Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Check Point Firewall CCSA R80.40 Training Part1/2

Name: Check Point Firewall CCSA R80.40 Training Part1/2
Rating: 4.5 (727 reviews)

Learn CheckPoint Firewall CCSA R80.40 with Step by Step Lab Workbook

Created byAhmad Ali

Last updated 8/2026

English

English [Auto],Spanish [Auto],

What you'll learn

Configure and Manage CheckPoint Firewall
Understand Checkpoint Firewalls Deployment Methods
How to setup a Lab Environment
Understand how to deploy Checkpoint Firewalls in EVE NG
Understand Security Gateway Firewalls NAT configuration
Understand User ID Integration
Configure Captive Portal to authenticate users
How to Add Evaluation License in SG.
Introduction to Command Line Interface CLI.
Install and Configure Active Directory (AD) for IA.
Introduction to Backup and Restore in CheckPoint.

Course content

12 sections • 80 lectures • 15h 38m total length

Before Starting This Course1:22
Common Network Security Terms.8:16
Learn how assets—data, intellectual property, tangible property, and hardware—face vulnerabilities and exploits, and how threats and risk drive the need for countermeasures in ongoing security protection.
Introduction to Firewall Technologies.29:19
Explore firewall technologies and types—from packet-filtering to next-generation firewalls—covering stateful and stateless filtering, proxies, application control, deep packet inspection, cloud and UTM solutions.
Introduction to Web Application Firewall.9:34
Learn how a web application firewall protects web and mobile apps from injection attacks and cross-site scripting, beyond next-generation firewalls.
Introduction to Next-Generation Firewall.11:44
Explore how the next-generation firewall adds application ID, user ID, and content ID for application-level inspection and intrusion prevention. Enable user/group policies and content scanning to enforce security.
Introduction to Check Point Software Company.7:33
Explore Check Point's next generation firewall, the Chitwan Security Gateway, delivering network, cloud, and data security with features like application control, integrated management, and logging.
Introduction to Check Point CCSA R80 Certificate.5:30
Explore the Check Point CCSA R80 certificate, covering installation of security gateways, distributed and standalone deployment, and configuring rules and policy. Also learn to manage administrators, permissions, and monitor activity.
Introduction to Check Point Terminologies.18:07
Explore Check Point terminology: three-tier architecture with a security gateway, security management server, and smart console. Learn deployment options like distributed and stand-alone, plus routed or bridge modes and saic-based policy.

Install Check Point Firewall on VMware Workstation.23:37
Install Check Point firewall on vmware workstation by downloading Gaia, creating a multi-interface VM (management, internet, LAN) with proper IP settings, and completing the first-time configuration wizard.
Download and Install Smart Console (GUI Client).9:18
Download and install smart console (gui client) from the dashboard or checkpoint website, then connect to the firewall and configure blades from the centralized, graphical interface.
Upload and Install Check Point Firewall in EVE NG.21:53
Demonstrates uploading the checkpoint firewall ISO to Eve Energy, creating a shared folder, copying and renaming the image, and performing the Gaia installation with the first-time configuration.
Upload readymade Check Point Firewall Image to EVE NG.7:01
Upload the ready-made Check Point firewall image to eve-ng, drag it into the khemu folder, apply the fixed permission, and configure eth0 with your management subnet for first-time configuration.

Introduction and Theory of Check Point Gaia OS.12:13
Gaia unites Nokia IBS/IPS and Secure Platform into a linux-based operating system. It separates system settings (web UI) from security settings (smart console).
Check Point Firewall Gaia Portal Walkthrough.19:48
Log in to the Gaia portal via HTTPS to configure network, system settings, and blades. Use the search tool, navigation tree, and basic versus advanced modes for efficient management.
Check Point Firewall Tour of Smart Console GUI Client.17:52
Explore smart console GUI client for Windows to manage security gateway and security management server, configure access control, threat prevention, and logs through an integrated policy and monitoring workflow.
Introduction to Check Point Three Tier Architecture.11:03
Explore the architecture of checkpoint: security gateway, security management software, and smart console, and learn how policies are created in SMS on Gaia and pushed to gateways via SAIC.
Introduction to Check Point Deployment Options.13:04
Explore various Check Point deployment options, including distributed deployment, stand-alone deployment, routing, and bridge mode, plus clusterXL and management high availability for secure, scalable networks.

Standalone Deployment Part-1 Create Topology.19:55
Demonstrate a standalone deployment topology for a Check Point firewall, detailing the dmz, lan, and management networks, and concrete interface IP schemes.
Standalone Deployment Part-2 First Time Wizard.11:28
Perform the first time configuration for a standalone deployment by accessing the management IP, running the wizard, and setting IP, DNS, and time zone before using the Gaia portal.
Standalone Deployment Part-3 Network Interfaces.4:15
Configure and enable four network interfaces—management, LAN, WAN, and DMZ—by assigning IPv4 addresses and verifying connectivity with show interfaces commands in the topology.
Standalone Deployment Part-4 Static Default Route.3:05
Configure a static default route by updating the gateway to 172.29.129.254 in the Gaia portal, then verify the route via CLI and ensure traffic routes to the internet.
Standalone Deployment Part-5 Configure Hosts.3:36
Configure hosts in a standalone deployment by assigning IPs to servers and clients in the topology, including DMZ, and set gateway, DNS, and startup config in Docker.
Standalone Deployment Part-6 Smart Console.6:55
Download and install smart console from Gaia Portal or Chitwan site. Log in, verify fingerprints, and manage blades, NAD, and access policies from smart console and Gaia Portal.
Standalone Deployment Part-7 Security Policy.6:35
Configure a security policy in standalone deployment to let LAN and DMZ access the internet, publish and install the rule, and monitor logs for traffic.
Standalone Deployment Part-8 NAT Policy.4:56
Configure NAT policy in standalone deployment by creating LAN and DMZ network objects (192.168.1.0/24 and 192.168.2.0/24), enable hide NAT, and publish and install the policy.
Standalone Deployment Part-9 Verification.4:23
perform testing and verification of the standalone deployment, validating topology, interfaces, hosts, and relevant policies; verify logs and internet access to google and facebook.

Distributed Deployment Part-1 Create Topology.19:37
Configure a distributed deployment topology with a security gateway, a security management server, and a smart console across a three-tier LAN, DMZ, and management network, and follow the ip schema.
Distributed Deployment Part-2 SG Configuration.9:06
Configure a security gateway in a distributed deployment, guiding first-time setup, management IP assignment, and activation key entry, with security gateway only installation and browser-based access.
Distributed Deployment Part-3 SMS Configuration.8:18
Configure security management in a distributed deployment by changing the sms IP, running the first-time configuration wizard, and accessing the gateway and sms via the smart console.
Distributed Deployment Part-4 Network Interface SG.4:50
Implement a distributed deployment by configuring the security gateway’s four interfaces: lan, dmz, internet, and management. Assign static IPs, set the correct gateway, and validate connectivity with ping.
Distributed Deployment Part-5 Smart Console GUI.4:27
Configure distributed deployments with the smart console for Check Point firewall, install the smart console on Windows, access security management, and configure blades, ACLs, and policies.
Distributed Deployment Part-6 Add Security Gateway.7:26
Add security gateway to HMS in a distributed deployment, configure via smart console, establish trusted communication, and push the policy from the SMS to the gateway.
Distributed Deployment Part-7 Security Policy.3:25
In distributed deployment part-7, configure security policy to allow LAN and DMZ traffic to the internet, create net objects, enable logs, and publish to the gateway.
Distributed Deployment Part-8 Configure Hosts.6:12
Configure hosts on LAN and BMC by assigning management IPs—1.10 and 1.20 for LAN dockers, 2.10 and 2.20 for DMs—set DNS and gateways, then enable the firewall.
Distributed Deployment Part-9 Verification.5:48
Test and verify distributed deployment in a Check Point firewall lab by validating PCIe one, DMZ, and internet connectivity, gateway reachability, DNS access, and policy logs.

VLAN Deployment Part-1 Create Lab Topology.14:01
Configure three vlans 10 20 30 in a lab topology with a security gateway and switches. Allocate subnets 192.168.10.0/24, 192.168.20.0/24, 192.168.30.0/24 and verify traffic via smart console.
VLAN Deployment Part-2 First Time Wizard.8:04
Configure the first time setup for a standalone security gateway using the first time configuration wizard, set management IP, DNS, time zone, admin access, and security management.
VLAN Deployment Part-3 Network Interfaces.4:50
Configure and enable interfaces in Gaia portal, create three vlan interfaces (10, 20, 30) with 192.168.1.1/24, 192.168.2.1/24, 192.168.3.1/24, and leave the physical interface without an IP.
VLAN Deployment Part-4 Static Default Route.1:57
Configure a static default route in the network management portal, set the gateway to 172.29.129.254, enable pings, save, and verify that traffic is routed to site B.
VLAN Deployment Part-5 Configure the Hosts.3:23
Configure three hosts for VLAN deployment across subnets 10, 20, and 30, assign IPs and gateways, and save configurations. Verify connectivity with ifconfig and route on each host.
VLAN Deployment Part-6 Switch Configuration.2:27
Configure the switch for vlan deployment by creating three vlans, assigning interfaces 0/1, 0/2, and 0/3 to vlans 10, 20, and 30, and enabling trunking; verify with show commands.
VLAN Deployment Part-7 SmartConsole GUI.3:58
Download and install the SmartConsole, log in to the security gateway and management server, and configure access rules, NAD rules, and security policies via the SmartConsole GUI.
VLAN Deployment Part-8 Security Policy.2:51
Configure a security policy in vlan deployment part 8 to allow traffic by creating an access policy, enabling logs, and installing it to the security gateway, then ping to verify.
VLAN Deployment Part-9 The NAT Policy.4:09
configure the nat policy by creating three network objects for vlan 10, 20, and 30 with their subnets, publish and install the policy to enable internet access.
VLAN Deployment Part-10 Verification.6:53
Perform testing and verification in VLAN deployment part-10, inspect gateway logs, validate traffic, and confirm policy and net rules while accessing sites like Facebook and Wikipedia.

Check Point Bridge Mode Theory and Lab.30:37
Explore bridge mode for checkpoint firewall, configuring two interfaces as a transparent layer 2 bridge within the same subnet, with lab setup, IP planning, and policy deployment.
Introduction to Bond Theory in Check Point.15:48
Explore bond interfaces on Check Point devices, where multiple physical interfaces form a single virtual bond with a shared IP, enabling link aggregation via LCP and dynamic load balancing.

How to Request Evaluation11:30
Learn to request a one-month evaluation license for Check Point security management and gateway. Create a user center account, enter the management IP, and download the license file.
How to Add Evaluation License in SG.4:11
Request and import an extended evaluation license in SG using smart console, smart upgrade, and licenses and contracts, then verify the license status in the portal.
How to Configure Network Messages and Banners.16:15
Configure banner messages and the message of the day on Gaia Portal and Clia, understanding before login versus after login, default states, and how to enable or disable them.

Introduction to Command Line Interface CLI.20:48
Learn how the command line interface (cli) provides device control via console or smart console, alongside graphical access, and how to save configurations and use glitch shell and expert mode.
Command Line Interface Main and Other Operations.17:43
Learn the Check Point firewall command line interface basics, including four core operations—set, show, delete, and edit—plus saving, rebooting, and navigating command history and tab-completion for efficient management.
Command Line Interface Keystroke and Commands.14:37
Learn command line interface keystrokes and feature commands, including ctrl navigation, word deletion, line movement, and using show command feature to access ARP, BGP, and dynamic URL options.
Command Line Interface CLI Clish More Commands.10:12
Learn the Check Point firewall clish command line interface by using show commands and feature keywords to locate backup, dns, clock, interface, and routing commands with status and logs.
Command Line Interface CLI More Advance Commands.6:14
Explore advanced cli commands for backup, snapshot, user creation, export, system shutdown, restart, rollback, and restoring local backups, plus configuring date/time, dhcp server, dns, interface ip, hostname, and timeouts.
Configuration Lock in Command Line Interface CLI.9:07
Acquire the configuration lock to gain read/write access to the configuration database via Gaia portal or CLI; use log database and unlock database commands to switch access.
Command Line Interface CLI Expert Mode and Commands.11:12
Explore expert mode in the command line to move from the restricted shell to a linux-based environment and run advanced firewall and system commands.

Introduction to Network Address Translation NAT.25:10
Explore how network address translation lets private ip addresses share a single public ip via source nat and destination nat, with static and automatic nat rules.
Type of NAT in Check Point Firewall Security Gateway.27:49
Explore automatic NAT versus manual NAT in the Check Point firewall, including hide net and static net configurations with original and translated sources, destinations, and services.
Introduction to Network Address Translation Topology.5:54
Describe the net lab topology with a dmz and lan, featuring live servers, an ftp server, and docker-based servers, plus a security gateway and smart console for distributed deployment.
Configure and Verify Automatic Hide NAT in Firewall.14:20
Configure and verify automatic hide NAT to translate multiple internal addresses to a single external IP, with automatic rules and security policy, then test connectivity and review logs.
Configure and Verify Automatic Static NAT in Firewall.14:30
Configure automatic static NAT to publish a DMZ server using a public IP, create NAT rules and objects, publish policies, and verify bi-directional reachability.
Configure and Verify Manual Hide NAT in Firewall.21:34
Configure and verify manual hide NAT on a firewall by creating LAN and host objects, translating the LAN to a single IP, enabling manual proxy ARP, and deploying the policy.
Configure and Verify Manual Static NAT in Firewall.15:41
Configure manual static NAT in the firewall by creating a DMZ server object and a public IP object. Set a bi-directional translation to the DMZ server and enable proxy ARP.
Introduction of Hairpin NAT in Security Gateway.8:43
Learn how hairpin NAT enables internal users to reach internal DMZ servers via public IPs through a security gateway, with the top NAT rule applied first.
Configure and Verify Hairpin NAT in Firewall.20:06
Configure and verify hairpin NAT in the firewall by routing a public IP through the DMZ to DMZ server 2, creating DMZ objects and security policies, and testing with logs.
Introduction, Configure and Verify No-NAT in Firewall.22:42
Configure a no-net rule to prevent translation between LAN and DMZ when using private ranges, preserving original source and destination and reducing overhead.

Requirements

Basic IP and security knowledge is nice to have.
Students need to understand basic networking.
Students needs to understand Networking Fundamentals.
General knowledge of TCP/IP
Working knowledge of Windows and/or UNIX
Working knowledge of networking technology

Description

Become a skilled Check Point Security Administrator by mastering the installation, configuration, management, and troubleshooting of Check Point Security Gateways through practical, hands-on labs.

This comprehensive course is designed for IT administrators, network engineers, cybersecurity professionals, and anyone preparing for the Check Point Certified Security Administrator (CCSA) certification. Starting with the fundamentals, you will progressively build the knowledge and practical skills required to deploy and manage enterprise Check Point security environments.

Throughout the course, you will learn how to install, configure, secure, monitor, and troubleshoot Check Point Security Gateway and Security Management Server using real-world enterprise scenarios and laboratory demonstrations.

What You'll Learn

Understand Check Point architecture and core security concepts
Install and configure Check Point Security Gateway
Deploy Check Point Security Management Server
Build a complete Check Point lab using EVE-NG
Configure Security Policies and Access Control Rules
Create and manage Network Objects, Hosts, Networks, and Services
Configure NAT Policies
Manage Users, Groups, and Administrator Accounts
Configure Role-Based Administration and Permission Profiles
Integrate Check Point with enterprise environments
Configure Site-to-Site IPsec VPNs
Configure High Availability (ClusterXL) and Load Sharing
Monitor security events and system health
Configure Threat Prevention policies
Understand Application Control and URL Filtering
Generate logs, reports, and security audits
Perform system backup and restore
Troubleshoot common firewall and VPN issues
Apply security best practices for enterprise deployments

This Course Includes

Complete Check Point installation from scratch
Step-by-step configuration demonstrations
Hands-on enterprise lab exercises
Real-world deployment scenarios
Firewall policy configuration
NAT implementation
User and administrator management
VPN configuration
High Availability (HA) deployment
Threat Prevention configuration
Monitoring and logging
Backup and recovery
Troubleshooting labs
Downloadable lab resources and configuration examples

Course Curriculum

Introduction to Check Point Technology
Building the Lab Environment using EVE-NG
Check Point Architecture
Installing Security Gateway and Management Server
SmartConsole Overview
Objects Management
Security Policies
NAT Configuration
Administrator Accounts
Users and Groups
Identity Awareness
Site-to-Site VPN
ClusterXL High Availability
Load Sharing
Monitoring and Logging
Threat Prevention
System Backup and Restore
Troubleshooting Enterprise Deployments

Why Learn Check Point?

Check Point is one of the world's leading enterprise cybersecurity platforms, trusted by governments, financial institutions, healthcare organizations, service providers, and global enterprises to protect their networks, cloud environments, endpoints, and users.

Organizations rely on Check Point solutions to secure:

Enterprise Firewalls
Network Security
Cloud Security
Threat Prevention
Endpoint Security
Remote Access VPN
Data Security
IoT Security
Mobile Security
Advanced Malware Protection
Security Management and Compliance

Learning Check Point security technologies will help you develop highly sought-after enterprise firewall and network security skills.

Who This Course Is For

Network Engineers
Security Engineers
Firewall Administrators
System Administrators
SOC Analysts
IT Support Professionals
Cybersecurity Professionals
Check Point CCSA Certification Candidates
Anyone interested in enterprise firewall administration

Prerequisites

To get the most from this course, you should have:

Basic knowledge of computer networking
Basic understanding of TCP/IP and IP addressing
Familiarity with switching and routing concepts
Basic firewall knowledge is helpful but not mandatory

No prior Check Point experience is required, as every concept is explained from the ground up.

By the End of This Course

By completing this course, you will be able to confidently deploy, configure, administer, monitor, and troubleshoot Check Point Security Gateway and Security Management Server in enterprise environments. You will understand how to build secure firewall policies, implement VPNs, manage administrators and users, configure High Availability, monitor threats, and maintain secure production networks.

Whether your goal is to pass the Check Point Certified Security Administrator (CCSA) certification or to advance your career as a network security professional, this course provides the practical knowledge and hands-on experience needed to succeed.

Who this course is for:

This course is for students trying to obtain the CCSA
This course is for students trying to learn the Check Point Firewall.
Any Network or Security Engineer want to learn or polish their Skills.
System Administrators and Information Security Analysts
Network Engineers and Security Engineers

Check Point Firewall CCSA R80.40 Training Part1/2

What you'll learn

Explore related topics

Course content

Introduction to the Technology8 lectures • 1hr 31min

Check Point Installation4 lectures • 1hr 2min

About Check Point5 lectures • 1hr 14min

Standalone Deployment9 lectures • 1hr 5min

Distributed Deployment9 lectures • 1hr 9min

VLAN Deployment10 lectures • 53min

Bridge Mode2 lectures • 46min

License.3 lectures • 32min

Command Line Interface CLI7 lectures • 1hr 30min

Network Address Translation10 lectures • 2hr 56min

Requirements

Description

Who this course is for: