NGX
The Only Platform to Offer a Unified Security Architecture

Checkpoint Upgrade

 

CONTENTS

1. Accelerated CCSE NGX

• Course Objectives
• Course Layout
• Prerequisites
• Recommended Setup for Labs

2. Upgrading to VPN-1 NGX

• Objectives
• Key Terms
• Upgrading To NGX
• Upgrade Guidelines
• Upgrade Order
• Upgrade Export / Import
• Upgrading via SmartUpdate
• NGX Backward Compatibility
• Supported Versions
• Licensing NGX
• Obtaining Licenses
• Deploying Licenses
• Upgrading Licenses to NGX
• Licensing and Troubleshooting
• Viewing Licenses in User Center
• Viewing Licenses with SmartView Monitor
• SmartCenter Server Pre-Upgrade Overview
• Pre-Upgrade Verification-Tool Syntax
• SmartCenter Server Upgrade
• SmartCenter HA Upgrade
• SecurePlatform Upgrade
• Advanced Upgrade
• Upgrading on Windows
• Security Gateway Upgrade
• Clustered Deployment Upgrade
• SmartUpdate Upgrade
• SmartUpdate Upgrade
• SecurePlatform R54, R55, and Later Upgrade
• SecurePlatform NG FP2, FP3, or FP3 Edition 2 Upgrade
• Upgrading on Windows
• Lab 1: Upgrading NG with AI to NGX  

3. Advanced NGX Management Concepts

• Objectives
• Key Terms
• Advanced Rule Base Functions
• Object Cloning
• Lab 2: Creating Objects Using Object Cloning
• Database-Revision Control and Policy Package Management
• Database Revision Control
• Policy Package Management
• Lab 3: Using Database Revision Control
• Management High Availability
• Primary vs. Secondary
• Active vs. Standby
• Restrictions
• Synchronization
• Lab 4: Deploying Management HA
• Multicasting
• Configuring Multicast Access Control
• Interface Properties Multicast Restrictions
• IGMP
• Multicast Routing Protocols
• Multicast Traffic  

4. Monitoring Traffic and Connections

• Objectives
• Key Terms
• SmartView Monitor
• SmartView Monitor Login
• Key Features
• Monitoring Suspicious Activity Rules
• Monitoring Alerts
• Monitoring Gateways
• Monitoring Traffic or Counters
• Monitoring Tunnels
• Monitoring Remote Users
• Lab 5: Setting Up Suspicious Activity Rule in SmartView Monitor
• Lab 6: Checking Status in SmartView Monitor
• Eventia Reporter
• Eventia Reporter Login
• Key Features  

5. Administrative Utilities

• Objectives
• Key Terms
• Protocol Analyzers Overview
• NGX fw monitor
• Lab 7: Capturing Information with fw monitor
• NGX Debug Commands
• fw ctl pstat
• fw ctl debug
• Using the fw tab command
• Debug Mode with fwd
• Debugging cpd Process
• OPSEC Related Issues
• General cpd Issues
• Redirecting Output
• VPN Debugging Tools
• SecureClient Debugging Tools
• Debugging Logging
• Lab 8: Using fw ctl pstat  

6. Check Point QoS

• Objectives
• Key Terms
• Check Point QoS Overview
• Check Point QoS Architecture
• Check Point QoS Deployment Considerations
• Check Point QoS Policy
• Check Point QoS Rule Base
• QoS Action Properties
• Bandwidth Allocation and Rules
• Differentiated Services
• DiffServ Markings for IPSec Packets
• Interaction Between DiffServ Rules and Other Rules
• Low Latency Queuing
• Low Latency Classes
• Low Latency Class Priorities
• When to Use Low Latency Queueing
• Advanced Features
• Authenticated QoS
• Citrix MetaFrame Support
• Load Sharing
• Monitoring QoS Policy
• SmartView Tracker
• SmartView Monitor
• Eventia Reporter
• Optimizing Check Point QoS
• Lab 9: Configuring Check Point QoS Policy  

7. ClusterXL

• Objectives
• Key Terms
• High Availability
• Load Sharing
• State Synchronization
• CPHA Commands
• cphastart
• cphastop
• cphaprob
• fw hastat
• Debugging ClusterXL Issues
• ClusterXL Configuration Issues
• Lab 10: Deploying New Mode High Availability
• Lab 11: Manual Failover (Optional)
• Lab 12: Configuring Load Sharing Unicast (Pivot) Mode
• Lab 13: Configuring Load Sharing Multicast Mode (Optional)
• Review  

8. LDAP User Management with SmartDirectory

• Objectives
• Key Terms
• LDAP Servers
• Introduction to Account Management
• Multiple LDAP Servers
• Integrating LDAP with NGX
• Exporting Users
• Using an Existing LDAP Server
• Using SmartDashboard to Manage LDAP Users
• Organizational Units
• Before Starting Account Management
• Deleting an Object Tree
• Defining Users
• LDAP and User Manager Troubleshooting
• LDAP Issues
• Schema Checking
• User Manager Issues
• NGX Issues
• Important Debugging Tools
• Lab 14: Configuring LDAP Authentication with SmartDirectory
• Chapter Review  

9. Advanced VPN

• Objectives
• Key Terms
• VPN Routing
• VPN Routing with DAIP
• Remote-Access Clients and VPN Routing
• Security and Connectivity
• Remote Client to Remote Client
• DAIP Environment
• Hub / Satellite Environment
• SecuRemote / SecureClient Environment
• Lab 15: Configuring VPN Routing
• Route-Based VPN
• Example
• VPN Tunnel Interface
• Numbered / Unnumbered VTIs
• Configuring VTIs
• Directional VPN Rule Match
• Dynamic VPN Routing
• Configuring Dynamic VPN Routing Using OSPF
• Wire Mode in Route-based VPN
• How Wire Mode Works
• Wire Mode in Route-Based VPN
• Lab 16: Route-Based VPN Using Static Routes
• Lab 17: Dynamic VPN Routing Using OSPF