CCME: Check Point Maestro Expert R81.1
The Check Point Certified Maestro Expert course is intended to provide you with the theoretical knowledge and practical skills needed to deploy, manage, and troubleshoot the Check Point Maestro environment.
Audience
This course is designed for technical professionals who support the Check Point Maestro hyperscale network security solution.
It is also for those who are working towards their Check Point Certified Maestro Expert (CCME) Specialist credential.
About the instructor, Eric Anderson
Eric Anderson is a Cybersecurity Architect and Instructor at Atlantic Data Security in Boston. He has been working with Check Point products for over 25 years, both as an Engineer and as a Senior Instructor.
Eric is often a featured speaker at several cybersecurity conferences including Check Point CPX.
Prerequisites
Solid working knowledge of:
- Unix-based and/or Windows OS
- TCP/IP Networking
- Check Point API
Check Point training/certification:
- Check Point Certified System Administrator (CCSA)
- Check Point Certified Security Expert (CCSE)
Course topics
- Scalability and Hyperscale
- Maestro Security Groups and the Single Management Object
- Administrator Operations
- Traffic Flow
- System Diagnostics and Tracking Changes
- Troubleshooting
- Dual Orchestrator Environment
- Dual Site Environment
- Upgrades
Course objectives
- Describe the demand for scalable platforms.
- Explain how Maestro uses the hyperscale technology.
- Identify the primary features and components of the Maestro
system.
- Communicate the purpose of Maestro SecurityGroups (SGs), the Single Management Object (SMO), and the SMOMaster.
- Identify the types of interfaces found in Maestro deployment.
- Give examples of VLAN configuration enhancements for uplink
ports.
- Identify basic steps in an initial maestro implementation.
- Discuss how to distribute files to all components and to specific
components.
- Explain why verifying changes by using self-tests is important.
- Demonstrate understanding of Maestro traffic distribution and flow.
- Describe a scenario in which you would keep Layer 4 Distribution enabled.
- List the four core diagnostic tools and what each of them is used for.
- Describe how to use audit trails to troubleshoot problems in the system.
- Describe different troubleshooting tools used at different OSI Layers.
- Identify the benefits of a Dual Orchestrator environment.
- Explain how Dual Orchestrators work with Multiple Security Groups
- Describe the procedures used to install an upgrade on Maestro
- Describe the ways to verify the installation is installed correctly
Exercises
- Creating Security Groups and the Single Management Object.
- Working with Security Groups.
- Analyzing the Distribution Layer.
- Collecting System Diagnostics.
- Troubleshooting Maestro Environments.
- Deploying Dual Orchestrators.
Certification
This course is recommended as preparation for exam 156-836: Check Point Maestro Expert (CCME) R81.1
