Configuring Check Point NGX VPN-1/Firewall-1 [Illustrated] [Paperback]

Robert Stephens (Author), Barry Stiefel (Author), Stephen Watkins (Author), Simon Desmeules (Author), Eli Faskha (Author)

Book Description

ISBN-10: 1597490318 | ISBN-13: 978-1597490313 | Publication Date: August 1, 2005 | Edition: 1

Check Point NGX VPN-1/Firewall-1 is the next major release of Check Point's flagship firewall software product, which has over 750,000 registered users. The most significant changes to this release are in the areas of Route Based VPN, Directional VPN, Link Selection & Tunnel Management, Multiple Entry Points, Route Injection Mechanism, Wire Mode, and SecurePlatform Pro. Many of the new features focus on how to configure and manage Dynamic Routing rules, which are essential to keeping an enterprise network both available *and* secure. Demand for this book will be strong because Check Point is requiring all of its 3rd party developers to certify their products for this release.

* Packed full with extensive coverage of features new to the product, allowing 3rd party partners to certify NGX add-on products quickly
* Protect your network from both internal and external threats and learn to recognize future threats
* All yuou need to securly and efficiently deploy, troubleshoot, and maintain Check Point NXG

Editorial Reviews

Book Description

The perfect reference for anyone migrating from earlier versions of Check Point's flagship firewall/VPN product as well as those deploying VPN-1/Firewall-1 for the first time. --This text refers to the Digital edition.

Product Details

• Paperback: 608 pages
• Publisher: Syngress; 1 edition (August 1, 2005)
• Language: English
• ISBN-10: 1597490318
• ISBN-13: 978-1597490313
• Product Dimensions: 8.9 x 7 x 1.9 inches
• Shipping Weight: 2 pounds (View shipping rates and policies)
• Average Customer Review: 4.5 out of 5 stars  See all reviews (4 customer reviews)
• Amazon Best Sellers Rank: #1,018,517 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

4 of 4 people found the following review helpful:

4.0 out of 5 stars Near the official courseware, January 24, 2006

By 

Alessandro Perilli (Rome, Italy) - See all my reviews

This review is from: Configuring Check Point NGX VPN-1/Firewall-1 (Paperback)

This book is written by many respected authors and security professionals. Among them there is Barry J. Stiefel, the man who founded the first Check Point User Group (www.cpug.org).

I'm a Check Point Certified Instructor (CCSI) and can assure this book covers a lot of topics included in official Check Point VPN-1 NGX coursewares.

On Chapter 13 about Check Point VPN clients solutions it includes a Integrity technology discussion, acquired from ZoneLabs and to be merged with SecureClient.

On Chapter 14 it also includes a lot of details from the official Check Point SecurePlatform courseware.

The last chapter, Chapter 16 about VoIP, is even better than on the official course manual.

The book misses more details on some covered product features, coverage of some excluded features, OPSEC 3rd party interoperability examples, architectural problems discussion (like logging strategy, rulebase optimization, etc.), but it's a good book.

I strongly recommend it to anyone didn't take the course and want to have a wide coverage of many VPN-1 NGX features.
Who already attended the official course won't find here anything new.

3 of 5 people found the following review helpful:

5.0 out of 5 stars THE BULLETPROOF FIREWALL!!, May 22, 2006

By 

John R. Vacca "Tech Write Independent Reviewer" (Pomeroy, Ohio) - See all my reviews
(REAL NAME)   

This review is from: Configuring Check Point NGX VPN-1/Firewall-1 (Paperback)

Are you getting ready to take your Check Point certification exam? If you are, then this book is for you! Authors Robert Stephens, Barry Stiefel, Stephen Watkins, Simon Desmeules and Eli Faskha, have done an outstanding job of writing a book that is the perfect reference for anyone migrating from earlier versions of Check Point's flagship firewall/VPN product; as well as, those deploying VPN-1/FireWall-1 for the first time.

Stephens, Stiefel, Watkins, Desmeules and Faskha, begin by discussing the various methods that are deployed among different firewall vendors and open source solutions. Then, the authors discuss the significant changes between NG AI and NGX and partitions these changes into eight major categories. They continue with a review of what must be done prior to the actual installation and configuration of a Check Point environment. Next, the authors guide you through the necessary steps to perform the NGX upgrade. Then they take you on a tour of the interface used to configure your NGX installation: the SmartDashboard. They also discuss the need for tracking and walk you through a few configuration examples. Then, they discuss both basic and advanced concepts for network security and reveal how Check Point's technologies supply relief for current threats. The authors continue by showing you how to enable or disable Network Address Translation for a single host, for a range of addresses, or for an entire network. Next, they address the best way to authenticate users so they can access privileged resources. Then, the authors show you how Check Point FireWall-1 can integrate with third-party products. They continue by focusing on configuring site-to-site VPNs and the different design considerations that are involved. Next, the authors discuss the increasing number of employees that are either working comfortably at home or just simply away from the office, who need corporate access as if working locally. Then, they examine the functionality of SmartUpdate as a SmartConsole client in your Check Point environment. They also take you on a tour of SecurePlatform with the different operating system capabilities and the Check Point supported add-ons to SPLAT. Next, the authors demonstrate how to set up SmartView Monitor in a way that will allow you to view all your security components that your SmartCenter manages. Finally, the authors show, first the reason why VoIP should be secured and, second, how it is done.

The goal of this most excellent book is to cover all of NGX's dramatic changes and new, enhanced features. More importantly, you will learn how to secure the integrality of your network's data, communications, and applications from a multitude of blended threats.

0 of 2 people found the following review helpful:

4.0 out of 5 stars Good Reference Book, February 17, 2006

By 

Daniel McKinnon "Dan" (Tewksbury, MA USA) - See all my reviews
(VINE VOICE)   

This review is from: Configuring Check Point NGX VPN-1/Firewall-1 (Paperback)

'Configuring Check Point NGX VPN-1/Firewall-1' by Robert Stephens is another good book by Syngress for IT Professionals. Syngress has really focussed on IT setup and configuration for it's latest releases of books and they have done a solid job. Packing over 600 pages of material into this guide, if you use Checkpoint at your job, you would be wise to pick up a copy of this book for your desk at work.

***** RECOMMENDED