check point - CCMSE NGX Plus VSX

The Check Point - CCMSE NGX Plus VSX training course will provide participants with an understanding of key concepts and skills necessary to effectively configure and deploy VPN-1 VSX, to manage multiple customer sites. This course provides hands-on training for installing VSX on SecurePlatform. Participants will learn to configure Security Policies for multiple remote firewalls, using the Provider-1 NGX Multi-Domain GUI (MDG). They will also learn about managing multiple firewall-secured environments, and using Virtual Systems and Virtual Routers in a VSX configuration. Participants will understand how to perform advanced configuration tasks, such as establishing redundant VSX Gateways for High Availability functions.

  • System administrators, security managers, or network engineers.

COURSE AGENDA

  • VSX Management
  • SmartCenter Management Model
  • Provider-1 Management Model
  • Check Point Licenses
  • Upgrading Previous Deployments
  • VSX NGX System Requirements
  • Installing and Configuring VSX
  • Installing Provider-1 NGX for VSX on a Secure Platform Machine
  • Installing the Provider-1 NGX MDG on Windows
  • VSX Overview
  • VSX Building Blocks
  • Managing the VSX Gateway
  • Clustering in VSX
  • IP Address Allocation for VSX Implementation
  • VSX Packet Flow and Routing
  • Routing from Virtual System to Virtual System
  • Overlapping IP Address-Space Support
  • VSX Gateway's Virtual Topology
  • Management of Virtual Devices
  • Installing the VSX Gateway on SecurePlatform
  • Unique State-Table Configuration
  • Security Policy Separation
  • Unique Configuration Parameters
  • Management Virtual System
  • VSX Interface Support
  • External Virtual Routers
  • Management Server Communication
  • Provisioning and Network-Configuration Channel
  • System Virtualization
  • Advanced Routing Configurations
  • Virtual Switch
  • Virtual Switch in a Cluster
  • Virtual Switch and Dynamic Routing using OSPF
  • VLAN Technology
  • VLAN Tagging
  • VLAN Tag Composition
  • VLAN Trunking and Membership
  • Implicit/Explicit VLAN Membership
  • VLAN Configuration in a VSX Environment
  • Configuring Interfaces to Allow VLAN-Tagged Traffic
  • Associating VLAN Traffic with specific Virtual Systems
  • Virtual System in Bridge Mode
  • Security for Virtual Systems in Bridge Mode
  • Clustering Virtual Systems in Bridge Mode (ClusterXL Only)
  • VSX Gateway High Availability
  • NGX and VSX Clustering
  • VSX state Synchronization
  • Synchronization Network
  • Synchronization Modes
  • Deploying Multiple VSX Gateways in an HA Environment
  • Creating VSX Gateway and EVR Cluster Objects
  • Completing VSX System Configuration
  • Configuring Customer Clusters