fr
en
Check Point Security Expert (CCSE) — R81.20
Your networks need protection rules aligned with how they are used. With Check Point, structure security configurations and examine traffic to gain greater control over access. Strengthen your ability to prepare interventions and address areas requiring attention.
- Duration
- 3 days 21 hours
- Code
- CCSEFR Code
- Certification
- CCSE : Certified Security Expert Certification
Accredited training for the CCSE : Certified Security Expert certification.
Presentation
Cybersecurity is an essential foundation of today's digital infrastructure, requiring advanced expertise to design and defend networks against the most sophisticated threats. In-depth mastery of Check Point solutions, beyond basic administration, is crucial for designing robust systems, optimising security performance and ensuring organisational resilience against complex cyberattacks.
Our Check Point Security Expert (CCSE) course, based on R81.20, offers comprehensive immersion in the essential engineering and optimisation functions of security environments. You will master advanced deployments, high availability management, performance optimisation and customised threat prevention, positioning yourself as a sought-after expert in Check Point architecture and troubleshooting.
By the end of this 3-day programme, you will master the key skills to pass the Certified Security Expert (CCSE) certification exam (find out more in the Certification tab). You will receive thorough preparation, including complex practical exercises and expert guidance, to maximise your success and gain official recognition of your expertise as a Check Point security engineer.
Objectives
By the end of this Check Point CCSE course, you will be able to:
- Master the main interfaces used for advanced Check Point environment management;
- identify and use Check Point technologies supporting security automation;
- explain the purpose and implementation of a Check Point Management High Availability (HA) deployment;
- deploy a primary and secondary server solution using the recommended workflow;
- explain and configure fundamental clustering and ClusterXL concepts, including protocols, synchronisation and connection persistence;
- identify how to exclude services from synchronisation or manage synchronisation delays;
- explain the security policy installation flow;
- master the use of dynamic objects, updatable objects and network feeds in security policies;
- understand how to manage internal and external user access;
- describe and deploy Identity Awareness components and configurations;
- describe the different threat prevention solutions offered by Check Point;
- explain and configure the Intrusion Prevention System (IPS);
- gain knowledge of Check Point IoT (Internet of Things) protection;
- explain the purpose and configuration of domain-based VPNs;
- describe scenarios where externally managed certificate authentication is appropriate;
- provide client security through remote access and understand its mechanisms;
- master the Mobile Access Software Blade;
- determine configuration compliance with Check Point security best practices;
- define performance optimisation solutions and the basic configuration workflow;
- identify and apply supported upgrade and migration methods and procedures for Security Management servers, dedicated log servers and SmartEvent;
- identify and apply supported upgrade methods and procedures for Security Gateways;
- prepare effectively for the Certified Security Expert (CCSE) certification exam to validate your expertise.
Program
Module 1: Managing advanced deployments
- Advanced deployment of Check Point security environments.
- Management High Availability.
- Advanced gateway deployment.
Practical exercises:
- Deploy a secondary security management server.
- Configure a dedicated log server.
- Deploy SmartEvent.
Module 2: Configuring advanced policies and access management
- Advanced security policy configuration.
- Advanced user access management.
- Customised threat protection.
Practical exercises:
- Configure a high-availability security gateway cluster.
- Work with ClusterXL.
- Configure dynamic and updatable objects.
- Verify accelerated policy installation and monitoring status.
- Deploy Identity Awareness.
- Customise threat prevention.
Module 3: Mastering VPNs and mobile access
- Advanced Site-to-Site VPN deployment.
- Remote Access VPN deployment.
- Mobile Access VPN management.
Practical exercises:
- Configure a Site-to-Site VPN with an Interoperable Device.
- Deploy Remote Access VPN.
- Configure Mobile Access VPN.
Module 4: Optimising monitoring and performance
- Advanced security monitoring.
- Advanced performance tuning.
Practical exercises:
- Monitor policy compliance.
- Report SmartEvent statistics.
- Tune Security Gateway performance.
- Enhance security with HTTPS inspection.
Module 5: Ensuring maintenance and upgrades
- Advanced security maintenance.
- Identifying supported upgrade and migration methods for Security Management servers, dedicated log servers and SmartEvent servers.
- Identifying supported upgrade methods and procedures for Security Gateways.
Module 6: Preparing for the Certified Security Expert (CCSE) exam
- In-depth review of key concepts covered in all modules.
- Additional resources for the Certified Security Expert (CCSE) exam.
- Strategies and guidance to maximise your chances of passing the exam.
Audience
This course is intended for:
- Technical cybersecurity professionals directly involved in designing, deploying, upgrading, maintaining or supporting complex Check Point security architectures and infrastructure. Typical roles may include, but are not limited to:
- Experienced security engineer
- Security architect
- Cybersecurity expert
- Security consultant specialising in integration and optimisation
- Senior security administrator;
- IT and networking professionals seeking to deepen their cybersecurity expertise, specialise in advanced Check Point technologies or validate specialist skills in security solution engineering and troubleshooting;
- Technical team leaders or project managers supervising architecture projects, large-scale deployments or Check Point security infrastructure optimisation, who require expert technical understanding for strategic decisions;
- Anyone seeking Certified Security Expert (CCSE) certification to validate advanced skills, strengthen credibility and accelerate their progression towards cybersecurity expert roles.
Prerequisites
This course requires the following prerequisites:
- Completion of the Check Point Security Administrator (CCSA) course or a valid Check Point Certified Security Administrator certification;
- Working knowledge of common operating systems, including Windows or Unix-like systems such as Linux;
- Practical experience in digital certificate management, including key concepts such as public/private keys and certification authorities;
- Solid knowledge of system and network administration, covering Windows and Unix/Linux management, advanced routing and network segmentation;
- The ability to read and understand technical English to use official course materials and take the CCSE exam.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Expert, Check Point-certified trainers: benefit from trainers certified by Check Point with extensive real-world experience in designing, deploying, maintaining and supporting complex Check Point security architectures.
- Official Check Point content and comprehensive materials: access official Check Point learning materials for R81.20, ensuring an in-depth, up-to-date understanding of the platform at expert level.
- Advanced, practice-focused learning: strengthen your technical skills through extensive practical exercises, including complex deployment and troubleshooting scenarios designed for direct application of Check Point engineering and optimisation concepts.
- Intensive CCSE certification preparation: maximise your chances of exam success with targeted reviews and expert guidance focused on Certified Security Expert (CCSE) certification.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
Certified Security Expert (CCSE) and Check Point are registered trademarks of Check Point Software Technologies Ltd. or its subsidiaries in the United States and/or other countries.
Pearson VUE is a registered trademark of Pearson Education, Inc. or its affiliates.
Windows is a registered trademark of the Microsoft (in French) group of companies.
Unix is a registered trademark of The Open Group.
All other trademarks mentioned are the property of their respective owners.