Check Point Security Expert (CCSE)

• Identify ways to enhance the Security Policy with more object types
• Create dynamic objects to make policy updatable from the Gateway.
• Manually define NAT rules
• Configure Security Management behind NAT

Lab Tasks

• Use Updatable Objects
• Configure Network Address Translation for server and network objects
• Configure Management behind NAT for Branch Office connections

• Discuss site-to-site VPN basics, deployment, and communities
• Describe how to analyze and interpret VPN tunnel traffic
• Articulate how pre-shared keys and certificates can be configured to authenticate with third-party and externally managed VPN Gateways
• Explain Link Selection and ISP Redundancy options
• Explain tunnel management features

Lab Task

• Configure Site-to-Site VPN with internally managed Security Gateways

• Describe the SmartEvent and Compliance Blade solutions, including their purpose and use

Lab Tasks

• Configure a SmartEvent Server to monitor relevant patterns and events
• Demonstrate how to configure Events and Alerts in Smart Event
• Demonstrate how to run specific SmartEvent reports
• Activate the Compliance Blade
• Demonstrate Security Best Practice settings and alerts
• Demonstrate Regulatory Requirements Compliance Scores

• Identify supported upgrade options

Lab Task

• Upgrade a Security Gateway
• Use Central Deployment tool to install Hotfixes

• Export/import a Management Database
• Upgrade a Security Management Server by freshly deploying the new release or using a new appliance

Lab Task

• Prepare to perform an Advanced Upgrade with Database Migration on the Primary Security Management Server in a distributed environment
• Perform an import of a Primary Security Management Server in a distributed Check Point environment

• Describe the ElasticXL Cluster solution, including its purpose and use

Lab Tasks

• Deploy an ElasticXL Security Gateway Cluster