Objectives

• Test IP forwarding routing and connectivity, before installing VPN-1 NGX.


• Monitor the Default Filter and Initial Policy’s effect on traffic through a Security Gateway, to demonstrate protection these offer.


• Troubleshoot Secure Internal Communications and Internal Certificate Authority issues.


• Troubleshoot Network Address Translation (NAT) issues.


• Given an issue with a particular Check Point product, list the data required for troubleshooting.


• Collect data using the cpinfo utility, for off-line viewing and troubleshooting using the InfoView utility.


• Use DbEdit or GuiDBedit to view and manipulate *.c and *.def files and observe their impact on Security Gateway functionality.


• Manage the fwauth.NDB file to maintain the user database.


• Use log commands to observe and manipulate log files.


• Use tcpdump to capture packets and analyze packet-header formats.


• Use snoop to capture packets, and review three output modes.


• Use fw monitor to capture packets.


• Review fw monitor output using Ethereal.


• Perform kernel debugging using the fw ctl debug command.


• Use fwm debug to analyze SmartCenter Server issues.


• Use fwd debug to analyze kernel-to-application layer issues.


• Use cpd debug to analyze SIC issues.


• Identify relevant fw commands to obtain critical information about NGX components’ status.


• Use fw and fw advanced commands with proper options, to obtain critical information for troubleshooting.


• Identify different stages in the folding process.


• Troubleshoot Security Server issues.


• Debug Security Servers.


• Identify and explain the two phases of the IKE negotiation process.