Check Point Security Administration NGX III offers comprehensive training to enhance enterprise knowledge of VPN-1 NGX, network planning, route-based VPN, and troubleshooting procedures. Audience : System administrators, security managers, or network engineers implementing VPN-1 NGX in an enterprise setting. Prerequisite : Check Point Security Administration NGX I Rev 1.1 and Check Point Security Administration NGX II Rev 1.1
Duration of the course : |
Part Time : N/A |
Full Time : 4 Days (8 Hours per day) |
Course Contents :
|
General troubleshooting methods:
Troubleshooting Guidelines.
Collecting Related Information.
What to Check before Installing VPN-1 NGX.
IP Forwarding & Boot Security.
SIC and ICA issues.
Debugging SIC Maintaining SIC.
Client-Side Destination NAT.
Debugging NAT.
Rule base and NAT issues.
Anti-spoofing issues.
File Management:
- Overview cpinfo File.
- InfoView.
- Opening SmartDashboard in InfoView.
- Objects_5_0.C and objects.C.
- Using DbEdit.
- GuiDBedit.
- Modifying *.def Files.
- Troubleshooting Logging Issues.
- Maintaining Logs and Log-Buffer Queue.
Protocol Analyzers:
- tcpdump and Expressions.
- Using tcpdump.
- Viewing tcpdump output.
- Reading snoop Output.
- Snoop and Security.
- fw monitor Syntax.
- INSPECT Virtual Machine.
- Filer Expressions.
- fw ctl Chain.
- Using Ethera.l
- Viewing Connections Dropped by Kernel.
- Using Filters with Ethereal.
NGX Debugging Tools:
- fw ctl Debug.
- fw ctl kdebug.
- Kernel Modules.
- fw ctl debug Flags.
- Debugging fwd/fwm.
- fwd/fwm Debug switches.
- Debugging without Restarting fwd/fwm.
- Debugging Restarting fwd/fwm.
fw Advanced Commands:
- fw tab Options.
- Table Attributes.
- fw tab Examples.
- fw ctl commands.
- Other fw Commands.
- fw advanced Commands.
- fwm commands.
- fwm debexportcomfwm dbimport.
- fw lock_admin.
Security Servers:
- The folding process.
- Folding – Process Example.
- Content – Security Rule Order.
- Security Server Default Messages.
- Troubleshooting Security Server Issues.
- Reviewing CPU and Memory Editing fwauthd.conf.
- Debugging Security Servers.
- Multiple Security Server Troubleshooting.
VPN Debugging Tools:
- IKE Basis.
- Phase 1 and Phase 2.
- Encryption Issue.
- VPN Debugging Tools.
- vpn debug command.
- vpn command.
- Comparing SAs.
- Troubleshooting Tables.
Troubleshooting and Debugging:
SecuRemote/SecureClient:
- Ports used through the tunnel.
- Packet Flow when Creating a Site.
- Packet Flow when Connecting/Resolving Gateway IP.
- Packet Flow when Connecting/IKE Negotiation.
- Packet Flow when Connecting/Encrypting Data.
- Link Selection for Remote Access Overview.
- Link-Selection for Remote Access Overview.
- Link-Selecting for Remote Access Overview.
- Link-Selection for Methods in VPN-1 NGX.
- SecuRemote/SecureClient Debugging tools.
- Enhanced Debugging Tool.
Advanced VPN:
- Route-Based VPN.
- Domain-Based VPN.
- VPN Tunnel Interface.
- VPN Routing Process.
- Numbered/Unnumbered VTIs.
- Configuring Numbered VITs.
- Configuring unnumbered VITs.
- Dynamic VPN Routing.
- Configuring Dynamic VPN routing Using OSPF.
- How Wire Mode Works.
- Wire Mode in Route-Based VPN.
- Directional VPN Rule Match.
- Tunnel Management.
- Permanent Tunnels.
- Tunnel-Management Configuration.
- VPN Tunnel Sharing Configuration.
ClusterXL:
- Configuration Recommendations.
- Recommendations for ClusterXL.
- Recommendations for State Synchronization.
- Troubleshooting ClusterXL.
- Kernel Flags.
|
|
University Courses