Check Point Master Architect

[kva.kva]

Check Point CCIE :)

http://www.checkpoint.com/services/e...msa/index.html
http://www.checkpoint.com/services/e...sa/become.html

[northlandboy]

Yes, looks like it's going to be a reasonably tough cert to get - which is a good thing for making it more valuable.

I hadn't realised they were planning on making having pretty much all the other exams compulsory though - you need to pass 6 exams before you can sit the written for this one. cf with Cisco's approach - you need CCNA to do CCNP, but you don't need any prerequisites to do CCIE.

Having to do CCSE+ and CCMSE is fair enough I guess, but it's interesting that you've got to do at least one of the exams in what I would call the non-traditional Check Point area - i.e. Integrity/Interspect/Connectra.

It's quite a good thing to give you the chance to submit questions. I've been meaning to do it for a few weeks now, but haven't had the chance to sit down and go through some challenging scenarios.

It's something I would like to do in the future, but it looks like it might be a few years away for me, since I'm going to be out of the loop for 18 months or so from next year, so by the time I come back, all my curent certs will have expired, and I'll have to resit them, followed by these exams. Would still be cool to get though - especially if it really takes off, and you get one of the low numbers.

[david]

wow, an 8-hour practical exam too!
very interesting, like northland boy says suprsied you need all the other certs first.
i'm working on my ccse at the moment, so will be a while before i even think about this one.

[cciesec2006]

I am glad checkpoint has finally recognized this and start the lab exam.

Not too many ppl. can afford the CCIE lab exam because not too many
people can have a home lab to prepare for the CCIE R&S or Security exams.

I already have CCIE security exam and it would be really cool to get
the new checkpoint master certification as well.

cciesec2006

[sebastan_bach]

hi all i am really glad to see the checkpoint master certification. i hoe this lab will purely hardcore security on checkpoint products and hope that they introduce all the models of ngx including, vsx,connectra,integrity in the lab. the current ccie security is not harcore security as still there is only a single dumb pix which is just a stupid natting box. i really hate pix i have worked a lot and there is too much of routing and switching in the lab. the new ccie security lab looks much better than the current one. i think i will go for the new one.

regards

sebastan

[cciesec2006]

I do not understand Checkpoint's logic. One has to pass 7 written exams
just to qualify for the CPMSA lab. What is the logic behind 7 written
exams? Why can it be similar like Cisco whereas in order to qualify for the
CCIE lab exam, you only need to pass the ccie written exam.

[sebastan_bach]

hi yeah u are right. i feel thats a marketing gimick by checkpoint to promote their other certifications cause people give certs of vsx,provider-1 and all those papers. lets hope the lab is real good and tuff with all their modules in it.

regards

sebastan

[cciesec2006]

hi sebastan,

I think the Checkpoint CPMSA will never as popular as Cisco CCIE program
for several reasons:

1- checkpoint is a software company, not a hardware company. There are
many ppl still running Checkpoint software on Microsoft Windows. I do not
think the CPMSA lab will not test candidates much on checkpoint products
running on Microsoft platforms, Solaris platform or Nokia platforms for that
matter. Technically, someone who pass the checkpoint lab exam would not
know how configure VRRP or ipso clustering or troubleshoot checkpoint issues
on microsoft platform.

2- that person would not have a deep knowledge of checkpoint running
on the Nokia platforms, Crossbeam, corrent, etc. I would imagine that he/she
would be good with SPLAT but that is not enough.

Because Cisco controls both the hardware and software, there are a
reasonable expectations for someone with CCIE (to a certain extent).
With CPMSA, I really do not know what to expect.

Regards

cciesec2006

[sebastan_bach]

hi buddy . just like checkpoint certs will not be on nokia or crossbeam and only on secure platform.

same is with cisco certifications.

as per the latest cisco security technologies which they are promoting on their websote hardly any of that is present in the lab . example

the nac solution which they are promoting everywhere why it is not in the lab.

the cisco security agent for host based ips not in the lab.

cs-mars the centralised logging device not in the lab.

6500 fwsm and idsm cards which are present in every cisco powered network not in the lab .

why not 2 vpn oncentrators for clustering when everywhere in the network it is in cluster.

all these things u will see in every cisco security solution but not in lab why.

forgot all these the most of all the cisco ios train for which cisco is very famous the latest ios the 12.4T having very good security features why are they still using 12.2 ios in the lab. which hardly has features as compared to 12.4T.

Cisco is promoting the ISR routers everywhere and have put almost of the other existing series end of life and sale. but still ISR'S are not in the lab still u have 3600,2600 series which are end of life.

why can;t they upgrade their lab with the latest products.

in this case i don;t see any difference in what cisco and checkpoint are doing as per lab is concerned.

atleast in the checkpoint lab u will get to work on all the modules of checkpoint and the lastest products and features of it not like cisco. which promotes some different technology and tests something else in the lab.

i am not a checkpoint freak even i have worked majorly on cisco only. but these are facts abt cisco which i hate.

and as per hardware and software difference it doesn;t make much difference cause if u have worked on checkpoint u can easily differentiate the features that checkpoint gives as compared to pix or asa.

if u want i can give u a list of features which checkpoint supports and asa doesn;t.

regards

sebastan

[BarryStiefel]

Originally Posted by kva.kva

Check Point CCIE :)

http://www.checkpoint.com/services/e...msa/index.html
http://www.checkpoint.com/services/e...sa/become.html

I've been hearing from a lot of Check Point insiders that Check Point is trying very hard to branch out into other products besides just the perimeter firewall business. The perimeter firewall/VPN business is mature and there isn't much growth, so Wall Street isn't keen on them and their stock price has been stagnant. I've heard it directly from senior people that Check Point wants to be known as more than a firewall company.

I think this new certification is a move in that direction. They really, really want to get people certified in their other products and out recommending them. This new certification does appear to be similar to the CCIE.

It looks like it would be cool to have, but you might have to spend a lot of time and money getting skilled on peripheral products that don't really sell...

[sebastan_bach]

hi all l i know that checkpoint is a awesome product but it is one of the most expensive ones. my friends in india have seen that most of the small enterprise having a checkpoint with 100 to 500 users are migrating to netscreen,fortinet or cisco.

the biggest problem is with checkpoint they are lot of modules for which again the cost is a factor with recurring cost of renewing the licenses every year. none of the current products in the market have this concept.

first poeple have to buy the licenses then buy dedicated hardware for throughput like nokia and alteon and again spend on them and plus keep on paying the cost of licensing every year.

whereas u take a netsrceen or fortinet box which gives u dedicated hardware throughput plus they have all anti-virus,anti-spam,content-filtering,ips,ssl vpn in one single box.

then why would poeple like to bear the cost of such a expensive product.

i have seen only big enterprises like banks and all have been able to afford checkpoint small and medium size enterprises are migrating from checkpoint to other one box and cheaper solutions.

and this certification would only become famous like CCIE cause cisco has created a huge job market for cisco certified professionals and specially for CCIE's. this certification would also become famous once checkpoint creates a job market for it.

i feel it;s high time that checkpoint should have a ips solution in their perimeter security solution and come with their dedicated hardware.

just my views

regards

sebastan

[GregH]

Originally Posted by BarryStiefel

I've been hearing from a lot of Check Point insiders that Check Point is trying very hard to branch out into other products besides just the perimeter firewall business.

It wouldn't be the 1st time they tried this, those products didnt sell that time either. ITSR them flogging a glorified DHCP server.

The perimeter firewall/VPN business is mature and there isn't much growth, so Wall Street isn't keen on them and their stock price has been stagnant.

No surprises there, relying on licensing/support fees from existing customers does not grow the business.

There is growth in this market, vendors such as Juniper and Fortinet are taking business away from complacent Checkpoint.

I've heard it directly from senior people that Check Point wants to be known as more than a firewall company.

When the likes of Niall Moynihan are leaving for pastures new, it does make one wonder about their long term prospects.

I think this new certification is a move in that direction. They really, really want to get people certified in their other products and out recommending them. This new certification does appear to be similar to the CCIE.

A complete waste of time IMHO. Who realistically is going to waste T&E studying little used esoteric parts of a software which is suffering declining market share and is now having it's clock cleaned in several key sectors.

It looks like it would be cool to have, but you might have to spend a lot of time and money getting skilled on peripheral products that don't really sell...

Exactly, which is why no one in their right mind is going to do it. In terms of real world security hands on, a security CCIE has far greater depth & a CCSP or the Juniper equivalent would be of far greater utility to those of us who already have the SA/SE.

Hate to rain on peoples parades, but the CCMSA is an irrelevance which is too little too late.


greg

[amccarth]

Hi All,

Based on your responses, we are rethinking the prerequisites to take the lab exam. The intent of the exam is to measure the security professional's ability to integrate multiple Check Point solutions to create a end to end Check Point security architecture. We are considering waiving some of the prerequisites like Provider-1 & other electives. CCSA, CCSE, & CCSE Plus NGX would still be required. You can expect however to see other product solution exam questions to be included on the written and tested in the lab exam and would highly suggest the test taker be well versed in the other solutions. Our intent is not to make this costly to get, but to create a certification that will prove your expertise. We'll likely integrate the other electives into the CE program to maintain the security master status, but these other titles will be included in recommended study materials for the master exam.

We're still looking for exam item contributions and suggestions for lab scenarios for the test. Drop us a note at certification@ts.checkpoint.com. Submit test questions to: http://www.checkpoint.com/services/e...a/request.html

Look forward to meeting all you security masters in the future!

Cheers,
Amy (McCarthy) Hughey / Check Point Education Services Manager

[sebastan_bach]

hi amy thanks a lot for reconsidering the qualification for the exam. would like to say that checkpoint should add all the modules it has in the lab and make it as tuff as ccie and make as recognised and create a demand for the certified individuals in the job market.

i would also like to add is to start a product specific certification on connectra as well like integrity since it;s a complete sslvpn portal solution and none of ur papers currently are testing people on it.

would like to see the certification out there for it too.

will there be practise lab workbooks like ccie certifiation has example scenarios and explanation cause to be frank checkpoint lacks a lot of documentation and books on their products.eg: ciscopress. trucks loads of books and information. there are still many books to be released on the NGX version besides the training material cause not evetrybody like to attend the training just to get the study material.

just my views

regards

sebastan

[amccarth]

Hi Sebastan & All,
Our direction will be offer certifications with all of our new training offerings as quite frankly, employers don't want to send someone to training without being able to determine if they actually got something out it (new skills, knowledge, or abilities). This new line of specialist certications with a product/technology focus will include Connectra, InterSpect, & Integrity (Integrity already is available).

Regarding documentation, many of the training titles are available through order online through our web site, if they aren't they can be ordered through a list of our ATC distributors. Just email atc@ts.checkpoint.com to get the list.

I appreciate the feedback.

Cheers,
Amy

[sebastan_bach]

hi amy thanks for ur instant response. and we are glad to hear the other product specialist certifications in the roadmap. that;s really good. i have seen the list of book in the training section.

there are books on VSX,PROVIDER-1 and integrity.


would also like to see book on connectra on NGX, interspect,

i guess checkpoint needs to add a lot fo configuration examples on their sites for reference for people who are new to it and have to do a deployment. cisco has really got a good chunk of configuration examples with screenshots to help people with it.

just my views.

regards

sebastan

[amccarth]

InterSpect was just wrapped up last week. You should see it on the training section of our web for order in a few days and the exam in the next week or so along Check Point Certified Specialist - InterSpect exam. Connectra is about 50% through dev. It should be available in ~4-5 weeks from now.

Cheers,
Amy

[sebastan_bach]

hi amy thanks a lot. i had previously mailed checkpoint regarding the new certification they are launching they said they will adding product specialist certifications as well many more are abt to come bt 5 to 6 months time. can u tell us something abt that i mean what new certifications are in roadmap if that;s not very confidential.

regards

sebastan

[mhoefle]

Just an FYI, This promotion is being messaged out to all Check Point Certified Professionals:

Are you up to the Check Point Master Architect Challenge!!!

How good are you at developing and writing exam questions?

As Check Point Education Services builds the written Master Architect exam, we are asking for test questions from the Check Point certified-professional community. Every certified professional is invited to submit test questions for the exam. Each question we use will earn you one chance in a drawing for one of five free Master Architect exam vouchers, each with an approximate $1500 US value ($300 written-test voucher and $1200 hands-on lab-test voucher).

Winners will:

• Be one of the first to be certified as a Check Point Master Architect.
• Receive a low certificate number reserved just for them.
• Have both Master Architect written AND lab exam fees waived.

Enter as often as you like; if you submit 100 usable questions, your name will be entered in the drawing 100 times.

• Test questions can be related to ANY current Check Point product.
• Check the CPMA job functions and test objectives at the link below for question categories.
• Please do not submit basic GUI-use and/or operation-type questions, such as “Where do you configure...?” or “What command do you use to...?”

Follow this link to the Check Point Master Architect page, and submit your exam items:

http://www.checkpoint.com/services/e...msa/index.html.

The drawing for the vouchers will be held at the end of October, with the results posted on the above site, so submit your exam items early and often!

[BarryStiefel]

Originally Posted by mhoefle

Just an FYI, This promotion is being messaged out to all Check Point Certified Professionals:

Are you up to the Check Point Master Architect Challenge!!!

Would you like be one of the first to be certified as a Check Point Master Architect – with a low certificate number reserved for you? Check Point will reserve one of the first Check Point Master Architect certificate series numbers (10021–10025) for you, to be issued to you upon your successful completion of the exams.

Would you like to have Check Point waive both your Master Architect written AND lab exam fees?

How good are you at developing and writing exam questions?

As Check Point Education Services builds the written Master Architect exam, we are asking for test questions from the Check Point certified-professional community. Every certified professional is invited to submit test questions for the exam. Each question we use will earn you one chance in a drawing for one of five free Master Architect exam vouchers (each with an approximate $1500US value).

Enter as often as you like; if you submit 100 usable questions, your name will be entered in the drawing 100 times. The five winners will each receive one free written-exam voucher, and one free lab-exam voucher, (issued to you after you pass the written exam).

Test questions can be related to ANY current Check Point product. Check the CPMA job functions and test objectives at the link below for question categories. (Please do not submit basic GUI-use and/or operations-type questions, such as “Where do you configure....?” or, “What command do you use to....?”)

Follow this link to the Check Point Master Architect page, and submit your exam items:

http://www.checkpoint.com/services/e...msa/index.html.

The drawing for the vouchers will be held at the end of October, with the results posted on the above site, so submit your exam items early and often!

Wait a minute... ...does this mean the exam is going to cost $1,500?!

Hey Check Point; does this really have to be such a profit center? Some of us won't be getting reimbursed by our employers...

It's bad enough that the current exams cost $150, but now you want us to pass something like six or seven of them, before we're allowed to pay $1,500 for the final exam?

Please reconsider.