This course is designed for security experts who require the necessary knowledge to perform advanced troubleshooting skills while managing their security environment. This course is also useful for security professionals who are who are pursuing the Check Point Certified Troubleshooting Expert (CCTE) certification.
Learn How To
Provide advanced troubleshooting skills to investigate and resolve more complex issues that may occur while managing your Check Point Security environment.
OBJECTIVES
• Identify and use Linux-based and Check Point commands and tools for system monitoring, file editing, and file viewing.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Management Server and API Server issues.
• Investigate and troubleshoot traffic or security-related issues using logs and events monitoring tools.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Security Gateway issues.
• Demonstrate an understanding of advanced troubleshooting tools and techniques for kernel debugging.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Access Control issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Identity Awareness issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Site-to-Site VPN Troubleshooting issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Client-to-Site VPN Troubleshooting issues.
Working knowledge of UNIX and/or Windows operating systems, Working knowledge of Networking, TCP/IP, CCSE training/certification, Advanced knowledge of Check Point Security Products.
AUDIENCE
This course is designed for security experts and Check Point resellers who desire to obtain the necessary knowledge required to perform more advanced troubleshooting skills while managing their security environments
Introduction to Advanced Troubleshooting
Advanced Management Server Troubleshooting
Advanced Troubleshooting with Logs and Events
Advanced Gateway Troubleshooting
Advanced Firewall Kernel Debugging
Advanced Access Control Troubleshooting
Advanced Identity Awareness Troubleshooting
Advanced Site-to-Site VPN Troubleshooting
Advanced Client-to-Site VPN Troubleshooting
EXERCISES
• Collect and read live and historical CPView data.
• Troubleshoot CPM and SmartConsole login issues.
• Restore a Management High Availability environment from a temporary Primary Down condition.
• Troubleshoot SmartLog processes.
• Collect and interpret user mode debugs.
• Collect and interpret kernel debugs.
• Debug Unified Policy Inspection in kernel to understand match process.
• Debug the Identity Awareness user mode processes.
• Collect and interpret Site-to-Site VPN Debugs.
• Collect and interpret Remote Access VPN Debugs.