VPN-1/FireWall-1 NGX: Security Administration on Nokia IP Security Platforms

Course Overview

This is a four-day, instructor-led course, which covers configuring and implementing Check Point NGX on Nokia IP Security Platforms. The course provides the information and experience necessary to deploy and manage Internet firewalls on the Nokia family of security products. Hands-on exercises enable students to demonstrate a thorough knowledge of the platform operations, effectively configure security policies,and successfully deploy Internet security solutions.

Audience

This course is designed for those people who will be responsible for the installation, implementation or maintenance of a Checkpoint NGX - protected site using a Nokia Security Appliance, including Systems administrators, security managers and network engineers who manage Checkpoint NGX gateway deployments, as well as those who seek Nokia Security Administrator (NSA) Foundation (NO0-002) and/or CCSA NGX, #156-215.1 certifications.

Skills Gained

Delegates attending this course will be able to:

• Define Nokia Security Platform features and routing terminology
• Identify the fundamental design considerations for the Nokia IP Security Platform
• Deploy VPN-1 NGX modules and components
• Define a security policy using the VPN-1 NGX Security Dashboard, incorporating the SmartMap
• Implement network address translation (NAT)
• SET up user authentication in a VPN-1 environment
• Enable high availability using Virtual Router Redundancy Protocol (VRRP)
• Use troubleshooting tools and administrative procedures

Course Outline

Identify overall features and benefits of the NSP line.

• Review the Nokia IPSO design and file structure.
• Describe the tools available to monitor the status of an NSP.
• Configure SSH and SSL.
• Describe the architecture of VPN-1 NGX.
• Create and modify an NGX Security Policy. Configure and use SmartView Tracker and SmartView Monitor.
• Configure and use SmartDefense (NAT)
• Explain encryption for VPNs, comparing and contrasting common encryption methods.
• Configure User, Client, and Session Authentication.
• Implement LDAP and integrate it with an NGX SmartCenter Server.
• Select the appropriate backup strategy to meet disasterrecovery requirements.
• Use NGX upgrade tools and SmartUpdate to upgrade to NGX.
• Maintain an NSP, installing, upgrading, and backing up Nokia components.
• Determine the licensing process for VPN-1 NGX.
• Configure VRRP and SVRRP.