ccse.pdf

(8782 KB) Pobierz
Advanced FireWall-1
Management (CCSE)
Student User Guide
Ve r s i o n 4 . 0 R e v i s i o n B
Document # CPTS-DOC-C1012
Rev. B
© Copyright 1999 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright
and distribution under licensing restricting their use, copy, and distribution. No part of
this documentation may be reproduced in any form or by any means without prior
written authorization of Check Point Software Inc. While every precaution has been
taken in the preparation of this document, Check Point assumes no responsibility for
errors or omissions. This document and features described herein are subject to
change without notice.
Trademarks:
FireWall-1, SecuRemote, Stateful Inspection, INSPECT, Check Point and the Check
Point logo are trademarks or registered trademarks of Check Point Software
Technologies Ltd. Sun, SPARC, Solaris, and SunOS are trademarks of Sun
Microsystems, Inc. UNIX and OPEN LOOK are registered trademarks of UNIX
System Laboratories.
All other products or services mentioned herein are trademarks or registered
trademarks of their respective owners.
Check Point Software Technology Ltd.
International Headquarters:
3A Jabotinsky Street
Ramat Gan 52520 Israel
Tel: 972-3-613 1833
Fax: 972-3-575 9256
E-mail: info@checkpoint.com
U.S. Headquarters:
Three Lagoon Drive, Suite 400
Redwood City, CA 94065
Tel: 650-628-2000
Fax: 650-654-4233
HTTP://www.checkpoint.com
Dallas Courseware Development:
2505 N. Highway 360, Suite 700
Grand Prairie, TX. 75050
Tel: 817-606-6600
Fax: 817-652-4757
Please direct any comments concerning Check Point courseware to
courseware@us.checkpoint.com.
Rev. B
Document # CPTS-DOC-C1012
Document CPTS-DOC-C1012
Rev. B
v
Introduction to Advanced FireWall-1 Management (CCSE)
1
CCSE Course Description .................................................................................... 1
Course Objectives ........................................................................................................................ 1
CCSE Course Layout ........................................................................................... 2
Course Requirements .................................................................................................................. 2
Prerequisites ................................................................................................................................ 2
CCSI Course ................................................................................................................................ 2
Course Map .......................................................................................................... 3
Day 1 ............................................................................................................................................ 3
Day 2 ............................................................................................................................................ 3
FireWall-1 Lab Setup (Windows NT Server and Solaris) ..................................... 4
Lab Setup ..................................................................................................................................... 4
Lab Topology ............................................................................................................................... 4
IP Addresses ................................................................................................................................ 5
Lab Terms .................................................................................................................................... 5
Site-Number Table ....................................................................................................................... 5
What’s New in FireWall-1 Version 4.0 .................................................................. 6
New Platforms .............................................................................................................................. 6
Encryption .................................................................................................................................... 6
Enterprise Management ............................................................................................................... 6
Authentication .............................................................................................................................. 6
Client Authentication .................................................................................................................... 6
Security Servers ........................................................................................................................... 6
Support for New Services ............................................................................................................ 6
Unit I — Chapter 1:
The Firewall Challenge
7
Introduction ........................................................................................................... 7
The Firewall Challenge ......................................................................................... 8
The Enterprise Security Challenge .............................................................................................. 9
Evolution of Security Management .............................................................................................. 9
Building Enterprise Security ....................................................................................................... 10
OPSEC ...................................................................................................................................... 11
FireWall-1 Year 2000 Compliance ............................................................................................. 13
Backup ....................................................................................................................................... 13
Rev. B
Document # CPTS-DOC-C1012
Zgłoś jeśli naruszono regulamin