Check Point Certified Security Expert (CCSE)

Module 1: Management High Availability

• Explain the purpose of Management High Availability
• Identify the essential elements of Management High Availability

Module 2: Advanced Policy Management

• Identify ways to enhance the Security Policy with more object types
• Create dynamic objects to make policy updatable from the Gateway
• Manually define NAT rules
• Configure Security Management behind NAT

Module 3: Site-to-Site VPN

• Discuss site-to-site VPN basics, deployment, and communities
• Describe how to analyze and interpret VPN tunnel traffic
• Articulate how pre-shared keys and certificates can be configured to authenticate with third-party and externally managed VPN Gateways
• Explain Link Selection and ISP Redundancy options
• Explain tunnel management features

Module 4: Advanced Security Monitoring

• Describe the SmartEvent and Compliance Blade solutions, including their purpose and use

Module 5: Upgrades

• Identify supported upgrade options

Module 6: Advanced Upgrades and Migrations

• Export/import a Management Database
• Upgrade a Security Management Server by freshly deploying the new release or using a new appliance

Module 7: ElasticXL Cluster

• Describe the ElasticXL Cluster solution, including its purpose and use