R77.

30 Edition
Security Engineering
Lab Manual

LAB 1: Upgrading to Check Point R77.30

Migrating Management Server Data

Installing the Security Management Server

Importing the Check Point Database

Launch SmartDashboard

Upgrading the Security Gateway

Prepare Virtual Systems for Future Labs

LAB 2: Core CLI Elements of Firewall Administration

Policy Management and Status Verification from the CLI

Using cpinfo

Run cpinfo on the Security Management Server

Analyzing cpinfo in InfoView (Optional)

Using fw ctl pstat

Using tcpdump

LAB 3: Migrating to a Clustering Solution

Installing and Configuring the Secondary Security Gateway

Re-configuring the Primary Gateway

Configuring Management Server Routing

Configuring the Cluster Object

Testing High Availability

Installing the Secondary Management Server

 Configuring Management High Availability

LAB 4: Configuring SmartDashboard to Interface with Active Directory

Creating the Active Directory Object in SmartDashboard

Verify SamrtDashboard Communication with the AD Server

LAB 5: Mobile Access with Check Point Capsule

Enable Check Point Capsule

Configure the Check Point Capsule Policy

Test Check Point Capsule

LAB 6: Reviewing Threat Prevention Settings and Protections

Configuration the Gateway for Internet Access

Review Threat Prevention Settings and SpyEye Protections

Test EICAR Access

LAB 7: Working with Anti-Bot & Anti-Virus

Enable HTTPS Inspection

Install the Certification on the Client

Configure the Threat Prevention Policy

Test the Anti-Bot & Anti-Virus Policy

LAB 8: Deploying Threat Emulation

User ThreatCloud to Verify File Safety

Configure Threat Emulation to Inspect Incoming Traffic

LAB 9: Understanding IPS Protections

Reconfiguring the Gateway Cluster for IPS Testing

Configure the Default _Protection Profile

 Configure the IPS Demonstration Tool

Configure the IPS Demonstration Tool

Modify Profile Settings

Enforce the Recommended Profile

Working with SmartView Tracker to Investigate Threats

Modifying an Existing Protection Profile

LAB 10: SmartEvent and SmartReporter

Configure the Network Object in SmartDashboard

Monitoring Events with SmartEvent

Generate Reports Based on Activities