Checkpoint Firewall

CheckPoint Firewall

Exam 156-210.4:
Check Point NG with Application Intelligence-Management I

Describe the purpose of a firewall
Describe and compare firewall architecture
Identify the different components of VPN-1/FireWall-1 NG
Explain the function and operation of a Security Policy
Demonstrate the creation of network objects and groups using the SmartDashboard
Demonstrate the setup of anti-spoofing on the firewall
Demonstrate the setup and operation of an active Security Policy
Demonstrate how to hide and unhide rules, view hidden rules, define a rule mask, and apply a
rule mask
Show how to install and uninstall a Security Policy
List the guidelines for improving VPN-1/FireWall-1 NG performance using a Security Policy
Identify the three display modes of the SmartView Tracker
Identify and define SmartView Status Icons
Specify selection criteria and save log files
Describe the steps needed to block an intruder
List three blocking scope options and their uses
Describe how block request is used
Understand Application Intelligence technologies
Understand active-defense technologies
Configure VPN-1/FireWall-1 NG, to block common categories of attacks
Enable SmartDefense global protection mechanisms
Monitor the Security Policy with the SmartView Status
Demonstrate how to implement authentication
Demonstrate the process for creating users and groups
Demonstrate the setup of authentication parameters
Demonstrate how to implement User Authentication using various authentication schemes
List types of services supported by VPN-1/FireWall-1 NG requiring username and password
Demonstrate how to implement Client Authentication
Demonstrate how to implement Session Authentication
List the reasons and methods for Network Address Translation
Demonstrate how to set up Static NAT
Demonstrate how to set up Hide NAT
Describe basic network configurations using NAT
Describe the process of protecting your protected network with backups
Install and upgrade the VPN-1/FireWall-1 NG software
Describe the process of licensing VPN-1/FireWall-1 NG
Describe how VPN-1/FireWall-1 NG licensing works

Exam 156-310.4:
Check Point NG with Application Intelligence-Management II

List the minimum system requirements to run VPN-1/FireWall-1 NG
Demonstrate how to install Check Point NG with Application Intelligence on Windows
2000
Outline the procedure for uninstalling Check Point NG with Application Intelligence
Describe the purpose of tracking
Define parameters for the tracking of possible hacking attempts against the firewall
Describe the purpose of load balancing
Define the different methods for load balancing
Define the different methods of configuring Voice over IP (VoIP)
Describe how to set up the VPN-1/FireWall-1 to enable VoIP in an H.323- based configuration
Describe how to set up the VPN-1/FireWall-1 to enable VoIP in a SIP-based configuration
Define the VPN-1/FireWall-1 NG content security process and components
Demonstrate how to configure JAVA blocking CCSE Certification 17
Demonstrate how to block Web browser access to restricted sites in a URL list.
Demonstrate how to make use of a UFP Server to restrict access to FTP siteson the Internet
Describe the components and process of a SYN flood attack
Demonstrate how to enable a UFP Server to restrict access to FTP sites on the Internet
Explain encryption for Virtual Private Networks
Compare and contrast the common encryption methods
Describe the process for setting up a VPN
Describe Certificate Authority deployment using an internal CA.
Describe Certificate Authority deployment using an external CA.
Demonstrate gateway-to-gateway encryption using IKE with shared secrets
Demonstrate gateway-to-gateway encryption using IKE with certificates
Discuss the configuration of VPNs, using the Simplified VPN Setup
Demonstrate how to define SecuRemote users
Demonstrate how to deploy SecuRemote in an IKE VPN
Demonstrate how to configure and test SecuRemote using IKE
Discuss the benefits of Client Encryption inside the LAN
Demonstrate how to set up a Policy Server