
A brief history of Evolution of Check Point Blades. Overview of the products.
Firewall in OSI model
Stateful Inspection
Check Point Architecture
Going through the process of Installing Gaia OS in VMware workstation scenario.
Configuring Standalone in First Time Configuration Wizard.
Installing a license into your Check Point appliances/VMs.
Commands that are really useful when you are a Check Point administrator.
Another chunk of important Linux commands.
What is SIC?
SIC statuses
Ports used by SIC
What is NAT?
Quick look into fw ctl chain and how it relates to NAT
Hide NAT (traffic flow)
Static NAT (traffic flow)
Snapshot
Backup and restore
show configuration / save configuration
Migrate (upgrade_export / migrate export)
Exploring Gaia WebUI and its different features.
A general overview of SmartConsole and SIC establishment.
SIC restart without stopping a firewall from production.
Exploring and setting up an access control policy for the firewall module.
We are going to take a look at different layers.
We will be setting up automatic NAT.
How IPSEC VPN works
IPSEC troubleshooting
What is SSL VPN?
We are going to deploy Site-to-Site VPN in our Lab.
What is a Cluster and how Check Point defines it?
ClusterXL High Availability
ClusterXL Load Sharing
Unicast and Multicast modes
Synchronization of connections table between Cluster Members
Delta Sync and Full Sync
We are going through a process of deploying ClusterXL in production.
Important notes about ClusterXL routing
"clusterXL_admin down" and "clusterXL_admin up" commands
Demonstration how a cluster works during failover
What is HTTPS inspection?
What blades are working in pair with HTTPS inspection?
HTTPS inspection flow
We are going to deploy outbound HTTPS inspection in our LAB.
Overview of Sandblast technology (Threat Emulation and Threat Extraction)
Ways to license Sandblast
Showing steps to enable appliance/cloud/hybrid emulation
Transparent upgrade to R80.30 in a HA cluster environment
In this lesson we talk about what types of IPS exist, difference between HIPS and NIPS; In what modes the NIPS works and we also discuss the difference between IPS and WAF.
The following course includes lectures on how Check Point features work and the walk-through of the configuration in the lab/production environment. From the very beginning following step-by-step approach you will be able to grasp advanced concepts and step on the next level.
The course is structured in an easy to follow manner starting from the very basic to advanced topics [CCSE topics included]. The topics that are covered are: Installing Check Point in a lab environment, understanding general principles of Firewalling. Then, we move to the whole Check Point ECOSYSTEM (Everything that has to do with unified management and managing firewall policies) and so much more.
THE COURSE INCLUDES:
Introduction to CheckPoint Technology
Building the Lab
Installing OS / Configuration
Overview of the products
Checkpoint Stateful inspection firewall
Licensing
CheckPoint Eco System
SIC
!Restarting SIC without CPstop/CPstart - Extra!
Backups
NAT
Policy configuration (Access Control) Firewall
Policy configuration (Access Control) APP control/URL filtering
UserCheck
Policy configuration (Threat Prevention)
Hacking and Protecting by IPS
Enforced Suspicious Activity Rules
Logging and Reports
VPN (Virtual Private Network)
IPSec (Overview)
SSL (Overview)
Deploy VPN IPSEC [LAB]
ClusterXL
High Availability / Load Sharing
Deploy ClusterXL [LAB]
CCP Overview
HTTPS Inspection
HTTPs inspection
HTTPs inspection LAB
CCSE Pre-course (Advanced) [This section will be updated incrementally]
Threat Emulation licensing and deployment in the cloud
Transparent Upgrade to R80.30 in a cluster
Bonus: Lab guides included
I have applied the streamlined, step-by-step method to excel as a Check Point professional in less time than you ever thought possible. I'm going to walk you through the main challenges, so you can step on the next level.