CCSA R81

CHECK POINT CERTIFIED SECURITY ADMINISTRATOR (CCSA)- R81

The Check Point CCSA training and certification is mainly targeted to those candidates who want to build their career in Security domain. The Check Point Certified Security Administrator (CCSA) R81 exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of Check Point CCSA R81

Certification Exam #156-215.81

Exam Price $250 (USD)
Duration 90 mins
Number of Questions 90
Passing Score 70%

Prerequisites:

Working knowledge of Windows, UNIX, networking technology, the Internet and TCP/IP

AUDIENCE

Working knowledge of Windows, UNIX, networking technology, the Internet and TCP/IP

  • Technical professionals who support, install deploy or administer Check Point products
  • Network and security Engineers

COURSE TOPICS:

Module 1: Overview of Firewall Technologies

  • What is a Firewall
  • Firewall Technologies
  • Legacy or Traditional Firewalls
  • Next Generation Firewalls

Module 2: Application Layer Firewalls

  • Web Application Firewalls (WAFs)
  • Next Generation Firewalls Vs WAF

Module 3: Introduction to Checkpoint Technology

  • Security Management Architecture – SMART
  • Checkpoint Core Systems – 3 Tier Architecture
  • Secure Internal Communication – SIC
  • Internal Certificate Authority – ICA
  • Initializing trust

Module 4: Checkpoint Security Solutions and Licensing

  • Software Blade Architecture
  • Security Gateway Software Blades
  • Management Server Software Blades
  • Licensing overview

Module 5: Checkpoint Firewall Deployment

  • Deployment Platforms
  • Checkpoint Gaia OS
  • Standalone Deployment
  • Distributed Deployment

Module 6: Gaia OS Installation and Configuration

  • Preparing for LAB
  • Gaia OS Installation
  • Initial Configuration – WebUI
  • Downloading and Installing Smart Console
  • SIC Establishment

Module 7: Security Policy Management

  • Security Policy Basics
  • IP Antispoofing
  • Implicit and Explicit Security rules
  • Installing Security Policy

Module 8: Network Address Translation - NAT

  • Introduction to NAT
  • Types of NAT – Static and Hide NAT
  • Automatic Vs Manual NAT
  • NAT – Global Properties

Module 9: Policy Layers

  • Policy Layers
  • Traffic Inspection
  • Network and Application Control Layers

Module 10: Traffic Visibility

  • Analyzing Logs
  • Configuring Log Server
  • Monitoring Traffic and Connections
  • Suspicious Activity Rules (SAM)

Module 11: HTTPS Inspection

  • Understanding SSL handshake
  • Digital Certificate
  • HTTPS Inspection – outbound and inbound

Module 12: Application Control and URL Filtering

  • Enabling Application and URL Filtering on a SG
  • Creating Application and URL Filtering Rules
  • Monitoring Application and URL Filtering

Module 13: Managing User Access

  • Identity Awareness
  • Methods for Acquiring Identity
  • Light Weight Directory Access Protocol – LDAP

Module 14: Checkpoint Threat Prevention Solution

  • Sandblast – Threat Emulation
  • Sandblast - Threat extraction
  • Infinity Threat Prevention

Module 15: Troubleshooting

  • Packet Flow
  • TCPDUMP
  • FW Monitor
  • CPVIEW
  • CPINFO etc..