| |
Course: Check Point
Security Administration NGX I Rev 1.1
|
Length
|
2 days* (recommended)
|
|
Prerequisites
|
Basic networking knowledge, knowledge of Windows Server and/or UNIX, and
experience with TCP/IP and the Internet
|
|
Take this
class if
-
You are a systems
administrator, security manager, or network engineer who manages NGX
Security Gateway deployments
-
Want to earn
Check Point Certified Security Administrator
(CCSA NGX) NGX certification
|
Check Point Security
Administration NGX I Rev 1.1 is a foundation course for Check Point's flagship
product, VPN-1 NGX. This course is intended to provide an understanding of basic
concepts and skills necessary to configure VPN-1 NGX. During this course,
students will configure a Security Policy, and learn about managing a firewalled
network.
You Will
Learn
-
How VPN-1 NGX components and Check Point's Secure
Virtual Network Architecture protect critical information assets
-
How to create rules and modify a Security Policy's
properties
-
How to use advanced NGX features to minimize the
information-security management burden, when working with objects and rules
-
How to use monitoring tools to track, monitor, and
account for all connections logged by Check Point components
-
How to protect organizations from known network
attacks and entire categories of emerging or unknown attacks, using
SmartDefense
-
How to use private IP-address allocation and
unregistered internal addressing schemes, to overcome IP addressing
limitations
-
How to identify and address NGX security issues,
including encryption and Virtual Private Networks
-
How to verify the identity of users logging in to NGX,
using NGX authentication schemes
-
How to implement LDAP, and integrate it with NGX
SmartCenter Server
-
How to back up critical files and directories, for
availability and timely recovery of Security Gateways and SmartCenter
Servers
Exercises
-
Installing VPN-1 NGX in a stand-alone environment
-
Launching SmartDashboard
-
Defining basic objects
-
Configuring anti-spoofing measures
-
Defining basic rules
-
Creating objects using object cloning
-
Using Database Revision Control
-
Blocking intruder connections
-
Setting up a Suspicious Activity Rule in SmartView
Monitor
-
Checking status in SmartView Monitor
-
Configuring SmartDefense
-
Configuring Hide NAT
-
Configuring Static NAT
-
Encryption math and mechanics
-
Defining user templates
-
Defining users
-
Configuring User Authentication
-
Configuring Client Authentication
-
Configuring LDAP authentication with SmartDirectory
-
Backing up and restoring a Security Gateway and
SmartCenter Server
|
|
