Check Point Certified Troubleshooting Expert (CCTE) R81.20

This course is designed for security experts and Check Point resellers who desire to obtain the necessary knowledge required to perform more advanced troubleshooting skills while managing their security environments.

Introduction to Advanced Troubleshooting
Advanced Management Server Troubleshooting
Advanced Troubleshooting with Logs and Events
Advanced Identity Awareness Troubleshooting
Advanced Site-to-Site VPN Troubleshooting
Advanced Client-to-Site VPN Troubleshooting
Advanced Gateway Troubleshooting
Advanced Firewall Kernel Debugging
Advanced Access Control Troubleshooting

Working knowledge of UNIX and/or Windows operating systems, Working knowledge of Networking, TCP/IP, CCSE training/certification, Advanced knowledge of Check Point Security Products.

• Identify and use Linux-based and Check Point commands and tools for system monitoring, file editing, and file viewing.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Management Server and API Server issues.

• Investigate and troubleshoot traffic or security-related issues using logs and events monitoring tools.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Security Gateway issues.

• Demonstrate an understanding of advanced troubleshooting tools and techniques for kernel debugging.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Access Control issues.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Identity Awareness issues.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Site-to-Site VPN Troubleshooting issues.

• Identify and use the appropriate troubleshooting and debug commands/tools to resolve advanced Client-to- Site VPN Troubleshooting issues.

;

EXERCISES

• Collect and read live and historical CPView data.

• Troubleshoot CPM and SmartConsole login issues.

• Restore a Management High Availability environment from a temporary Primary Down condition.

• Troubleshoot SmartLog processes.

• Collect and interpret user mode debugs.

• Collect and interpret kernel debugs.

• Debug Unified Policy Inspection in kernel to understand match process.

• Debug the Identity Awareness user mode processes.

• Collect and interpret Site-to-Site VPN Debugs.

• Collect and interpret Remote Access VPN Debugs.