Module 1: Management High Availability
• Explain the purpose of Management High Availability.
• Identify the essential elements of Management High
Availability.
Lab Tasks
• Deploy and configure Management High Availability
• Ensure the failover process functions as expected
Module 2: Advanced Policy Management
• Identify ways to enhance the Security Policy with more
object types.
• Create dynamic objects to make policy updatable from
the Gateway.
• Manually define NAT rules.
• Configure Security Management behind NAT.
Lab Tasks
• Use Updatable Objects
• Configure Network Address Translation for server and
network objects
• Configure Management behind NAT for Branch Office
connections
Module 3: Site-to-Site VPN
• Discuss site-to-site VPN basics, deployment, and
communities.
• Describe how to analyze and interpret VPN tunnel
traffic.
• Articulate how pre-shared keys and certificates can
be configured to authenticate with third-party and
externally managed VPN Gateways.
• Explain Link Selection and ISP Redundancy options.
• Explain tunnel management features.
Lab Task
• Configure Site-to-Site VPN with internally managed
Security Gateways
Module 4: Advanced Security Monitoring
• Describe the SmartEvent and Compliance Blade
solutions, including their purpose and use.
Lab Tasks
• Configure a SmartEvent Server to monitor relevant
patterns and events
• Demonstrate how to configure Events and Alerts in
SmartEvent
• Demonstrate how to run specific SmartEvent reports
• Activate the Compliance Blade
• Demonstrate Security Best Practice settings and alerts
• Demonstrate Regulatory Requirements Compliance
Scores
Module 5: Upgrades
• Identify supported upgrade options.
Lab Task
• Upgrade a Security Gateway
• Use Central Deployment tool to install Hotfixes
Module 6: Advanced Upgrades and Migrations
• Export/import a Management Database.
• Upgrade a Security Management Server by freshly
deploying the new release or using a new appliance.
Lab Task
• Prepare to perform an Advanced Upgrade with Database
Migration on the Primary Security Management Server
in a distributed environment
• Perform an import of a Primary Security Management
Server in a distributed Check Point environment
Module 7: ElasticXL Cluster
• Describe the ElasticXL Cluster solution, including its
purpose and use.
Lab Tasks
• Deploy an ElasticXL Security Gateway Cluster