Episode
Course 32 - Checkpoint CCSA R80 | Episode 9: Advanced Threat Prevention and Secure Site-to-Site Connectivity
- Podcast
- CyberCode Academy
- Published
- May 9, 2026
- Duration seconds
- 1520
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-32-checkpoint-ccsa-r80-episode-9-advanced-threat-prevention-and-secure-site-to-site-connectivity/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/cybercode-academy-7578615/course-32-checkpoint-ccsa-r80-episode-9-advanced-threat-prevention-and-secure-site-to-site-connectivity.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
In this lesson, you’ll learn about: layered security, anti-spoofing, and VPNs in Check Point R801. Layered Security with Policy Packages In Check Point R80, security is built in layers, not just a single rulebase 🔹 Two Main Layers✅ Access Control Controls: Who can access what Uses: URL Filtering Application Control ✅ Threat Prevention Protects against: Malware Exploits Zero-day attacks 🔹 Key Blades IPS (Intrusion Prevention System) Anti-Virus Threat Emulation (sandboxing) 👉 Combined = Prevent + Detect + Control2. Protecting Encrypted Traffic Even encrypted traffic is inspected using: HTTPS Inspection 🔹 Why Important Attacks often hide inside: HTTPS 👉 Ensures full visibility across all traffic3. Anti-Spoofing (Network Integrity)🔹 The Problem Attackers fake source IP addresses 🔹 The Solution Anti-spoofing in Check Point R80 🔹 How It Works Firewall checks: Incoming interface Routing table 🔹 Behavior If mismatch → traffic is dropped 👉 Prevents: IP spoofing attacks Unauthorized access attempts 4. Site-to-Site VPN (Secure Connectivity)🔹 Purpose Secure communication over: Public internet 🔹 Technology Used IPsec 5. VPN Topologies🔹 Mesh Topology Every gateway connects to every other 🔹 Star Topology (Hub-and-Spoke) Central hub connects branches 👉 Defined using: VPN Communities 6. VPN Domains🔹 Definition Networks included in VPN encryption 🔹 Example Internal LAN behind each gateway 👉 Only defined domains are encrypted7. IKE (Internet Key Exchange) Used to automatically build VPN tunnels 🔹 Phase 1 (Management Tunnel) Establishes secure channel 🔹 Phase 2 (Data Tunnel) Encrypts actual traffic 8. HAGGLE ParametersUsed during IKE negotiation: H → Hashing A → Authentication G → Group (Diffie-Hellman) L → Lifetime E → Encryption 👉 Both sides must match these settings9. Perfect Forward S…