Check Point Harmony Endpoint Specialist [CCES] R81.20

Name: Check Point Harmony Endpoint Specialist [CCES] R81.20
Rating: 4.2 (35 reviews)

Sandblast Threat Emulation & extraction | Security blades & Deployment explained | R81.20 version

Created byEvgenii Puzakov

Last updated 11/2023

English

What you'll learn

Check Point Endpoint Security
CCES certification preparation
Protecting your network with Endpoints
Remote Access VPN
Threat Emulation & Threat Extraction
URL filtering & Safe Search
Full Disk Encryption
Lab building of Check Point Ecosystem

Course content

5 sections • 32 lectures • 3h 16m total length

Course Structure5:38
Explore Check Point Harmony and SandBlast, learn deployment alongside a security management server and next generation firewall, and build a VMware lab to test endpoint security features.
Check Point Ecosystem10:15
Why do you need Check Point Harmony Endpoint?4:35
Explore why implementing Harmony endpoint safeguards internal networks by terminating threats at the device, even with a security gateway, and learn about antivirus, firewall, IPS, threat emulation, and threat extraction.
Installation flow11:01
Demonstrates the installation flow for cloud infinity portal and SMS with Smart Console, linking Harmony endpoint to Windows 10 or Linux VMs and configuring firewall, antivirus, Sandblast, and threat extraction.
usercenter & support7:34
Navigate the user center to access Check Point Harmony Endpoint admin guides, release notes, and hardware requirements for deploying Harmony Endpoint on servers or virtual machines.
Getting all necessary license files (.lic)10:15
Learn to obtain and download license files for Check Point Harmony Endpoint Specialist, generate licenses for management server and endpoint, bind to the IP address, and prepare for installation.

Getting the ISO image & Minimum System Requirements8:33
Install SMS locally on a VM using the clean ISO image for R81.20, verify the minimum hardware requirements, and consult checkpoint documentation for Harmony Endpoint setup.
Security Management Server: Gaia Installation8:05
Install Gaia management server and endpoint management server in a virtual machine from checkpoint ISO, configure memory, storage, and networking, then complete the first-time wizard via the web UI.
Management Server networking in VMware Workstation5:10
Explore VMware workstation networking options—bridged, NAT, host, and custom—focusing on bridged mode that replicates the host network. Understand IP setup like 192.168.1.112 and why a management server IP is preferred.
First Time Configuration Wizard4:38
Navigate the first time configuration wizard, log in with admin credentials, and set IP, gateway, host name, DNS, and time. Select security management only and download Smart Console for licensing.
Review of SmartConsole & Endpoint management13:29
Learn to use checkpoint smart console, attach licenses, and push changes to the management database. Review endpoint policy management for harmony endpoint with smart endpoint and harmony endpoint web ui.
Adding Active Directory in Endpoint Management1:40
Deploy an active directory in checkpoint by using organization scanners and add a directory scanner to scan the ldap path and domain controller, then import users into smart endpoint policies.

Uploading a package2:47
Upload and deploy client packages by choosing internet or manual download from checkpoint. Install the 1804 20 enterprise endpoint security package via the deployment tab for group policy deployment.
Add a package manually [Picking blades]6:55
Discover how to export deployment packages with blades, set targeted software deployment rules, install MSI on Windows 10, and verify modules via heartbeat to the smart management server.
Getting a client from web console and generating MSI2:18
Download the Windows initial endpoint client from the web console, then convert the dot exe to msi and run the PowerShell command to create the client.
How to uninstall a Client from PC2:19
learn how to uninstall a checkpoint harmony endpoint client from windows via control panel, using the default password secret, and that you can change it in client settings later.
Adding an MSI via GPO [Group Policy Object]3:33
Deploy a Windows msi client across the domain using group policy objects by sharing the msi in a network folder and applying the policy to target machines.
Initial Client installation to a Domain User4:27
Install the light initial client on a Windows 10 machine from the domain controller. Create a virtual admin group and deploy policies that pull from the management server via heartbeat.
Client Policy2:38
Configure client policy settings in Harmony Endpoint to enforce uninstall password, prevent user deletion, manage policy push and installation, and control module enablement on Windows clients.
Push operations5:37

Firewall3:55
Explore host-based and perimeter firewall concepts, configure outbound and inbound policies, block ICMP traffic, test policy installs, and observe policy synchronization with smart endpoint heartbeat.
URL filtering5:14
Learn to use the Harmony endpoint URL filtering blade to block or allow access to websites or groups (games, chats, social networking) via policies, with browser extension support and testing.
Safe Search1:00
Enable the safe search extension to check website reputation in Chrome, view a checkpoint rating for sites, and learn how to install and view a policy within the browser.
Threat Emulation & Extraction8:11
Learn how Check Point threat emulation scans file behavior for zero-day attacks, and how threat extraction provides a safe copy while emulation runs, with a Chrome browser extension option.
Disk Encryption3:56
Deploy and monitor full disk encryption with Check Point Harmony Endpoint by applying data protection policy, selecting either checkpoint encryption or BitLocker, and tracking progress across devices.

Remote access [Overview]15:00
Explore Check Point Harmony Endpoint remote access solutions that secure connections to corporate resources via ipsec and ssl vpn, covering client-based and mobile options and office mode.
Remote Access Solutions on Support site2:34
Review Check Point remote access solutions on the support site at support.checkpoint.com, verify the latest versions and operating system support, and compare capsule workspace, network extender, and endpoint security vpn.
Adding a Gateway in SMS [for Endpoint VPN]3:30
Add a gateway to the smart console and interconnect it with the management server to enable IPsec remote access VPN. Install policy, attach licenses via smart update, and push policy.
VPN configuration and demonstration12:32
Install the Windows remote access client, configure IPsec VPN for client-to-site, define office mode and encryption domains, create users and groups, publish the policy, and troubleshoot routing issues.
Troubleshooting Remote Access VPN - part 17:28
Troubleshooting Remote Access VPN - part 24:04
Configuration Summary7:10
Define the encryption domain and vpn domain, modify the remote access community, assign ip addresses via office mode or a manual pool, and verify routing and policy.

Requirements

Basic Networking knowledge
VMware/ESXi general knowledge

Description

Check Point Harmony Endpoint course will prepare you for CCES certification, will expand your Check Point general knowledge and your ability to deploy & apply endpoint security in your environment. You will be able to understand important topics in great detail and use that knowledge. The course contains a lot of tools and ideas on how to prepare for CCSE certification and actually use the applied tools in real world scenarios.

The following course includes lectures on how Check Point features work and the walk-through of the configuration in the lab/production environment. From the very beginning following step-by-step approach you will be able to grasp advanced concepts and step on the next level.

What you will learn:

Deployment of the Check Point Ecosystem
>Build a lab from scratch
>Deploy Check Point Management server, Gateway & Harmony client
>Deploy Remote Access VPN
>Active Directory Integration
Deploying packages & agents
> Client Policy & Push operations
> Initial Client installation to a Domain User
> Getting a client from web console and generating MSI
Security Blades
> Firewall
> URL filtering
> Safe search
> Threat Emulation & Threat Extraction
> Full Disk Encryption (FDE)
Remote Access VPN in detail
> Detailed Explanation & Deployment

Why this course:

You are NOT learning disconnected skills
You learn how to stack your troubleshooting knowledge together in a SINGLE, UNIFIED WHOLE
Also contains real lab devices, thorough explanation of each topic and advanced troubleshooting

I have applied the streamlined, step-by-step method to excel as a Check Point professional in less time than you ever thought possible. I'm going to walk you through the main challenges, so you can step on the next level.

Who this course is for:

Security Engineers
Check Point administrators
Check Points engineers
Network engineers

Check Point Harmony Endpoint Specialist [CCES] R81.20

What you'll learn

Explore related topics

Course content

Introduction6 lectures • 49min

Lab Building6 lectures • 42min

Deploying packages and agents8 lectures • 31min

Security Policies5 lectures • 22min

Check Point Remote Access VPN7 lectures • 52min

Requirements

Description

Who this course is for: