{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Getting Started R80.20. Licensing","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nAhoj, p\u0159\u00e1tel\u00e9! A kone\u010dn\u011b jsme se dostali k posledn\u00edmu, z\u00e1v\u011bre\u010dn\u00e9mu lekci Check Point Getting Started<\/b>. Dnes se budeme v\u011bnovat velmi d\u016fle\u017eit\u00e9mu t\u00e9matu \u2014 Licencov\u00e1n\u00ed<\/b>. R\u00e1d bych v\u00e1s varoval, \u017ee tato lekce nen\u00ed vy\u010derp\u00e1vaj\u00edc\u00edm pr\u016fvodcem v\u00fdb\u011brem za\u0159\u00edzen\u00ed nebo licenc\u00ed. Je to pouze stru\u010dn\u00fd p\u0159ehled kl\u00ed\u010dov\u00fdch bod\u016f, kter\u00e9 by m\u011bl zn\u00e1t ka\u017ed\u00fd administr\u00e1tor Check Point. Pokud si opravdu nev\u00edte rady s v\u00fdb\u011brem licence nebo za\u0159\u00edzen\u00ed, doporu\u010duji obr\u00e1tit se na profesion\u00e1ly, tedy na n\u00e1s :). Existuje mnoho skryt\u00fdch n\u00e1strah, kter\u00e9 je obt\u00ed\u017en\u00e9 vysv\u011btlit v r\u00e1mci kurzu, a tak\u00e9 si je hned nezapamatujete.
\nNa\u0161e lekce bude zcela teoretick\u00e1, tak\u017ee m\u016f\u017eete vypnout sv\u00e9 testovac\u00ed servery a uvolnit se. Na konci \u010dl\u00e1nku najdete video lekci, kde v\u0161e podrobn\u011bji vysv\u011btluji.<\/a><\/noindex><\/p>\n

Licencov\u00e1n\u00ed br\u00e1ny<\/h3>\n

\nZa\u010dneme popisem licen\u010dn\u00edch specifikac\u00ed br\u00e1n bezpe\u010dnosti. Toto se t\u00fdk\u00e1 jak fyzick\u00fdch za\u0159\u00edzen\u00ed, tak virtu\u00e1ln\u00edch stroj\u016f. P\u0159edpokl\u00e1dejme, \u017ee jste se rozhodli zakoupit br\u00e1nu. Koupit pouze hardware nebo virtu\u00e1ln\u00ed stroj bez 'p\u0159edplatn\u00e9ho' \u2014 nen\u00ed mo\u017en\u00e9! Existuj\u00ed t\u0159i varianty p\u0159edplatn\u00fdch:<\/p>\n

\"13.
\n
\nA nyn\u00ed prvn\u00ed zaj\u00edmav\u00e1 zvl\u00e1\u0161tnost! Za\u0159\u00edzen\u00ed nebo virtu\u00e1ln\u00ed stroj m\u016f\u017eete zakoupit pouze s p\u0159edplatn\u00fdm NGTP nebo NGTX. A\u017e budete obnovovat sv\u00e9 p\u0159edplatn\u00e9, budete moci zvolit bal\u00ed\u010dek NGFW, pokud nepot\u0159ebujete bledy AV, AB, URL, AS, TE a TX. Tak to je. P\u0159edplatn\u00e1 lze zakoupit na jeden, dva nebo t\u0159i roky.<\/p>\n

Mohu uhodnout va\u0161i prvn\u00ed ot\u00e1zku! \u201cCo se stane, pokud p\u0159edplatn\u00e9 neobnov\u00edte?<\/b>\u201d. Vybral jsem zelenou barvou ty bledy, kter\u00e9 budou fungovat NAV\u017dDY, a BEZ obnovov\u00e1n\u00ed. To jsou takzvan\u00e9 perpetual bledy. Ostatn\u00ed bledy, kter\u00e9 vy\u017eaduj\u00ed neust\u00e1l\u00e9 aktualizace, zkr\u00e1tka p\u0159estanou fungovat. Snad jen u IPS z\u016fstanou kl\u00ed\u010dov\u00e9 signatury (ale t\u011bch je velmi m\u00e1lo). To plat\u00ed jak pro hardware, tak pro virtu\u00e1ln\u00ed stroje, tedy vSec.<\/p>\n

Jako samostatn\u00fd bod jsem vy\u010dlenil t\u0159i bledy, kter\u00e9 nejsou sou\u010d\u00e1st\u00ed \u017e\u00e1dn\u00e9ho bal\u00ed\u010dku, a to: DLP, MAB a Capsule.<\/p>\n

Tak\u00e9 si pamatujte, \u017ee pokud kupujete clusterov\u00e9 \u0159e\u0161en\u00ed, jako druh\u00e9 za\u0159\u00edzen\u00ed vyb\u00edrejte model s p\u0159\u00edponou HA (tj. High Availability). Na obr\u00e1zku je p\u0159\u00edklad pro br\u00e1nu 5400. To je co se t\u00fd\u010de bran. Nyn\u00ed mana\u017eersk\u00fd server.<\/p>\n

Licencov\u00e1n\u00ed serveru pro spr\u00e1vu<\/h3>\n

\nJak jsme ji\u017e zm\u00ednili v prvn\u00edch lekc\u00edch, existuj\u00ed dv\u011b sc\u00e9n\u00e1\u0159e implementace Check Pointu: Samostatn\u00fd (kdy je br\u00e1na a spr\u00e1va na jednom za\u0159\u00edzen\u00ed) a Distribuovan\u00fd (kdy je server pro spr\u00e1vu p\u0159esunut na samostatn\u00e9 za\u0159\u00edzen\u00ed). Mo\u017enosti v\u0161ak t\u00edmto nekon\u010d\u00ed. Poj\u010fme se pod\u00edvat na t\u0159i typick\u00e9 sc\u00e9n\u00e1\u0159e nasazen\u00ed serveru pro spr\u00e1vu:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. N\u00e1kup vyhrazen\u00e9ho NGSM<\/b>. Nejobl\u00edben\u011bj\u0161\u00ed varianta. Vyberete si bu\u010f za\u0159\u00edzen\u00ed Smart-1, nebo virtu\u00e1ln\u00ed stroj. Samoz\u0159ejm\u011b vyb\u00edr\u00e1te podle toho, kolik bran budete spravovat, 5, 10, 25 atd. Po nasazen\u00ed tohoto za\u0159\u00edzen\u00ed m\u016f\u017eete vyu\u017e\u00edvat \u010dty\u0159i kl\u00ed\u010dov\u00e9 blade servery pro spr\u00e1vu: NPM (tj. spr\u00e1va politik), Logging and Status (tj. logov\u00e1n\u00ed), Smart Event (SIEM od Check Pointu, kter\u00fd n\u00e1m poskytuje ve\u0161kerou reportaci) a Compliance (to je hodnocen\u00ed kvality nastaven\u00ed, a\u0165 u\u017e podle shody s regula\u010dn\u00edmi po\u017eadavky, jako je PCI DSS, nebo prost\u011b dle osv\u011bd\u010den\u00fdch postup\u016f). Je tak\u00e9 vid\u011bt, \u017ee blade NPM a LS jsou trval\u00e9, tj. budou fungovat i bez obnoven\u00ed p\u0159edplatn\u00e9ho, zat\u00edmco blade Smart Event a Compliance jsou k dispozici pouze na prvn\u00ed rok! Pot\u00e9 je t\u0159eba je prodlu\u017eovat za zvl\u00e1\u0161tn\u00ed poplatek. To je d\u016fle\u017eit\u00fd bod, nezapome\u0148te na to. A pokud bez blade Compliance se d\u00e1 je\u0161t\u011b \u017e\u00edt, blade Smart Event pot\u0159ebuj\u00ed opravdu v\u0161ichni.<\/li>\n
  2. N\u00e1kup vyhrazen\u00e9ho serveru pro spr\u00e1vu ud\u00e1lost\u00ed<\/b> NAV\u00cdC k ji\u017e existuj\u00edc\u00edmu serveru<\/a> \u0159\u00edzen\u00ed NGSM. Pro\u010d je to pot\u0159eba? Faktem je, \u017ee funkce logov\u00e1n\u00ed a zejm\u00e9na Smart Event \u201eod\u010derp\u00e1v\u00e1\u201c zna\u010dn\u00e9 syst\u00e9mov\u00e9 zdroje. A pokud je log\u016f pom\u011brn\u011b mnoho, m\u016f\u017ee to zp\u016fsobit \u201ezpomalen\u00ed\u201c na serveru<\/a> \u0159\u00edzen\u00ed. Proto se \u010dasto praktikuje p\u0159enesen\u00ed t\u00e9to funkce na samostatn\u00e9 za\u0159\u00edzen\u00ed, bu\u010f za\u0159\u00edzen\u00ed Smart-1, nebo virtu\u00e1ln\u00ed stroj. Velk\u00e9 integrace s velk\u00fdm mno\u017estv\u00edm log\u016f t\u00e9m\u011b\u0159 v\u017edy vy\u017eaduj\u00ed vyhrazen\u00fd server pro Smart Event. Ten m\u016f\u017ee p\u0159ij\u00edmat logy. Tak\u017ee v\u00e1\u0161 server pro spr\u00e1vu bude vykon\u00e1vat pouze funkce spr\u00e1vy. To zna\u010dn\u011b zvy\u0161uje stabilitu a odezvu syst\u00e9mu. Jak si m\u016f\u017eete v\u0161imnout, p\u0159i n\u00e1kupu vyhrazen\u00e9ho serveru pro Smart Event z\u00edsk\u00e1te tyto dva blade trvale, i bez obnoven\u00ed. V horizontu 3-4 let to bude dokonce ekonomi\u010dt\u011bj\u0161\u00ed, ne\u017e ka\u017ed\u00fd rok kupovat obnoven\u00ed Smart Event pro b\u011b\u017en\u00fd server NGSM.<\/li>\n
  3. Vyhrazen\u00fd server pro spr\u00e1vu log\u016f<\/b>, kter\u00fd dopl\u0148uje servery NGSM a Smart Event. Mysl\u00edm, \u017ee smysl je jasn\u00fd. P\u0159i OPRAVDU velk\u00e9m mno\u017estv\u00ed log\u016f m\u016f\u017eeme v\u00fdstup logov\u00e1n\u00ed um\u00edstit na samostatn\u00fd server. Vyhrazen\u00fd Log server m\u00e1 tak\u00e9 trvalou licenci a nevy\u017eaduje obnoven\u00ed.<\/li>\n<\/ol>\n

    <\/p>\n

    Video lekce<\/h3>\n

    \nZde najdete dal\u0161\u00ed informace o spr\u00e1v\u011b licenc\u00ed a technick\u00e9 podpo\u0159e Check Point:
    \n

    \r\n \"P\u0159ehr\u00e1t\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Zdroj:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Za\u010d\u00edn\u00e1me R80.20. Licence | ProHoster","description":"Zdrav\u00edm, p\u0159\u00e1tel\u00e9!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}