Checkpoint 156-215 Check Point Security Administration NGX (.65)

About Exam

With over 24,000 CCSA certified professionals worldwide, CCSA NGX certification is one of the most highly recognized and respected vendor-specific security certifications available.

The foundation of Check Point certifications, CCSA NGX R65 certification validates a Security Administrator's ability to maintain day-to-day operation of Check Point security solutions and ensure secure access to information across the network. Proficiencies include creating and installing Security Policies, using logging and reporting features, and managing anti-spoofing, Network Address Translation (NAT), and OPSEC applications.

More information on specific topics, skills, and competencies covered by CCSA NGX R65 certification is available in the course and exam details.

Exam Objectives

• Given your understanding of Check Point's three-tier architecture and basic firewall concepts, design and install a distributed deployment of VPN-1.
• Test to verify the VPN-1 deployment, based on SIC establishment between the SmartCenter Server and the Gateway using SmartDashboard.
• Given the most current configuration, update the appropriate network interface using the sysconfig utility to change the management interface.
• Given specific instructions, perform a backup and restore of the current Gateway installation from the command line.
• Given the network topology, create and configure network, host, and gateway objects for your city site.
• In SmartMap view, actualize your city site's network objects.
• In SmartMap, given your partner city's network data, create and configure your partner city's Web server object.
• Create a basic Rule Base in SmartDashboard that includes permissions for administrative users, external services, and LAN outbound use. Test your Rule Base with your partner city, and evaluate logs in SmartView Tracker.
• Given your Policy's implicit rules, configure an implied rule for logging purposes.
• Manually configure NAT rules on your Web-server and Gateway objects.  Refer to the Global Properties of the Gateway object.
• Configure the Policy using Database Revision Control.
• Given a deployment strategy, test and verify a new Policy using SmartView Tracker.
• Given evidence of a potential intrusion or attack using SmartView Tracker, change the Policy to block the offending connection.
• Use SmartView Monitor to block and monitor a user's activities by implementing the SAM rule.
• Given accumulated raw-logged data, configure Eventia Reporter to monitor and audit network traffic.
• Create and configure users in SmartDirectory for access to your LAN.
• Modify your Rule Base to provide permissions for users.
• Configure partially automatic Client Authentication, and install, test, and verify the Policy in SmartView Tracker.
• Given a distributed network deployment, design a strategy for implementing QoS.
• Based on an implementation of QoS, configure the required bandwidth allocation for the network.
• Using content inspection, Application Intelligence, and/or Web Intelligence, configure for port scanning and HTTP worm catcher.
• Create a SmartDefense profile, and incorporate port-scanning and successive-events settings into the profile. Test the configuration with your partner city's Web server, and evaluate logs using SmartView Tracker.
• Block connections, given evidence of a potential intrusion or attack. Evaluate logs.
• Based on network analysis disclosing threats by specific sites, configure a Web-filtering and antivirus Policy to filter and/or scan the threatening traffic.