A Complete Check Point Certification Guide
Check Point is recognized around the world as a leading provider of hardware and software security products. Check Point security certification validates an IT professional's knowledge and skills in security management using Check Point products. It is a valuable credential for those seeking advancement in IT security.
The aim of the Check Point certification path is to give IT professionals the opportunity to demonstrate the skills required to secure the internet. The Check Point certification path includes three certification levels designed to take learners' skill sets from beginner to expert.
The four core Check Point certifications are:
Check Point Certified Security Administrator
Check Point Certified Security Expert
Check Point Certified Security Master
Check Point Certified Security Master Elite
Note that the requirements and pathways to extend certifications changed in 2023. Refer to the new rules for specific details.
All Check Point certification exams are handled by the testing company Pearson VUE. Exams are available both in person (proctored) and online. Classroom training is strongly recommended for all exams and required for a few, which we'll explore in more detail later. Exams are proctored at Pearson VUE's Authorized Testing Centers.
Check Point certification exam cost depends on the exam taken and your location. In the U.S., the cost for the CCSA exams is $250.
As with any IT certification, there are multiple ways to prepare. Your study path may include a combination of classroom instruction, online courses, or self-study. Formal training is available at any Check Point Authorized Training Center (ATC) through a three-day course.
Let’s discuss a number of topics regarding Check Point certification: individual exams and comparisons between Check Point and competitor Palo Alto Networks. We'll also help you explore what a Check Point certification might do for your career. Finally, we discuss training options, including those offered by CBT Nuggets.
What is Check Point Certification?
Check Point certifications prove that IT professionals have the skills required to implement, manage, and troubleshoot Check Point products and technology. In addition to the four core Check Point certifications, additional Infinity Specialist Accreditations allow learners to earn CCSM or CCSM Elite certification.
All certifications are valid for two years. The CCSA and the CCSE do require the completion of a three-day course.
Check Point vs. Palo Alto Networks
The selection of a security product, such as those offered by Check Point or Palo Alto Networks, is a matter for managers and procurement personnel. But as an IT professional, you must decide which certification is best for you and your career. At first glance, it's clear that both platforms are leading solutions for the security-conscious enterprise, and both are on the higher end in their category.
Both certifications also have three levels of certification. They are both product-specific certifications, focused on the security offerings of each company. The salary expectations are similar at $90,000 to $100,000 (USD) on average. Regarding market share, Check Point and Palo Alto seem to be staying hot on the heels of Cisco.
The Palo Alto Networks website states that the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification demonstrates the IT professional has knowledge about today's cyber threats. A Palo Alto Networks Certified Cybersecurity Associate (PCCSA) can operate next-generation firewalls to protect networks. At the engineer level, the Palo Alto Networks Certified Network Security Engineer (PCNSE) knows about configuring, maintaining, and troubleshooting Palo Alto implementations.
Check Point certifications, which we will look at in detail below, deal with many of the same topics. The main difference between Palo Alto and Check Point certifications is the products supported. There is not a clear advantage of pursuing one certification over the other in terms of career.
Very often, IT professionals decide to work on a specific certification because they already use the technology it covers in their jobs. If your shop supports Check Point, then it's a good idea to work on Check Point certification. The same would be true for Palo Alto Networks.
From there, it is a toss-up.
Check Point Certified Security Administrator
The Check Point Certified Security Administrator (CCSA) certification is designed for IT professionals with a basic understanding of Check Point implementations. It is the lowest level on the Check Point certification path, and it deals with various security administration tasks on Check Point hardware and software.
The CCSA certification validates a candidate's understanding of these Check Point topics and skills:
Fundamental Check Point Technology knowledge
System administration
Network fundamentals
Managing User Access
Unix-like and or Windows OS
Required exam: Earning the CCSA certification requires passing one exam — CCSA (Exam 156-215.81).
Prerequisites: None are required, however, candidates must complete a three-day course.
Recommended experience: Check Point recommends test takers have 6 to 12 months of hands-on experience with Check Point products, and a good understanding of networking and TCP/IP.
Check Point Certified Security Expert
The CCSE certification is an advanced certification designed for IT professionals who know their way around Windows and UNIX servers, and already have significant experience in Check Point system support. Candidates also should know how to design, maintain, optimize, and protect an enterprise network from even the most aggressive cyber threats.
Preparation for the Check Point Certified Security Expert certification will enable the IT professional to configure gateways, firewalls, VPNs, and content security software.
The CCSE certification validates a candidate's understanding of these Check Point topics and skills:
Check Point technology overview
Deployment platforms and security policies
Monitoring traffic and connections
Network address translations
Using SmartUpdate
Implementing identity awareness
Configuring VPN tunnels
Resolving security administration issues
Required exam: Earning the CCSE certification requires passing one exam — CCSE (Exam 156-315.81).
Prerequisites: Prior to attempting this certification, candidates must earn the CCSA certification. Candidates who have already earned the R77 or prior CCSE must restart with the CCSA exam.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, strong networking, Windows, and UNIX server management skills, and a good understanding of security certificate management.
Check Point Certified Master (CCSM)
The CCSM certification is designed for IT professionals who have developed the highest skills in the management and implementation of Check Point products and technologies.
The exam deals with issues and problems related to commands, configuration of VPN tunnels, troubleshooting NAT, and other advanced topics. Candidates should know how to approach common deployment scenarios and how to apply common troubleshooting practices.
The CCSM certification validates a candidate's understanding of these Check Point topics and skills:
Policy changes to security implementations
UGI client connectivity
Secure internal communications
Check Point commands
ClusterXL debug file
Required exam: Earning the CCSM certification requires passing both the CCAS exam and the CCSE certification example, plus any two Infinity Specialist accreditations.
Prerequisites: Candidates who have earned both the CCSA and the CCSE certifications plus two infinity specialist accreditations will automatically be awarded the CCSM certification.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
Check Point Certified Security Master Elite (CCMSE)
The CCSM Elite certification is designed for experienced IT professionals who have reached the highest level of technical mastery. There is no specific exam for the CCSM elite.
Security professionals with an active CCSM certification plus any two infinity specialist accreditations will automatically be rewarded the CCSM Elite certification, which is valid for two years.
The CCMS Elite certification certification validates a candidate's understanding of these Check Point topics and skills:
Multi-domain security management installation and configuration
Common deployment scenarios
Traffic inspection process
Configuration of Domain Management Server (DMS) high availability
Configuration and implementation of global policy
Required exam: Earning the CCSM Elite R80 certification requires passing the CCSM certification exam and two additional Infinity Specialist accreditations.
Prerequisites: To receive this accreditation, candidates must complete the CCSE exam (which is required to receive CCSM certification), obtain the CCSM certification, and complete two additional Infinity Specialist accreditations.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
How Much Does It Cost to Get Check Point Certified?
Check Point certification costs vary by testing program, exam type, and region. You can find current prices on the Pearson Vue website by logging into your Pearson VUE account and selecting the exam you are interested in under "Exam Catalog."
A search for U.S. prices during this guide's preparation found that the CCSA and the CCSE exams cost $250 each. Infinity Specialist accreditations vary by location and course.
Check Point Recertification and Renewal
Check Point certifications expire after only two years. Certifications, like security, must be kept current to be truly effective, so we strongly encourage you to refresh and keep your certification current constantly.
Because the exams are updated so frequently, be prepared to retake exams when a new version comes out. It is up to the individual learner to monitor the changes and updates to the Check Point certification system.
Check Point Certification Salary and Career Information
According to Payscale, IT professionals with a Check Point Certified Security Administrator (CCSA) certification can expect to earn around $89,000 (USD) per year. A Check Point CCSE makes an average of $103,000 (USD) per year. Similar figures are not available for CCSM, but one might expect it to be even higher.
CBT Nuggets considers the CCSA one of the easier certifications for those trying to break into the information security field. Additionally, CCSA certification cost is reasonable compared to other certifications. Taking into account the earnings potential for Check Point certified IT professionals, it's well worth considering.
Check Point Certification Training
CBT Nuggets currently offers the following Check Point video training by trainer Keith Barker. He has more than three decades of experience in IT and holds numerous IT security certifications.
Please note that while the exams these courses cover have been updated, the courses are still valuable training resources.
In addition to quality, entertaining video training created by expert-level trainers, CBT Nuggets provides everything a learner needs to study for IT certification exams, including virtual labs, supplemental files, practice exams, and access to a robust Learner Community.
All CBT Nuggets training provides learners with custom virtual labs or supplemental files to learn technical concepts alongside the video training. Virtual labs were designed by experts to help learners gain hands-on experience in a sandbox environment. NuggetLab supplemental files include practice commands, configuration files, and network diagrams — everything a learner needs to study for a certification exam.
CBT Nuggets practice exams can either be taken timed or untimed and provide a good baseline for learners to test their knowledge.
Not a CBT Nuggets subscriber? Start learning today.
delivered to your inbox.
By submitting this form you agree to receive marketing emails from CBT Nuggets and that you have read, understood and are able to consent to our privacy policy.