{"id":31130,"date":"2019-10-31T21:39:37","date_gmt":"2019-10-31T18:39:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-check-point-getting-started-r80-20-access-control\/"},"modified":"2019-10-31T21:39:37","modified_gmt":"2019-10-31T18:39:37","slug":"7-check-point-getting-started-r80-20-access-control","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","title":{"rendered":"7. Check Point Za\u010d\u00edn\u00e1me R80.20. \u0158\u00edzen\u00ed p\u0159\u00edstupu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7. Check Point Za\u010d\u00edn\u00e1me R80.20. \u0158\u00edzen\u00ed p\u0159\u00edstupu\" src=\"\/wp-content\/uploads\/2019\/04\/0ab2e6565c08db47bcb9fbbc2733c3dc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u00edtejte na 7. lekci, kde za\u010dneme pracovat s bezpe\u010dnostn\u00edmi politikami. Dnes poprv\u00e9 nainstalujeme politiku na n\u00e1\u0161 br\u00e1nu, tj. kone\u010dn\u011b provedeme \u201einstall policy\u201c. Po tomto kroku bude br\u00e1nou moci proch\u00e1zet provoz! <br \/>\nV z\u00e1sad\u011b jsou politiky, z pohledu Check Point, celkem rozs\u00e1hl\u00e9 t\u00e9ma. Bezpe\u010dnostn\u00ed politiky lze rozd\u011blit do 3 typ\u016f:<\/p>\n<ol>\n<li><b>\u0158\u00edzen\u00ed p\u0159\u00edstupu<\/b>. Pat\u0159\u00ed sem takov\u00e9 blady jako: Firewall, Aplika\u010dn\u00ed kontrola, Filtrace URL, Obsahov\u00e9 pov\u011bdom\u00ed, Mobiln\u00ed p\u0159\u00edstup, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"21\">VPN<\/a>. Tj. v\u0161e, co se t\u00fdk\u00e1 povolen\u00ed nebo omezen\u00ed provozu.<\/li>\n<li><b>Prevence hrozeb<\/b>. Zde se pou\u017e\u00edvaj\u00ed Blady: IPS, Anti-Virus, Anti-Bot, Emulace hrozeb, Extrakce hrozeb. Tj. funkce, kter\u00e9 kontroluj\u00ed obsah provozu nebo obsahu, kter\u00fd ji\u017e pro\u0161el Kontrolou p\u0159\u00edstupu. <\/li>\n<li><b>Desktopov\u00e1 bezpe\u010dnost<\/b>. Toto jsou politiky \u0159\u00edzen\u00ed agent\u016f Endpoint (tj. ochrana pracovn\u00edch stanic). Toto t\u00e9ma v r\u00e1mci kurzu v\u016fbec neprobereme.<\/li>\n<\/ol>\n<p>\nV t\u00e9to lekci za\u010dneme hovo\u0159it o politik\u00e1ch Kontroly p\u0159\u00edstupu.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Slo\u017een\u00ed Kontroly p\u0159\u00edstupu<\/h3>\n<p>\nKontrola p\u0159\u00edstupu je prvn\u00ed politika, kter\u00e1 mus\u00ed b\u00fdt nainstalov\u00e1na na br\u00e1nu. Bez t\u00e9to politiky ostatn\u00ed (Prevence hrozeb, Desktopov\u00e1 bezpe\u010dnost) jednodu\u0161e nebudou nainstalov\u00e1ny. Jak ji\u017e bylo zm\u00edn\u011bno, politiky Kontroly p\u0159\u00edstupu zahrnuj\u00ed n\u011bkolik blad\u016f:<\/p>\n<ul>\n<li>Firewall;<\/li>\n<li>Aplika\u010dn\u00ed a URL filtrace;<\/li>\n<li>Obsahov\u00e9 pov\u011bdom\u00ed;<\/li>\n<li>Mobiln\u00ed p\u0159\u00edstup;<\/li>\n<li>NAT.<\/li>\n<\/ul>\n<p>\nZat\u00edm prozkoum\u00e1me pouze jeden \u2014 Firewall.<\/p>\n<h3>\u010cty\u0159i kroky nastaven\u00ed Firewalu<\/h3>\n<p>\nPro instalaci politiky na br\u00e1nu MUS\u00cdME nutn\u011b splnit n\u00e1sleduj\u00edc\u00ed body:<\/p>\n<ol>\n<li>Stanovit rozhran\u00ed br\u00e1ny do odpov\u00eddaj\u00edc\u00ed <b>bezpe\u010dnostn\u00ed z\u00f3ny<\/b> (a\u0165 u\u017e Intern\u00ed, Extern\u00ed, DMZ atd.)<\/li>\n<li>Nastavit <b>Anti-Spoofing<\/b>;<\/li>\n<li>Vytvo\u0159it s\u00ed\u0165ov\u00e9 objekty (<b>S\u00edt\u011b, Hostiteli, Servery<\/b> atd.) To je d\u016fle\u017eit\u00e9! Jak jsem ji\u017e zm\u00ednil, Check Point pracuje pouze s objekty. Do seznamu p\u0159\u00edstupu nelze jen tak vlo\u017eit IP adresu;<\/li>\n<li>Vytvo\u0159it <b>Seznamy p\u0159\u00edstupu<\/b>-y (alespo\u0148 jeden).<\/li>\n<\/ol>\n<p>\nBez t\u011bchto nastaven\u00ed se politiky prost\u011b nenainstaluj\u00ed!<\/p>\n<h3>Video lekce<\/h3>\n<p>\nJak je obvykl\u00e9, p\u0159ikl\u00e1d\u00e1me video lekci, kde provedeme proceduru z\u00e1kladn\u00edho nastaven\u00ed Kontroly p\u0159\u00edstupu a vytvo\u0159\u00edme doporu\u010den\u00e9 seznamy p\u0159\u00edstupu.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"dxp7_Dr_-lA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/dxp7_Dr_-lA\/hqdefault.jpg\" alt=\"P\u0159ehr\u00e1t video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Z\u016fsta\u0148te nalad\u011bni na dal\u0161\u00ed a p\u0159ipojte se k na\u0161emu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube kan\u00e1lu<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/447196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 7-\u0439 \u0443\u0440\u043e\u043a, \u0433\u0434\u0435 \u043c\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u043d\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0430 \u043d\u0430\u0448 \u0448\u043b\u044e\u0437, \u0442.\u0435. \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u00abinstall policy\u00bb. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437 \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a! \u0412\u043e\u043e\u0431\u0449\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f Check Point, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u043f\u043e\u043d\u044f\u0442\u0438\u0435. Security Policies \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 3 \u0442\u0438\u043f\u0430: Access Control. \u0421\u044e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477. Check Point Getting Started R80.20. Kontrola p\u0159\u00edstupu | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:37+00:00","article:modified_time":"2019-10-31T18:39:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31130","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:48:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:22:34","updated":"2026-02-04 14:48:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=31130"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31130\/revisions"}],"predecessor-version":[{"id":156650,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31130\/revisions\/156650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/23098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=31130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=31130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=31130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}