Check Point Certified Security Administrator (CCSA)

Every change to a Check Point firewall passes through an administrator. A new application needs access, a department moves to another subnet, an audit flags an overly permissive rule. How those requests are handled decides whether the network stays protected or slowly drifts out of control. The Check Point Certified Security Administrator (CCSA) course prepares professionals to handle that work properly.

What the course covers. Built on the R82 release, the course introduces the Check Point Quantum platform from the ground up. Learners explore Gaia on the management server, a dedicated log server and gateway cluster members, then learn to work confidently in SmartConsole. They manage administrator accounts and permissions, create network and service objects, and build Security Policies whose rule order produces exactly the intended result.

How it builds. Once the fundamentals are in place, the course introduces policy layers, which split a large Rule Base into manageable, reusable parts. It then adds the controls that make firewall administration genuinely granular: Identity Awareness for user-based rules, HTTPS Inspection for encrypted traffic, Application Control and URL Filtering for web access, and Autonomous Threat Prevention for malware and exploit protection.

Why it matters. Configuration is only half the job. The course gives equal weight to security monitoring, showing learners how to tune log management, filter events with queries, and track system health. That combination of building, verifying, and watching is what keeps enterprise network security reliable over time, and it is the core of the Check Point CCSA training path.

Course Objectives

Participants who complete this course will be able to:

• Explain the roles of the Security Management Server, Security Gateway, and SmartConsole within Check Point’s Three-Tier Architecture.
• Use the Gaia Portal and Gaia CLI to explore and administer management, logging, and gateway components.
• Set up administrator accounts with appropriate profiles and handle session takeover and concurrent policy work.
• Define and organize network objects, service objects and gateway objects for use in access rules.
• Design a Rule Base with correct rule ordering, then verify, install and test the resulting Security Policy.
• Add Ordered Layers and Inline Layers to keep policies modular and to control how traffic is inspected.
• Analyze security events using log queries and track gateway and server status through the Monitoring Blade.
• Configure Identity Awareness, HTTPS Inspection, Application Control and URL Filtering within the access policy.
• Activate Autonomous Threat Prevention and validate that its protections are working