Check Point Certified Security Expert (CCSE) & Troubleshooting Expert (CCTE) R81.20 Bundle (includes 180 days' lab access)

• Technical Professionals who architect, upgrade, maintain, and support Check Point products.

• Security experts and Check Point resellers who desire to obtain the necessary knowledge required to perform more advanced troubleshooting skills while managing their security environments.

CCSE R81.20

• Identify basic interfaces used to manage the Check Point environment. 

• Identify the types of technologies that Check Point supports for automation. 

• Explain the purpose of the Check Management High Availability (HA) deployment. 

• Identify the workflow followed to deploy a Primary and solution Secondary servers.  

• Explain the basic concepts of Clustering and ClusterXL, including protocols, synchronization, connection stickyness. 

• Identify how to exclude services from synchronizing or delaying synchronization. 

• Explain the policy installation flow. 

• Explain the purpose of dynamic objects, updatable objects, and network feeds. 

• Understand how to manage user access for internal and external users.

• Describe the Identity Awareness components and configurations. 

• Describe different Check Point Threat Prevention solutions. 

• Articulate how the Intrusion Prevention System is configured. 

• Obtain knowledge about Check Point’s IoT Protect. 

• Explain the purpose of Domain-based VPNs. 

• Describe situations where externally managed certificate authentication is used. 

• Describe how client security can be provided by Remote Access. 

• Discuss the Mobile Access Software Blade. 

• Explain how to determine if the configuration is compliant with the best practices. 

• Define performance tuning solutions and basic configuration workflow. 

• Identify supported upgrade and migration methods and procedures for Security Management Servers and dedicated Log and SmartEvent Servers. 

• Identify supported upgrade methods and procedures for Security Gateways.

CCTE R81.20

• Identify and use Linux-based and Check Point commands and tools for system monitoring, file editing, and file viewing. 

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Management Server and API Server issues. 

• Investigate and troubleshoot traffic or security-related issues using logs and events monitoring tools. 

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Security Gateway issues. 

• Demonstrate an understanding of advanced troubleshooting tools and techniques for kernel debugging.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Access Control issues. 

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Identity Awareness issues. 

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Site-to-Site VPN Troubleshooting issues. 

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Client-to-Site VPN Troubleshooting issues.

CCSE R81.20

• Advanced Deployments

• Management High Availability

• Advanced Gateway Deployment

• Advanced Policy Configuration

• Advanced User Access Management

• Custom Threat Protection

• Advanced Site-to-Site VPN

• Remote Access VPN

• Mobile Access VPN

• Advanced Security Monitoring

• Performance Tuning

• Advanced Security Maintenance

CCTE R81.20

• Introduction to Advanced Troubleshooting 

• Advanced Management Server Troubleshooting 

• Advanced Troubleshooting with Logs and Events

• Advanced Gateway Troubleshooting 

• Advanced Firewall Kernel Debugging 

• Advanced Access Control Troubleshooting

• Advanced Identity Awareness Troubleshooting 

• Advanced Site-to-Site VPN Troubleshooting 

• Advanced Client-to-Site VPN Troubleshooting

Exercises:

CCSE R81.20

• Navigating the Environment and Using the Management API 

• Deploying Secondary Security Management Server 

• Configuring a Dedicated Log Server 

• Deploying SmartEvent 

• Configuring a High Availability Security Gateway Cluster 

• Working with ClusterXL 

• Configuring Dynamic and Updateable Objects 

• Verifying Accelerated Policy Installation and Monitoring Status 

• Elevating Security with HTTPS Inspection

• Deploying Identity Awareness 

• Customizing Threat Prevention 

• Configuring a Site-to-Site VPN with an Interoperable Device 

• Deploying Remote Access VPN 

• Configuring Mobile Access VPN 

• Monitoring Policy Compliance 

• Reporting SmartEvent Statistics 

• Tuning Security Gateway Performance

CCTE R81.20

• Collect and read live and historical CPView data.

• Troubleshoot CPM and SmartConsole login issues. 

• Restore a Management High Availability environment from a temporary Primary Down condition. 

• Troubleshoot SmartLog processes. 

• Collect and interpret user mode debugs. 

• Collect and interpret kernel debugs. 

• Debug Unified Policy Inspection in kernel to understand match process. 

• Debug the Identity Awareness user mode processes. 

• Collect and interpret Site-to-Site VPN Debugs. 

• Collect and interpret Remote Access VPN Debugs.

• Working knowledge of UNIX and/or Windows operating systems, 

• Working knowledge of Networking, 

• TCP/IP, z,

• Advanced knowledge of Check Point Security Products.

This course prepares you for exams #156-315.81.20 (CCSE R81.20) and #156.587 (CCTE R81.20) at www.VUE.com/checkpoint 

Exam vouchers are available at an additional cost - please ask for details.

Full information on Check Point’s Certification Program can be viewed at https://www.checkpoint.com/downloads/training/check-point-certification-faq.pdf

Attend two Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master (CCSM).

Attend four Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master Elite (CCSM Elite).

Choose from the following Infinity Specialization courses:

• Check Point Certified Endpoint Specialist (CCES)

• Check Point Certified Troubleshooting Administrator (CCTA)

• Check Point Certified Automation Specialist (CCAS)

• Check Point Certified Cloud Specialist (CCCS)

• Check Point Certified MDSM Specialist (CCMS) 

• Check Point Certified VSX Specialist (CCVS)

• Check Point Certified Troubleshooting Expert (CCTE)

• Check Point Certified Maestro Expert (CCME)

• Check Point Certified Cloud Network Security Expert for AWS (CNSE-AWS)

• Check Point Certified Cloud Network Security Expert for Azure (CNSE-AZURE)

Please note that Check Point only offer e-kit courseware for training courses. Each delegate will be provided with an official set of e-kit courseware.