Check Point Provider-1 NGX

2 Day Course

Book Now - 1 Delivery Method Available:

Classroom Virtual Classroom Private Group - Virtual Self-Paced Online


This course offers in depth training on deploying and managing Check Point Provider-1 NGX. You'll learn how to configure Security Policies for multiple remote Security Gateways using the Multi-Domain GUI (MDG), and learn about managing multiple firewall-secured environments using the Multi-Domain Server (MDS). You will also learn how to perform advanced configuration tasks, such as establishing redundant Multi-Domain Servers for High Availability management functions and migrating existing servers into the Provider-1 database.

Course Objectives

After completing this course, you will be able to:

- Describe the Provider-1 architecture
- Describe the installation requirements for the Provider-1 components
- Successfully install Provider-1
- List and describe MDS configuration options
- List and describe Customer Management Add-On (CMA) configuration options
- Identify the features and functions of the MDG
- Describe Provider-1 log-management features
- Create and assign Global Policies to multiple CMAs
- Use advanced tools to manage multiple Customer sites

In the labs you will learn how to:

- Install the MDS as a Manager and Container, then configure the MDS to function as a primary MDS
- Install the Provider-1 SmartConsole and MDG client
- Configure CMAs for city sites
- Establish SIC between CMAs and the remote Security Gateways they manage
- Adjust Provider-1 default settings to customize the system for your configuration
- Create basic objects and Rule Bases for CMAs in your configuration
- Create additional Administrators and show the differences in privilege levels
- Deploy GUI clients at remote sites, and grant different access to clients with different privileges
- Remotely install a Check Point software package on the Gateways in your lab configuration
- Disconnect a rogue client from your primary MDS
- Define network objects and rules for a NOC Gateway
- Install and configure a secondary MDS to be an MDS Multi-Log Module (MLM)
- Create objects and rules applied to each CMA in a Global Policy.
- Define a Global VPN Community
- Migrate an existing SmartCenter Server into your existing Provider-1 setup
- Install and configure a secondary MDS for Management High Availability (HA)
- Mirror a configured MDS to a second MDS in your setup
- Configure a secondary MDS for CMA level HA in a Provider-1 setup
- Back up MDS files using Provider-1 archiving commands. Restore MDS files using archiving commands

Who Should Attend

- Systems administrators, security managers, or network engineers implementing Provider-1 NGX in an enterprise setting
- Those challenging exam #156-815 as part of Check Point Certified Managed Security Expert NGX (CCMSE NGX) certification

Please note: Prior to taking Check Point examinations, Check Point recommend delegates attend the authorised training course(s), study the official manual (provided only on authorised courses) and have 6 months experience using the technology.

Training Partners

We work with the following best of breed training partners using our bulk buying power to bring you a wider range of dates, locations and prices.


Course Content (15 topics)

  • Provider-1 Architecture
  • Remote customer management using Provider-1
  • MDS installation and configuration
  • MDG installation and configuration
  • Navigating the MDG
  • NOC firewall installation and configuration
  • CLM installation and configuration
  • Configuring objects and installing policy using the MDG
  • Assigning global policies
  • MDS archiving
  • MDS command line management
  • MDS directory structure
  • Running MDS and CMA commands
  • Migrating an existing management server into the MDS
  • Uninstalling the MDS and MDG


Check Point Security Administration (CCSA) NGX I Rev 1.1 and Check Point Security Administration (CCSE) NGX II Rev 1.1, or equivalent knowledge and experience in the prerequisites.

Course PDF


Share this Course


Recommend this Course