This course provides students with the fundamental knowledge, skills, and hands-on experience needed to configure, manage, and monitor an existing Quantum Security Environment.

When you complete this course, you will be able to:

• Access and navigate the Gaia Portal and the Gaia Command Line Interface.
• Manage Administrator access.
• Create and configure Network Objects.
• Create new Security Policies.
• Configure Ordered Layers and a Shared Inline Layer.
• Elevate the traffic view and monitor system states.
• Configure Identity Awareness.
• Elevate security with HTTPS Inspection.
• Configure Application Control and URL Filtering.
• Configure Autonomous Threat Prevention.

Module 1: Introduction to Quantum Security

• Identify the primary components of the Check Point Three-Tier Architecture and explain how they work together.

Lab Tasks:

• Explore Gaia on Security Management Server
• Explore Gaia on Dedicated Log Server
• Explore Gaia on Security Gateway Cluster Members
• Connect to SmartConsole
• Navigate GATEWAYS & SERVERS Vies
• Navigate SECURITY POLICIES Views
• Navigate LOGS & EVENTS Views
• Navigate MANAGE & SETTINGS Views

Module 2: Administrator Account Management

• Explain the purpose of SmartConsole administrator accounts
• Identify features for collaboration: session management, concurrent administration, policy installation

Lab Tasks:

• Create new administrators and assign profiles
• Test administrator profile assignments
• Manage concurrent sessions
• Take over another session and verify status

Module 3: Object Management

• Explain the purpose of SmartConsole objects
• Provide examples of physical and logical objects

Lab Tasks:

• View and modify GATEWAYS & SERVERS objects
• View and modify network objects
• View and modify service objects

Module 4: Security Policy Management

• Explain the purpose of Security Policies
• Identify the essential elements of a Security Policy.
• Identify features and capabilities that enhance the configuration and management of the Security Policy.

Lab Tasks:

• Verify and modify the Security Policy.
• Install the standard Security Policy.
• Test the Security Policy.

Module 5: Policy Layers

• Demonstrate an understanding of the Check Point policy layer concept.
• Explain how layers affect traffic inspection.

Lab Tasks:

• Add an Ordered Layer
• Configure and deploy Ordered Layer rules
• Test Ordered Layer policy
• Create Inline DMZ Layer
• Test Inline DMZ Layer

Module 6: Security Operations Monitoring

• Explain the purpose of security operations monitoring
• Tune log server configuration
• Use predefined and custom queries to filter the logging results.
• Monitor the state of Check Point systems.

Lab Tasks:

• Configure log management
• Enhance rulebase view, rules, and logging
• Review logs and search for data
• Configure Monitoring Blade
• Monitor status of the systems

Module 7: Identity Awareness

• Explain the purpose of the Identity Awareness solution
• Identify the essential elements of Identity Awareness.

Lab Tasks:

• Adjust security policy for Identity Awareness
• Configure Identity Collector
• Define the user access role
• Test Identity Awareness

Module 8: HTTPS Inspection

• Explain the purpose of HTTPS Inspection solution
• Identify the essential elements of HTTPS Inspection

Lab Tasks:

• Enable HTTPS Inspection
• Adjust access control rules
• Deploy Security Gateway certificate
• Test and analyze policy with HTTPS Inspection

Module 9: Application Control and URL Filtering

• Explain the purpose of the Application Control and URL Filtering solutions
• Identify the essential elements of Application Control and URL Filtering

Lab Tasks:

• Adjust the Access Control Policy
• Create and adjust Application Control and URL
• Test and adjust the Application Control and URL Filtering Rules

Module 10: Threat Prevention Fundamentals

• Explain the purpose of the Threat Prevention solution
• Identify the essential elements of Autonomous Threat Prevention

Lab Tasks:

• Enable Autonomous Threat Prevention
• Test Autonomous Threat Prevention

This course is recommended for Security Administrators, Engineers, Analysts, Consultants, Architects

This course prepares learners for Check Point Certified Security Administrator (CCSA exam #156-215.82) via Pearson VUE