Check Point Security Administrator R75

Chapter 1: Introduction to Check Point Technology

· Describe Check Point’s unified approach to network management and the key elements of this architecture

· Design a distributed environment using the network detailed in the course topology

· Install the Security Gateway version R75 in a distributedenvironment using the network detailed in the course topology

Chapter 2: Deployment Platforms

· Given network specifications, perform a backup and restore the current Gateway installation from the command line

· Identify critical files needed to purge or backup, import and export users and groups and add or delete administrators

· from the command line

· Deploy Gateways using sysconfig and cpconfig from the Gateway command line

Chapter 3: Introduction to the Security Policy

· Given the network topology, create and configure network, host and gateway objects

· Verify SIC establishment between the Security ManagementnServer and the Gateway using SmartDashboard

· Create a basic Rule Base in SmartDashboard that includes permissions for administrative users, external services, and LAN outbound use

· Configure NAT rules on Web and Gateway servers

· Evaluate existing policies and optimize the rules based oncurrent corporate requirements

· Maintain the Security Management Server with scheduledbackups and policy versions to ensure seamless upgradeswith minimal downtime

Chapter 4: Monitoring Traffic and Connections

· Use Queries in SmartView Tracker to monitor IPS and common network traffic and troubleshoot events using

· packet data

· Using packet data on a given corporate network, generate reports, troubleshoot system and security issues, and

· ensure network functionality

· Using SmartView Monitor, configure alerts and traffic counters, view a Gateway’s status, monitor suspicious activity rules, analyze tunnel activity and monitor remote user access based on corporate requirements

Chapter 5: Using SmartUpdate

· Monitor remote Gateways using SmartUpdate to evaluate the need for upgrades, new installations, and license

· modifications

· Use SmartUpdate to apply upgrade packages to single or multiple VPN-1 Gateways

· Upgrade and attach product licenses using SmartUpdate

Chapter 6: User Management and Authentication

· Centrally manage users to ensure only authenticated users securely access the corporate network either locally or remotely

· Manage users to access the corporate LAN by using external databases

Chapter 7: Identity Awareness

· Use Identity Awareness to provide granular level access to network resources

· Acquire user information used by the Security Gateway to control access

· Define Access Roles for use in an Identity Awareness rule