After completing this course, you will be able to:

• Describe the demand for scalable platforms.
• Explain how Maestro uses the hyperscale technology.
• Identify the primary features and components of the Maestro system.
• Communicate the purpose of Maestro SecurityGroups (SGs), the Single Management Object (SMO), and the SMOMaster.
• Identify the types of interfaces found in Maestro deployment.
• Give examples of VLAN configuration enhancements for uplink ports.
• Identify basic steps in an initial maestro implementation.
• Discuss how to distribute files to all components and to specific components.
• Explain why verifying changes by using self-tests is important.
• Demonstrate understanding of Maestro traffic distribution and flow.
• Describe a scenario in which you would keep Layer 4 Distribution enabled.
• List the four core diagnostic tools and what each of them is used for.
• Describe how to use audit trails to troubleshoot problems in the system.
• Describe different troubleshooting tools used at different OSI Layers.
• Identify the benefits of a Dual Orchestrator environment.
• Explain how Dual Orchestrators work with Multiple Security Groups.
• Describe the procedures used to install an upgrade on Maestro.
• Describe the ways to verify the installation is installed correctly.

Lab Exercises:

• Creating Security Groups and the Single Management Object.
• Working with Security Groups.
• Analyzing the Distribution Layer.
• Collecting System Diagnostics.
• Troubleshooting Maestro Environments.
• Deploying Dual Orchestrators.

1. Scalability and Hyperscale
2. Maestro Security Groups and the Single Management Object
3. Administrator Operations
4. Traffic Flow
5. System Diagnostics and Tracking Changes
6. Troubleshooting
7. Dual Orchestrator Environment
8. Dual Site Environment
9. Upgrades

This course is designed for technical professionals who support the Check Point Maestro hyperscale network security solution or who are working towards their Check Point Certified Maestro Expert (CCME) Specialist credential.

• Solid knowledge of:
  • Unix-like and/or Windows OS, Internet, Networking Fundamentals, Networking Security, TCP/IP Networking.
• Check Point training/certification:
  • Check Point Certified System Administrator (CCSA),
  • Check Point Certified Security Expert (CCSE).
• Useful but not required:
  • Check Point Jump Start Maestro Hyperscale Network Security,
  • Check Point Certified Virtual System Extension (VSX) Specialist (CCVS),
  • and Check Point Certified Multi-Domain Security Management Specialist (CCMS).