Check Point Firewall-1 Administration And CCSA Study Guide

DESCRIPTION

Discover the complete FireWall-1 administration manual and CCSA prep guide! Explore FireWall-1 architecture, installation, and day-to-day management-in detail Utilize this complete network security primer for new FireWall-1 administrators Master the challenging sample exam questions and lab exercises The first complete guide to FireWall-1 administration and Check Point's latest certification exam! Check Point's FireWall-1 is the world's leading firewall?and these skills are in unprecedented demand! This is one of the only expert guides to FireWall-1 administration that also offers authoritative preparation for Check Point's hot new CCSA certification exam. Long-time FireWall-1 netadmin Steven Dangerfield begins with a thorough review of the challenges IT professionals face in securing their private networks and Internet presences. Dangerfield identifies today's most serious forms of attack, then systematically introduces the most effective FireWall-1 security practices and countermeasures. Coverage includes: FireWall-1's Stateful Inspection Architecture: maximizing security without compromising performance or scalability How and where to deploy FireWall-1 for maximum effectiveness Day-to-day firewall administration, security policy generation, and management using FireWall-1's automated tools Working with the Network Objects Manager, Services Manager, Resources Manager, Server Manager, Users Manager, and Time Objects Manager Simple, modular techniques for building more effective rule bases Practical techniques for managing authentication and Network Address Translation (NAT) Check Point FireWall-1 Administration and CCSA Study Guide contains an extensive collection of lab and operational exercises, plus a thorough test preparation section covering every exam objective and providing realistic sample questions. Whether you're managing FireWall-1, preparing for your CCSA certification exam, or both, this is the authoritative, comprehensive, practical resource you're searching for. This guide reviews security fundamentals, gives advice on Check Point FireWall-1 administration, and offers a study guide for the Check Point Certified Security Administrator exam. It reviews challenges IT professionals face in securing their private networks and Internet presences, and introduces FireWall-1 security practices and countermeasures. Lab and operational exercises are included. A test preparation section covers every exam objective and provides realistic sample questions. Dangerfield is a consulting internetwork security analyst. He has been working with FireWall-1 since its introduction. TABLE OF CONTENTS Acknowledgmentsxvii Prefacexix 1Internetwork Security Overview1 Summary10 2Security Threats11 No User Training11 Physical Security12 Hacker's Toolbox13 Summary22 3Policies and Procedures23 Security Balance23 Security Policy Development24 Typical Security Policies29 Procedures32 Summary34 4Policing the Security Domain35 Knowing Your Security Domain35 Interesting Packets37 Detecting Intrusion37 Response40 Summary41 5FireWall-1 Overview43 Definition43 Types of Firewall44 FireWall-1 Overview47 Summary51 6Architecture53 Graphical User Interface53 Distributed Enterprise Management56 Firewall Module56 Third-Party Integration--OPSEC58 Virtual Private Network--VPN59 Open Security Extension59 Intrusion Detection60 Load Balancing60 High Availability61 Reporting Module62 Check Point Products63 Summary63 7Installation and Setup65 Windows NT65 FireWall-1 Installation67 Solaris76 Solaris FireWall-1 Installation80 Nokia84 Summary86 8Graphical User Interface87 The Policy Editor GUI88 The Log Viewer GUI96 The System Status GUI107 Summary113 9Object Creation and Management115 Standards115 Lab Network116 Network Objects Manager117 Services Objects Manager144 Resources Objects Manager150 Server Objects Manager160 User Manager170 Time Objects Manager177 Summary179 10Policy Properties181 Security Policy Tab181 Services Tab183 Log and Alert Tab184 Security Servers Tab186 Authentication Tab186 High Availability Tab187 IP Pool NAT Tab188 Access List189 Desktop Security189 Syn Defender191 LDAP192 Encryption195 Connect Control195 Summary196 11Rulebase199 Rulebase Operation199 Rulebase Development200 Creating a New Rulebase202 Navigating the Rulebase and Creating Rules212 Installing and Uninstalling the Security Policy224 Summary227 12Authentication231 Authentication Schemes231 Authentication Types233 Authentication Implementation238 Summary244 13Network Address Translation245 Static Mode NAT246 Hide Mode NAT249 Issues with Network Address Translation252 Summary253 14Practical Lab Exercises255 LAB Network Configuration255 Security Definitions257 Firewall Object Definitions258 Rulebase Definitions266 Install the Rulebase270 Test the Rulebase270 Authentication272 Network Address Translation276 Summary278 15Penetration Testing279 Technique282 Penetration of the Lab Network284 Summary289 16Exam Preparation291 Certification Plan291 Answering Questions293 What to Do If You Fail294 Summary295 17CCSA Objective Essentials297 FireWall-1 Architecture298 System Requirements300 Installation Process301 GUI302 Rulebase Construction304 Rulebase Efficiency305 Authentication305 NAT306 Policy Properties307 Summary309 AppendixSample Questions311 Exam 1311 Exam 2320 Exam 3329 Correct Answers--Exam 1338 Correct Answers--Exam 2339 Correct Answers--Exam 3340