PWI | TRAINING | Advanced Firewall-1 4.1 Management

Introduction to Firewall-1 4.1 Management

Advanced Firewall-1 4.1 Management

VPN-1 for the Security Professional

Advanced Firewall-1 4.1 Management

Become a Check Point Certified Security Engineer

THE COURSE

You'll Experience:

What's New?
An overview of the enhancements made in Version 4.1, including new operating system support, authentication, client authentication, encryption, and support for new services.

FireWall-1 Architecture
A description of the purpose of firewalls, the different firewall architectures and the various components of FireWall-1.

User Defined Tracking
This section defines the need for user defined tracking and how the tracking works. This section also gives step-by-step instructions on configuring user defined tracking for FireWall-1.

SYNDefender
This segment identifies the various components involved in a SYN flooding attack, how this type of attack works,and its possible network consequences. This section also describes how SYNDefender works in preventing such attacks and how to apply SYNDefender to your security pollicy.

Content Security
An overview of the requirements and services affected by content security. Includes configuring for third-party Content Vectoring Protocol (CVP) if neccessary. This section also details anti-virus inspections, Uniform Resource Identifiers (URI) and Uniform Resource Locator (URL) filtering.

Encryption and Virtual Private Networks
This overview details the differenet encryption schemes, their benefits and drawbacks, and how best to determine which encryption scheme works best for your network and FireWall-1 setup. This section also identifies what a Certificate Authority is and how to set up a Virtual Private Network (VPN) between two networks.

FWZ Encryption
A detailed description of how to configure a VPN using the FWZ encryption scheme.

IKE Encryption
A detailed description of how to configure a VPN using the IKE encryption scheme.

SKIP Encryption
A detailed description of how to configure a VPN using the SKIP encryption scheme.

ManualIPSEC Encryption
A detailed description of how to configure a VPN using the ManualIPSEC encryption scheme.

SecuRemote
This section is an overview of what SecuRemote is and how it is used. Includes defintions and differences between SecuRemote Server, SecuRemote Client, SecuRemote Service, SecureClient, and SecureServer.

Account Management Client
A brief history of LDAP and the X.500 standard, the importance of distinguished name, as well as step-by-step instructions on how to install the Account Management Client. This section also demonstrates how to create users, groups and templates using Account Management Client as well as how to apply Account Management Client to your current security policy.

Load Balancing
Examines in detail load balancing, and provides troubleshooting information.

UAM
The User to Address Mapper feature allows administrators to manage users through dynamically allocated addresses with a single log on. Works through a feature in Meta IP 4.1.

Remote Management
Examines the ability to manage other firewalls from one client server.

Hand-On Labs
Partnered lab settings with real hands-on Advanced FireWall-1 configuration and network exercises.

Additional Benefits: CCSE certification earns you free access to Check Point Technical Support staff for five support incidents followed through to resolution. You’ll also get a one-year subscription to SecurNet, a technical reference CD containing a technical knowledge base, product information, and the latest patches and fixes.

Prerequisites: CCSA and general working knowledge of FireWall-1.

Duration: 2 days
Times: 9am — 5pm
Price: $1,950 (includes tuition, manuals and exam voucher)