A Complete Check Point Certification Guide
Check Point is recognized around the world as a leading provider of hardware and software security products. Check Point security certification validates an IT professional's knowledge and skills in security management using Check Point products. It is a valuable credential for those seeking advancement in the field of IT security.
The aim of the Check Point certification path is to give IT professionals the opportunity to demonstrate the skills required to secure the internet. The Check Point certification path includes three levels of certification that are designed to take learners' skill sets from beginner to expert.
Certifications are available in both the R77 and R80 versions. But the R77 exams will no longer be available after Sept. 30, 2019. The four core Check Point certifications are:
Check Point Certified Security Administrator R80 (CCSA R80)
Check Point Certified Security Expert R80 (CCSE R80)
Check Point Certified Master R80 (CCSE R80)
Check Point Managed Security Expert R77 (CCSME R77)
All Check Point certification exams are handled by the testing company Pearson VUE. Exams are available both in person (proctored) and online. Classroom training is not required prior to taking exams, but it is recommended. Exams are proctored at Pearson VUE's Authorized Testing Centers.
Check Point certification exam cost depends on the exam taken and your location. In the U.S., the cost for the CCSA and CCSE exams is $250 each, and the CCSM exam costs $350 according to the Check Point website. All Check Point exams are multiple choice, contain as many as 90 questions, and have a 90-minute time limit.
As with any IT certification, there are multiple ways to prepare. Your study path may include a combination of classroom instruction, online courses, or self-study. Formal training is available at any Check Point Authorized Training Center (ATC), but classroom instruction is not required to take the tests.
We will be discussing a number of topics regarding Check Point certification. We look at individual exams, and offer comparisons between Check Point and competitor Palo Alto Networks. We also help you explore what a Check Point certification might do for your career. Finally, we discuss training options, including those offered by CBT Nuggets. Here is what's included:
Check Point Certification Guide
What is Check Point Certification?
Check Point vs. Palo Alto Networks
Check Point Certifications
How Much Does It Cost to Get Check Point Certified?
Check Point Recertification and Renewal
Check Point Certification Salary and Career Information
Check Point Certification Training
What is Check Point Certification?
The Check Point certification system is currently in transition from R77 to R80. Levels for R80 include CCSA, CCSE, and CCMSE. There may be some confusion between the Checkpoint and Pearson Vue websites, but those wishing to pursue Check Point certifications going forward should focus on the new R80 exams.
Check Point vs. Palo Alto Networks
The selection of a security product, such as those offered by Check Point or Palo Alto Networks, is a matter for managers and procurement personnel. But as an IT professional, you will be deciding which certification is best for you and your career. At first glance, it's clear that both platforms are leading solutions for the security-conscious enterprise, and both are on the higher end in their category.
Both certifications also have three levels of certification. They are both product-specific certifications, focused on the security offerings of each company. The salary expectations are similar at $90,000 to $100,000 (USD) on average. In terms of market share, Check Point and Palo Alto seem to be staying hot on the heels of Cisco.
The Palo Alto Networks website states that the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification demonstrates that the IT professional has knowledge about today's cyberthreats. A Palo Alto Networks Certified Cybersecurity Associate (PCCSA) can operate next-generation firewalls to protect networks. At the engineer level, the Palo Alto Networks Certified Network Security Engineer (PCNSE) knows about configuring, maintaining, and troubleshooting Palo Alto implementations.
Check Point certifications, which we will look at in detail below, deal with many of the same topics. The main difference between Palo Alto and Check Point certifications is the products supported. There does not appear to be a clear advantage of pursuing one certification over the other in terms of career.
Very often, IT professionals decide to work on a specific certification because they already use the technology it covers in their jobs. If your shop supports Check Point, then it's probably a good idea to work on Check Point certification. The same would be true for Palo Alto Networks.
From here, it appears to be a tossup.
Check Point Certified Security Administrator R80(CCSA R80)
The Check Point Certified Security Administrator (CCSA) R80 certification is designed for IT professionals with a basic understanding of Check Point implementations. It is the lowest level on the Check Point certification path, and it deals with various security administration tasks on Check Point hardware and software.
The CCSA R80 certification validates a candidate's understanding of these Check Point topics and skills:
Check Point Technology Overview
Security Policy Management
Traffic Monitoring
Network Address Translations
Basic Concepts of VPN
Managing User Access
Working with ClusterXL
Administrator Task Implementation
Required exam: Earning the CCSA R80 certification requires passing one exam — CCSA R80 (Exam 156-215.80).
Prerequisites: None.
Recommended experience: Check Point recommends test takers have 6 to 12 months of hands-on experience with Check Point products, and a good understanding of networking and TCP/IP.
Check Point Certified Security Expert R80 (CCSE R80)
The CCSE R80 certification is designed for IT professionals who know their way around Windows and UNIX servers, and already have significant experience in Check Point system support. Candidates also should know how to build, test and troubleshoot numerous deployment scenarios.
Preparation for the Check Point Certified Security Expert certification will enable the IT professional to configure gateways, firewalls, VPNs, and content security software.
The CCSE R80 certification validates a candidate's understanding of these Check Point topics and skills:
Check Point Technology Overview
Deployment Platforms and Security Policies
Monitoring Traffic and Connections
Network Address Translations
User Management and Authentication
Using SmartUpdate
Implementing Identity Awareness
Configuring VPN Tunnels
Resolving Security Administration Issues
Required exam: Earning the CCSE R80 certification requires passing one exam — CCSE R80 (Exam 156-315.80).
Prerequisites: Prior to attempting this certification, candidates must earn the CCSA R80 certification. Candidates who have already earned the CCSA R77 must still earn the CCSA R80 certification.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, strong networking, Window, and UNIX server management skills, and a good understanding of security certificate management.
Check Point Certified Master R80 (CCSM R80)
The CCSM R80 certification is designed for IT professionals who have developed the highest skills in the management and implementation of Check Point products and technologies. The exam deals with issues and problems related to commands, configuration of VPN tunnels, troubleshooting NAT, and other advanced topics. Candidates should know how to approach common deployment scenarios and how to apply common troubleshooting practices.
The CCSM R80 certification validates a candidate's understanding of these Check Point topics and skills:
Policy Changes to Security Implementations
UGI Client Connectivity
Secure Internal Communications
VPN Tunnel Interfaces
IPv6 Deployment
Check Point Commands
Open Shortest Path First (OSPF)
Network Address Translation (NAT)
ClusterXL Debug File
Required exam: Earning the CCSM R80 certification requires passing one exam — CCSM R80 (Exam 156-115.80).
Prerequisites: Prior to attempting this certification, candidates must earn either the CCSE R77 or CCSE R80 certification.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
Check Point Managed Security Expert R77 (CCMSE R77)
The CCMSE R77 certification is designed for experienced IT professionals who are interested in multi-domain security management. The exam for CCMSE deals with advanced topics in multi-domain security, including installation, configuration, and management. Candidates will need to be able to handle different deployment scenarios and implementation tasks.
The CCMSE R77 certification certification validates a candidate's understanding of these Check Point topics and skills:
Multi-domain Security Management Installation and Configuration
Common Deployment Scenarios
Traffic Inspection Process
Configuration of Domain Management Server (DMS) High Availability
Configuration and Implementation of Global Policy
Common Troubleshooting Practices
Required exam: Earning the CCSM R80 certification requires passing one exam — Multi-Domain Security Management with VSX (Exam 156-820.77).
Prerequisites: Prior to attempting this certification, candidates must earn the CCSE 75, CCSE R77, or CCSE R80 certification.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
How Much Does It Cost to Get Check Point Certified?
Check Point certification cost may vary by testing program, exam type, and region. You can find current prices on the Pearson Vue website by logging into your Pearson VUE account and selecting the exam you are interested in under "Exam Catalog". A search for U.S. prices during preparation of this guide showed the following prices:
CCSA: $250
CCSE: $250
CCSM: $350
Check Point Recertification and Renewal
Check Point certifications expire after only two(2) years. "Certifications, like security, must be kept current to be truly effective, which is why we strongly encourage you to constantly refresh and keep your certification current.
Because the exams are updated so frequently, be prepared to retake exams when a new version comes out. For instance, currently there is a transition from R77 to R80. It is up to the individual learner to monitor the changes and updates to the Check Point certification system.
Check Point Certification Salary and Career Information
According to Payscale, IT professionals with a Check Point Certified Security Administrator (CCSA) certification can expect to earn around $89,000 (USD) per year. A Check Point CCSE makes an average of $103,000 (USD) per year. Similar figures are not available for CCSM, but one might expect it to be even higher.
CBTNuggets considers the CCSA as one of the easier certifications to get for those trying to break into the information security field. And CCSA certification cost is reasonable compared to other certifications. Taking into account the earnings potential for Check Point certified IT professional, it's well worth considering.
Check Point Certification Training
CBT Nuggets current offers the following Check Point video training by trainer Keith Barker. He has more than three decades experience in IT and holds numerous IT security certifications.
Please note that CBT Nuggets constantly updates its training content library, meaning learners should check regularly for new Check Point training.
In addition to quality, entertaining video training created by expert-level trainers, CBT Nuggets provides everything a learner needs to study for IT certification exams, including virtual labs, supplemental files, practice exams, and access to a robust Learner Community.
All CBT Nuggets training provides learners with custom virtual labs or supplemental files to learn technical concepts alongside the video training. Virtual labs were designed by experts to help learners gain hands-on experience in a sandbox environment. NuggetLab supplemental files include practice commands, configuration files, and network diagrams — everything a learner needs to study for a certification exam.
CBT Nuggets learners should also take advantage of the Kaplan® IT Training Practice Exams included with a subscription to CBT Nuggets. Practice exams can either be taken timed or untimed, and provide a good baseline for learners to test their knowledge. Additionally, Kaplan® IT Training Practice Exams evaluate a learner's strengths and weaknesses, so they know where to focus their attention while studying.
