Forcepoint Next Generation Firewall (NGFW) System Engineer

On this accelerated Forcepoint Next Generation Firewall (NGFW) System Engineer course, instructor-led course, you will learn the skills needed to practice as a system engineer with responsibilities for design, installation, configuration, administration, and support of the Forcepoint NGFW. Through instruction, demonstrations, and hands-on lab practice exercises, you will understand the requirements and recommendations to successfully deploy Forcepoint NGFW in a variety of network environments. You will then develop expertise in topics that include, but are not limited to, clustering the NGFW, creating security rules and policies, integrating the NGFW with other Forcepoint technologies, inbound and outbound traffic management, understanding multi-link technology, configuring VPNs, traffic deep inspection, and controlling endpoint activity with the Endpoint Context Agent. This course prepares engineers or other professionals who need to manage or lead system engineering development of a Forcepoint NGFW deployment from concept creation to production.

Upon completion of the course you will be able to:

• Describe the fundamentals of the NGFW solution.
• Plan and execute the deployment of a NGFW engine and Security Management Center.
• Configure the routing for a NGFW deployment.
• Configure security policies and access control.
• Configure the system for a distributed environment using NAT, locations, and contact addresses.
• Deploy and configure a firewall cluster.
• Review an example of the deployment and configuration of an MSSP architecture.
• Configure and utilize multiple internet connections.
• Define Multi-Link Policy-based VPNs.
• Integrate with Active Directory to manage users and authentication.
• Create a mobile VPN and deploy a VPN client.
• Perform traffic inspection and recognition of Network Applications.
• Customize and fine-tune Inspection policies.
• Implement file filtering and malware detection.
• Describe the concepts of traffic normalization and the use of situations.
• Configure TLS decryption.
• Define key features and distinctives of the IPS and Layer 2 Firewall roles.
• Integrate the NGFW with Forcepoint cloud solutions.
• Troubleshoot the NGFW engines, clusters, and SMC.

At the end of this course, you’ll achieve your Forcepoint Next Generation Firewall (NGFW) System Engineer certification.

Through Firebrand’s Lecture | Lab | Review methodology you’ll certify at twice the speed of traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

• 40% faster
• Distraction-free environment

Audience

This course is ideal for:

• End-user/customers: system administrators, network security administrators, network engineers, IT staff
• Channel partners: consultants, system architects, integrators and planners who help customers with forcepoint NGFW implementations
• Forcepoint: sales engineers, professional services, technical support

Forcepoint Next Generation Firewall (NGFW) System Engineer

Module 1: System Architecture Overview

• Articulate the NGFW System Architecture.
• Understand how to size a firewall and management environment.
• Understand Management and Log Server high availability.
• Become familiar with upgrading Management Server, Log Server, and engines.
• Articulate the Forcepoint NGFW license model.

Module 2: Firewall/VPN Role and Single Firewall Deployment

• Describe basic network defence strategies.
• Define the capabilities and key features of the NGFW.
• Understand and learn the process of defining and deploy a single firewall.
• Identify additional features of the NGFW.

Module 3: Routing and Anti-spoofing

• Configure static routing.
• Describe additional special routing capabilities of the NGFW.
• Understand route metrics and route monitoring.
• Summarize the origin and function of Anti-spoofing.

Module 4: NGFW Policies

• Describe different NGFW policy types.
• Define NGFW policy templates and policy structure.
• Identify the anatomy of a security policy and the objects used in policies.
• Detail the process of policy installation and activation.

Module 5: Distributed System Configuration

• Describe system communication in a distributed firewall environment.
• Identify locations and contact addresses in distributed systems.
• Describe system communication between management and engines.
• Configure Network Address Translation (NAT).

Module 6: Firewall/VPN Role and Clustering technology

• Describe the firewall clustering architecture and theory.
• Configure a firewall cluster in the SMC (management).
• Employ NGFW interface options.
• Deploy a firewall cluster.

Module 7: MSSP and Virtual Contexts

• Describe the SMC Domain Architecture.
• Detail the function of the Web Portal Server.
• Define Virtual Contexts.
• Relate Master Engines and Virtual Engines.
• Relate clustering and performance.
• Review a configuration and deployment example of an MSSP architecture.

Module 8: Outbound Multi-Link Technology

• Describe Outbound Traffic Management and its capabilities.
• Explain ISP link selection.
• Classify when to use a particular link selection method.
• Configure Outbound Multi-Link.

Module 9: Site-to-Site VPNs

• Define Forcepoint NGFW VPN capabilities.
• Define Forcepoint NGFW VPN terminology.
• Identify supported VPN topologies.
• Relate Multi-Link and VPNs.
• Test VPN-related tools in the SMC.
• Configure a Multi-Link Policy-Based VPN.
• Investigate Route-Based VPNs and when to use them.
• Design VPN Hub configuration.

Module 10: Active Directory Integration

• Define network user management.
• Integrate Active Directory with the SMC (management).
• Categorize the role of NPS, LDAP authentication, RADIUS, and TACAC+ in the authentication process.
• Deploy Forcepoint User Identification.
• Configure and deploy the Endpoint Context Agent.
• Monitor network users.

Module 11: VPN Client

• Describe Mobile VPN connections.
• Distinguish IPSec and SSL VPN tunnelling.
• Configure an NGFW engine for Mobile VPN connections.
• Configure the VPN Client for an endpoint.
• Demonstrate tools for Mobile VPN troubleshooting.

Module 12: Traffic Inspection

• Review connection control and the role of Deep Inspection.
• Differentiate between Services, Protocol Agents, and Proxy

Modules.

• Configure a Sidewinder Proxy service.
• Establish Network Application Identification.
• Differentiate Network Applications and Client Applications

Module 13: Inspection Policies

• Relate firewall and inspection policies.
• Illustrate the anatomy of Inspection Policies.
• Differentiate the predefined Inspection Policy templates.
• Define the concept of Situations.
• Define the function of the Inspection Rules tree.
• Fine-tune inspection policies.
• Analyze the role and function of Inspection Exception rules.
• Analyze the use and function of Blacklisting.

Module 14: Malware Detection and File Filtering

• Explain the process of Malware Detection.
• Illustrate the anatomy of a File Filtering Policy.
• Define the process of using File Reputation services.
• Configure built-in Anti-Malware scanning.
• Describe the role of Advance Malware Detection.

Module 15: NGFW Inspection Techniques

• Define techniques used by the NGFW to identify threats.
• Detail the traffic inspection process.
• Explain the role of Advanced Evasion Techniques and the process of traffic normalization.
• Describe misuse detection with Fingerprints.
• Describe concept of Situations and their role in traffic inspection.
• Analyze Regular Expression syntax.
• Review examples of fingerprints.

Module 16: TLS Inspection

• Articulate the purpose of TLS inspection.
• Describe TLS inspection exceptions.
• Define the process of Server and Client-Side TLS inspection.
• Configure the TLS inspection.

Module 17: NGFW in Layer 2 Roles and Multi-Layer Deployment

• Identify NGFW Operating Roles.
• Define key features of the IPS and Layer 2 Firewall roles.
• Understand the difference between the Firewall and IPS.
• Describe a Layer 2 Policy.
• Configure and deploy a multi-layer NGFW.
• Analyze the role of High Availability in multi-layer deployments.

Module 18: Forcepoint Integration

• Configure integration with Forcepoint Web Security Cloud.
• Detail how to integrate with Forcepoint Advanced Malware Detection.
• Review the Malware Detection process.
• Understand information exchange using Syslog or other SIEM solutions.

Module 19: Troubleshooting

• Detail the NGFW packet inspection process.
• Review the troubleshooting process and learn troubleshooting tips.
• Define the role of sgInfo in troubleshooting.
• Explore how to troubleshooting with logs.
• Understand how to troubleshoot a VPN.
• Analyze the role of monitoring in troubleshooting.
• Troubleshoot the NGFW engine.

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

Forcepoint Next Generation Firewall (NGFW) System Engineer

This course prepares you for the Certified Forcepoint NGFW System Engineer exam. The System Engineer exam is a two-part exam: theoretical (multiple choice) and practical (hands-on).

A minimum score of 80% on the multiple-choice online exam and a 70% of the hands-on exam is required to obtain the System Engineer certification.

Your accelerated course includes:

• Accommodation *
• Meals, unlimited snacks, beverages, tea and coffee *
• On-site exams **
• Exam vouchers **
• Practice tests **
• Certification Guarantee ***
• Courseware
• Up-to 12 hours of instructor-led training each day
• 24-hour lab access
• Digital courseware **

Before attending this accelerated course, you will have:

• Completion of the Forcepoint NGFW Administrator Course and certification
• General understanding IPv4 networking concepts (TCP/IP, routing, firewall functionalities, VPN, deep packet inspection)
• Basic knowledge of Active Directory/User Directory concepts

Seven reasons why you should sit your course with Firebrand Training

• Two options of training. Choose between residential classroom-based, or online courses
• You'll be certified fast. With us, you’ll be trained in record time
• Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
• Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
• You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
• You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
• You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals

*For residential training only. Doesn't apply for online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts

Think you are ready for the course? Take a FREE practice test to assess your knowledge!  Free Practice Test