Check Point NG[s]AI

In Check Point Next Generation with Application Security Administration you will cover the basic concepts of security and how to configure a simple firewall all the way to some very advanced VPN scenarios. This book is written by experts in the field as well as certified instructors to give the depth desired by the most advanced users, but also to allow even the most basic administrator to learn the do s and don ts of security. It will instruct you on the capabilities and configurations of Check Point s product line and it covers not only the basics of Check Point VPN-1/FireWall-1, but also the new features introduced in Check Point Next Generation with Application Intelligence R54, which provides proactive attack protection with SmartDefense.

• Install and Configure Check Point VPN-1/FireWall-1 NG AI: Install, configure and uninstall Check Point VPN-1/FireWall-1 NG AI on Windows, Solaris, Nokia, and SecurePlatform.
• Manage the FW-1 GUI Management Client, SmartDashboard: Use Smart Dashboard to manage objects, add rules, manage global properties, do updates, tracking, and monitor status.
• Learn to Write a Security Policy: See how to write, implement, and install a security policy.
• Secure Your Internal Network of DMZ (Demilitarized Zone) Network: Use Network Address Translation (NAT) to protect your network, while at the same time conserving valuable IP address space.
• Implement User Authentication at Your Firewall: Use Check Point NG s various authentication schemes to challenge users for their credentials.
• Learn About Check Point s Open Platform for Security (OPSEC): OPSEC enables you to implement third-party vendor applications into your firewall environment.
• Configure Virtual Private Networks: Master encryption schemes and configure IKI VPNs and SecuRemote VPN.
• Secure Remote Clients: Use SecuRemote software package to control your remote users desktop security.

About the Author and Technical Editor

Chris Tobkin is a security engineer for Check Point Software Technologies, Ltd., and a member of the Minnesota chapter of the ISSA. He began his career over a decade ago programming C, C++, and Perl at the University of Minnesota. While there obtaining his bachelors of business administration with emphasis on management information systems degree, his job expanded to include project management, as well as database, network, and systems administration. In 2001, Chris moved to a position inside Check Point designing and architecting solutions for customers. He has also done many presentations and other writing including contributing to Check Point NG VPN-1/FireWall-1: Advanced Configuration and Troubleshooting (Syngress Publishing), and the CCSA Next Generation Check Point Certified Security Administrator Study Guide (McGraw-Hill).

Daniel Kligerman, author of Building DMZs for Enterprise Networks (Sygnress Publishing), Check Point NG VPN-1/FireWall-1: Advanced Configuration and Troubleshooting (Syngress Publishing), Nokia Network Security Solutions Handbook (Syngress), and Check Point Next Generation Security Administration (Syngress), is a senior network specialist with TELUS, Canada s second-largest telecommunications company. Leading the eastern Canadian network team, he is responsible for the architecture, deployment, and support of enterprise customer networks, including LAN and WAN routing and switching, and all aspects of network security. He holds a bachelor of science degree from the University of Toronto in computer science, statistics, and English.