Check Point Next Generation Security Administration [Illustrated] [Paperback]

Cherie Amon (Author), Allen V. Keele (Author), Daniel Kligerman (Author), Drew Simonis (Author), Corey Pincock (Author)

Book Description

Publication Date: March 2002 | ISBN-10: 1928994741 | ISBN-13: 978-1928994749 | Edition: 1

Check Point NGX R65 is the next major release of Check Point's flagship firewall software product. Check Point's NGX is the underlying security software platform for all of the company's enterprise firewall, VPN, and management solutions. It enables enterprises of all sizes to reduce the cost and complexity of security management and ensure that their security systems can be easily extended to adapt to new and emerging threats. This title is a continuation of Syngress's best-selling references on Check Point's market leading firewall and VPN products.

. Understand NGX R65 Operational Changes:
SVN Architecture, New VPN-1 Features, Additional Features, VPN-1 Power VSX
. Deploy SmartClients and SmartManagement:
SmartDashboard, SmartMap, SmartView Tracker, SmartView Monitor, SmartUpdate, SmartLSM, Secure Client Packaging Tool, Management Plug-Ins, Check Point Configuration/cpconfig
. Drive the Management Portal:
A Tour of the Dashboard, What's New in SmartDashboard NGX, Your First Security Policy, Other Useful Controls on the Dashboard, Managing Connectra and Interspect Gateways, Smart Portal
. Master Advanced Authentication:
Authentication Overview, Users and Administrators, SmartDirectory, User Authentication, Session Authentication, Client Authentication
. Use Advanced VPN Concepts for Tunnel Monitoring:
Encryption Overview, VPN Communities, Policy-Based VPN, Route-Based VPN
. Configure Advanced VPN Client Installations:
SecuRemote, Secure Client, Office Mode, Visitor Mode, Windows L2TP Integration, SSL Network Extender, Backup Gateways, Multiple Entry Point VPNs
. Deploy and Configure SmartDefense:
Network Security, Application Intelligence, Web Intelligence
. Get Inside Secure Platform:
Installation, Configuration, Secure Platform Shell, Secure Shell
. Learn Advanced Troubleshooting Techniques:
NGX Debugging, Packet Analysis, Log Troubleshooting, VPN Analysis, VPN Client Analysis, ClusterXL Troubleshooting

Editorial Reviews

Amazon.com Review

Check Point NG aims to teach its readers how to install and set up VPN-1/FireWall-1 Next Generation, the latest version of the highly respected firewall software from Check Point. Its authors--all with significant network and security certifications--accomplish their objective: it seems likely that this book will travel with a lot of Check Point consultants and stand ready on the shelves of many organizations' network security specialists. The book has plenty of unadorned how-to procedures that get straight to the point, and enough background information to help you make good designs and troubleshoot problems. The Syngress style, which incorporates a carefully considered list of questions and answers at the end of each chapter, suits this subject well. It's easy to locate sections of interest or to scan straight through and accumulate knowledge.

Your security requirements are unique, of course, but the authors do a good job of explaining how to satisfy common requirements and implement variations upon them. For example, they show how to configure Network Address Translation (NAT) in a general way, then--in a Q&A section--show how to combine sequentially numbered networks into a single network object for easy administration of rules. This is documentation worth having. --David Wall

Topics covered: Installation of VPN-1/FireWall-1 and setup via the graphical user interface. There's deep coverage of security policies, naturally, and of user authentication, content filtering, Virtual Private Networks (VPNs), and Network Address Translation (NAT). The specifics of configuring for various protocols--including RPC and LDAP--are covered well.

About the Author

Cherie Amon (Technical Editor) is a Senior Network Security Engineer and Security Instructor for Integralis. She is a Check Point Certified Security Instructor and has been installing, configuring, and supporting Check Point products since 1997. Cherie teaches the Check Point courses at the Integralis Authorized Training Center (ATC) in East Hartford, Connecticut, which is the only Check Point ATC in the state. Drew Simonis (CISSP, CCNA, SCSA, SCNA, CCSA, CCSE, IBM CS) is a Senior Security Engineer with the RL Phillips Group, LLC, where he provides senior level security consulting to the United States Navy, working on large enterprise networks. Drew is a security generalist, with a strong background in system administration, Internet application development, intrusion detection and prevention, and penetration testing. He is a co-author of Hack Proofing Your Web Applications (Syngress Publishing, ISBN: 1-928994-31-8) and Hack Proofing Sun Solaris 8 (Syngress, ISBN:! 1-928994-44-X). Daniel Kligerman (CCSA, CCSE, Extreme Networks GSE, LE) is a Consulting Analyst with TELUS. As a member of TELUS Enterprise Solutions Inc., he specializes in routing, switching, load balancing, and network security in an Internet hosting environment. Allen Keele is an author and lecturer and holds over 20 technical accreditations. He currently leads Certified Tech Trainers, Inc. to provide comprehensive InfoSec training throughout the United States and Europe for Check Point (CCSE/CCSE/CCSE+) and Security Certified Program (SCNP/SCNA) accreditation.

Product Details

• Paperback: 800 pages
• Publisher: Syngress; 1 edition (March 2002)
• Language: English
• ISBN-10: 1928994741
• ISBN-13: 978-1928994749
• Product Dimensions: 9.1 x 7.3 x 1.6 inches
• Shipping Weight: 3 pounds (View shipping rates and policies)
• Average Customer Review: 4.5 out of 5 stars  See all reviews (17 customer reviews)
• Amazon Best Sellers Rank: #706,376 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

5 of 5 people found the following review helpful:

5.0 out of 5 stars Great book for NG, March 27, 2002

By 

Tyler Milloy (Washington DC) - See all my reviews

This review is from: Check Point Next Generation Security Administration (Paperback)

I've been waiting for a good NG book, and I was very glad to see this book come out. There's great stuff you can't find anywhere else, and the end of chapter reviews with FAQs are really helfpul. You can also use it to study for the exam, because it covers just about everything that's on it, and you can also get free exam questions from the book's Web site.

2 of 2 people found the following review helpful:

4.0 out of 5 stars Best one out there (right now?), March 26, 2002

By 

ShadowWeb36 (Chicago) - See all my reviews

This review is from: Check Point Next Generation Security Administration (Paperback)

This book is pretty good. There are a couple of weak chapters, but overall it's coverage of the material is the best I've seen out there on the market for NG. If you get your hands on a copy check out the spoofing chapter at the end--I'm not sure what it's doing in this book but its a real good read.

4 of 5 people found the following review helpful:

5.0 out of 5 stars Excellent Reference- Can use for exam as well, June 18, 2002

By A Customer

This review is from: Check Point Next Generation Security Administration (Paperback)

I bought this to use as a reference and to supplement my training for the NG exam- I just returned from taking my exam and although this book is not a study guide by name, it does cover the majority of information you need to know for the CCSA and CCSE NG exams, and it covers the information really well. I personally tend to throw away my study guides when I'm done with them as they tend to cover the material needed to pass the exam and no more- this book is a reference book, and covers the material needed for the exam and more. A keeper!