This training course will give you the knowledge you need to install and configure a security solution based on Check Point firewall version R80. You will also learn how to set up and manage a security policy.
INTER
IN-HOUSE
CUSTOM
Practical course in person or remote class
Disponible en anglais, à la demande
This training course will give you the knowledge you need to install and configure a security solution based on Check Point firewall version R80. You will also learn how to set up and manage a security policy.
At the end of the training, the participant will be able to:
Installing and configuring Check Point R80
Implementing a safety policy
Intended audience
Network or security technicians/administrators.
Prerequisites
Good knowledge of TCP/IP. Basic knowledge of IT security.
Course schedule
1
Introduction
The Check Point product range.
What are the different components of a Check Point product?
What's new in R80?
2
Architecture and installation
Distributed and standalone architecture.
What is a management server? Introduction to the SIC (Secure Internal Communications) protocol.
The Check Point Gaïa operating system.
Command Line Interface (CLI). What are the advantages and disadvantages of using this interface?
How to backup and restore. What commands are needed to perform these operations?
Hands-on work
Installation of Check Point under Gaïa version R80.
3
Implementing a safety policy
Discovering SmartConsole. Getting started with SmartConsole.
What is the SmartDashboard? How do I start and use SmartDashboard?
Set up administrator and profile management.
What security policy to implement. How do you manage all the security rules that have been defined?
Hands-on work
Install SmartConsole. Create objects and security policy. Enable anti-spoofing.
4
Address translation (NAT)
Reminders on address translation (NAT).
What are the rules of address translation? Is it mandatory to use it systematically?
The different types of NAT: NAT "static" and NAT "hide". How do I manage ARP?
Hands-on work
Set up automatic NATs such as "hide", "static" and manual transaction rules.
5
Site-to-site VPN
VPN architecture. Basics of encryption.
Introduction IPSec, the certification authority.
The certification authority (CA).
Domain-Based VPN, the fat-client mode.
Mobile Access authentication modes: Check Point Mobile, SSL/SNX...
Hands-on work
Setting up a site-to-site IPSec tunnel. Configuring remote IPSec VPN access.
PARTICIPANTS
Network or security technicians/administrators.
PREREQUISITES
Good knowledge of TCP/IP. Basic knowledge of IT security.
TRAINER QUALIFICATIONS
The experts leading the training are specialists in the covered subjects. They have been approved by our instructional teams for both their professional knowledge and their teaching ability, for each course they teach. They have at least five to ten years of experience in their field and hold (or have held) decision-making positions in companies.
ASSESSMENT TERMS
The trainer evaluates each participant’s academic progress throughout the training using multiple choice, scenarios, hands-on work and more.
Participants also complete a placement test before and after the course to measure the skills they’ve developed.
TEACHING AIDS AND TECHNICAL RESOURCES • The main teaching aids and instructional methods used in the training are audiovisual aids, documentation and course material, hands-on application exercises and corrected exercises for practical training courses, case studies and coverage of real cases for training seminars.
• At the end of each course or seminar, ORSYS provides participants with a course evaluation questionnaire that is analysed by our instructional teams.
• A check-in sheet for each half-day of attendance is provided at the end of the training, along with a course completion certificate if the trainee attended the entire session.
TERMS AND DEADLINES
Registration must be completed 24 hours before the start of the training.
ACCESSIBILITY FOR PEOPLE WITH DISABILITIES
Do you need special accessibility accommodations? Contact Mrs. Fosse, Disability Manager, at psh-accueil@orsys.fr to review your request and its feasibility.
Dates and locations
Select your location or opt for the remote class then choose your date.
Remote class
Dernières places
Date garantie en présentiel ou à distance
Session garantie
No session at the moment, we invite you to consult the schedule of distance classes.