CCSE NGX Advisory needed !!

[Wutkung]

I just pass CCSA NGX yesterday.
And my boss tell me to prepare for CCSE NGX for middle of the next month !!!

Now I have to prepare myself.
Please let me know what information needed for take this test.

Does the objective in Check Point website work ?

# Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence
# Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform
# Distribute content security to Security Gateways, screen URL’s and block suspicious Web data, and provide auditing capabilities and detailed reports
# Configure VPNs, using IKE encryption and Check Point’s simplified VPN setup
# Use VPN-1 SecuRemote/SecureClient to configure remote access
# Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway
# Given a variety of Check Point QoS configurations, determine how to allocate bandwidth
# Identify features and limitations of Check Point High Availability solutions

And in website it's said that pass CCSE NGX require 2 exman (156-215.1 and 156-315.1) since i've already pass 156-215.1. Do I have to test again in CCSE NGX test ?

Thanks for every answer.

[Joncon]

Wutkung,

not sat the NGX CCSE (did mine on NG AI) so can't comment on the content. You will not need to retest the 156-215.1 exam to get CCSE, just take the 156-315.1 exam and pass and your cert will be upgraded.

Good luck,

[jesprile]

Wutkung,

Hello

please provide some information about your CCSA NGX exam.

I have exam next week.

[Wutkung]

Originally Posted by jesprile

Wutkung,

Hello

please provide some information about your CCSA NGX exam.

I have exam next week.

Jesprile,
Took the information at
Important CCSA Exam Information

and graps the Testking I upload at
http://rapidshare.de/files/21075940/tk156-215.pdf.html

[kjohnson]

I've attempted the CCSE NGX twice scoring 57% and 67% respectively. I believe the .1 tests are not actually revised as they say, or at least could go through another revision or two. I have the Mgmt II and Mgmt II 1.1 books (the test is supposed to be based on the II 1.1 book) and have found errors in the new book.
The test had two questions on restrictions for Mgmt HA and the new book lists one restriction; the old book lists two! Which one is right? I would have passed had the new book been written correctly.
A few things I wrote down after the last attempt:
VPN Routing (not in book II 1.1):
Options enabled on the Gateway
Directional Match
VoIP:
In what cases do you use Sip and Sip_any (2 questions)
GateKeeper and Gateway with which protocols?
HA:
Priority of modules; if given the output of 'cphaprob state' can you tell which machine will become active after a reboot? --depends on the settings for the cluster.
Given the output of 'cphaprob state' can you tell whether it is a unicast, HA or multicast mode?
HA will have 100% and 0%
Unicast wil have split percentages and "(pivot)" for one machine
Multicast will just have split percentages
Which command shows sync status (fw ctl pstat --i think)
Secure Client:
Does NOT work on Ipso
What is your encryption domain when you have to go through two CP gateways
VPN:
How do you delete all VPN tunnels (vpn tu command from the FW NOT mgmt station--Delete al IPsec+IKE SAs for ALL peers and users)

I may post more when I have time. Hope this helps someone!

[betski]

I failed yesterday with 60%. I didn't have the official courseware but did have the exam study guide. I downloaded all the NGX docs from Check Point but this obviously isn't enough. I think you're supposed to go through the knowledge base for real life situations- now that wont take long will it!

[dickytoo]

I've seen it somewhere before but can't remember where. How many questions is it?

I'm hoping to go for it in a week or so. I've been certified in version 4 and NG and doing the NGX one now so that my certification is current. i passed my CCSA NGX a few weeks ago and been trying to ramp up for this one.

[dickytoo]

Passed my CCSE NGX (R60) This morning. It wasn't too bad, in some ways, it was easier than the CCSA.

It was 71 questions.

There was one question that was definitely wrong. it asked about which security servers could authenticate but didn't have content inspection. the options were SMTP, Telnet, rlogin, HTTP and FTP but it only allowed you to choose one. I thought it should have been Telnet and rlogin but you couldn't choose them both. I made a comment in the exam to that effect.

there was also a question about sticky options (Ips, ports and SPIs). The online help file says one thing and the knowledgebase article says that the help file is incorrect. what would you choose, the online help or the knowledgebase as the correct answer? i went for the online help because i thought it would be more relevant for the exam but in real life, i would opt for the knowledgebase. i also made a comment in the exam for this.

does anyone know if the comments are looked at? what happens if you're right and the exam answer is wrong? does check point amend your results?

[david]

congratulations & thanks for the info.
i'm am planning to take this exam within the next few weeks.
do you recall if you got many questions about QOS?

Dave.

[dickytoo]

there was a couple. just know your weights and limits etc. the one question i remember was relatively straight forward. remember the basic principle (?) of how weights and limits interact and the fact that weights only count when there are actual connections. also know your different types of services such as llq, tos wfq etc

quite a bit of VOIP and vpn, upgrades, licensing and a fair few on HA (management) and clusterxl.

know your phase 1 and phase 2 negotiation sequences (very basic stuff, really) perfect forward secrecy etc.

[david]

thanks for the info, very helpful.

[dickytoo]

sorry to keep drip feeding you. just remembered, about 4 or 5 questions on smart defence/application intelligence. Know how to use the resource servers, how to configure them, use the match tabs etc. there is a similar question in testking but i think their answer is wrong.

also with VPNs, know the different types of VPNs, stars/mesh. how what their differences are, VPN routing and configuration options.

[zack.barak]

can someone please send me a brain dump for the latest CCSE 156-315.1
i am doing the exam this friday.



thanks alot


zack.barak@gmail.com

[nizome]

Originally Posted by zack.barak

can someone please send me a brain dump for the latest CCSE 156-315.1
i am doing the exam this friday.



thanks alot


zack.barak@gmail.com

Hi Brothers,
Please sharing CCSE docs with me.
my email: nizome@gmail.com
Thanks in advanced
Rgds,
Nizome