Check Point CCAS Automation Specialist R81.20 Certification Preparation
This two-day course shows Check Point administrators how to run their security estate through APIs instead of clicks: creating objects and rules, installing policy, adjusting Gaia settings and monitoring resources, all from scripts. It prepares you for the Check Point Certified Automation Specialist (CCAS) R81.20 accreditation, exam 156-521. Delivered live online, in person in Casablanca or on-site at your organization, in French or English. Every module is backed by hands-on labs, from a scripted management server install to automated policy changes.
The essentials
Publisher : Check Point
Certification : Check Point Certified Automation Specialist (CCAS) R81.20
Exam code : 156-521
Duration : 2 days (16 h)
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Exam 156-521 · Pearson VUE (test center or online)
Exam voucher: included or optional depending on the package — contact us.
Explain what automation and orchestration bring to day-to-day Check Point operations
Describe API technologies and how the Check Point API stack is organized
Prepare a management server and gateways to accept API calls
Run Management API and Gaia API commands with the right tool (mgmt_cli, web requests, scripts)
Parse and filter JSON output with the jq utility
Build and replay Web API calls in Postman
Follow security and performance best practices when automating
Program
Automation and orchestration
Why automate
Typical security operations use cases
Check Point APIs at a glance
REST and JSON basics
API components and entry points
Management API
Sessions, publish and policy install
Creating and changing objects and rules
Gaia API
Operating system configuration
Resource and performance monitoring
Best practices and guidelines
Permissions, sessions and locks
Scripted deployment (Blink)
JSON and jq
Response structure
Handy jq filters
Postman
Collections and variables
Chaining Web API calls
Prerequisites
Working knowledge of Unix/Linux and/or Windows
Networking and TCP/IP fundamentals, network security basics
Bash scripting and the vi editor
Strongly recommended: CCSA and CCSE level and around six months of hands-on Check Point experience
Target audience
Check Point security administrators and engineers
DevOps/NetOps teams plugging firewalls into automation pipelines
Integrators and MSSPs managing many policies
The exam
The CCAS R81.20 accreditation is awarded when you pass exam 156-521, which replaced the former 156-520 (retired on 31 July 2024). You book it with Pearson VUE, at a test center or with online proctoring. CCAS is one of the Infinity Specialist Accreditations: two of them earned after CCSE lead to CCSM, two more to CCSM Elite, and each accreditation you pass extends a valid CCSE, CCSM or CCSM Elite by one year.
Preparation tips
Redo every lab from the command line, then again in Postman
Build a small library of reusable jq filters
Browse the Management API reference for the objects you touch every day
Frequently asked questions (FAQ)
Do I need to be a developer to take CCAS?
No. Being comfortable with Bash and the command line is enough; examples rely on mgmt_cli, simple scripts, jq and Postman.
What is the current CCAS exam code?
It is 156-521, based on R81.20. The older 156-520 is no longer offered.
Is CCSA mandatory?
It is not required to enrol, but Check Point strongly recommends CCSA and CCSE level knowledge to get the most out of the course.
Does CCAS count toward CCSM?
Yes. It is an Infinity Specialist Accreditation: with a CCSE and a second accreditation you earn CCSM.
Can I attend remotely?
Yes, live online, or in person in Casablanca and on-site at your organization, in French or English.