With our professional experts' unremitting efforts on the reform of our 156-915.77 guide materials: Check Point Certified Security Expert Update Blade, we can make sure that you can be focused and well-targeted in the shortest time when you are preparing a test, simplify complex and ambiguous contents, and point out exam focus in no time. With the assistance of our 156-915.77 study torrent you will be more distinctive than your fellow workers, because you will learn to make full use of your fragment time to do something more useful in the same amount of time. All the above services of our 156-915.77 practice test can enable your study more time-saving, energy-saving and labor-saving.
| Topic | Details |
|---|
| Upgrading | Objectives:- Perform a backup of a Security Gateway and Management Server using your
- Understanding of the differences between backups, snapshots, and upgrade-exports.
- Upgrade and troubleshoot a Management Server using a database migration.
- Upgrade and troubleshoot a clustered Security Gateway deployment.
|
| Identity Awareness | - Enabling AD Query- AD Query Setup - Identifying users behind an HTTP Proxy - Verifying there’s a logged on AD user at the source IP - Checking the source computer OS - Using SmartView Tracker |
| Auditing and Reporting Process | -Auditing and Reporting Standards |
| Maintenance Tasks and Tools | - Perform a Manual Failover of the FW Cluster- Advanced Cluster Configuration |
| Troubleshooting | -VPN Encryption Issues |
| Clustering and Acceleration | Objectives:- Build, test and troubleshoot a ClusterXL Load Sharing deployment on an enterprise network.
- Build, test and troubleshoot a ClusterXL High Availability deployment on an enterprise network.
- Build, test and troubleshoot a management HA deployment on an enterprise network.
- Configure, maintain and troubleshoot SecureXL and CoreXL acceleration solutions on the corporate network traffic to ensure noted performance enhancement on the firewall.
- Build, test and troubleshoot a VRRP deployment on an enterprise network.
|
| SecureXL: Security Acceleration | - What SecureXL Does- Packet Acceleration - Session Rate Acceleration - Masking the Source Port - Application Layer Protocol - An Example with HTTP HTTP 1.1 - Factors that Preclude Acceleration - Factors that Preclude Templating (Session Acceleration) - Packet Flow - VPN Capabilities |
| Backup and Restore Security Gateways and Management Servers | - Snapshot management - Upgrade Tools - Backup Schedule Recommendations - Upgrade Tools - Performing Upgrades - Support Contract |
| SmartReporter | -Report Types |
| Advanced User Management | Objectives:- Using an external user database such as LDAP, configure User Directory to incorporate user information for authentication services on the network.
- Manage internal and external user access to resources for Remote Access or across a VPN.
- Troubleshoot user access issues found when implementing Identity Awareness.
|
| VRRP | - VRRP vs ClusterXL- Monitored Circuit VRRP - Troubleshooting VRRP |
| Upgrading Standalone Full High Availability | |
| Management HA | - The Management High Availability Environment- Active vs. Standby - What Data is Backed Up? - Synchronization Modes - Synchronization Status |
| Lab 2: Core CLI Elements of Firewall Administration | - Policy Management and Status- Verification from the CLI - Using cpinfo - Run cpinfo on the Security Management Server - Analyzing cpinfo in InfoView - Using fw ctl pstat - Using tcpdump |
| Advanced IPsec VPN and Remote Access | Objectives:- Using your knowledge of fundamental VPN tunnel concepts, troubleshoot a site-to-site or certificate-based VPN on a corporate gateway using IKEView, VPN log files and commandline debug tools.
- Optimize VPN performance and availability by using Link Selection and Multiple Entry Point solutions.
- Manage and test corporate VPN tunnels to allow for greater monitoring and scalability with multiple tunnels defined in a community including other VPN providers.
|
| Advanced Firewall | Objectives:- Using knowledge of Security Gateway infrastructure, including chain modules, packet flow and kernel tables to describe how to perform debugs on firewall processes.
|
| Lab 7: SmartEvent and SmartReporter | - Configure the Network Object in SmartDashboard- Configuring Security Gateways to work with SmartEvent - Monitoring Events with SmartEvent - Generate Reports Based on Activities |
| Troubleshooting User Authentication and User Directory (LDAP) | - Common Configuration Pitfalls- Some LDAP Tools - Troubleshooting User Authentication |
| Tunnel Management | - Permanent Tunnels- Tunnel Testing - VPN Tunnel Sharing - Tunnel-Management Configuration - Permanent-Tunnel Configuration - Tracking Options - Advanced Permanent-Tunnel configuration - VPN Tunnel Sharing Configuration |
| Auditing and Reporting | Objectives:- Create Events or use existing event definitions to generate reports on specific network traffic using SmartReporter and SmartEvent in order to provide industry compliance information to management.
- Using your knowledge of SmartEvent architecture and module communication, troubleshoot report generation given command-line tools and debug-file information.
|
| User Management | - Active Directory OU Structure- Using LDAP Servers with Check Point - LDAP User Management with User Directory - Defining an Account Unit - Configuring Active Directory Schemas - Multiple User Directory (LDAP) Servers - Authentication Process Flow - Limitations of Authentication Flow - User Directory (LDAP) Profiles |
| Lab 5: Configure Site-to-Site VPNs with Third Party Certificates | - Configuring Access to the Active Directory Server- Creating the Certificate - Importing the Certificate Chain and Generating Encryption Keys - Installing the Certificate - Establishing Environment Specific Configuration - Testing the VPN Using 3rd Party Certificates |
| ClusterXL: Load Sharing | - Multicast Load Sharing- Unicast Load Sharing - How Packets Travel Through a Unicast - LS Cluster - Sticky Connections |
| Lab 3 Migrating to a Clustering Solution | - Installing and Configuring the Secondary Security Gateway Re-configuring the Primary Gateway - Configuring Management Server Routing - Configuring the Cluster Object - Testing High Availability - Installing the Secondary Management Server - Configuring Management High Availability |
| SmartEvent | -SmartEvent Intro |
| Lab 1: Upgrading to Check Point R77 | - Install Security Management Server - Migrating Management server Data - Importing the Check Point Database - Launch SmartDashboard - Upgrading the Security Gateway |
| FW Monitor | - What is FW Monitor- C2S Connections and S2C Packets fw monitor |
| SmartEvent Architecture | - Component Communication Process- Event Policy User Interface |
| Check Point Firewall Key Features | - Packet Inspection Flow- Policy Installation Flow - Policy Installation Process - Policy Installation Process Flow |
| Check Point Firewall Infrastructure | - GUI Clients - Management |
| Lab 4: Configuring SmartDashboard to Interface with Active Directory | - Creating the Active Directory Object in SmartDashboard- Verify SmartDashboard Communication with the AD Server |
| Remote Access VPNs | - Connection Initiation- Link Selection |
| Network Address Translation | - How NAT Works- Hide NAT Process - Security Servers - How a Security Server Works - Basic Firewall Administration - Common Commands |
| Security Gateway | - User and Kernel Mode Processes- CPC Core Process - FWM - FWD - CPWD - Inbound and Outbound Packet Flow - Inbound FW CTL Chain Modules - Outbound Chain Modules - Columns in a Chain - Stateful Inspection |
| Multiple Entry Point VPNs | - How Does MEP Work- Explicit MEP - Implicit MEP |
| Advanced VPN Concepts and Practices | - IPsec- Internet Key Exchange (IKE) - IKE Key Exchange Process – Phase 1/ Phase 2 Stages |
| Lab 6: Remote Access with Endpoint Security VPN | - Defining LDAP Users and Groups- Configuring LDAP User Access - Defining Encryption Rules - Defining Remote Access Rules - Configuring the Client Side |
| CoreXL: Multicore Acceleration | - Supported Platforms and Features- Default Configuration - Processing Core Allocation - Allocating Processing Cores - Adding Processing Cores to the Hardware - Allocating an Additional Core to the SND - Allocating a Core for Heavy Logging - Packet Flows with SecureXL Enabled |
| Kernel Tables | - Connections Table- Connections Table Format |
| VPN Debug | - vpn debug Command- vpn debug on | off - vpn debug ikeon |ikeoff - vpn Log Files - vpn debug trunc - VPN Environment Variables - vpn Command - vpn tu - Comparing SAs |
| Clustering and Acceleration | - Clustering Terms- ClusterXL - Cluster Synchronization - Synchronized-Cluster Restrictions - Securing the Sync Interface - To Synchronize or Not to Synchronize |
As we all know it is not easy and smooth for everyone to obtain the 156-915.77 certification, and especially for those people who cannot make full use of their sporadic time and are not able to study in a productive way. But you are lucky, we can provide you with well-rounded services on 156-915.77 practice test materials to help you improve ability and come over difficulties when you have trouble studying. We would be very pleased and thankful if you can spare your valuable time to have a look about features of our 156-915.77 study materials.
We guarantee that if you study our 156-915.77 guide materials: Check Point Certified Security Expert Update Blade with dedication and enthusiasm step by step, you will desperately pass the exam without doubt. As the authoritative provider of study materials, we are always in pursuit of high pass rate of 156-915.77 practice test compared with our counterparts to gain more attention from potential customers. Otherwise if you fail to pass the exam unfortunately with our study materials, we will full refund the products cost to you soon. We believe in the future, our 156-915.77 study torrent will be more attractive and marvelous with high pass rate.
We have three versions of 156-915.77 guide materials: Check Point Certified Security Expert Update Blade available on our test platform, including PDF, Software and APP online. The most popular one is PDF version and you can totally enjoy the convenience of this version, and this is mainly because there is a demo in it, therefore help you choose what kind of 156-915.77 practice test are suitable to you and make the right choice. Besides PDF version of study materials can be printed into papers so that you are able to write some notes or highlight the emphasis. On the other hand, Software version of our 156-915.77 study torrent is also welcomed by customers, especially for windows users. As for PPT online version, it is the third party application, as long as you download the app into your computer; you can enjoy the nice service from us.