Check Point Certified Troubleshooting Administrator (CCTA)

Administrátory a zkušenejší uživatele, kteří se potřebují dovědět možnosti řešení problému prři správě platformy Check Point.

• Understand how to use Check Point resources for support.

• Understand how to perform packet captures using tcmdump and FW Monitor command tools.

• Understand the basic process of kernel debugging, and how debug commands are structured.

• Recognize how to use various Linux commands for troubleshooting system issues.

• Recognize communication issues that may occur between SmartConsole and the SMS and how to resolve them.

• Understand how to troubleshoot SmartConsole login and authentication issues.

• Understand how to prevent and resolve licensing and contract issues.

• Understand how to troubleshoot issues that may occur during policy installation.

• Understand communication issues that may occur when collecting logs and how to resolve them.

• Recall various tools to use when analyzing issues with logs.

• Understand how to restore interrupted communications during heavy logging.

• Understand how NAT works and how to troubleshoot issues.

• Understand Client Side and Server Side NAT.

• Understand how the Access Control Policy functions and how the access control applications work together.

• Understand how to troubleshoot issues that may occur with Application Control and URL Filtering. • Understand how the HTTPS Inspection process works and how to resolve issues that may occur during the process.

• Understand how to troubleshoot Content Awareness issues.

• Recognize how to troubleshoot VPN-related issues.

• Understand how to monitor cluster status and work with critical devices.

• Recognize how to troubleshoot State Synchronization.

• Understand how to troubleshoot communication issues between Identity Sources and Security Gateways.

• Understand how to troubleshoot and debug issues with internal Identity Awareness processes.

• CCSA tréning/certifikace (není podmínkou, avšak uchazeč o školení by měl mít pokročilé znalosti Check Point). CCSE tréning/certifikace výhodou.
• Hlubší znalosti s Linux a TCP/IP.Metody výuky

1. Intro do problematiky řešení problémů

2. Řešení potíží s politikou a Smart Konzolí

3. Kernel a UserSpace debug

4. Troubleshooting logování

5. Problémy s NATy

6. Pochopení konceptu a komponent Unifikované politiky

7. Problémy s VPN

8. Debugging ClusterXL technologie

9. Pochopení Identity Awareness

Praktická cvičení

Lab 1.1: Monitoring Security Gateway Traffic

Lab 2.1: Troubleshooting Issues with SmartConsole

Lab 3.1: Troubleshooting Log Connectivity Issues

Lab 4.1: Investigating NAT Issues

Lab 5.1: Troubleshooting General Traffic Issues

Lab 5.2: Evaluating HTTP and HTTPS Traffic Issues

Lab 6.1: Troubleshooting Site-to-Site VPN Issues

Lab 7.1: Troubleshooting Clustering Issues

Lab 8.1: Troubleshooting Identity Awareness

Lab 8.2: Configuring and Testing Identity Collector