4
This course is intended for customers and partners who want to learn how to use advanced commands to configure and troubleshoot Check Point Security Systems. Multiple hands-on lab exercises teach how to bring optimization techniques back to your workplace. Check Point Checkpoint Security Master (CCSM R77) T-VPN-03

Check Point - security-kennis.nl · ... (CCSM R77) Checkpoint Security Master ... This course is intended for ... Check Point Checkpoint Security Master (CCSM R77)

  • Upload
    phamnga

  • View
    226

  • Download
    6

Embed Size (px)

Citation preview

Page 1: Check Point - security-kennis.nl · ... (CCSM R77) Checkpoint Security Master ... This course is intended for ... Check Point Checkpoint Security Master (CCSM R77)

Instructor Led Training Instructor Led Training Instructor Led Training Instructor Led Training Instructor Led Training3 dag(en) 3 dag(en) 3 dag(en) 3 dag(en) 3 dag(en)T-VPN-03 T-VPN-03 T-VPN-03 T-VPN-03 T-VPN-03Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77)

Target Audience / Doelgroep

Technical professionals who support, install, de-ploy, or administer Check Point Software Blades

Objectives / Doelstellingen

• Review the cpview command and its parameters

• Navigate the CPView interface• Use fw ctl chain to observe chain modules.

Observe how policy changes impact the chain

• Use fw monitor to capture packets• Use the fw debug process and debug

infrastructures for user mode debugging• Review the Connections table using fw tab• Debug NAT issues using the fw ctl debug

command• Perform port forwarding on a gateway• Configure port mapping services• Understand Client Side and Server Side NAT• Configure a proxy ARP for Manual NAT• Use cphaprob to monitor cluster status and

troubleshoot state synchronization• Use vpn debug to debug site-to-site VPN• Use ethtool to tune NIC performance• Edit ARP Cache table to improve

performance• Use command fw ctl pstat to improve load

capacity• Use the fwaccel stat and fwaccel stats

outputs to tune the firewall Rule Base• Configure CoreXL for specific CPU task

assignment• Use fwaccel and sim to enable and disable

accelerated traffic• Debug the FWAccel and SIM modules using

the fwaccel dbg and sim dbg commands• Use IPS Bypass to manage performance• Configure IPS to reduce false positives• Deploy IPv6 in a local environment• Perform debug in the MDS and DMS

environments using the mdsenv and fw debug commands

• Debug the VSX management server using the fw debug command

Content / Inhoud

• CP View• Kernel and User Mode Troubleshooting• Network Address Translation• Clustering• VPN Troubleshooting• Hardware Optimization• SecureXL Acceleration Debugging• IPS• IPv6• MDSM and VSX DebuggingLab exercises:• Working with CPView• Viewing the Chain Modules• Troubleshooting Management Issues• Advanced Database Troubleshooting• Investigating NAT Issues• Alternative Methods of Translation• NAT for same IP Address Traffic• Troubleshooting ClusterXL• Troubleshooting VPN Issues• Hardware Optimization• Software Tuning and Optimization• Troubleshooting SecureXL• Working with CoreXL• Troubleshooting IPS• Implementing IPv6• Troubleshooting MDSM

Prerequisites / Voorkennis

• CCSE certification or equivalent knowledge• Windows Server, UNIX and networking skills

and TCP/IP experience• Working knowledge of network and internet

technology

Exams / Examen

This training prepares the student for the Check Point Certified Security Master (CCSM) exam.

Follow on Courses / Vervolgopleiding

Not available. Please contact.

This course is intended for customers and partners who want to learn how to use advanced commands to configure and troubleshoot Check Point Security Systems. Multiple hands-on lab exercises teach how to bring optimization techniques back to your workplace.

Check PointCheckpoint Security Master (CCSM R77)

T-VPN-03

Page 2: Check Point - security-kennis.nl · ... (CCSM R77) Checkpoint Security Master ... This course is intended for ... Check Point Checkpoint Security Master (CCSM R77)

Instructor Led Training Instructor Led Training Instructor Led Training Instructor Led Training Instructor Led Training3 dag(en) 3 dag(en) 3 dag(en) 3 dag(en) 3 dag(en)T-VPN-03 T-VPN-03 T-VPN-03 T-VPN-03 T-VPN-03Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77) Checkpoint Security Master (CCSM R77)

Target Audience / Doelgroep

Technical professionals who support, install, de-ploy, or administer Check Point Software Blades

Objectives / Doelstellingen

• Review the cpview command and its parameters

• Navigate the CPView interface• Use fw ctl chain to observe chain modules.

Observe how policy changes impact the chain

• Use fw monitor to capture packets• Use the fw debug process and debug

infrastructures for user mode debugging• Review the Connections table using fw tab• Debug NAT issues using the fw ctl debug

command• Perform port forwarding on a gateway• Configure port mapping services• Understand Client Side and Server Side NAT• Configure a proxy ARP for Manual NAT• Use cphaprob to monitor cluster status and

troubleshoot state synchronization• Use vpn debug to debug site-to-site VPN• Use ethtool to tune NIC performance• Edit ARP Cache table to improve

performance• Use command fw ctl pstat to improve load

capacity• Use the fwaccel stat and fwaccel stats

outputs to tune the firewall Rule Base• Configure CoreXL for specific CPU task

assignment• Use fwaccel and sim to enable and disable

accelerated traffic• Debug the FWAccel and SIM modules using

the fwaccel dbg and sim dbg commands• Use IPS Bypass to manage performance• Configure IPS to reduce false positives• Deploy IPv6 in a local environment• Perform debug in the MDS and DMS

environments using the mdsenv and fw debug commands

• Debug the VSX management server using the fw debug command

Content / Inhoud

• CP View• Kernel and User Mode Troubleshooting• Network Address Translation• Clustering• VPN Troubleshooting• Hardware Optimization• SecureXL Acceleration Debugging• IPS• IPv6• MDSM and VSX DebuggingLab exercises:• Working with CPView• Viewing the Chain Modules• Troubleshooting Management Issues• Advanced Database Troubleshooting• Investigating NAT Issues• Alternative Methods of Translation• NAT for same IP Address Traffic• Troubleshooting ClusterXL• Troubleshooting VPN Issues• Hardware Optimization• Software Tuning and Optimization• Troubleshooting SecureXL• Working with CoreXL• Troubleshooting IPS• Implementing IPv6• Troubleshooting MDSM

Prerequisites / Voorkennis

• CCSE certification or equivalent knowledge• Windows Server, UNIX and networking skills

and TCP/IP experience• Working knowledge of network and internet

technology

Exams / Examen

This training prepares the student for the Check Point Certified Security Master (CCSM) exam.

Follow on Courses / Vervolgopleiding

Not available. Please contact.

This course is intended for customers and partners who want to learn how to use advanced commands to configure and troubleshoot Check Point Security Systems. Multiple hands-on lab exercises teach how to bring optimization techniques back to your workplace.

Check PointCheckpoint Security Master (CCSM R77)

T-VPN-03

Page 3: Check Point - security-kennis.nl · ... (CCSM R77) Checkpoint Security Master ... This course is intended for ... Check Point Checkpoint Security Master (CCSM R77)

HOE IN TE SCHRIJVEN VOOR DEZE CURSUS

Wat heeft u nodig als u gaat bestellen?

• Naam en e-mailadres van de cursist als u dit niet zelf bent• Een credit card (Visa of Mastercard) of referentienummer voor facturatie• Adres van uw organisatie

Vul op onze website de Cursus code van de voorgaande pagina in bij ‘Zoek’.

Kies voor het Winkelwagentje bij de cursusdatum of -data van uw keuze

Kies voor Bestelling afronden om uw gegevens in te vullen

Pas aan wat u aan wilt passen en kies bestellen.

Log in of als u een nieuwe klant bent, kies dan voor ‘Registeren’

Vul verder de benodigde gegevens in.

Wilt u hulp? Chat dan met ons op www.globalknowledge.nl of bel op 0800-0444

1

2

3

4

5

6

Page 4: Check Point - security-kennis.nl · ... (CCSM R77) Checkpoint Security Master ... This course is intended for ... Check Point Checkpoint Security Master (CCSM R77)

Keuze

Kies uit ruim 1.500 verschillende trainingen: Management- en vaardigheids-trainingen of IT-cursussen en -certificeringen. Deze optimaliseren we continu, samen met onze partners zoals Amazon Web Services, Cisco, Citrix, IBM, Juniper, Microsoft, Red Hat en VMware.

Kwaliteit

Onze docenten zijn ervaringsdeskundigen en onze lesstof is gebaseerd op de nieuwste technologieën en tools. Om deze kwaliteit te kunnen bieden, werken we nauw samen met diverse technologiepartners. Zo zijn we al negen jaar de grootste leverancier van Microsoft-trainingen in de Benelux.

Flexibiliteit

Een open rooster-training of maatwerk? In één van onze negen opleidingscentra of op afstand virtueel klassikaal of digitaal? Global Knowledge is uw leerpartner: we denken met u mee, vanuit uw behoefte en doelstellingen.

Betrouwbaarheid

U kunt op ons bouwen. Naast consistente kwaliteit, geven wij vaak een startgarantievoor trainingen. Door onze omvang en virtuele lesmogelijkheden zijn er bijna altijd voldoende cursisten om een cursus door te laten gaan.

Succes

Een examen doen snel na het volgen van een cursus verhoogt de slagingskans aanzienlijk. Daarom kunnen cursisten direct na hun training examen doen, in een comfortabele ruimte, met alle faciliteiten en volgens de wensen van onze IT-partners. Wij zijn immers geautoriseerd test center van o.a. Pearson Vue, Prometric, Exin, APMG en Peoplecert.

WAAROM GLOBAL KNOWLEDGE? Vooroplopen

Is het cursusmateriaal nog 100% relevant? Zijn er nieuwe technologieën die onze lesmethodiek beter ondersteunen? Door vooruit te kijken en in te spelen op de klantbehoeften, kunnen we onze pioniersrol blijven vervullen… en u helpen om voorop te blijven lopen in uw markt.

Docenten

Uw medewerkers leren van experts. Bij Global Knowledge werken alleen gecertificeerde docenten, in vaste dienst of uit onze vaste pool van freelance experts – specialisten met up-to-date kennis die hun sporen hebben verdiend in de praktijk.

Materiaal

Het cursusmateriaal wordt geleverd door onze technologiepartners, dus is gegarandeerd up-to-date. Daarnaast ontwikkelen we zelf additioneel (digitaal) lesmateriaal en nieuwe cursussen op basis van de actuele trends en klantbehoeften.