Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Check Point Firewall CCSA R80.40 Training Part1/2

Name: Check Point Firewall CCSA R80.40 Training Part1/2
Rating: 4.4 (671 reviews)

Learn CheckPoint Firewall CCSA R80.40 with Step by Step Lab Workbook

Created byAhmad Ali

Last updated 2/2025

English

What you'll learn

Configure and Manage CheckPoint Firewall
Understand Checkpoint Firewalls Deployment Methods
How to setup a Lab Environment
Understand how to deploy Checkpoint Firewalls in EVE NG
Understand Security Gateway Firewalls NAT configuration
Understand User ID Integration
Configure Captive Portal to authenticate users
How to Add Evaluation License in SG.
Introduction to Command Line Interface CLI.
Install and Configure Active Directory (AD) for IA.
Introduction to Backup and Restore in CheckPoint.

Course content

12 sections • 79 lectures • 15h 36m total length

Common Network Security Terms.8:16
Learn how assets—data, intellectual property, tangible property, and hardware—face vulnerabilities and exploits, and how threats and risk drive the need for countermeasures in ongoing security protection.
Introduction to Firewall Technologies.29:19
Introduction to Web Application Firewall.9:34
Learn how a web application firewall protects web and mobile apps from injection attacks and cross-site scripting, beyond next-generation firewalls.
Introduction to Next-Generation Firewall.11:44
Introduction to Check Point Software Company.7:33
Explore Check Point's next generation firewall, the Chitwan Security Gateway, delivering network, cloud, and data security with features like application control, integrated management, and logging.
Introduction to Check Point CCSA R80 Certificate.5:30
Explore the Check Point CCSA R80 certificate, covering installation of security gateways, distributed and standalone deployment, and configuring rules and policy. Also learn to manage administrators, permissions, and monitor activity.
Introduction to Check Point Terminologies.18:07

Install Check Point Firewall on VMware Workstation.23:37
Install Check Point firewall on vmware workstation by downloading Gaia, creating a multi-interface VM (management, internet, LAN) with proper IP settings, and completing the first-time configuration wizard.
Download and Install Smart Console (GUI Client).9:18
Upload and Install Check Point Firewall in EVE NG.21:53
Demonstrates uploading the checkpoint firewall ISO to Eve Energy, creating a shared folder, copying and renaming the image, and performing the Gaia installation with the first-time configuration.
Upload readymade Check Point Firewall Image to EVE NG.7:01

Introduction and Theory of Check Point Gaia OS.12:13
Check Point Firewall Gaia Portal Walkthrough.19:48
Log in to the Gaia portal via HTTPS to configure network, system settings, and blades. Use the search tool, navigation tree, and basic versus advanced modes for efficient management.
Check Point Firewall Tour of Smart Console GUI Client.17:52
Explore smart console GUI client for Windows to manage security gateway and security management server, configure access control, threat prevention, and logs through an integrated policy and monitoring workflow.
Introduction to Check Point Three Tier Architecture.11:03
Introduction to Check Point Deployment Options.13:04

Standalone Deployment Part-1 Create Topology.19:55
Demonstrate a standalone deployment topology for a Check Point firewall, detailing the dmz, lan, and management networks, and concrete interface IP schemes.
Standalone Deployment Part-2 First Time Wizard.11:28
Standalone Deployment Part-3 Network Interfaces.4:15
Configure and enable four network interfaces—management, LAN, WAN, and DMZ—by assigning IPv4 addresses and verifying connectivity with show interfaces commands in the topology.
Standalone Deployment Part-4 Static Default Route.3:05
Standalone Deployment Part-5 Configure Hosts.3:36
Configure hosts in a standalone deployment by assigning IPs to servers and clients in the topology, including DMZ, and set gateway, DNS, and startup config in Docker.
Standalone Deployment Part-6 Smart Console.6:55
Standalone Deployment Part-7 Security Policy.6:35
Standalone Deployment Part-8 NAT Policy.4:56
Configure NAT policy in standalone deployment by creating LAN and DMZ network objects (192.168.1.0/24 and 192.168.2.0/24), enable hide NAT, and publish and install the policy.
Standalone Deployment Part-9 Verification.4:23
perform testing and verification of the standalone deployment, validating topology, interfaces, hosts, and relevant policies; verify logs and internet access to google and facebook.

Distributed Deployment Part-1 Create Topology.19:37
Configure a distributed deployment topology with a security gateway, a security management server, and a smart console across a three-tier LAN, DMZ, and management network, and follow the ip schema.
Distributed Deployment Part-2 SG Configuration.9:06
Configure a security gateway in a distributed deployment, guiding first-time setup, management IP assignment, and activation key entry, with security gateway only installation and browser-based access.
Distributed Deployment Part-3 SMS Configuration.8:18
Configure security management in a distributed deployment by changing the sms IP, running the first-time configuration wizard, and accessing the gateway and sms via the smart console.
Distributed Deployment Part-4 Network Interface SG.4:50
Implement a distributed deployment by configuring the security gateway’s four interfaces: lan, dmz, internet, and management. Assign static IPs, set the correct gateway, and validate connectivity with ping.
Distributed Deployment Part-5 Smart Console GUI.4:27
Configure distributed deployments with the smart console for Check Point firewall, install the smart console on Windows, access security management, and configure blades, ACLs, and policies.
Distributed Deployment Part-6 Add Security Gateway.7:26
Add security gateway to HMS in a distributed deployment, configure via smart console, establish trusted communication, and push the policy from the SMS to the gateway.
Distributed Deployment Part-7 Security Policy.3:25
In distributed deployment part-7, configure security policy to allow LAN and DMZ traffic to the internet, create net objects, enable logs, and publish to the gateway.
Distributed Deployment Part-8 Configure Hosts.6:12
Configure hosts on LAN and BMC by assigning management IPs—1.10 and 1.20 for LAN dockers, 2.10 and 2.20 for DMs—set DNS and gateways, then enable the firewall.
Distributed Deployment Part-9 Verification.5:48
Test and verify distributed deployment in a Check Point firewall lab by validating PCIe one, DMZ, and internet connectivity, gateway reachability, DNS access, and policy logs.

VLAN Deployment Part-1 Create Lab Topology.14:01
VLAN Deployment Part-2 First Time Wizard.8:04
VLAN Deployment Part-3 Network Interfaces.4:50
Configure and enable interfaces in Gaia portal, create three vlan interfaces (10, 20, 30) with 192.168.1.1/24, 192.168.2.1/24, 192.168.3.1/24, and leave the physical interface without an IP.
VLAN Deployment Part-4 Static Default Route.1:57
Configure a static default route in the network management portal, set the gateway to 172.29.129.254, enable pings, save, and verify that traffic is routed to site B.
VLAN Deployment Part-5 Configure the Hosts.3:23
VLAN Deployment Part-6 Switch Configuration.2:27
Configure the switch for vlan deployment by creating three vlans, assigning interfaces 0/1, 0/2, and 0/3 to vlans 10, 20, and 30, and enabling trunking; verify with show commands.
VLAN Deployment Part-7 SmartConsole GUI.3:58
VLAN Deployment Part-8 Security Policy.2:51
Configure a security policy in vlan deployment part 8 to allow traffic by creating an access policy, enabling logs, and installing it to the security gateway, then ping to verify.
VLAN Deployment Part-9 The NAT Policy.4:09
configure the nat policy by creating three network objects for vlan 10, 20, and 30 with their subnets, publish and install the policy to enable internet access.
VLAN Deployment Part-10 Verification.6:53
Perform testing and verification in VLAN deployment part-10, inspect gateway logs, validate traffic, and confirm policy and net rules while accessing sites like Facebook and Wikipedia.

Check Point Bridge Mode Theory and Lab.30:37
Explore bridge mode for checkpoint firewall, configuring two interfaces as a transparent layer 2 bridge within the same subnet, with lab setup, IP planning, and policy deployment.
Introduction to Bond Theory in Check Point.15:48
Explore bond interfaces on Check Point devices, where multiple physical interfaces form a single virtual bond with a shared IP, enabling link aggregation via LCP and dynamic load balancing.

How to Request Evaluation11:30
Learn to request a one-month evaluation license for Check Point security management and gateway. Create a user center account, enter the management IP, and download the license file.
How to Add Evaluation License in SG.4:11
Request and import an extended evaluation license in SG using smart console, smart upgrade, and licenses and contracts, then verify the license status in the portal.
How to Configure Network Messages and Banners.16:15
Configure banner messages and the message of the day on Gaia Portal and Clia, understanding before login versus after login, default states, and how to enable or disable them.

Introduction to Command Line Interface CLI.20:48
Command Line Interface Main and Other Operations.17:43
Learn the Check Point firewall command line interface basics, including four core operations—set, show, delete, and edit—plus saving, rebooting, and navigating command history and tab-completion for efficient management.
Command Line Interface Keystroke and Commands.14:37
Command Line Interface CLI Clish More Commands.10:12
Learn the Check Point firewall clish command line interface by using show commands and feature keywords to locate backup, dns, clock, interface, and routing commands with status and logs.
Command Line Interface CLI More Advance Commands.6:14
Explore advanced cli commands for backup, snapshot, user creation, export, system shutdown, restart, rollback, and restoring local backups, plus configuring date/time, dhcp server, dns, interface ip, hostname, and timeouts.
Configuration Lock in Command Line Interface CLI.9:07
Acquire the configuration lock to gain read/write access to the configuration database via Gaia portal or CLI; use log database and unlock database commands to switch access.
Command Line Interface CLI Expert Mode and Commands.11:12

Introduction to Network Address Translation NAT.25:10
Type of NAT in Check Point Firewall Security Gateway.27:49
Explore automatic NAT versus manual NAT in the Check Point firewall, including hide net and static net configurations with original and translated sources, destinations, and services.
Introduction to Network Address Translation Topology.5:54
Describe the net lab topology with a dmz and lan, featuring live servers, an ftp server, and docker-based servers, plus a security gateway and smart console for distributed deployment.
Configure and Verify Automatic Hide NAT in Firewall.14:20
Configure and Verify Automatic Static NAT in Firewall.14:30
Configure automatic static NAT to publish a DMZ server using a public IP, create NAT rules and objects, publish policies, and verify bi-directional reachability.
Configure and Verify Manual Hide NAT in Firewall.21:34
Configure and Verify Manual Static NAT in Firewall.15:41
Introduction of Hairpin NAT in Security Gateway.8:43
Learn how hairpin NAT enables internal users to reach internal DMZ servers via public IPs through a security gateway, with the top NAT rule applied first.
Configure and Verify Hairpin NAT in Firewall.20:06
Introduction, Configure and Verify No-NAT in Firewall.22:42
Configure a no-net rule to prevent translation between LAN and DMZ when using private ranges, preserving original source and destination and reducing overhead.

Requirements

Basic IP and security knowledge is nice to have.
Students need to understand basic networking.
Students needs to understand Networking Fundamentals.
General knowledge of TCP/IP
Working knowledge of Windows and/or UNIX
Working knowledge of networking technology

Description

Check Point CCSA certification is the very important for IT admins who manage day to day operations of Checkpoint solutions. Here you will get expertise in startup, manage and configure day to day Check Point installations with R80. Course covers how to install R80 security gateway in a distributed environment, configure rules and defines a policy for security, how to work with multiple administrators and how to define permission profiles. After completion of this certification you will be expert in to keep your network secure, you will be expert in evaluating existing security policy, you will be able to manage multiple user access to organization LANs, you will be expert in to monitor any suspicious activities over the internet and you can analyze security attacks better, implement backup for Check Point.

Prerequisites:

You should have basic level knowledge of networking, you should have 6 months to 1-year experience with Check Point products and this is mandatory.

Check Point Primary Products:

Network Security, Software Defined Protection, Public and Private Cloud Security, Zero Trust Remote Access, Data Security, IoT Security, ThreatCloud, ThreatCloud IntelliStore, Virtual Systems, Endpoint Security, Mobile Security, Security Management, Document Security (Capsule Docs product line), Zero-day Protection (SandBlast appliance product line) and Mobile Security (Mobile Threat Prevention product line).

The following course includes lectures on how Check Point features work and the walk-through of the configuration in the lab/production environment. From the very beginning following step-by-step approach you will be able to grasp advanced concepts and step on the next level.

The course is structured in an easy to follow manner starting from the very basic to advanced topics. The topics that are covered are: Installing Check Point in a lab environment, understanding general principles of Firewalling.

THE COURSE INCLUDES:

Introduction to CheckPoint Technology

Building the Lab

Installing OS / Configuration

Overview of the products

Licensing

Backups

NAT

Deployment Options

Command Line Interface

Identity Awareness

Terminologies

Three Tier Architecture

Who this course is for:

This course is for students trying to obtain the CCSA
This course is for students trying to learn the Check Point Firewall.
Any Network or Security Engineer want to learn or polish their Skills.
System Administrators and Information Security Analysts
Network Engineers and Security Engineers

Check Point Firewall CCSA R80.40 Training Part1/2

What you'll learn

Explore related topics

Course content

Introduction to the Technology7 lectures • 1hr 30min

Check Point Installation4 lectures • 1hr 2min

About Check Point5 lectures • 1hr 14min

Standalone Deployment9 lectures • 1hr 5min

Distributed Deployment9 lectures • 1hr 9min

VLAN Deployment10 lectures • 53min

Bridge Mode2 lectures • 46min

License.3 lectures • 32min

Command Line Interface CLI7 lectures • 1hr 30min

Network Address Translation10 lectures • 2hr 56min

Requirements

Description

Who this course is for: