Maestro Expert R81.10 (CCME)

COURSE GOAL

Gain the theoretical knowledge and practical skills needed to deploy, manage, and troubleshoot the Check Point Maestro environment.

Course Schedule

WHO SHOULD ATTEND?

Technical professionals who support the Check Point Maestro hyperscale network security solution or who are working towards their Check Point Certified Maestro Expert (CCME) Specialist credential.

PREREQUISITES:

  • Solid knowledge of: Unix-like and/or Windows OS, Internet, Networking Fundamentals, Networking Security, TCP/IP Networking.
  • Check Point Certified System Administrator (CCSA), Check Point Certified Security Expert (CCSE).

RECOMMENDED:

  • Check Point Jump Start Maestro Hyperscale Network Security
  • Check Point Certified Virtual System Extension (VSX) Specialist (CCVS)
  • Check Point Certified Multi-Domain Security Management Specialist (CCMS)

COURSE TOPICS

  • Scalability and Hyperscale
  • Maestro Security Groups and the Single Management Object
  • Administrator Operations
  • Traffic Flow
  • System Diagnostics and Tracking Changes
  • Troubleshooting
  • Dual Orchestrator Environment
  • Dual Site Environment
  • Upgrades

COURSE OBJECTIVES

  • Describe the demand for scalable platforms.
  • Explain how Maestro uses the hyperscale technology.
  • Identify the primary features and components of the Maestro
    system.
  • Communicate the purpose of Maestro SecurityGroups (SGs), the
    Single Management Object (SMO), and the SMOMaster.
  • Identify the types of interfaces found in Maestro deployment.
  • Give examples of VLAN configuration enhancements for uplink
    ports.
  • Identify basic steps in an initial maestro implementation.
  • Discuss how to distribute files to all components and to specific
    components.
  • Explain why verifying changes by using self-tests is important
  • Demonstrate understanding of Maestro traffic distribution and flow.
  • Describe a scenario in which you would keep Layer 4 Distribution
    enabled.
  • List the four core diagnostic tools and what each of them is used for.
  • Describe how to use audit trails to troubleshoot problems in the
    system.
  • Describe different troubleshooting tools used at different OSI Layers.
  • Identify the benefits of a Dual Orchestrator environment.
  • Explain how Dual Orchestrators work with Multiple Security Groups.
  • Describe the procedures used to install an upgrade on Maestro.
  • Describe the ways to verify the installation is installed correctly.

LAB EXERCISES

  • Creating Security Groups and the Single Management Object.
  • Working with Security Groups.
  • Analyzing the Distribution Layer
  • Collecting System Diagnostics.
  • Troubleshooting Maestro Environments.
  • Deploying Dual Orchestrators.