Description

This training will allow you to acquire all the techniques and methodologies necessary to take the exam to obtain CCSE R77 certification. You will learn how to implement advanced clustering, high availability and quality of service (QoS) mechanisms.

Who is this training for ?

Technician, administrator and systems/networks/security engineer.

Training objectives

Training program

• Operation, Check Point R77 update
  • - Check Point R77 update.
  • - Update compatibility.
  • - Upgrade tools.
  • - Presentation of Database Revision Control .
  • - Practical work Installation of systems and updating to R77.
• Identity Awareness et Application Control
  • - The limits of a classic firewall by IP and by port.
  • - Access control.
  • - The four Identity Awareness R77 authentication methods.
  • - Check Point 3D Security.
  • - The HTTPS Inspection.
  • - The "AppWiki".
  • - The URL Filtering.
  • - Practical work Implementation of Identity Awarness and Application Control.
• The SecurityCore acceleration module
  • - Presentation of the new SecurityCore acceleration module.
  • - Accelerating connections with SecureXL.
  • - The SecureX module and accelerating sessions.
  • - The case of http.
  • - CoreXL technology.
  • - How SecureXL and CoreXL work simultaneously.
• Le clustering Check Point
  • - The high availability of the Management Server.
  • - The redundancy of the firewalls.
  • - The ClusterXL High Availability (Active/Passive).
  • - The ClusterXL Load Sharing (Active/Active).
  • - VMAC and ARP issues.
  • - The VRRP.
  • - SecureXL vs VRRP comparison.
  • - Practical work Setting up a high availability cluster and Load Sharing.
• VPN and advanced routing
  • - VPN routing.
  • - Route-Based VPN.
  • - Dynamic routing with RIP, OSPF and BGP routing protocols.
  • - The operating modes of Wire Mode.
  • - Directional VPN Route Match.
  • - Link Selection and VPN redundancy.
  • - Traditional/simplified VPN.
  • - The Tunnel Management.
  • - Practical work Implementation of the Route-Based VPN solution.
• Advanced Firewall
  • - Tools: Dbedit and guiDBedit.
  • - System files.
  • - Log management.
  • - Recovering a CPInfo file.
  • - Example of using "InfoView" and "Confwiz".
  • - SIC, ICA and certificates.
  • - Processes Check Point.
  • - Tcpdump.
  • - The fw monitor command.
  • - Practical work Using debug tools.