Check Point CTPS Threat Prevention Specialist R81.20 Certification Preparation
This two-day course is for security professionals who want to tailor Check Point IPS, Anti-Bot and Anti-Virus protections to their own environment rather than living with defaults. You work on Threat Prevention profiles and policy layers, log and traffic analysis, exceptions, updates and performance tuning, all the way to troubleshooting advanced features. It prepares you for the Check Point Threat Prevention Specialist (CTPS) R81.20 accreditation, exam 156-590. Sessions run live online, in person in Casablanca or on-site at your organization, in French or English.
The essentials
Publisher : Check Point
Certification : Check Point Threat Prevention Specialist (CTPS) R81.20
Exam code : 156-590
Duration : 2 days
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Exam 156-590 · Pearson VUE (test center or online)
Exam voucher: included or optional depending on the package — contact us.
Trace how Check Point threat prevention has evolved
Configure and fine-tune IPS protections
Implement and adjust Anti-Virus and Anti-Bot protections
Build Threat Prevention profiles and policy layers
Analyse logs, traffic and correlated views to refine the policy
Handle exceptions, exclusions and updates without weakening protection
Optimise performance and troubleshoot advanced features
Program
History of threat prevention
From signatures to layered prevention
IPS protections
Categories and activation
Fine-tuning
Anti-Virus and Anti-Bot protections
How they work
Configuration
Threat Prevention policy profiles
Predefined and custom profiles
Threat Prevention policy layers
Organising rules in layers
Logs and traffic analysis
Reading logs
Investigating an event
Exceptions and exclusions
When and how to use them
Correlated views and reports
Dashboards
Reports
Threat Prevention updates
Scheduling and control
Performance optimisation
Impact of protections
Tuning best practices
Advanced features and troubleshooting
Diagnostic tools
Practical cases
Prerequisites
CCSA training (required)
CCSE training (suggested)
Internet, networking, network security and system administration fundamentals
Target audience
Security professionals who customise IPS, Anti-Bot and Anti-Virus protections
Check Point administrators responsible for the Threat Prevention policy
Analysts who work with prevention logs every day
The exam
The CTPS accreditation is earned by passing exam 156-590, booked with Pearson VUE and taken at a test center or with online proctoring. CTPS is one of the Check Point specialist accreditations: with a valid CCSE, two accreditations lead to CCSM and two more to CCSM Elite. Each accreditation you pass also extends a valid CCSE, CCSM or CCSM Elite by one year. Expect scenario-driven content, so focus your revision on profiles, exceptions and reading logs.
Preparation tips
Build a custom profile and compare it with the predefined ones
Trigger an IPS detection in the lab, then add a targeted exception
Measure how a tuning change affects gateway performance
Frequently asked questions (FAQ)
How does CTPS differ from CCSE?
CCSE covers advanced Check Point administration broadly. CTPS goes deeper on one topic: the Threat Prevention policy, with IPS, Anti-Bot and Anti-Virus, and how to tune and troubleshoot them.
Is CCSA mandatory?
Yes. Check Point requires CCSA training and suggests CCSE. You should already know how to build an access policy, install it and read logs in SmartConsole, because the course starts from that point.
What is the CTPS exam code?
The exam code is 156-590, taken with Pearson VUE at a test center or online.
Does the course cover Threat Emulation (sandboxing)?
The outline focuses on IPS, Anti-Bot and Anti-Virus, with profiles, layers, logs and performance. Ask us about other blades.
How is the course delivered?
Live online, in person in Casablanca or on-site at your organization, in French or English. Private team sessions can also be arranged.