

Check Point Certified Security Administrator (CCSA)
Course Overview
Traditional firewall rules see addresses and ports. Today’s threats rarely announce themselves that way. They arrive inside encrypted sessions, through everyday web applications or from a legitimate user’s compromised device. Modern firewall administration means seeing beyond the packet header, and the Check Point Certified Security Administrator (CCSA) course shows administrators how to do that on the Check Point Quantum platform.
The course follows Check Point’s R82 syllabus. It opens with the essentials every administrator needs: how SmartConsole, the Security Management Server, and Security Gateways fit together, how to work with Gaia, and how to manage administrator rights and objects. Learners then build and install a Security Policy, learning why rule order matters and how to test a policy before trusting it.
The middle of the course turns to visibility and context. Policy layers bring order to large Rule Bases. Identity Awareness ties rules to people instead of IP addresses. HTTPS Inspection exposes threats hidden in encrypted traffic, while Application Control and URL Filtering govern which services can be used. Autonomous Threat Prevention then adds a further layer of protection against malware, bots and known exploits.
None of this is useful without oversight, so learners also configure log management, search for events, and monitor the health of gateways and servers. The outcome is a practical, well-rounded understanding of Check Point security policy management, along with structured preparation for the CCSA R82 exam.
Course Objectives
The course equips learners to:
- Explain the Check Point Three-Tier Architecture and how traffic and management communication are secured between components.
- Navigate the Gaia Portal and Gaia CLI to review and configure Check Point systems.
- Administer SmartConsole accounts, permission profiles, and multi-administrator sessions without conflicting changes.
- Organize gateway, network, and service objects so policies stay accurate and easy to maintain.
- Implement a Security Policy, applying correct rule order, then verify, install, and test it.
- Segment large policies into Ordered and Shared Inline Layers and predict how traffic moves through them.
- Monitor security operations with tuned logging, targeted queries, and the Monitoring Blade.
- Refine access control using Identity Awareness, HTTPS Inspection, Application Control and URL Filtering.
- Protect the network by enabling and testing Autonomous Threat Prevention.
Target Audience
- Security Administrators
- Security Engineers
- Security Analysts
- Security Consultants
- Security Architects
Course Content
10 modules · 74 topics01Module 1: Introduction to Quantum Security10 topics
- Identify the primary components of the Check Point Three-Tier Architecture and explain how they work together in the Check Point environment.
- Lab Tasks
- Explore Gaia on the Security Management Server
- Explore Gaia on the Dedicated Log Server
- Explore Gaia on the Security Gateway Cluster Members
- Connect to SmartConsole
- Navigate GATEWAYS & SERVERS Views
- Navigate SECURITY POLICIES Views
- Navigate LOGS & EVENTS Views
- Navigate MANAGE & SETTINGS Views
02Module 2: Administrator Account Management7 topics
- Explain the purpose of SmartConsole administrator accounts.
- Identify useful features for administrator collaboration, such as session management, concurrent administration, and concurrent policy installation.
- Lab Tasks
- Create New Administrators and Assign Profiles
- Test Administrator Profile Assignments
- Manage Concurrent Administrator Sessions
- Take Over Another Session and Verify Session Status
03Module 3: Object Management6 topics
- Explain the purpose of SmartConsole Objects.
- Give examples of SmartConsole Physical and Logical Objects.
- Lab Tasks
- View and Modify GATEWAYS & SERVERS Objects
- View and Modify Network Objects
- View and Modify Service Objects
04Module 4: Security Policy Management8 topics
- Explain the purpose of Security Policies.
- Identify the essential elements of a Security Policy.
- Identify features and capabilities that enhance the configuration and management of the Security Policy.
- Lab Tasks
- Verify the Security Policy
- Modify Security Policies
- Install the Standard Security Policy
- Test the Security Policy
05Module 5: Policy Layers8 topics
- Demonstrate an understanding of the Check Point policy layer concept.
- Explain how policy layers affect traffic inspection.
- Lab Tasks
- Add an Ordered Layer
- Configure and Deploy the Ordered Layer Rules
- Test the Ordered Layer Policy
- Create an Inline DMZ Layer
- Test the Inline DMZ Layer
06Module 6: Security Operations Monitoring10 topics
- Explain the purpose of Security Operations Monitoring.
- Tune the Log Server configuration.
- Use predefined and custom queries to filter the logging results.
- Monitor the state of Check Point systems.
- Lab Tasks
- Configure Log Management
- Enhance Rulebase View, Rules, and Logging
- Review Logs and Search for Data
- Configure the Monitoring Blade
- Monitor the Status of the Systems
07Module 7: Identity Awareness7 topics
- Explain the purpose of the Identity Awareness solution.
- Identify the essential elements of Identity Awareness.
- Lab Tasks
- Adjust the Security Policy for Identity Awareness
- Configure the Identity Collector
- Define the User Access Role
- Test Identity Awareness
08Module 8: HTTPS Inspection7 topics
- Explain the purpose of the HTTPS Inspection solution.
- Identify the essential elements of HTTPS Inspection.
- Lab Tasks
- Enable HTTPS Inspection
- Adjust Access Control Rules
- Deploy the Security Gateway Certificate
- Test and Analyze Policy with HTTPS Inspection
09Module 9: Application Control and URL Filtering6 topics
- Explain the purpose of the Application Control and URL Filtering solutions.
- Identify the essential elements of Application Control and URL Filtering.
- Lab Tasks
- Adjust the Access Control Policy
- Create and Adjust Application Control and URL
- Test and Adjust the Application Control and URL Filtering Rules
10Module 10: Threat Prevention Fundamentals5 topics
- Explain the purpose of the Threat Prevention solution.
- Identify the essential elements of Autonomous Threat Prevention
- Lab Tasks
- Enable Autonomous Threat Prevention
- Test Autonomous Threat Prevention
Ethiopia’s banks, telecom operators, mobile money services and public institutions are delivering more of their work digitally, and that growth makes the network perimeter more important to protect. Check Point CCSA training in Ethiopia prepares IT and security professionals to manage Check Point firewalls with confidence. The course covers access policy design, policy layers, user identity, encrypted traffic inspection, application control and security log analysis. These skills support organizations that work with the Information Network Security Administration (INSA) and other bodies on cybersecurity, and they help teams in Addis Ababa and regional offices apply consistent protection. The Check Point Certified Security Administrator course is equally useful to professionals who want structured preparation for the CCSA exam. It gives local teams a vendor-aligned, practical grounding in firewall administration and enterprise network security.
FAQs
What is Check Point CCSA training?
It is training aligned with Check Point’s Certified Security Administrator curriculum. It teaches you to set up, manage, and monitor Check Point Security Gateways and the Security Management Server using Gaia and SmartConsole.
Which subjects are taught in the course?
The course covers the Three-Tier Architecture, Gaia, administrator and object management, Security Policy creation, policy layers, logging and monitoring, Identity Awareness, HTTPS Inspection, Application Control and URL Filtering, and Autonomous Threat Prevention.
Who will benefit most from the course?
Firewall and network security administrators gain the most, but network engineers, system administrators, security analysts, and IT operations staff who work alongside Check Point systems will also benefit.
What background is recommended before starting?
You should be comfortable with networking concepts, TCP/IP, and Windows or Unix-like operating systems. Check Point also recommends the Check Point Deployment Administrator (CPDA) course for newcomers to its products.
Why do policy layers matter in Check Point?
Layers let you split a policy into logical sections, such as general access, DMZ, or application control. This makes complex policies easier to manage and helps avoid one change unintentionally affecting unrelated traffic.
How does security monitoring support firewall administration?
Monitoring shows whether rules behave as expected and reveals unusual activity. Through log queries and the Monitoring Blade, administrators can spot misconfigurations, investigate incidents, and check system health.
Can the CCSA course help me progress professionally?
It can strengthen your practical skills and prepare you for a widely recognized security credential. It also opens the way to the CCSE. As with any course, results depend on your preparation and experience.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.


Automating Networks Using Cisco Platforms (200-901 CCNAAUTO)
View Course
Cisco Certified Support Technician (CCST) Networking (100-150)
View Course
