Deep Packet Inspection (DPI)

The difference between packet filtering, and everything else, App Control URL Filtering, AV, AB, VPN, HTTPS Inspection, etc.

The purpose of this module is to discuss in-line appliances, CP does have AEP that leverages a host-based firewall, but there is a whole other solution segment dedicated to host-based firewalling, Guardicore, Illumio, etc

3-tiered architecture – SmartConsole, Security Management & Security Gateway

Security management Server (SMS)

Gateways

3 deployment modes – Standalone (SMS and Gateway on same appliance), Distributed (different appliances) and Bridge (insert another gateway within the same subnet)

Sync with UserCenter

Preferences

Permission & Administrators

Tags

Blades

Sessions

Revisions

Talking to one Virtual IP and one Virtual MAC address

Clustering the local config and SMS config

Imaging

ClusterXL

Logs & Monitor

Tracing Tools

Policy Attributes

Rulebase

Best Practice

Policy

Overview

Advanced Routing

Shutdown and reboot commands

WebUI

Local Configuration

Messages (Banners)

SNMP

Route Redistribution

Change My Passwords

Users

OSPF

ICMP

BGP

DHCP Relay

RIP

Route Aggregation

User Management

Role

Overview – Widgets

System Uptime, Traffic stats, Blade stats, Db Update status, Network Link status

Host and DNS

IPv4 Static Routes

Basic and Advanced view

Network Interface config

ARP

DHCP Server

NetFlow Export

System Management

Time

More Linux specific commands are run from this shell Tcpdump, ls, etc

Internal Certificate Authority – ICA, issues certificates for the following services: SIC, VPN, Users

Logs

Comm Channel between SMS and Gateway

Policy installation

Secure Internal Communication (SIC)

CPUSE

Web User Interface (WebUI)

SmartConsole

SIC

Application that manages the architecture centrally

Blade activation, blade is what Check Point calls their features

Policy rulebase for each blade

Clustering

Global parameters and rules

Backup & Restore

User Management

Command Line Interface (CLI)

Another channel to set configuration, and also use valuable tools, tools that are not available in the WebUI Tcpdump, FW Monitor, Zdebug, will have own sections

System Time, Logging

NATing policies

Advanced Routing

Network Interfaces

ARP config