This two-day Specialist-level course is designed for security professionals who want to gain the concepts and skills necessary to deploy and manage Custom Threat Prevention within a Check Point Security environment.
COURSE OBJECTIVE:
Not available. Please contact.
TARGET AUDIENCE:
Security professionals who want to customize IPS and Anti-Bot/Anti-Virus Protections for specific security needs and identify ways to optimize Threat Prevention performance.
COURSE PREREQUISITES:
Learning PathTraining:• CCSA (required)• CCSE (recommended) Prerequisites
Base Knowledge:• Internet Fundamentals• Networking Fundamentals• Networking Security• System AdministrationNIST/NICE
Work Role Categories:• Implementation & Operation• Protection & Defense
COURSE CONTENT:
Module 1: History of Threat PreventionLab Tasks• Verify the Security Environment• Verify Connectivity Between SystemsModule 2: IPS Protections
Lab Tasks• Enable and Configure Custom Threat Prevention• Configure the Inspection Settings• Update IPS Protections• Configure General and Specific Protections• Configure and Test Core ProtectionsModule 3: Anti-Virus and Anti-Bot Protections
Lab Tasks• Enable Anti-Bot and Anti-Virus• Configure Anti-Bot and Anti-VirusModule 4: Threat Prevention Policy Profiles
Lab Tasks• Create Custom Threat Prevention Profiles• Configure the Custom Profiles• Configure Anti-Bot and Anti-Virus in the Custom ProfilesModule 5: Threat Prevention Policy Layers
Lab Tasks• Configure Gateway Interface Settings• Configure Threat Prevention Policy Layers• Configure Threat Prevention Rules with Custom ProfilesModule 6: Threat Prevention Logs and Traffic Analysis Lab Tasks • Modify Threat Prevention Logs and Configure SmartEvent Settings • Test Threat Prevention Protections • View Threat Prevention Logs and Events • Use Web SmartConsole to View Logs and Events. Module 7: Threat Prevention Exceptions and Exclusions
Lab Tasks • Use IPS and Threat Prevention Exceptions • Create an Inspection Settings Exception • Create a Core Activations Exception Module 8: Correlated Threat Prevention Views and Reports
Lab Tasks • Verify SmartEvent Activation • Generate and Verify Logs for Reporting • Configure SmartEvent Views and Reports Module 9: Threat Prevention Updates
Lab Tasks • Verify Recent Updates • Configure Update Settings Module 10: Threat Prevention Performance Optimization
Lab Tasks • Analyze Threat Prevention Performance • Create Penalty Box Exceptions and Null Profiles • Test the Panic Button Protocol
FOLLOW ON COURSES:
Advanced, self-paced training (coming soon to www.checkpoint.com).• Threat Emulation
• Threat Extraction • Zero Phishing