Course : CCSA, Check Point Certified Security Administrator R80: Certification Prep

CCSA, Check Point Certified Security Administrator R80: Certification Prep

Download in PDF format Share this course by email 2


This training will help you acquire all of the techniques and methodologies needed to take the exam for CCSA R80 certification. You’ll learn how to set up a security policy, network address translation (NAT), or the Intrusion Prevention System (IPS) module.


Inter
In-house
Custom

Practical course in person or remote class

Ref. CPQ
Price : 3280 € E.T.
  4d - 28h00




This training will help you acquire all of the techniques and methodologies needed to take the exam for CCSA R80 certification. You’ll learn how to set up a security policy, network address translation (NAT), or the Intrusion Prevention System (IPS) module.

Teaching objectives
At the end of the training, the participant will be able to:
  • Installing and configuring the product Check Point R80
  • Implementing network address translation (NAT) and VPNs
  • Deploying a security policy and monitoring traffic
  • Preparing for the official exam that leads to CCSA certification

Intended audience
System/network/security engineers, technicians, and administrators.

Prerequisites
Good knowledge of TCP/IP. Basic knowledge of computer security.

Course schedule

Introduction

  • Check Point products.
  • What's new in the R80 version.

Operation and installation

  • Architecture in distributed mode and standalone mode.
  • The management server. The SIC protocol.
  • Backup and restore commands.
  • Overview of the Gaia system.
Hands-on work
Installing Check Point R80.

Setting up a security policy

  • Getting started with SmartConsole.
  • Starting and using SmartDashboard R80.
  • Security policy. Rule management.
Hands-on work
Installing SmartConsole. Creating objects. Creating a security policy. Activating anti-spoofing.

Address translation (NAT)

  • NAT rules with IPv4 and IPv6.
  • Static NAT (One-to-One NAT) and dynamic NAT (Many-to-One NAT)/PAT.
  • The ARP issue and routing.
Hands-on work
Setting up automatic one-to-one NAT, Hide, and manual transaction rules.

Monitoring and log management

  • The log management policy.
  • Tracking connections with SmartView Tracker.
  • The SmartView Monitor, features, and alert thresholds.
Hands-on work
Activating monitoring, using the Suspicious Activity Monitoring Protocol, viewing traffic, monitoring the status of the security policy.

R80 client identification

  • Identity Awareness. Application Control.
  • Authentication types.
Hands-on work
Setting up an Identity Awareness.

Site-to-site VPN and roaming VPN

  • VPN architecture. Basics of encryption.
  • Introduction to IKE and IPSec.
  • The certification authority (CA). Domain-Based VPN.
  • SecureClient and the SSL Network Extender.
Hands-on work
Setting up an IPSec site-to-site tunnel using a preshared key and certificate. Configuring remote access with VPN IPSec and VPN SSL.

The IPS module

  • Overview of IPS.
  • Web Intelligence. Application Intelligence.
  • IPS and IDS security profiles.
Hands-on work
Example of protecting against vulnerabilities with the IPS module.


Certification
To take the certification exam, you’ll need to register on the Check Point website. You can then take the exam directly online or at an approved centre.

Customer reviews
3,8 / 5
Customer reviews are based on end-of-course evaluations. The score is calculated from all evaluations within the past year. Only reviews with a textual comment are displayed.


Dates and locations
Select your location or opt for the remote class then choose your date.
Remote class