CheckPoint Firewall Exam Topics (Syllabus 2014)

Installation
Standalone installation
Distributed installation
Primary and Secondary installation
Rule base, Objects and Smart view tracker.

Network Address Translation
Configuring Hide mode or Dynamic NAT
Configuring Static NAT Configuring Manual NAT

Cryptography
Symmetric Key Cryptography
Asymmetric Key Cryptography
Public Key Infrastructure, Public and Private Keys
Encryption and Decryption Message Digest, Hashing Algorithm
Digital Signature
Authentication, Integrity and Non-repudiation
Diffie Helman Key exchange

Authentication
Kerberos
User Authentication
Client Authentication
Session Authentication
Partially automatic/ Fully automatic authentication

CheckPoint Smart Defense
Tracking and alerting
TCP/IP 3 way handshake
SYN Defender
SYN Relay
Passive SYN Defender

VPN
VPN Fundamentals
Creating VPN tunnels
Internet Key Exchange (IKE)
ISAKMP Phase 1 (SA Negotiation)
IPSec Phase 2 (SA Negotiation)
AH and ESP headers
Site to Site VPN using Pre-shared secret
Site to Site VPN using Certificate Authority
Site to Site VPN (Secure Remote)

Content Security
Security Servers on the Firewall
SMTP, HTTP and FTP traffic security
The Content Vectoring Protocol (CVP Server)
The URL Filtering Protocol (UFP Server)
Filtering with UFP Server
Filtering with CVP server

Miscellaneous
Light weight Directory Access Protocol
Load Balancing alogirthms
Clustering of Firewall for Redundancy (Failover)