課程簡介
對電腦網絡保安有所認識的人，都應該聽過 Check Point 這個名字。它們自從在 1993 年開發了 Check Point FireWall-1 防火牆軟件及 Stateful Inspection Engine 技術後，在全球的網絡保安軟件市場中一直都穩佔領先位置。
Check Point 已經是全球防火牆軟件市場的龍頭，其推出的產品 VPN-1/FireWall-1 (防火牆軟件)，市場佔有率已超過 60%，是目前市面所能找到最綜合性的網絡安全產品。同時由 Check Point 制定的考試及頒發的 CCSA 及 CCSE 國際認可證書，亦因為該產品擁有很高的市場佔有率，吸引了不少專業人士考取及被業界廣泛認可。
適合人仕:
有志投身
I.T 網絡保安範疇的人仕系統工程師，網絡管理員，網絡保安人員已考取
Cisco CCNA 證書的同學修讀條件:對
Windows Server 系統有基本操作經驗對互聯網及
TCP/IP 有一定程度的認識對網絡保安具有濃厚興趣課程包括:導師精心編製 CCSA
NGX R70 課程筆記Sygress
CCSA NGX R70 電子書Check
Point NGX VPN-1/Firewall-1 試用版光碟課程實習 CD-ROM 一隻全新
3 月份更新的模擬試題連參考答案 (模擬試題 "一年" 免費更新保證，考試更有彈性)保證一次過合格，否則可免費重考一次由擁有
CCSA / CCSE / MCSE / MCITP 及多年豐富網絡工作經驗之導師任教課程電腦設備:2GB DDR2 記憶體、500GB SATA II Hard Disk 及 17" LCD Display，加上每部電腦均連接上 100/1000 Mbps Fast Ethernet 高速網絡，在學習過程中保證 "暢通無阻"。
授課語言:
課程全長:
日間課程: 3 堂 /
12 小時
(每堂 4 小時)
晚間課程: 4 堂 / 12 小時 (每堂 3 小時)
開課日期:
課程費用:
$ 2,980 (CCSA+CCSE NGX R70 綜合課程)
匯豐信用卡可享 12 個月免息分期
(CCSA+CCSE NGX R70 綜合課程)(CCSA
NGX R70 每月只須 $ 188 / CCSA+CCSE NGX R70 每月只須 $ 249)舊生或舊生介紹可享
95 折 優惠 (請預早致電留位時登記作實)舊生在報名表上獲導師簽名推薦更可享 9 折 優惠 (有關詳情請向您的導師查詢)
完成本課程後可參加的相關考試:
試題數量: 73 題
考試時間: 120 分鐘
合格分數: 70 %
模擬試題參考
成功通過考試後獲得的國際認可證書及資格:
Chapter
1: Introduction to VPN-1Understanding
Check Point’s three-tier architecture
Understanding
Firewall concepts,
design & install a distributed deployment of VPN-1.
Test
to verify the VPN-1 deployment, based on SIC establishment
Chapter
2: Introduction to SecurePlatformGiven
the most current configuration, update the appropriate network
interface
Perform a backup and restore of the current
Gateway installation.
Chapter
3: Introduction to the Security PolicyCreate and configure network, host, and
gateway objects for your city site.
In
SmartMap view, actualize your city site’s network objects.
Create and
configure your partner city’s Web server object.
Create
a basic Rule Base in SmartDashboard.
Calculate
and apply an addressing scheme including VLSM IP addressing design
Manually
configure NAT rules on your Web-server and Gateway objects.
Configure
the Policy using Database Revision Control.
Chapter
4: Monitoring Traffic and ConnectionsGiven
a deployment strategy, test and verify a new Policy using SmartView
Tracker.
Given
evidence of a potential intrusion or attack using SmartView Tracker.
Use
SmartView Monitor to block a user’s activities by
implementing the SAM rule.
Given
accumulated raw-logged data, configure Eventia Reporter.
Chapter
5: AuthenticationCreate
and configure users in SmartDirectory for access to your LAN.
Modify
your Rule Base to provide permissions for users.
Configure
partially automatic Client Authentication.
Chapter
6: Check Point QoSGiven
a distributed network deployment, design a strategy for implementing
QoS.
Based
on an implementation of QoS, configure the required bandwidth
allocation.
Chapter
7: Basic SmartDefense and Content InspectionUsing
content inspection, Application Intelligence, and/or Web
Intelligence
Configure for port scanning and HTTP worm catcher.
Create
a SmartDefense profile, and incorporate port-scanning.
Test
the configuration with your partner city’s Web server using SmartView Tracker.
Block
connections, given evidence of a potential intrusion or attack.
Evaluate logs.
Configure
a Web-filtering and antivirus Policy to filter the
threatening traffic.