Check Point Troubleshooting Expert R81.20 (CCTE)

Objetivos

• Identify and use Linux-based and Check Point commands and tools for system monitoring, file editing, and file viewing.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Management Server and API Server issues.
• Investigate and troubleshoot traffic or security-related issues using logs and events monitoring tools.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Security Gateway issues.
• Demonstrate an understanding of advanced troubleshooting tools and techniques for kernel debugging.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Access Control issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Identity Awareness issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Site-to-Site VPN Troubleshooting issues.
• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Client-to-Site VPN Troubleshooting issue

Destinatários

This course is designed for security experts and Check Point resellers who desire to obtain the necessary knowledge required to perform more advanced troubleshooting skills while managing their security environments.

Pré-Requisitos

• Working knowledge of UNIX and/or Windows operating systems
• Working knowledge of Networking TCP/IP
• CCSE training/certification
• Advanced knowledge of Check Point Security products

Programa

• Introduction to Advanced Troubleshooting
• Advanced Management Server Troubleshooting
• Advanced Troubleshooting with Logs and Events
• Advanced Gateway Troubleshooting
• Advanced Firewall Kernel Debugging
• Advanced Access Control Troubleshooting
• Advanced Identity Awareness Troubleshooting
• Advanced Site-to-Site VPN Troubleshooting
• Advanced Client-to-Site VPN Troubleshooting

Lab Exercises

• Collect and read live and historical CPView data.
• Troubleshoot CPM and SmartConsole login issues.
• Restore a Management High Availability environment from a temporary Primary Down condition.
• Troubleshoot SmartLog processes.
• Collect and interpret user mode debugs.
• Collect and interpret kernel debugs.
• Debug Unified Policy Inspection in kernel to understand match process.
• Debug the Identity Awareness user mode processes.
• Collect and interpret Site-to-Site VPN Debugs.
• Collect and interpret Remote Access VPN Debugs