Bring Check Point CCSE cert to my bag

Since i achieved my Check Point CCSA i´ve decided to go to next level which means CCSE. I used old CBT Nuggets for R65/R70 , Student/Lab guide for R77, and also the Study guide provided by Check Point. I also read a few SKs to help to understand concepts and Blades which i’ve never touched before.

You can find the study guide here.

SK’s

 

Videos Overview

1. CCSE Welcome

2. Mgmt High Availability

This will present the student with the concept of deploying a backup Smart Center (Mgmt Server)

3. HA Cluster

This will give the student the first must have skill set and that is clustering Check Point firewalls using an New mode HA multicast configuration.

4. Load Sharing Clusters

This nugget will give the student the skills required to deploy load sharing clusters with unicast and multicast protocols.

5. Smart Update & Local upgrades

This nugget will give the student the skills to upgrade local and remote Check Point firewall deployments.

6. Cluster Trouble Shooting

This nugget will cover the process needed to perform health checks & ensure proper configuration of Check Point Firewalls.

7. Encryption

This nugget will cover the process of what encryption protocols are needed to maintain confidentiality, Integrity and availability of data over VPN’s

8. Domain Based VPN

This nugget will cover the first and most common Check Point VPN using encryption domains.

9. SSL VPN

This nugget will cover the deployment of an SSL remote access VPN using Check Point SSL Network Extender.

10. Remote Access VPN (IKE)

This nugget will cover the deployment of a remote access VPN using Check Point secure client on Windows pc

11. Route Based VPN (VTI)

This nugget will cover configuring point-to-point vpn using VTI. A VTI is an operating system level virtual interface that can be used as a gateway

12. Peer VPN’s

This nugget will cover the options need to setup a VPN with a peer company.

13. SCP on Splat

This nugget will cover the most secure way of transferring files to and from your Check Point Secure Platform devices.

14. Smart Center Recovery

This nugget will cover how to recover a Smart Center Mgmt server from a cpinfo or cpbackup file.

15. Disaster Recovery of Cluster Member

This nugget will cover how to recover a cluster member that has suffered a failure while keeping the organization online.

16. Final Note

In this final nugget we cover some study skills for CCSE prep and some housekeeping tips to maintain your Smart Center mgmt server.

17. CCSE Welcome

What’s new in R70. About this updated series.

18. Mgmt Portal

Virtual machine configuration. Software installation steps. Smart dashboard configuration. Navigation of portal settings.

19. R70 Cluster

SPLAT FW installation. Sysconfig of FW. Cluster object configuration. Policy configuration. Policy installation and verification.

20. Command Line World Part 1

Review of core XL. FW monitor troubleshooting.

21. Command Line World Part 2

Troubleshooting with TCP dump. FW troubleshooting and verification commands.

22. Smart Provisioning

FW object settings. Provisioning profiles. Review of SP gui settings. Deploying FW settings.

23. Smart Analyzer

Software installation. Dashboard object configuration. Server components configuration.

24. Smart Reporter

Gui reporter configuration. Review of report settings

Exam

Exam: 156-315.77
Duration: 100 +30 extension
Questions: 70 to 100
Minimum to Pass:70%
Valid for: 2 Years

This time i got 89 questions, and i was scared because i mixed concepts of SmartEvent and i forgot about a few daemons/processes.

I leave here my notes guys to help you out.

And yes, i PASSED! So now i need to wait for my certificate and kit, Check Point needs 6 to 8 weeks to issue that. Shall i go to CCMSE? Maybe later, now it´s time to jump to VMware stuff, because any conversation which has cloud keyword becomes an Hot Topic!

 

References:

Check Point Certified Security Expert (CCSE) R77

Check Point Training FAQ