Course: Check Point Security Administration NGX I
Rev 1.1

Length	2 days* (recommended)
Prerequisites	Basic networking knowledge, knowledge of Windows Server and/or UNIX, and experience with TCP/IP and the Internet
Take this class if You are a systems administrator, security manager, or network engineer who manages NGX Security Gateway deployments Want to earn Check Point Certified Security Administrator (CCSA NGX) NGX certification

More details Table of Contents Sample Chapter Course Objectives

Check Point Security Administration NGX I Rev 1.1 is a foundation course for Check Point's flagship product, VPN-1 NGX. This course is intended to provide an understanding of basic concepts and skills necessary to configure VPN-1 NGX. During this course, students will configure a Security Policy, and learn about managing a firewalled network.

You Will Learn

• How VPN-1 NGX components and Check Point's Secure Virtual Network Architecture protect critical information assets
• How to create rules and modify a Security Policy's properties
• How to use advanced NGX features to minimize the information-security management burden, when working with objects and rules
• How to use monitoring tools to track, monitor, and account for all connections logged by Check Point components
• How to protect organizations from known network attacks and entire categories of emerging or unknown attacks, using SmartDefense
• How to use private IP-address allocation and unregistered internal addressing schemes, to overcome IP addressing limitations
• How to identify and address NGX security issues, including encryption and Virtual Private Networks
• How to verify the identity of users logging in to NGX, using NGX authentication schemes
• How to implement LDAP, and integrate it with NGX SmartCenter Server
• How to back up critical files and directories, for availability and timely recovery of Security Gateways and SmartCenter Servers
  

Exercises

• Installing VPN-1 NGX in a stand-alone environment
• Launching SmartDashboard
• Defining basic objects
• Configuring anti-spoofing measures
• Defining basic rules
• Creating objects using object cloning
• Using Database Revision Control
• Blocking intruder connections
• Setting up a Suspicious Activity Rule in SmartView Monitor
• Checking status in SmartView Monitor
• Configuring SmartDefense
• Configuring Hide NAT
• Configuring Static NAT
• Encryption math and mechanics
• Defining user templates
• Defining users
• Configuring User Authentication
• Configuring Client Authentication
• Configuring LDAP authentication with SmartDirectory
• Backing up and restoring a Security Gateway and SmartCenter Server

Take advantage of the latest special offers on NGX classes, and then register for training with an ATC near you!

*Course length and price may vary by ATC. Please contact your local ATC for detailed information.