CCSE
https://training-certifications.checkpoint.com/#/courses/Check%20Point%20Certified%20Expert%20(CCSE)%20R80.x
To enable SDL:
Clients must belong to the VPN domain.
SDL is enabled on the clients.