4.32 out of 5
4.32
32 reviews on Udemy

Check Point VPN course [for CCSA & CCSE professionals]-2020

CheckPoint firewall | Learn to deploy IPsec and SSL VPN | Expand your CCSA and CCSE knowledge |Troubleshoot like a pro
Instructor:
Evgenii Puzakov
3,913 students enrolled
English [Auto]
Check Point VPN deployment
Check Point VPN troubleshooting
SSL and IPsec VPN
Deep understanding on how IPsec works

The course is fully focused on VPN and contains 7 sections that fully cover IPsec and SSL . I show you how to build a lab in VMware workstation + in VPS.

Also, you will learn a method, I’ve used over the years on how to troubleshoot VPN related connection issues.

Expand your CCSA and CCSE knowledge.

1. Building Check Point lab

Getting a license, ISO and all necessary information to build a lab. In addition, we go trough GAIA installation and first-time configuration wizard.

2. Licensing and SmartConsole Overview

A brief but precise overview of Licesing and main console that manages the system.

3. Building a Lab in VPS

A great resource to build your own cool lab in Virtual Private Server.

4. IPsec [Lecture]

IPsec terminology is explained in a simple and understandable way.

Includes topics like:

  • Encryption Domain

  • IPsec Phase 1 and Phase 2

  • IPsec Routing

  • Permanent Tunnel (Tunnel Test and DPD)

  • NAT inside VPN

  • SA lifetime

  • NAT-T

5. Installing a Web-Server

We install a great web application designed intentionally vulnerable, so security enthusiasts can pentest and hack the web application in order to gain knowledge. 

Also we install XAMPP and I show you required configuration for your web application to work.

6. Remote Access

A detailed explanation of Remote Access (Client-to-Site) type of VPN + LAB from scratch.

7. SSL VPN

Includes Mobile Access overview + SNX + Mobile Access Lab

8. IPsec [LAB]

Section includes a lab on how to deploy IPsec from scratch between two firewalls.

!!! Includes: build VPN managed by 1 Management Server  + build VPN managed by separate Management Servers !!!

9. Troubleshooting [Technique Overview and Practice]

Learn unique techniques to troubleshoot Check Point VPN connections like a PRO.

Each packet of phase 1 and 2 is explained.

Hone your troubleshooting skills on real examples.

10. Endpoint Security Deployment

Contains two parts on how to deploy Endpoint Security Suite

Updated:

08.09.2020 – Endpoint Security Deployment [Part1] and [Part2]

Become a Check Point VPN pro Today!!!

Introduction

1
How to get the most out of the course
2
Q&A
3
Topology 1.0

Building a Lab and installing Gaia R80.40

1
Getting ISO image
2
Checking Hardware requirements
3
Preparing a LAB
4
Installing GAIA
5
First-time configuration wizard
6
Downloading and Installing SmartConsole
7
Finish building a lab

Licensing and SmartConsole Overview

1
Getting evaluation license
2
SmartConsole Overview
3
Adding a license
4
Licensing and SmartConsole overview

Building a lab In VPS

1
Overview of the lab in VPS

IPsec [Lecture]

1
IPsec (Overview, Terminology)

We talk over what is a VPN, what is Site-to-Site and Client-to-Site types of connection and basic terminology of VPN world.

2
IPsec (Phase1, Phase2)

We discuss how the tunnel is being built, what is the Phase 1 and the Phase 2.

3
IPsec Routing
  • Full mesh Routing

  • Star Routing

  • Mixed Routing

4
Permanent tunnel (Tunnel Test, DPD)

We talk about what's Permanent tunnel.
The difference between Tunnel Test and Dead Peer Detection (DPD)
Also we discuss what's Active DPD and Passive DPD

5
NAT inside VPN

What happens behind the scenes when you uncheck "Disable NAT inside VPN"

6
SA lifetime

We talk over what is SA (Security Association) and what is SA lifetime.

7
NAT-T

What is NAT-T and where it lies in the 1st phase (IKE).

Installing a Web Server

1
Installaing XAMPP and Mutillidae
2
Configuring .htdocs and httpd.conf
3
Configure XAMPP and Install Mutillidae

Solidify your knowledge about deploying XAMPP and Mutillidae.

Remote Access

1
Remote access [Overview]
2
Traffic flow [Overview]
3
Remote access [LAB] (Part1)
  • Downloading and installing VPN agent

  • Configuring Remote Access in SmartConsole

  • Connecting to the External interface via our VPN agent

4
Troubleshooting issue #1 and fixing (Part2)
5
Troubleshooting issue#2 and fixing (Part3)

Issue:
I'm able to reach my internal interface of the Gateway. Traffic reaches the Ubuntu server, but I have no reply back to my Gateway.

Fix:
Using tcpdump on linux server and on Check Point gateway to figure out where the problem is.

6
Configuration Summary

A brief summary for your reference on the steps you have to take to set up Remote Access Client-to-Site connection.

7
Hub Mode (Part1)
8
Hub Mode NAT (Part2)
9
Application Control via RA (hub mode)
10
Desktop Security Policy (legacy)
11
Remote Access - lab

SSL VPN

1
Need for Mobile Access
2
SSL
3
Capsule VPN
4
Mobile Access [LAB]
5
SNX [LAB]
6
Ipassignment.conf

IPsec [LAB]

1
IPsec between Check Point GW (Managed by 1 Management Server)
2
IPsec between Check Point GW (Managed by separate Management Servers)

Troubleshooting IPSEC [practice]

1
Troubleshooting IPsec connection - understanding packets
2
Tools needed for Troubleshooting IPsec connection
3
Problem 1 (Managed by 1 MGMT)
4
Problem 2 (Managed by separate MGMT servers)
5
Problem 3 (Managed by separate MGMT servers)

Endpoint Security Deployment

1
Endpoint Security Deployment - [Part1]
2
Endpoint Security Deployment - [Part2]

Graduation

1
Final thoughts
2
Bonus Lecture
You can view and review the lecture materials indefinitely, like an on-demand channel.
Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don't have an internet connection, some instructors also let their students download course lectures. That's up to the instructor though, so make sure you get on their good side!
4.3
4.3 out of 5
32 Ratings

Detailed Rating

Stars 5
15
Stars 4
10
Stars 3
7
Stars 2
0
Stars 1
0
dbd2777e939806822e73c3dc53c0501b
30-Day Money-Back Guarantee

Includes

5 hours on-demand video
1 article
Full lifetime access
Access on mobile and TV
Certificate of Completion

External Links May Contain Affiliate Links read more

Join our Telegram Channel To Get Latest Notification & Course Updates!
Join Our Telegram For FREE Courses & Canva PremiumJOIN NOW