Configuring Check Point NGX VPN-1/FireWall-1

It is your job to provide administrative guidance over your network s perimeter, which means that you have control over your organization s gateway to the Internet. Let s begin by discussing some of the finer protections a NGX gateway offers and why it is recommended that you employ such protections.
In the most obvious sense, gateways (firewalls) are often the single device in your network path that handles every packet to and from the Internet. If the entire world were compliant and played by the rules, this would not be such a big deal. However, it has become commonplace for attackers to launch exploits remotely. In this sense, you now have become much more important in the grand scheme of protecting your information systems assets. After all, you manage the one device that handles all of the traffic. Congratulations, you have now graduated from firewall administrator to network security administrator. Check Point VPN-1 Pro Gateway (NGX) provides multiple technologies to protect your organization s assets in such a hostile environment.
Because most attackers seem to prefer to not be physically present while compromising your assets, you must consider how to introduce NGX s security controls to your network in such a manner that they will identify, prevent, notify, and possibly react to specific (or not) threats. We will refer to this group of actions as network security. In other words, exercising what it takes to reduce risk associated with permitting at least one host the ability to communicate with other hosts...