Check Point Advanced Trouble Shooting Course

Advanced Troubleshooting course

Course summary

The course addresses numerous techniques for the troubleshooting and debugging of Check Point based security systems; providing tools and know-how on deep analysis techniques, thus allowing faster resolution of most issues.

During 3

days course participants will acquire in-depth knowledge of Firewall-1/VPN-1 architecture, underlying technologies and methodologies for troubleshooting most elements of security systems, and utilise the relevant tools. The course includes various examples, based on Check Point Support cases and Check Point Professional Services field experience, in additional to hands-on Practical Labs.


Target audience

The course is for firewall administrators and managers, security engineers, security consultants, integrators and support partners that wish to improve their troubleshooting techniques and get "under the hood".

Required knowledge

It is highly recommended that the course participants will have experience in planning, implementing and managing network security systems based on Checkpoint products.

Check Point's Management I (CCSA) and II (CCSE) courses or equivalent knowledge is recommended before taking this course.

Course agenda (3 days)

1. General concepts and debugging
Policy Installation flow
Main VPN-1 processes
VPN-1 kernel I/S
Configuration files
Commonly used commands


2. FW Monitor
What is ‘fw monitor’?
Client to server connection
Server to client connection
Expressions and Tips
Analyzing 'fw monitor' output
Examples


3. Kernel Debug in NGX
Packet flow in the kernel and the chain modules
Debugging Mechanism
Debugging Flags
Debugging Tips
Examples


4. NAT debugging
General explanation
How NAT works
How to Debug NAT issues
Debug example of Hide NAT
Other cases of NAT



5. VPN troubleshooting
General
Kernel and User Mode functions
IKE and IPSec
logs and tools
Troubleshooting techniques

6. Clustering
Understanding the Cluster Elements
Check Point Solutions: ClusterXL (HA ,Load Sharing)
Advanced features and problematic scenarios
3rd party clusters
Troubleshooting for clusters


There is option for additional modules as add-on to the course baseline (requires more days):

Provider-1
VSX


Course Dates

Sydney
July 2011 : 11th-13th Core Fundamentals, 14th-15th VSX and Provider-1


Melbourne
July 2011 : 25th-27th Core Fundamentals, 28th-29th VSX and Provider-1


Brisbane
August 2011 : 8th-10th Core Fundamentals, 11th-12th VSX and Provider-1



Cost per attendee for 3 day Core Fundamentals – US$2,500.00

Cost per attendee for 5 day Core Fundamentals, VSX & Provider-1 – US$3,000.00



To register please contact - Geoff Prentis gprentis@checkpoint.com



The above dates are currently tentative. A minimum number of 4 attendees are required for the course to go ahead.