Check Point Security

Module 1: Check Point Security Architecture

• Check Point Software Technologies overview and product portfolio
• Three-tier architecture: Security Management Server, Security Gateway, and SmartConsole
• Check Point Security Operating System (GAIA) overview
• Navigating SmartConsole: policy, objects, logs, and monitoring

Module 2: Security Policy Management

• Access Control Policy: rule base structure, objects, and actions
• Network objects: hosts, networks, ranges, and dynamic objects
• Service and application objects: predefined and custom
• Policy installation, verification, and change management workflow

Module 3: NAT and VPN Configuration

• Static NAT and hide NAT configuration for address translation
• Anti-spoofing and topology configuration on gateway interfaces
• Site-to-site VPN: IKE, IPSec, and encryption domain setup
• Remote access VPN: Check Point Mobile Access and SSL VPN

Module 4: Threat Prevention Blade

• Intrusion Prevention System (IPS) profile configuration
• Anti-Bot and Anti-Virus blade policy setup
• Threat Emulation and Threat Extraction for sandbox analysis
• Zero Phishing blade for credential theft protection

Module 5: Application Control and URL Filtering

• Application Control policy: allow, block, and limit actions
• URL Filtering categories and custom site classification
• HTTPS Inspection for encrypted traffic analysis
• Identity Awareness: user-based policy enforcement with AD integration

Module 6: SmartEvent and Security Monitoring

• SmartEvent architecture and log correlation engine
• Creating SmartEvent policies and event triggers
• Security dashboards: traffic, threats, and compliance views
• Log investigation: filtering, searching, and timeline analysis

Module 7: High Availability and ClusterXL

• ClusterXL modes: Load Sharing and High Availability
• Cluster object setup and synchronisation configuration
• Failover testing and cluster state monitoring
• Maestro Hyperscale Network Security overview

Module 8: Capstone Project and Assessment

• Check Point firewall policy design and implementation exercise
• VPN configuration and connectivity testing project
• Threat prevention policy tuning and log investigation simulation
• Final assessment and course certification

Experience in the Industry Gain expertise from Check Point Certified Security Expert (CCSE) professionals who have designed, deployed, and managed Check Point firewall solutions for enterprise perimeter security, data centre protection, and secure remote access.

Backgrounds at the Top Our Check Point trainers have administered SmartConsole environments and managed security gateway fleets at telecommunications companies, financial institutions, and government networks across multiple countries.

Clear & Effective Teaching Check Point SmartConsole policy management, NAT, VPN, threat prevention blades, application control, SmartEvent monitoring, and ClusterXL high availability are taught with practical network security examples.

Hands-On Learning Focus Students create security policies, configure VPNs, set up threat prevention profiles, investigate security events, and configure ClusterXL through structured hands-on lab exercises on Check Point gateways.

Up-to-Date Knowledge Trainers keep content current with the latest Check Point R8x releases, Infinity architecture updates, Harmony endpoint and SASE capabilities, and evolving network security best practices.