A Complete Check Point Certification Guide
Check Point is recognized worldwide as a leading hardware and software security product provider. Check Point security certification validates an IT professional's knowledge and skills in security management using Check Point products. It is a valuable credential for those seeking advancement in IT security.
The Check Point certification path aims to give IT professionals the opportunity to demonstrate the skills required to secure the Internet. It includes three certification levels designed to take learners' skill sets from beginner to expert.
The four core Check Point certifications are:
Check Point Certified Security Administrator
Check Point Certified Security Expert
Check Point Certified Security Master
Check Point Certified Security Master Elite
Note that the requirements and pathways to extend certifications changed in 2023. Refer to the new rules for specific details.
All Check Point certification exams are handled by the testing company Pearson VUE. Exams are available in person (proctored) and online. Classroom training is strongly recommended for all exams and required for a few, which we'll explore in more detail later. Exams are proctored at Pearson VUE's Authorized Testing Centers.
The cost of a Check Point certification exam depends on the exam and your location. In the U.S., the cost for the CCSA exams is $250.
As with any IT certification, there are multiple ways to prepare. Your study path may include a combination of classroom instruction, online courses, or self-study. Formal training is available at any Check Point Authorized Training Center (ATC) through a three-day course.
Let’s discuss many topics regarding Check Point certification: individual exams and comparisons between Check Point and competitor Palo Alto Networks. We'll also help you explore what a Check Point certification might do for your career. Finally, we discuss training options, including those offered by CBT Nuggets.
What is Check Point Certification?
Checkpoint certifications prove that IT professionals have the skills to implement, manage, and troubleshoot CheckPoint products and technology. In addition to the four core Checkpoint certifications, additional Infinity Specialist Accreditations allow learners to earn CCSM or CCSM Elite certification.
All certifications are valid for two years. The CCSA and the CCSE do require the completion of a three-day course.
Check Point vs. Palo Alto Networks
The selection of a security product, such as those offered by Check Point or Palo Alto Networks, is a matter for managers and procurement personnel. However, as an IT professional, you must decide which certification is best for you and your career. At first glance, it's clear that both platforms are leading solutions for the security-conscious enterprise, and both are on the higher end in their category.
Both certifications have three levels. They are both product-specific certifications focused on each company's security offerings. The salary expectations are similar, at $90,000 to $100,000 (USD) on average. Regarding market share, Check Point and Palo Alto seem to be staying hot on the heels of Cisco.
The Palo Alto Networks website states that the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification demonstrates that the IT professional is knowledgeable about today's cyber threats. A Palo Alto Networks Certified Cybersecurity Associate (PCCSA) can operate next-generation firewalls to protect networks. At the engineering level, the Palo Alto Networks Certified Network Security Engineer (PCNSE) knows how to configure, maintain, and troubleshoot Palo Alto implementations.
Check Point certifications, which we will examine in detail below, cover many of the same topics. The main difference between Palo Alto and Check Point certifications is the products supported. There is no clear career advantage to pursuing one certification over the other.
IT professionals often decide to work on a specific certification because they already use the technology it covers. For example, if your shop supports Check Point, it's a good idea to work on the Check Point certification. The same would be true for Palo Alto Networks.
From there, it is a toss-up.
Check Point Certified Security Administrator
The Check Point Certified Security Administrator (CCSA) certification is designed for IT professionals with a basic understanding of Check Point implementations. It is the lowest level on the Check Point certification path and covers various security administration tasks on Check Point hardware and software.
The CCSA certification validates a candidate's understanding of these Check Point topics and skills:
Fundamental Check Point Technology knowledge
System Administration
Network fundamentals
Managing User Access
Unix-like and or Windows OS
Required exam: Earning the CCSA certification requires passing one exam — CCSA (Exam 156-215.81).
Prerequisites: None are required. However, candidates must complete a three-day course.
Recommended experience: Check Point recommends test takers have 6 to 12 months of hands-on experience with Check Point products and a good understanding of networking and TCP/IP.
Check Point Certified Security Expert
The CCSE certification is an advanced certification designed for IT professionals who know their way around Windows and UNIX servers and already have significant experience in Check Point system support. Candidates should also know how to design, maintain, optimize, and protect an enterprise network from even the most aggressive cyber threats.
Preparing for the Check Point Certified Security Expert certification will enable IT professionals to configure gateways, firewalls, VPNs, and content security software.
The CCSE certification validates a candidate's understanding of these Check Point topics and skills:
Check Point technology overview
Deployment platforms and security policies
Monitoring traffic and connections
Network address translations
Using SmartUpdate
Implementing identity awareness
Configuring VPN tunnels
Resolving security administration issues
Required exam: Earning the CCSE certification requires passing one exam — CCSE (Exam 156-315.81).
Prerequisites: Candidates must earn the CCSA certification before attempting this certification. Candidates earning the R77 or prior CCSE must restart with the CCSA exam.
Recommended experience: Check Point recommends that candidates have extensive hands-on experience with Check Point products, strong networking skills, knowledge of Windows and UNIX server management, and a good understanding of security certificate management.
Check Point Certified Master (CCSM)
The CCSM certification is designed for IT professionals with the highest skills in managing and implementing Check Point products and technologies.
The exam covers issues related to commands, VPN tunnel configuration, troubleshooting NAT, and other advanced topics. Candidates should be able to approach common deployment scenarios and apply common troubleshooting practices.
The CCSM certification validates a candidate's understanding of these Check Point topics and skills:
Policy changes to security implementations
UGI client connectivity
Secure internal communications
Check Point commands
ClusterXL debug file
Required exam: Earning the CCSM certification requires passing both the CCAS exam and the CCSE certification example, as well as any two Infinity Specialist accreditations.
Prerequisites: Candidates who have earned the CCSA and the CCSE certifications plus two infinity specialist accreditations will automatically be awarded the CCSM certification.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
Check Point Certified Security Master Elite (CCMSE)
The CCSM Elite certification is designed for experienced IT professionals who have reached the highest level of technical mastery. There is no specific exam for the CCSM elite.
Security professionals with an active CCSM certification plus any two infinity specialist accreditations will automatically be rewarded the CCSM Elite certification, valid for two years.
The CCMS Elite certification certification validates a candidate's understanding of these Check Point topics and skills:
Multi-domain security management installation and configuration
Common deployment scenarios
Traffic inspection process
Configuration of Domain Management Server (DMS) high availability
Configuration and implementation of global policy
Required exam: Earning the CCSM Elite R80 certification requires passing the CCSM certification exam and two additional Infinity Specialist accreditations.
Prerequisites: To receive this accreditation, candidates must complete the CCSE exam (which is required to receive CCSM certification), obtain the CCSM certification, and complete two additional Infinity Specialist accreditations.
Recommended experience: Check Point recommends candidates have extensive hands-on experience with Check Point products, advanced networking and server management skills, and a broad understanding of network security.
How Much Does it Cost to Get Check Point Certified?
Check Point certification costs vary by testing program, exam type, and region. You can find current prices on the Pearson Vue website by logging into your Pearson VUE account and selecting the exam you are interested in under "Exam Catalog."
During the preparation of this guide, I searched for U.S. prices. The CCSA and CCSE exams cost $250 each. Infinity Specialist accreditations vary by location and course.
Check Point Recertification and Renewal
Check Point certifications expire after only two years. Certifications, like security, must be kept current to be truly effective, so we strongly encourage you to refresh and keep your certification current constantly.
Because the exams are updated frequently, be prepared to retake them when a new version is released. It is up to the individual learner to monitor the changes and updates to the Check Point certification system.
Check Point Certification Salary and Career Information
According to Payscale, IT professionals with a Check Point Certified Security Administrator (CCSA) certification can expect to earn around $89,000 (USD) per year. A Check Point CCSE makes an average of $103,000 (USD) per year. Similar figures are unavailable for CCSM, but one might expect it to be even higher.
CBT Nuggets considers the CCSA one of the more accessible certifications for those trying to break into the information security field. Additionally, the cost of the CCSA certification is reasonable compared to other certifications. Considering the earnings potential for Check Point-certified IT professionals, it's well worth considering.
Check Point Certification Training
CBT Nuggets offers the following Check Point video training by trainer Keith Barker. He has more than three decades of experience in IT and holds numerous IT security certifications.
Check Point CCSA GAiA 156-215.76
Please note that while the exams these courses cover have been updated, the courses are still valuable training resources.
In addition to quality, entertaining video training created by expert-level trainers, CBT Nuggets provides everything a learner needs to study for IT certification exams, including virtual labs, supplemental files, practice exams, and access to a robust Learner Community.
All CBT Nuggets training provides learners with custom virtual labs or supplemental files to learn technical concepts alongside the video training. Experts designed virtual labs to help learners gain hands-on experience in a sandbox environment. NuggetLab supplemental files include practice commands, configuration files, and network diagrams—everything a learner needs to study for a certification exam.
CBT Nuggets practice exams can either be taken timed or untimed, providing a good baseline for learners to test their knowledge.
Not a CBT Nuggets subscriber? Start learning today.
delivered to your inbox.
By submitting this form you agree to receive marketing emails from CBT Nuggets and that you have read, understood and are able to consent to our privacy policy.