fr
en
Check Point Certified Security Administrator (CCSA) – R81.20
Your networks need protection rules aligned with how they are used. With Check Point, structure security configurations and examine traffic to gain better control over access. Strengthen your ability to prepare interventions and address areas requiring attention.
- Duration
- 3 days 21 hours
- Code
- CCSAFR Code
- Certification
- CCSA : Certified Security Administrator Certification
Accredited training for the CCSA : Certified Security Administrator certification.
Presentation
Information systems security has become the cornerstone of modern digital infrastructure, protecting data and networks against an ever-evolving threat landscape. In-depth mastery of security administration, particularly leading solutions such as Check Point, is essential to ensure operational continuity, defend digital assets and maintain your organisation’s confidence in the face of cyberattacks.
Our Check Point Certified Security Administrator (CCSA) course, based on version R81.20, offers comprehensive immersion in essential firewall management functions. You will master security policy configuration, application control, VPN management and advanced threat prevention, positioning yourself as a sought-after Check Point cybersecurity specialist.
By the end of this 3-day programme, you will master the key skills to pass the Certified Security Administrator certification exam (find out more in the certification tab). You will benefit from thorough preparation, including extensive hands-on exercises and targeted guidance, to maximise your chances of success and gain official recognition of your expertise as a Check Point security administrator.
For more information on certification arrangements, see our Certification section.
Objectives
By the end of this Check Point CCSA course, you will be able to:
- master the essential components of a three-tier Check Point architecture and understand how they interact to manage the environment securely;
- explain and secure communication while efficiently managing traffic routing within the Check Point environment;
- describe the fundamental functions of the Gaia operating system and its administration capabilities;
- deploy SmartConsole and install a Security Management Server and a Security Gateway to implement a single-domain security solution;
- create relevant SmartConsole objects to model your organisation's topology and integrate them into security policies and rules;
- identify and use Check Point licence and contract management tools, understanding their role and practical application;
- configure and optimise security policy using the advanced features and capabilities available;
- understand the impact of policy layers on traffic inspection and arrange them for optimal security;
- explain the effect of network address translation (NAT) on traffic and configure manual and automatic NAT;
- master application control, URL filtering and autonomous threat prevention capabilities, configuring these solutions to meet your organisation's security requirements;
- configure pre-shared keys and certificates to authenticate third-party and external VPN gateways, ensuring secure connectivity;
- analyse and interpret VPN tunnel traffic to diagnose and resolve secure connectivity issues;
- manage logging settings and use custom queries to filter and analyse log results efficiently;
- monitor Check Point hardware health through the Gaia portal and command line to anticipate and resolve issues;
- implement different methods for backing up Check Point system information, applying best practices and recommendations to ensure environmental resilience;
- prepare effectively for the Certified Security Administrator (CCSA) certification exam to validate your expertise.
Program
Module 1: get started with the Check Point environment
- Introduction to the three-tier Check Point architecture and component interactions.
- Securing communication and traffic routing in the Check Point environment.
- Basic Gaia operating system functions.
- Deploying SmartConsole.
- Installing Security Management Server.
- Installing Security Gateway for a single-domain solution.
Practical exercises:
- Deploy SmartConsole.
- Install Security Management Server.
- Install Security Gateway.
Module 2: manage objects and licences
- Creating SmartConsole objects that reflect the organisation's topology.
- Managing Check Point licences and contracts (tools, purpose and use).
Practical exercises:
- Configure objects in SmartConsole.
- Manage licences.
- Establish secure internal communication.
Module 3: configure security policies and NAT
- Advanced features and capabilities for security policy configuration and management.
- The impact of policy layers on traffic inspection.
- Network Address Translation (NAT): impact on traffic, manual and automatic configuration.
Practical exercises:
- Create a security policy.
- Configure ordered layers.
- Configure NAT.
- Configure a shared inline layer.
- Integrate security with a unified policy.
Module 4: control applications, filter URLs and prevent threats
- Configuring Application Control & URL Filtering and autonomous threat prevention capabilities.
Practical exercises:
- Enhance security with autonomous threat prevention.
Module 5: manage VPNs and logging
- Configuring pre-shared keys and managing certificates for authentication with third-party and external VPN gateways.
- Analysing and interpreting VPN tunnel traffic.
- Configuring logging settings.
- Using predefined and custom queries to filter log results.
Practical exercises:
- Configure a locally managed site-to-site VPN.
- Improve traffic visibility.
Module 6: monitor and maintain the environment
- Monitoring Check Point hardware health through the Gaia portal and command line.
- Methods for backing up Check Point system information (different approaches, best practices and recommendations).
Practical exercises:
- Monitor system status.
- Maintain the security environment.
- Manage administrator access.
Module 7: prepare for the Check Point CCSA exam
- In-depth review of the key concepts covered across all modules.
- Additional resources for the Certified Security Administrator exam.
- Strategies and tips to maximise your chances of passing the exam.
Audience
This course is intended for:
- technical cybersecurity professionals directly involved in implementing, maintaining, supporting or administering Check Point security solutions on a day-to-day basis. Typical roles may include, but are not limited to:
- Security administrator
- Security engineer
- Network and security technician
- SOC (Security Operations Centre) analyst
- Cybersecurity consultant involved in deployment.
- IT and networking professionals seeking to expand into cybersecurity, specialise in Check Point technologies or validate recognised expertise in firewall and security policy administration;
- technical team leaders and project managers overseeing the deployment or management of Check Point security infrastructures who need in-depth operational understanding of the systems and their capabilities;
- anyone wishing to obtain Certified Security Administrator (CCSA) certification to validate their skills, strengthen their credibility and accelerate their career progression in cybersecurity.
Prerequisites
This course requires the following prerequisites:
- working knowledge of common operating systems, whether Windows or Unix-like systems such as Linux;
- understanding of fundamental TCP/IP networking concepts, including IP addressing, routing and major network protocols;
- ability to read and understand technical English to use the official course materials and take the CCSA exam.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Expert Check Point-certified instructors: benefit from Check Point-certified instructors with extensive practical experience implementing and administering security solutions in real-world environments.
- Official Check Point content and comprehensive materials (version R81.20): access official Check Point learning materials for R81.20, ensuring an in-depth, up-to-date understanding of the platform.
- Practice-oriented teaching: strengthen your technical skills through numerous hands-on exercises designed for direct application of Check Point administration and configuration concepts.
- Intensive CCSA certification preparation: maximise your chances of exam success through targeted revision and guidance specifically preparing you for Certified Security Administrator (CCSA) certification.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
Certified Security Administrator (CCSA) and Check Point are registered trademarks of Check Point Software Technologies Ltd. or its subsidiaries in the United States and/or other countries.
Pearson VUE is a registered trademark of Pearson Education, Inc. or its affiliates.
Windows is a registered trademark of the Microsoft group of companies.
Unix is a registered trademark of The Open Group.
All other trademarks mentioned are the property of their respective owners.