Check Point CCSA R75 exams

The CCSA R75 exam was released on Pearson VUE just one month back and we at K-Secure are glad to announce that some of our students have already attempted this exam and passed with high scores. The topper is Mr. Anand Singh (picture on right) who has scored 96% in CCSA R75 and has won a 50% discount voucher for the next CCSE R75 training program at K-Secure.

Congratulations Anand and all others who have passed the exam

Quick Tips on passing CCSA R75 exam

Based on the feedback we received from our students who passed this exam, here are some tips to be noted.

1. Take a proper training
2. Study from the official course material thoroughly
3. Use the practice tests available from Check Point and other sources
4. Additionally read about Identity Awareness from product manuals
5. Also ensure that you make proper notes on the VPN fundamentals which is covered at K-Secure trainings. If trained elsewhere, refer to some white papers on IPSec VPN standards
6. Before registering for the exam, take the K-Secure's online practice test to find out where you stand

My next training in Mauritius

Article on ethical hacking

My views on ethical hacking have been published in the March 2012 issue of telecom live magazine. http://telecomlive.com

See the face of a botnet master and his BMW

Dancho Danchev exposes the master of Koobface (anagram of Facebook) botnet

See his blog post here :
http://ddanchev.blogspot.com/2012/01/whos-behind-koobface-botnet-osint.html

50% off on Check Point exam re-takes

To encourage and support your certification goals, Check Point has implemented automatic 50%-off re-takes for the following exams at Pearson VUE

CCSA R71
CCSE R71
VSX
CCEPE
CCSA R75 (coming soon)
CCSE R75 (coming soon)

Note: All R70 exams will be retiring on 31 December, 2011

Inspecting HTTPS traffic on gateways

INTRODUCTION

In the past, security devices inspecting application content for attack patterns, misuse or malware, had been blind to encrypted traffic and due to this encrypted protocols like Hypertext Transfer Protocol Secure (HTTPS) have been a safe method used by attackers to bypass security inspection. Though reverse proxies and Web Server modules have been there for long, but they only inspect incoming traffic i.e. connections made to protected web servers in the organization. Inspecting outgoing traffic or traffic of connections made by users to outside world servers, not protected by the device, had been on the wish lists. Devices these days come with the capability to inspect Secure Sockets Layer (SSL) based outgoing traffic, however there are some concerns enabling such kind of inspection. In this article we cover some basics of SSL, the challenges in inspecting SSL traffic, and also see how Check Point's HTTPS Inspection feature starting from R75.20 is able to inspect HTTPS traffic at the gateway. After reading this article you will know the pros and cons of enabling SSL inspection on a gateway.

Read further or download the entire document in PDF format below:
Inspecting HTTPS Traffic on Gateways

SPG - informal meeting

Security Professional's Group (SPG) is having an informal bar meet on Sunday 29th May '11. If you are interested, send in your mobile no. to spg@ksecure.net