Patriot Technologies, Inc. Intergrated SecurityEnterprise Security SolutionsProfessional ServicesSecurity Appliance ManufacturingPatriot University
The Trusted, Go-To Source For IT Security

Check Point Security Administration NGX II
  • 3 Day Course
Directions

Registration form
Adobe Acrobat
Microsoft Word
Register Online
  • Location:   

Patriot Technologies, Inc.
5108 Pegasus Court
Suite F
Frederick, MD 21704
301-695-7500
  • Time:

9:00 a.m. - 5:00 p.m.

Length: 3 days* (recommended)
Prerequisites: Check Point Security Administration NGX I, or equivalent knowledge and experience
Take this class if:
  • You are a systems administrator, security manager, or network engineer implementing VPN-1/FireWall-1 for VPN deployments
  • Want to earn Check Point Certified Security Expert (CCSE NGX) NGX certification

Check Point Security Administration NGX II offers advanced training on VPN-1/FireWall-1, and delivers in-depth information on VPN and encryption technologies. This course is designed for Security Administrators and resellers, who require in-depth knowledge of VPN-1/FireWall-1 that goes beyond basic installation, setup, and methodologies.

You will Learn

  • Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform
  • Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
  • Use advanced NGX features to minimize the information-security management burden, when working with objects and rules
  • Determine whether Database Revision Control or Policy Package Management is the appropriate solution, given a variety of scenarios
  • Identify the features and limitations of Management High Availability
  • Use fw monitor to capture and view packets
  • Use fw ctl pstat to verify the health of the NGX Security Gateway and SmartCenter Server
  • Review VPN-1 debugging and troubleshooting commands, including cpinfo
  • Given a variety of Check Point QoS configurations, determine how bandwidth will be allocated
  • Identify situations where Low Latency Queueing and Differentiated Services are an appropriate part of a QoS solution
  • Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway
  • Identify different modes in ClusterXL configuration, and configure ClusterXL VPN
  • Configure a Policy Server and SecureClient Rule Base
  • Configure route-based VPN and dynamic VPN routing

Exercises

  • Installing VPN-1/FireWall-1
  • Setting up SecuRemote and SecureClient for remote-access VPNs
  • Configuring logical servers for load balancing
  • Using content security to enable Java blocking, URL filtering and anti-virus checking
  • Configuring two-gateway IKE encryption