CCMA how to - CPUG: The Check Point User Group

22 downloads 52 Views 45KB Size Report
Sep 16, 2009 ... CCMA exam is the subject of NDA ... Check Point certification is even less perfect ... CCSA. ▫ CCSE. ▫ CCSE+. ▫ In practice it is not enough.
CCMA – HOW TO

…if you want to know…

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Topics  Personal CCMA history  What is CCMA certification  What to study  Other preparation tips  What to expect

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Before we start

 CCMA exam is the subject of NDA

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

1

Check Point certification – personal view  Check Point official courses are less then

perfect  Check Point certification is even less perfect  Having a certificate is not equivalent of

having working knowledge  For that reason I do not consider CP

certification to be a career enhancer

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

When you may need it?  Proving to yourself you are good  Looking for another job  Meeting a formal requirement for the current

job  Something else?

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

My main reason for CCMA  Diamond partner requirement  Part of the job description  I have explained to my company I am not

happy doing it because…  …nobody knows what it is and how to get it

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

2

What is CCMA?  Google brings 335000 pages with this

abbreviation, here are some examples: Canadian Country Music Association California Cast Metals Association  Catholic Campus Ministry Association  Commission for Conciliation, Mediation and Arbitration  Canadian Capital Markets Association  

 Check Point is mentioned between second

and third pages… 16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Ask Check Point about it  The Check Point Certified Master Architect

(CCMA) certification is Check Point's highest level of professional certification. 

This certification identifies Check Point experts capable of designing, implementing, managing, and troubleshooting complex endto-end Check Point security architectures, including perimeter, internal, Web and endpoint security solutions.

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

CCMA Exam – how much?  2 hours written exam with Pearson VUE -

$300 

Score of 80% or more required

 8 hours Lab exam - $1200  It usually takes one month to get it analyzed  Total of $1500

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

3

Prerequisites  CCSA  CCSE  CCSE+  In practice it is not enough

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

You need to know  Provider-1  VSX  Eventia products  Connectra  Lately (rumors) IPS

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

What to learn?  Check Point has no course and/or

courseware for CCMA certification  My only clue: “CCMA Job Functions and Test

Objectives” http://www.checkpoint.com/services/educatio n/certification/ccma/exam.html

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

4

There are some improvements  Now available:

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

CCMA study guide

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

CCMA study guide

 Still in Beta stage  6 pages of high level topics

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

5

CCMA study guide – content  10 sections          

1. Define organizational risk and security requirements. 2. Propose integrated security architectures. 3. Pilot and evaluate proposed security implementations. 4. Install and configure complex security solutions. 5. Create a virtual-security infrastructure for vendors, partners, and customers. 6. Maintain complex security solutions. 7. Evaluate existing, complex security-solution effectiveness. 8. Manage complex system upgrades. 9. Troubleshoot security problems. 10. Create backup and recovery strategies.

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

CCMA study guide – content  Quoting:  Section 4:  4. Install and configure complex security solutions. 

4.1. Perform installation and configuration of a complex security solution, integrating multiple devices and global user populations.  Review the functions of IPSec and SecureXL.  Review the functions of InterSpect, Integrity, Eventia Reporter, Provider-1, VPN-1 VSX, and Connectra.

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Again, what to learn for written exam?!  CCSA, CCSE CCSE+ mandatory!  Refresh your knowledge of the exams and of the questions  Important: Principles of Network Security  There are some questions about that.  Provider-1  VSX  Eventia Reporter  IPS??? 16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

6

Important tip for written exam  Score is more then 80%, not 70% as for other

regular Check Point exams!  Write comments for ambiguous or incorrect

questions – Check Point reads them  Prepare contingency plan and try not to book

lab exam before passing the written one  Do not hesitate to contact Check Point in

case of failure

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

How to prepare for lab exam?

 No official information about that!!!

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Lab exam conditions  Tasks are based on some customer related

scenario There are more then one scenario  NO Internet access  NO personal materials access  Product documentation is available  Tip: ask for ATRG documents to be

available in advance! 16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

7

What to prepare for lab exam – my tips  Working knowledge of

VPN routing Provider-1 itself  Migration techniques for P-1  Eventia Reporter on P-1  Licensing  



VMware knowledge – mandatory, even if not part of the exam

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Other Important tips for lab exami  Plan the whole day for it, not just 8 hours  Be ready to eat in the process  Be prepared to face initial systems not working  Check everything before start performing lab tasks  Do not expect CP lab engineer to know the lab  Claim additional time if CP was not ready and you have to do extra efforts  Make detailed log of your actions. Write everything

down. It is part of the exam analysis materials for CP

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

And then you pass…

 What you gain for that pain?

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

8

Official Check Point benefits  Quote form CP site: 

The Check Point Certified Master Architect certification will include unique benefits, in addition to the benefits already acquired as a Check Point Certified Professional.



Currently, we are in process to define benefits. Check back for updates.

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

Professional and personal benefits  Great self-esteem  My wife calls me monster architect now  Proven professional expertise  Nice paper certificate  In my case: confirmed partner status for the

company  Something else? 16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

 Questions?

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

9

Thanks for your time

 And good luck in getting CCMA title!

16-Sep-09

Check Point Security lectures By Valeri Loukine, 2009

10