Hi,

Does anyone have favorite resources for CCSA material.  I am in the
process of starting to study.  I checked google but the amount of
information is overwhelming.  Does anyone have thoughts on the best way
to go about gathering resources and which ones are more important then
others?

Thx,

Leon

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Rajveer
Kushwah
Sent: Wednesday, January 14, 2004 5:14 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] Smart Defence Storm Center Module - CCSA

Hi,

Administrator creates a Dynamic Object called CPDShield(exactly this
name)
in SmartDashboard and creates a rule with generally the ACTION=DROP and
installs the policy.

An Agent(daemon) on each Enforcement module on which the storm centre
module
is installed, receives the Block list of malicious IP addresses via
HTTPS.
With each refresh interval( default is 3 hrs), the agent takes the Block
list and populates the dynamic object with the IP address ranges in the
Block List.

Administrator decides which logs should be submitted.

So the corect Answers are : A and B

I cleared my CCSA for Chkpnt NG AI yesterday itself and this was
question
was there in the test.

Regards
Rajveer

> -----Original Message-----
> From: Alex Cosic [SMTP:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 10:18 AM
> To:   [EMAIL PROTECTED]
> Subject:      [FW-1] Smart Defence Storm Center Module - CCSA
>
> On the internet I have found 8 questions from CCSA:
>
>
> 4. Chose two. The SmaertDefence SAtorm Center Module agent receives
the
> Dshield.org Block List, and:
>
> a. Populates CPDShield with blocked address ranges, every threee
hours.
>
> b. Generates logs from the rules tracking internal traffic
>
> c Submit the number of authentication failures, and drops, rejects,
and
> accepts
>
> d Generates regular and com[pact log digests
>
> e Populates the firewall daemon with log trials
>
> Which options are correct?
>
>
> Regards
>
> Alex
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

INDEPENDENCE COMMUNITY BANK CONFIDENTIALITY NOTICE: This message
(and any attachment) is confidential and
intended for the sole use of the individual or entity to which it is addressed. If you 
are
not the intended recipient, you must not review, retransmit, convert to hard-copy,
copy, use or disseminate this email or any of its attachments. If you received this 
email
in error, please notify the sender immediately and delete it. This notice is 
automatically
appended to all Internet email.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to