Check Point NGX Security administration on Nokia IP Security Platform is a foundation course for Check Point’s flagship product, VPN-1 NGX (R65). This course provides an understanding of the basic concepts and skills necessary to configure and deploy VPN-1 NGX on a Nokia IP Security Platform (NSP). This course is designed for technicians who will be responsible for configuring and deploying VPN-1 NGX and NSPs, and for those who seek NSA and/or CCSA certification.

1. Preface
   • Course Layout
   • Certification v
   • Recommended Lab Topology
   • Check Point Security Architecture
   • Training and Certification
2. Sales Overview
   • The Nokia Complete System Approach
   • Nokia IP Security Platforms
   • Nokia IPSO and Nokia Network Voyager
   • Nokia Products
   • SOHO Products
   • Enterprise Products
   • Carrier/xSP Products
3. Nokia IPSO
   • Nokia IPSO Operating System
4. Initial Configuration
   • Nokia IP Security Platform Configuration
   • Boot Manager
5. Introduction to Voyager
   • Introduction to Voyager
   • Navigating within Voyager
6. Introduction to Voyager
   • IPSO FIle System and Directory Structure
7. Introduction to CLISH
   • CLISH — IPSO’s Dedicated Configuration Shell
8. Interfaces and the Database
   • IPSO’s Underlying Database
   • Support for Nokia VLAN
9. Typical System Configuration
   • Configuring Basic System Parameters
10. Auditing
    • Using Session-Based Voyager
11. Static Routes
    • Adding Static Routes
12. DHCP and PPPoE
    • What is DHCP
    • Extending BOOTP/DHCP using BOOTP Relay
    • PPPoE
13. Diskless Architecture
    • Nokia IPSO Diskless Architecture
14. Local Services
    • Working with Local Services
15. Diagnostics Tools
    • Troubleshooting
16. Configuring SSH
    • Secure Shell Overview
17. Configuring SSL
    • SSL Protocol
18. Maintaining Multiple Configurations
    • The Config File Structure
19. Backup, Restore, and Replacement
    • Making Backups of Nokia IP Security Platform
20. Managing IPSO Images
    • Upgrading IPSO Version
21. Package Installation and Management
    • Installing Software From Voyager
    • Installing From the CLI
22. Boot Manager
    • Resetting the Admin Password
    • Restoring an IPSO Device
23. User Management
    • Creating Accounts Other than “admin”
24. Role-Based Administration
    • Role-Based Administration
25. AAA Concepts
    • Overview of AAA
26. Configuring RADIUS
    • Configuring RADIUS
27. Simple HA with VRRP
    • What Happens When a Gateway Fails?
28. Check Point Clustering
    • ClusterXL
    • The Cluster Object
29. Monitoring
    • Monitoring the Nokia IP Security Platform
30. UNIX Diagnostics
    • “ps” Allows You to see Running Processes
31. Re-installing the Platform
    • Reinstall Procedure — Boot Manager
32. Nokia Technical Support
    • Nokia Complete System Approach
33. VPN-1 Overview
    • VPN-1 Fundamentals
    • Security Policy Management
    • VPN-1 SmartCenter Server
    • SmartUpdate and Managing Licenses
    • Review
34. Introduction to SecurePlatform
    • Introduction
    • SecurePlatform Hardware Requirements and Setup
    • Using the Command Line
    • Managing Your SecurePlatform System
    • SecurePlatform Command Shell
    • Review
35. Introduction to the Security Policy
    • Security Policy Basics
    • Managing Objects in SmartDashboard
    • Creating the Rule Base
    • Completing the Rule Base
    • Understanding Rule Base Order
    • Rule Base Management
    • Policy Management and Revision Control
    • Database Revision Control
    • Network Address Translation
    • Enabling VoIP Traffic
    • Detecting IP Spoofing
    • Multicasting
    • Review
36. Monitoring Traffic and Connections
    • SmartView Tracker
    • Blocking Connections
    • SmartView Monitor
    • Eventia Reporter
    • Review
37. User Management and Authentication
    • Creating Users and Groups in SmartDashboard
    • Introduction to VPN-1 Authentication
    • Authentication Methods
    • LDAP User Management with SmartDirectory
    • Review
38. Check Point QoS
    • Check Point QoS Overview
    • Check Point QoS Architecture
    • Deploying QoS
    • Check Point QoS Rule Base
    • Differentiated Services
    • Low Latency Queuing
    • Monitoring QoS Policy
    • Optimizing Check Point QoS
    • Review
39. Basic SmartDefense and Content Inspection
    • Introducing SmartDefense
    • Network Security
    • Application Intelligence
    • Web Intelligence
    • SmartDefense Services
    • Content Inspection
    • Review

Exercise:

• Configure and maintain the Nokia IP appliance (IPSO 4.2)
• Install and configure the SmartCenter Server
• Establish trust between a Gateway and SmartCenter Server
• Develop a network model using SmartMap
• Create a Policy Package to configure a Rule Base
• Enable Static NAT on a network
• Simulate a malicious network intrusion, and block the attack
• Enforce the Suspicious Activity Rule with SmartView Monitor
• Create user templates and define users
• Test Client Authentication
• Configure QoS rules to support traffic-priority requirements
• Configure a SmartDefense to detect port scans and successive multiple-connection attempts
• Configure Web Intelligence to detect a simple worm signature

Persons attending this course should have a working knowledge of internetworking concepts and an understanding of TCP/IP, network addressing and subnet masks. They should also have knowledge of basic router concepts as they relate to Layer 3 of the OSI model, including RIPv1 and v2, and static routes. Basic knowledge of networking concepts and topologies, and an understanding of the OSI model is required.

The participants will obtain certificates "The power of 2" signed by Nokia Enterprise Solutions and Check Point.