CCSE (CrowdStrike Certifications) case studies
CCSE · Put your knowledge to work in context.
The CCSE (Check Point Certified Security Expert) is widely understood in the industry as an advanced, expert-level certification for security professionals who already work hands-on with Check Point Security Management and gateways. It is aimed at administrators, engineers, and consultants who have moved past entry-level firewall configuration and now design, harden, and troubleshoot production estates. The CCSE case studies are 5 cases and about 4,377 words.
1The Migration Rule Nobody Removed
Northwind Logistics runs a single R81.20 management server that manages a two-member ClusterXL gateway at HQ, a standalone gateway in a Singapore branch, and a Maestro security group in the data center. The rule base is built from three ordered layers: Corporate, Data Center and Cleanup.
842 words, about 4 min2Two ISPs, One Mail Server, Three Symptoms
Contoso Manufacturing has a two-member ClusterXL cluster at HQ with two ISP connections: 203.0.113.10 on ISP-A, which carries the default route, and 198.51.100.20 on ISP-B, which is used only by Policy Based Routing for traffic sourced from 10.10.30.0/24. The mail server 10.10.20.25 is published to 198.51.100.25 and must be reachable from the internet on 25 and 443; external senders deliver mail to it without problems.
836 words, about 4 min3CloudGuard Behind a Gateway Load Balancer
Fabrikam runs an AWS landing zone with a shared security VPC 10.0.0.0/16 and a CloudGuard Network Security cluster deployed as an Auto Scaling group behind a Gateway Load Balancer, with two appliances today and a maximum of six. Two spoke VPCs, 10.1.0.0/16 (applications) and 10.2.0.0/16 (data), attach through a transit gateway; each spoke route table sends 0.0.0.0/0 and the other spoke's CIDR to the GWLB endpoint.
876 words, about 4 min4HTTPS Inspection vs. the Business
Tailspin Health has 6,000 users on an R81.20 cluster with HTTPS Inspection and Threat Prevention enabled. Two profiles exist: Recommended applied to everyone, and Strict applied to the 300 users in finance.
914 words, about 5 min5Management HA Out of Sync with an Over-Privileged API Account
Bluebird Retail runs an R81.20 management HA pair, primary mgmt-a and secondary mgmt-b. After a jumbo hotfix was installed on mgmt-a during a change window, mgmt-b shows "Out of sync" in SmartConsole and has not replicated for 41 days; the last successful policy install to the branch gateway was 12 days ago.
909 words, about 5 min