Dimension Data IT Training Solutions Dimension Data - Home Dimension Data - Sitemap Contact Dimension Data

Search go


Go to Check Point courses.
Go to Perth schedule.
Email       Print       Save
Check Point Security Administration R70
Vendor Course Code:CCSA R70
Course Length:5 days
Course Price:$4,500.00
Availability:
 
 
 
 If your preferred city or time is not currently listed, please call DDLS on 1800 U LEARN (1800 853 276) and we can try to accommodate your needs.
Overview:Check Point Security Administration R70 is a foundation course for Check Point's Security Management Systems, Security Gateway Systems, and deployment platforms. This course provides an understanding of basic concepts and skills necessary to configure Check Point Software Blades including Firewall, IPSEC VPN, IPS, Network Policy Management, Logging & Status, and Monitoring, URL Filtering, Antivirus & Anti-malware, Anti-spam & Email Security. During this course, students will configure a Security Policy, secure communications across the Internet, defend against network threats, and learn about managing and monitoring a secure network.
Skills Gained:You will learn how to
• Design and install version R70 in a distributed environment
• Perform a backup and restore the current installation.
• Identify critical files
• Deploy Gateways
• Create and configure network, host and gateway objects.
• Verify SIC establishment
• Create a basic Rule Base
• Configure NAT rules
• Evaluate existing policies and optimize rules
• Ensure seamless upgrades and minimal downtime.
• Use queries to monitor IPS and common network traffic and troubleshoot events.
• Generate reports, troubleshoot system and security issues, and ensure network functionality.
• Configure alerts and traffic counters, monitor suspicious activity, analyze tunnel activity and monitor remote user access
• Apply upgrade packages
• Attach product licenses
• Perform a pre-installation compatibility assessment
• Centrally manage users and manage users’ access using external databases.
• Configure a pre-shared secret site-to-site VPN.
• Configure a certificate based site-to-site VPN using an internal CA or a third party CA.
• Configure permanent tunnels for remote access.
• Configure VPN tunnel sharing.
• Configure Check Point Messaging Security to test IP Reputation, content based anti-spam, and zero hour virus detection.
• Configure a Web-filtering and antivirus policy to filter and scan traffic.
• Implement default or customized profiles to designated Gateways.
• Create and install IPS policies.
Key Topics:• Distributed Installation
    Install and configure the Security Management Server
    Install SecurePlatform on the Security Gateway
    Configure the Security Gateway using WebUI
    Launch SmartDashboard

• Branch Office Security Gateway Installation
    Configure Branch Gateway via WebUI

• Command Line Interface (CLI) Tools
    Initialize the ICA
    Set expert password
    Add and delete administrators
    Run backup and restore

• Defining Basic Objects
    Create Security Gateway Object
    Create Rules for Corporate Gateway
    Create the Remote Security Gateway Object

• Configure DMZ
    Configure DMZ Interface on the Gateway
    Create a DMZ Object

• Configure NAT
    Configure Hide NAT
    Configure Static NAT
    Observe NAT using fw monitor

• Monitoring with SmartView Tracker
    Launch SmartView Tracker
    Track by Source and Destination

• Using SmartUpdate
    Get Gateway data and run Cpinfo
    Download HFA Package

• Upgrade a Security Gateway Locally
• Client Authentication
    Configure Manual Client Authentication with FTP and Local User
    Configure Partially Automatic Client Authentication with LDAP
    Test Active Directory Authentication
    Create a Database Revision

• Configure a Site-to-Site VPN
Define the VPN Domain
    Create the VPN Community
    Create VPN Rule
    Test VPN Connection
    VPN Troubleshooting

• Configure Two Gateway IKE Encryption Using Certificates
    Save a Certificate for Export
    Add Machine to VPN Community
    Create a Certificate Authority
    Modify Rule Base
    Install and Verify Security Gateway Configuration
    Test Encryption with Certificates
    Revert to Standard Security Policy

• Remote Access and Office Mode
    Create Remote Access Group
    Configure Gateway for IKE Encryption and LDAP Authentication
    Configure VPN Domain
    Configure Office Mode IP Pool
    Configure Remote Access Object
    Modify Rule Base for Remote Access
    Create a Site Using Site Wizard
    Verifying Office Mode IP Assignment
    Test Remote Connection

• Messaging and Content Security
    Configure IPS for Preliminary Detection
    Analyze Attacks
    Reconfiguring IPS to Block Attacks
    Review Logs

Target Audience:• You are a systems administrator, security manager, or network engineer who manages R70 Security Gateway deployments on open servers, IP appliances, UTM-1 appliances, or Power-1 appliances.
• Want to earn Check Point Certified Security Administrator (CCSA) R70 certification
Prerequisites:Basic networking and Windows Server and/or UNIX knowledge, experience with TCP/IP and the Internet.
Training Courses:  |  Microsoft Training  |  Cisco Training  |  Citrix Training  |  Check Point Training  |  VMWare Training  |  IBM Lotus Training  |  Apple Training  |  Business Analysis Training  |  Professional Development Training  |  ITIL Training  |  Project Management Training  |  PRINCE2ฎ Training  |  Digital Investigations Training  |  Red Hat Training  |  Tandberg Training

Copyright 2009 Dimension Data Learning Solutions. All Rights Reserved. | Terms and Conditions of Use | Privacy Policy.