Courses Overview
The Check Point Certified Maestro Expert course is intended to provide you with the theoretical knowledge and practical skills needed to deploy, manage, and troubleshoot the Check Point Maestro environment.
This course is designed for technical professionals who support the Check Point Maestro hyperscale network security solution or who are working towards their Check Point Certified Maestro Expert (CCME) Specialist credential.
• Describe the demand for scalable platforms.
• Explain how Maestro uses the hyperscale technology.
• Identify the primary features and components of the Maestro system.
• Communicate the purpose of Maestro SecurityGroups (SGs), the Single Management Object (SMO), and the SMOMaster.
• Identify the types of interfaces found in Maestro deployment.
• Give examples of VLAN configuration enhancements for uplink ports.
• Identify basic steps in an initial maestro implementation.
• Discuss how to distribute files to all components and to specific components.
• Explain why verifying changes by using self-tests is important
• Demonstrate understanding of Maestro traffic distribution and flow.
• Describe a scenario in which you would keep Layer 4 Distribution enabled.
• List the four core diagnostic tools and what each of them is used for.
• Describe how to use audit trails to troubleshoot problems in the system.
• Describe different troubleshooting tools used at different OSI Layers.
• Identify the benefits of a Dual Orchestrator environment.
• Explain how Dual Orchestrators work with Multiple Security Groups.
• Describe the procedures used to install an upgrade on Maestro.
• Describe the ways to verify the installation is installed correctly.
Course Topics:
• Scalability and Hyperscale
• Maestro Security Groups and the Single Management Object
• Administrator Operations
• Traffic Flow
• System Diagnostics and Tracking Changes
• Troubleshooting
• Dual Orchestrator Environment
• Dual Site Environment
• Upgrades
Lab Exercises:
• Creating Security Groups and the Single Management Object.
• Working with Security Groups.
• Analyzing the Distribution Layer.
• Collecting System Diagnostics.
• Troubleshooting Maestro Environments.
• Deploying Dual Orchestrators.
Solid knowledge of:
• Unix-like and/or Windows OS, Internet, Networking Fundamentals, Networking Security, TCP/IP Networking.
Check Point training/certification:
• Check Point Certified System Administrator (CCSA),
• Check Point Certified Security Expert (CCSE).
Useful but not required:
• Check Point Jump Start Maestro Hyperscale Network Security,
• Check Point Certified Virtual System Extension (VSX) Specialist (CCVS),
• and Check Point Certified Multi-Domain Security Management Specialist (CCMS).
Attend two Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master (CCSM).
Attend four Infinity Specialization courses and pass their exams to automatically become a Check Point Certified Security Master Elite (CCSM Elite).
Choose from the following Infinity Specialization courses:
• Check Point Certified Harmony Endpoint Specialist (CCES)
• Check Point Certified Troubleshooting Administrator (CCTA)
• Check Point Certified Automation Specialist (CCAS)
• Check Point Certified Cloud Specialist (CCCS)
• Check Point Certified MDSM Specialist (CCMS)
• Check Point Certified VSX Specialist (CCVS)
• Check Point Certified Troubleshooting Expert (CCTE)
• Check Point Certified Cloud Network Security Expert for AWS (CNSE-AWS)
• Check Point Certified Cloud Network Security Expert for Azure (CNSE-AZURE)