VPN-1/FireWall-1 NGX: Security Administration 2

Course Overview

Check Point Security Administrator NGX II is an advanced course for Check Points flagship product, VPN-1/FireWall-1 NGX.

This three-day course is intended to provide an understanding of upgrading and advanced configuration of VPN-1 NGX, installing and managing NGX (on both internal and external networks), gaining the maximum security from Security Gateways, and resolving Security Gateway performance issues.

Audience

This course is designed for those people who require an in-depth knowledge of NGX that goes beyond the basic installation, setup, and methodologies.

Skills Gained

Delegates attending this course will be able to:

• Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform.
• Use NGX tools to upgrade to NGX, from VPN-1/Firwall-1 NG or VPN-1/Firwall-1 NG with Application Intelligence.
• Use advanced NGX features to minimize the information-security management burden, when working with objects and rules.
• Determine whether Database Revision Control or Policy Package Management is the appropriate solution, given a variety of scenarios.
• Identify the features and limitations of Management HA.
• Use SmartView Tracker to block connections, given evidence of a potential intrusion or attack.
• Use SmartView Monitor to display information about an NGX deployment, given a variety of scenarios.
• Use fw monitor to capture and view packets.
• Use fw ctl pstat to verify the health of the NGX Security Gateway and SmartCenter Server.
• Review VPN-1 debugging and troubleshooting commands, including cpinfo.
• Given a variety of Check Point QoS configurations, determine how bandwidth will be allocated.
• Identify situations where Low Latency Queuing and Differentiated Services are an appropriate part of a QoS solution.
• Identify different modes in ClusterXL configuration, and configure ClusterXL VPN.
• Configure a Policy Server and SecureClient Rule Base.
• Download desktop rules from a Policy Server with SecureClient.

Prerequisites

Delegates should have previously attended the Check Point Security Administration NGX-I course.Delegates should be able to use basic Internet tools, i.e. Web browsers, FTP and Telnet. They should have a system level knowledge of Microsoft NT operating system and should be able to manipulate files and directories and manage processes. Knowledge of TCP/IP is also necessary.

Course Outline

• Installing VPN-1 NGX and Upgrading.
• Advanced NGX Management Concepts.
• Enabling Voice Over IP Traffic
• Administrative Utilities.
• Check Point QoS.
• ClusterXL.
• Advanced VPN.