Check Point Security Administrator and Expert Boot Camp (CCSA+CCSE)

Module 1: Introduction to Quantum Security

• Identify the primary components of the Check Point Three-Tier Architecture and explain how they work together.

Module 2: Administrator Account Management

• Explain the purpose of SmartConsole administrator accounts
• Identify features for collaboration: session management, concurrent administration, policy installation

Module 3: Object Management

• Explain the purpose of SmartConsole objects
• Provide examples of physical and logical objects

Module 4: Security Policy Management

• Explain the purpose of Security Policies
• Identify the essential elements of a Security Policy.
• Identify features and capabilities that enhance the configuration and management of the Security Policy.

Module 5: Policy Layers

• Demonstrate an understanding of the Check Point policy layer concept.
• Explain how layers affect traffic inspection.

Module 6: Security Operations Monitoring

• Explain the purpose of security operations monitoring
• Tune log server configuration
• Use predefined and custom queries to filter the logging results.
• Monitor the state of Check Point systems.

Module 7: Identity Awareness

• Explain the purpose of the Identity Awareness solution
• Identify the essential elements of Identity Awareness.

Module 8: HTTPS Inspection

• Explain the purpose of HTTPS Inspection solution
• Identify the essential elements of HTTPS Inspection

Module 9: Application Control and URL Filtering

• Explain the purpose of the Application Control and URL Filtering solutions
• Identify the essential elements of Application Control and URL Filtering

Module 10: Threat Prevention Fundamentals

• Explain the purpose of the Threat Prevention solution
• Identify the essential elements of Autonomous Threat Prevention

Module 11: Management High Availability

• Explain the purpose of Management High Availability
• Identify the essential elements of Management High Availability

Module 12: Advanced Policy Management

• Identify ways to enhance the Security Policy with more object types
• Create dynamic objects to make policy updatable from the Gateway
• Manually define NAT rules
• Configure Security Management behind NAT

Module 13: Site-to-Site VPN

• Discuss site-to-site VPN basics, deployment, and communities
• Describe how to analyze and interpret VPN tunnel traffic
• Articulate how pre-shared keys and certificates can be configured to authenticate with third-party and externally managed VPN Gateways
• Explain Link Selection and ISP Redundancy options
• Explain tunnel management features

Module 14: Advanced Security Monitoring

• Describe the SmartEvent and Compliance Blade solutions, including their purpose and use

Module 15: Upgrades

• Identify supported upgrade options

Module 16: Advanced Upgrades and Migrations

• Export/import a Management Database
• Upgrade a Security Management Server by freshly deploying the new release or using a new appliance

Module 17: ElasticXL Cluster

• Describe the ElasticXL Cluster solution, including its purpose and use