Check Point R80.40 Next Gen Firewall [CCSA & CCSE] Training

Explore architecture terminology, including smart console, security management server, and security gateway, and understand three-tier and two-tier architectures, policy flow, and logs.

Learn how to select firewall throughput by rigorously stress testing real performance against claimed capabilities and aligning choices with organizational size and needs.

Explain how secure internal communication protects Check Point components within the three-tier architecture, detailing management modules, management clients, gateways, and logs with SSL, internal certificates, and a private CA.

Explore deployment models for checkpoint firewalls, including standalone and distributed architectures, covering security gateways, security management servers (SMS), and high availability with active and standby configurations.

Explore checkpoint architectural components, including hardware options (checkpoint or third-party), platform operating systems (checkpoint and non-checkpoint), and product packages such as intrusion prevention, content awareness, and antivirus extensions.

Explain checkpoint platform and hardware, tracing the evolution from Nokia EPSO on FreeBSD to Caia, and outline the tier architecture, device tiers, throughput, and data sheet guidance.

Learn about checkpoint security technologies, hardware products, and software packages, and how licensing and subscriptions unlock features like VPN, firewall, DLP, anti-spam, antivirus, and Sandblast emulation.

Learn how sandbox technology and checkpoint’s sandblast protect networks from zero-day attacks by isolating untrusted programs, using CPU-level exploit detection, and employing emulation and extraction techniques.

This lecture outlines sandbox evolution, detailing inspect, emulate, prevent, and share, where attachments are executed in emulated environments to detect and prevent malware at the gateway.

Sandbox threat extraction removes unknown malware from files in a sandbox, reconstructs a clean copy, and delivers a sanitized version while preserving the original format for user access.

Explore sandbox deployment options for Check Point Sandblast, including cloud and on-premises deployments, sandbox agent, and end-point protection against zero-day and malware threats.

Explore licensing and subscription models for checkpoint technologies, including minimum ngf licenses, feature blades, and optional gtp protections, with guidance on multi-firewall deployments and per-device licensing.

Explore software blades, packages, and licensing that power checkpoint technology for flexible security. Activate default firewall and IP VPN, manage blades with one-click, and achieve end-to-end protection.

Review checkpoint firewall blades, including the firewall blade, mobile access blade, and VPN gateway. Explain how application control, DLP, IPS, antivirus, antispam, and Sandblast sandboxing protect networks.

Check Point r80.40 labs with a step-by-step workbook and a rule-building spreadsheet, learning firewall configuration parameters, topology visuals, and lab access via VPN and Internet Explorer.

Explore physical and logical network design for a multi-interface checkpoint firewall, including trunk interfaces, management VLAN, DMZ, and LAN/WAN segmentation, with a testbed using VMware servers and assigned VLANs.

Learn how to install a Check Point R80.40 device using a VM image, select typical or custom setup, configure interfaces and roles, and complete first-time configuration via the SMS console.

Demonstrates a fresh gateway installation in a Check Point R80.40 lab, configuring initial admin access and one-time password based secure communication. Note differences between gateway and SMS setups.

Connect via VPN to download and install the smart dashboard, access the SMS database, and choose between the studio shared folder or the SMS login using admin credentials.

Master the Check Point command line landscape, including verification, configuration, operational, and simulated commands across system, gateway, and firewall management.

Explore security gateway commands to monitor firewall traffic and view command options, including version and monitor outputs, and troubleshoot by examining packet-level debugging and local policy changes.

Learn operational commands for checkpoint firewall, using command line basics, show commands to verify configurations, interfaces, and system status, with tab completion and help via question mark.

Explore essential system commands for checkpoint firewalls, including cpr start and stop, licensing management, cpu usage checks, and using cpview and cpinfo for diagnostics.

Examine firewall configuration commands, log in via gui, view and modify settings with the set command, and manage interfaces to turn features on or off.

Learn SMS commands for Check Point R80.40, recognize commands reside on security management service station, not firewall, and classify them into show, operational, configuration, and cp commands; practice after login.

Learn to create and manage local gateway users with admin rights, enabling audit-friendly access. The guide covers GUI and CLI login, and configuring user permissions.

Configure gateway interfaces by creating VLAN-based subinterfaces for LAN, DMZ, and internet, aligning with the network topology, and verify connectivity to prepare for policy enforcement.

Learn to configure interface IPs using different display formats, including dotted decimal and slash notation (CIDR), through the system management display, and how to reconfigure IP settings on new interfaces.