Check Point Security Administration NGX III offers comprehensive training to enhance enterprise knowledge of VPN-1 NGX, network planning, route-based VPN, and troubleshooting procedures.

Objectives

Delegates attending this course will be able to:

• Undertake troubleshooting of NGX product problems using troubleshooting guidelines
• Use cpinfo and log files for file management
• Use protocol analyzers to capture and analyze network traffic
• Conduct troubleshooting of NGX problems using NGX debugging tools
• Use fw and fw advanced commands for troubleshooting
• Identify and resolve specific Security Server issues
• Use VPN log files and VPN debug to troubleshoot VPN connections
• Capture traffic flow using ike debug, sr_service debug, and srfw monitor
• Identify the differences between route- and domain-based VPNs
• Identify, debug, and use relevant commands to troubleshoot Eventia Reporter problems

Topics covered

• Collecting configuration files from an NGX installation
• Reviewing and analyzing cpinfo output in InfoView
• Using GuiDBedit to create services and objects, and modify an object’s global properties
• Using fw logswitch to switch active and audit logs
• Using fwm logexport to export logs
• Comparing client- and server-side NAT using fw monitor
• Using fwm and cpd debugging to troubleshoot a stand-alone installation problem
• Generating and interpreting a file containing fw ctl pstat information
• Using fw stat to verify a Gateway’s Policy installed status
• Using fw unloadlocal to uninstall a Security Policy
• Using fwm load to install a Policy
• Running ike debug on Gateways, and analyzing output using IKEview
• Observing IKE by running ike debug
• Running srfw monitor on a SecureClient desktop
• Configuring route-based VPNs for VPN redundancy
• Configuring dynamic routing using OSPF through VPN tunnels.

Certification

Along with the NGX-I and NGX-II courses, this course meets the requirements for the Check Point Security Expert Plus (CCSE+) NGX Certification. A separate examination (not part of the course) is available for those delegates who wish to have a formal qualification

Who should attend

This course is designed for systems administrators, security managers, or network engineers who require an in-depth knowledge of implementing, configuring and troubleshooting VPN-1 NGX in an enterprise setting

Pre-requisites

Delegates should have previously attended the Check Point Security Administration NGX-I and NGX-II courses.  Delegates should be able to use basic Internet tools, i.e. Web browsers, FTP and Telnet. They should have a system level knowledge of Microsoft NT operating system and should be able to manipulate files and directories and manage processes.  Knowledge of TCP/IP is also necessary.

Follow-On Course

Depending upon their specific environment, delegates may wish to consider attending the Check Point Integrity or Provider-1 courses to complete their Check Point training.

Booking

Click here for schedules, prices and offers