ccse info

[doom24]

hi

i just passed ccsa 156 215.1

how much ccse more difficult than ccsa ?

what the material ? mostly vpn ?

thanx

[sfa8us]

CCSA was more a stand alone setup

CCSE is more distrubted setup, with Firewall Clusters , Failovers , upgrade and VPn stuff etc...

try and get your hand on checkpoint r60 documentation, the ngx ccse lab book and well the prep questions, also i am a big vmware fan, i lab everything it takes time but its good expereince

---sfa8us

[vmalguy]

About vmware and checkpoint :

I have done a ccsa/ccse course in a accredited training center (global knowledge). The lab was setup on a vmware environnement. We had 1 virtual serveur (with CMA) in a dmz , 1 virtual serveur in a 'outside' zone, 1 virtual firewall that was conected the 2 network.

After some check, we find out that the packet wasnt filtered by checkpoint firewall. They were pass through the 'firewall' virtual serveur 'kernel' without pass trough checkpoint hook .

sfa8us, Did you had that kind of problem ? do we need to check / uncheck something to make the packet going throug checkpoint firewall ?

Vincent.

[BarryStiefel]

Originally Posted by vmalguy

About vmware and checkpoint :

I have done a ccsa/ccse course in a accredited training center (global knowledge). The lab was setup on a vmware environnement. We had 1 virtual serveur (with CMA) in a dmz , 1 virtual serveur in a 'outside' zone, 1 virtual firewall that was conected the 2 network.

After some check, we find out that the packet wasnt filtered by checkpoint firewall. They were pass through the 'firewall' virtual serveur 'kernel' without pass trough checkpoint hook .

sfa8us, Did you had that kind of problem ? do we need to check / uncheck something to make the packet going throug checkpoint firewall ?

Vincent.

I'm pretty sure that Global Knowledge is not a Check Point Authorized Training Center. Also, I keep hearing lots of complaints about the quality of their Check Point course...

[vmalguy]

Originally Posted by BarryStiefel

I'm pretty sure that Global Knowledge is not a Check Point Authorized Training Center. Also, I keep hearing lots of complaints about the quality of their Check Point course...

To be honest it was'nt very usefull because a lot of "student" never had a real checkpoint experience. So the first few days were worthless. I don't thing that it is a global knowledge issue. I belive that a lot of training suffer from inexperimented student.

Vincent.

[sfa8us]

well when i set up my cities following the checkpoint manaul, i build a vmware router with 2 interface using feather linux, and use it to direct the traffic to the respective networks