VPN-1/FireWall-1 NGX: Security Administration 1

Course Overview

Check Point Security Administrator NGX I is an introductory course for Check Point's flagship product, VPN-1/FireWall-1 NGX.

This comprehensive two-day course is intended to provide an understanding of basic concepts and skills necessary to install and configure VPN-1/FireWall-1 NGX and provides hands-on training in the management of a VPN-1 / FireWall-1 NGX installation.

During the course delegates will gain hands-on experience as they install, design and implement various corporate security policies for Firewall-1.

Audience

This course is designed for those people who will be responsible for the installation, implementation or maintenance of a FireWall-1/VPN-1 NGX protected site, including systems administrators, security managers, and network engineers who manage VPN-1/FireWall-1 NGX gateway deployments.

Skills Gained

Delegates attending this course will be able to:

• Manage network security with VPN-1 NGX.
• Create rules and modify a Security Policys properties.
• Use Private IP-Address allocation and unregistered internal addressing schemes, to overcome IP addressing limitations.
• Protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense.
• Distribute content security to Security Gateways, screen URLs and block suspicious Web data, and provide auditing capabilities and detailed reports.
• Use monitoring tools to track, monitor, and account for all connections logged by Check Point components.
• Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway.
• Verify the identity of users logging in to NGX, using NGX authentication schemes.
• Implement LDAP and integrate it with NGX SmartCentre Server.
• Configure VPNs using IKE encryption and Check Points simplified VPN setup.
• Back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCentre Servers.

Examinations

This course meets the requirements for the Check Point Security Administrator (CCSA) NGX Certification.

A separate examination (not part of the course) is available for those delegates who wish to have a formal qualification.

This course meets all of the pre-requisites for the Check Point Security Administration NGX II course which covers those topics required by System Administrators who will be setting up site-to-site VPN's or other more advanced configurations.

Prerequisites

Delegates should be able to use basic Internet tools, i.e. Web browsers, FTP and Telnet. They should have a system level knowledge of Microsoft NT operating system and should be able to manipulate files and directories and manage processes. Knowledge of TCP/IP is also necessary.

Course Outline

• VPN-1 NGX Overview.
• The Security Policy
• Network Address Translation
• SmartDefense
• Content Security
• Monitoring Traffic and Connections.
• Authentication
• LDAP User Management with SmartDirectory.
• Configuring VPNs.
• Disaster Recovery - Backups and Updates.

VPN-1/FireWall-1 NGX: Security Administration 1 / 156-215