
Tune IPS policies in smart console by separating client and server scopes, adjusting activation mode, protection severity, and then test newly updated protections in detect mode to reduce false positives.
Learn how to tune IPS on a gateway under heavy load by enabling IPS initially, using bypass under load with logging, and balancing performance with CPU and memory thresholds.
Explore Check Point gateway additional protections, including core protections and aggressive aging for CIP traffic. Use default or recommended profiles to diagnose drops via logs.
Configure fail-open and fail-close modes in IPS threat prevention tuning on checkpoint. Understand how engine settings govern traffic during internal errors, choosing between allowing or blocking connections.
Shows how to use fw ctl zdebug plus drop to identify drops for a target address, locate issues in the firewall rule base, and verify problem scope.
Check Point Threat Prevention Specialist will prepare you for CTPS certification, will expand your Check Point general knowledge and your ability to optimize your IPS profile. You will be able to understand important topics in great detail and use that knowledge. The course also contains great tools and ideas on how to find issues with specific protections, connection issues much more.
From the very beginning following step-by-step approach you will be able to grasp advanced concepts and step on the next level.
What you will learn:
Why, What and How to optimize ?
>Working with policies
>When GW under heavy load
>Ideas on how to optimize your IPS profiles
>Useful Check Point tools to check CPU, RAM and connections related drops
Why this course:
You are NOT learning disconnected skills
You learn how to stack your knowledge together in a SINGLE, UNIFIED WHOLE
Very short and useful. With less than an hour you will have advanced IPS tuning tools that can be applied for any Check Point version
I have applied the streamlined, step-by-step method to excel as a Check Point professional in less time than you ever thought possible. I'm going to walk you through the main challenges, so you can step on the next level.