.1

Check Point Security Administration NGX I Rev 1.1 is a foundation course for Check Point's flagship product, VPN-1 NGX. This course is intended to provide an understanding of basic concepts and skills necessary to configure VPN-1 NGX. During this course, students will configure a Security Policy, and learn about managing a firewalled network.

Prerequisites

Basic networking knowledge, knowledge of Windows Server and/or UNIX, and experience with TCP/IP and the Internet

Take this class if

• You are a systems administrator, security manager, or network engineer who manages NGX Security Gateway deployments
• Want to earn Check Point Certified Security Administrator
  (CCSA NGX) NGX certification

You will learn

• How VPN-1 NGX components and Check Point's Secure Virtual Network Architecture protect critical information assets
• How to create rules and modify a Security Policy's properties
• How to use advanced NGX features to minimize the information-security management burden, when working with objectsand rules
• How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
• How to protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
• How to use private IP-address allocation and unregistered internal addressing schemes, to overcome IP addressing limitations
• How to identify and address NGX security issues, including encryption and Virtual Private Networks
• How to verify the identity of users logging in to NGX, using NGX authentication schemes
• How to implement LDAP, and integrate it with NGX SmartCenter Server
• How to back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCenter Servers

Exercises

• Installing VPN-1 NGX in a stand-alone environment
• Launching SmartDashboard
• Defining basic objects
• Configuring anti-spoofing measures
• Defining basic rules
• Creating objects using object cloning
• Using Database Revision Control
• Blocking intruder connections
• Setting up a Suspicious Activity Rule in SmartView Monitor
• Checking status in SmartView Monitor
• Configuring SmartDefense
• Configuring Hide NAT
• Configuring Static NAT
• Encryption math and mechanics
• Defining user templates
• Defining users
• Configuring User Authentication
• Configuring Client Authentication
• Configuring LDAP authentication with SmartDirectory
• Backing up and restoring a Security Gateway and SmartCenter Server

Duration

3 Days

Click here for the Training Schedule