{"id":38235,"date":"2019-10-31T22:22:28","date_gmt":"2019-10-31T19:22:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/check-point-gaia-r80-40-chto-budet-novogo\/"},"modified":"2020-12-21T09:34:50","modified_gmt":"2020-12-21T07:34:50","slug":"check-point-gaia-r80-40-chto-budet-novogo","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","title":{"rendered":"Check Point Gaia R80.40. Co bude nov\u00e9ho?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Check Point Gaia R80.40. Co bude nov\u00e9ho?\" src=\"\/wp-content\/uploads\/2019\/09\/6ab30b7a802e9b5cb255ca7dc7f9edcf.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Bl\u00ed\u017e\u00ed se dal\u0161\u00ed vyd\u00e1n\u00ed opera\u010dn\u00edho syst\u00e9mu <b>Gaia R80.40<\/b>. P\u0159ed n\u011bkolika t\u00fddny <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/t5\/General-Topics\/R80-40-Early-Availability-Program-Check-Point-Update\/m-p\/61754\">byl spu\u0161t\u011bn program Early Access<\/a><\/noindex>, jeho\u017e v\u00fdsledkem je p\u0159\u00edstup k testov\u00e1n\u00ed distribuce. Jak je obvykl\u00e9, publikujeme informace o novink\u00e1ch a zd\u016frazn\u00edme aspekty, kter\u00e9 jsou z na\u0161eho pohledu nejzaj\u00edmav\u011bj\u0161\u00ed. P\u0159edb\u00edh\u00e1m, mohu \u0159\u00edct, \u017ee novinky jsou skute\u010dn\u011b v\u00fdznamn\u00e9. Proto je dobr\u00e9 se p\u0159ipravit na bl\u00edzk\u00fd proces aktualizace. D\u0159\u00edve jsme ji\u017e <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\">publikovali \u010dl\u00e1nek<\/a><\/noindex> o tom, jak to prov\u00e9st (pro dal\u0161\u00ed informace se m\u016f\u017eete <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/obnovlenie\">obr\u00e1tit sem<\/a><\/noindex>). P\u0159ejd\u011bme k t\u00e9matu\u2026<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Co je nov\u00e9ho<\/h3>\n<p>Pod\u00edvejme se zde na ofici\u00e1ln\u011b ozn\u00e1men\u00e9 novinky. Informace byly z\u00edsk\u00e1ny z webu <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/\">Check Mates<\/a><\/noindex> (ofici\u00e1ln\u00ed komunita Check Point). S va\u0161\u00edm svolen\u00edm nebudu tento text p\u0159ekl\u00e1dat, nebo\u0165 to publikum Habr tomu odpov\u00edd\u00e1. M\u00edsto toho zde zanech\u00e1m sv\u00e9 koment\u00e1\u0159e v n\u00e1sleduj\u00edc\u00ed kapitole.<\/p>\n<p><b class=\"spoiler_title\">1. IoT bezpe\u010dnost. Nov\u00e9 funkce, kter\u00e9 se t\u00fdkaj\u00ed internetu v\u011bc\u00ed<\/b><\/p>\n<ul>\n<li>Shroma\u017e\u010fujte za\u0159\u00edzen\u00ed IoT a atributy provozu od certifikovan\u00fdch engine pro objevov\u00e1n\u00ed IoT (aktu\u00e1ln\u011b podporuje Medigate, CyberMDX, Cynerio, Claroty, Indegy, SAM a Armis).<\/li>\n<li>Konfigurujte novou vrstvu politiky v\u011bnovanou IoT v r\u00e1mci spr\u00e1vy politik.<\/li>\n<li>Nastavte a spravujte bezpe\u010dnostn\u00ed pravidla zalo\u017een\u00e1 na charakteristik\u00e1ch za\u0159\u00edzen\u00ed IoT.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">2. TLS inspekce<\/b><b>HTTP\/2:<\/b><\/p>\n<ul>\n<li>HTTP\/2 je aktualizace protokolu HTTP. Tato aktualizace p\u0159in\u00e1\u0161\u00ed vylep\u0161en\u00ed ve rychlosti, efektivit\u011b a bezpe\u010dnosti, co\u017e vede k lep\u0161\u00ed u\u017eivatelsk\u00e9 zku\u0161enosti.<\/li>\n<li>Bezpe\u010dnostn\u00ed br\u00e1na Check Point nyn\u00ed podporuje HTTP\/2 a nab\u00edz\u00ed lep\u0161\u00ed rychlost a efektivitu p\u0159i zachov\u00e1n\u00ed pln\u00e9 bezpe\u010dnosti se v\u0161emi bloky prevence hrozeb a \u0159\u00edzen\u00ed p\u0159\u00edstupu, stejn\u011b jako nov\u00fdmi ochranami pro protokol HTTP\/2.<\/li>\n<li>Podpora je jak pro jasn\u00fd, tak pro \u0161ifrovan\u00fd SSL provoz a je pln\u011b integrovan\u00e1 s mo\u017enostmi inspekce HTTPS\/TLS.<\/li>\n<li>Inspek\u010dn\u00ed schopnosti.<\/li>\n<\/ul>\n<p><b>Vrstva inspekce TLS<\/b>. Novinky t\u00fdkaj\u00edc\u00ed se inspekce HTTPS:<\/p>\n<ul>\n<li>Nov\u00e1 vrstva politiky v SmartConsole v\u011bnovan\u00e1 inspekci TLS.<\/li>\n<li>R\u016fzn\u00e9 vrstvy inspekce TLS mohou b\u00fdt pou\u017eity v r\u016fzn\u00fdch bal\u00ed\u010dc\u00edch politik.<\/li>\n<li>Sd\u00edlen\u00ed vrstvy inspekce TLS nap\u0159\u00ed\u010d v\u00edce bal\u00ed\u010dky politik.<\/li>\n<li>API pro operace TLS.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">3. Prevence hrozeb<\/b><\/p>\n<ul>\n<li>Celkov\u00e9 zlep\u0161en\u00ed efektivity proces\u016f prevence hrozeb a aktualizac\u00ed.<\/li>\n<li>Automatick\u00e9 aktualizace na motoru extrakce hrozeb.<\/li>\n<li>Dynamick\u00e9, dom\u00e9nov\u00e9 a aktualizovateln\u00e9 objekty mohou nyn\u00ed b\u00fdt pou\u017eity v politik\u00e1ch prevence hrozeb a inspekce TLS. Aktualizovateln\u00e9 objekty jsou s\u00ed\u0165ov\u00e9 objekty, kter\u00e9 p\u0159edstavuj\u00ed extern\u00ed slu\u017ebu nebo zn\u00e1m\u00fd dynamick\u00fd seznam IP adres, nap\u0159\u00edklad - Office365 \/ Google \/ Azure \/ AWS IP adresy a Geo objekty.<\/li>\n<li>Antivirus nyn\u00ed pou\u017e\u00edv\u00e1 SHA-1 a SHA-256 indikace hrozeb k blokov\u00e1n\u00ed soubor\u016f na z\u00e1klad\u011b jejich hash\u016f. Importujte nov\u00e9 indikace z pohledu indik\u00e1tor\u016f hrozeb SmartConsole nebo Custom Intelligence Feed CLI.<\/li>\n<li>Antivirus a SandBlast emulace hrozeb nyn\u00ed podporuj\u00ed inspekci e-mailov\u00e9ho provozu p\u0159es POP3 protokol, stejn\u011b jako vylep\u0161enou inspekci e-mailov\u00e9ho provozu p\u0159es IMAP protokol.<\/li>\n<li>Antivirus a SandBlast emulace hrozeb nyn\u00ed pou\u017e\u00edvaj\u00ed nov\u011b zavedenou funkci inspekce SSH pro inspekci soubor\u016f p\u0159en\u00e1\u0161en\u00fdch p\u0159es SCP a SFTP protokoly.<\/li>\n<li>Anti-Virus a emulace hrozeb SandBlast nyn\u00ed poskytuj\u00ed vylep\u0161enou podporu pro inspekci SMBv3 (3.0, 3.0.2, 3.1.1), co\u017e zahrnuje inspekci v\u00edc kan\u00e1lov\u00fdch p\u0159ipojen\u00ed. Check Point je nyn\u00ed jedin\u00fdm dodavatelem, kter\u00fd podporuje inspekci p\u0159enosu soubor\u016f prost\u0159ednictv\u00edm v\u00edce kan\u00e1l\u016f (funkce, kter\u00e1 je ve v\u0161ech Windows prost\u0159ed\u00edch ve v\u00fdchoz\u00edm nastaven\u00ed zapnut\u00e1). To umo\u017e\u0148uje z\u00e1kazn\u00edk\u016fm z\u016fstat v bezpe\u010d\u00ed p\u0159i pr\u00e1ci s touto funkci zlep\u0161uj\u00edc\u00ed v\u00fdkonnost.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">4. Pov awareness identity<\/b><\/p>\n<ul>\n<li>Podpora integrace Captive Portal s SAML 2.0 a t\u0159et\u00edmi stranami poskytovatel\u016f identity.<\/li>\n<li>Podpora Identity Broker pro \u0161k\u00e1lovateln\u00e9 a jemn\u00e9 sd\u00edlen\u00ed informac\u00ed o identit\u011b mezi PDP, stejn\u011b jako sd\u00edlen\u00ed nap\u0159\u00ed\u010d dom\u00e9nami.<\/li>\n<li>Vylep\u0161en\u00ed pro agenta termin\u00e1lov\u00fdch server\u016f pro lep\u0161\u00ed \u0161k\u00e1lovatelnost a kompatibilitu.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">5. IPsec VPN<\/b><\/p>\n<ul>\n<li>Nastavte r\u016fzn\u00e9 dom\u00e9ny \u0161ifrov\u00e1n\u00ed VPN na bezpe\u010dnostn\u00ed br\u00e1n\u011b, kter\u00e1 je \u010dlenem n\u011bkolika VPN komunit. To poskytuje:<\/li>\n<li>Vylep\u0161enou ochranu soukrom\u00ed \u2014 Intern\u00ed s\u00edt\u011b nejsou odhaleny v jedn\u00e1n\u00edch protokolu IKE.<\/li>\n<li>Vylep\u0161enou bezpe\u010dnost a granularitu \u2014 Ur\u010dete, kter\u00e9 s\u00edt\u011b jsou p\u0159\u00edstupn\u00e9 v ur\u010dit\u00e9 komunit\u011b VPN.<\/li>\n<li>Vylep\u0161enou interoperabilitu \u2014 Zjednodu\u0161en\u00e9 definice VPN na z\u00e1klad\u011b sm\u011brov\u00e1n\u00ed (doporu\u010deno p\u0159i pr\u00e1ci s pr\u00e1zdnou dom\u00e9nou \u0161ifrov\u00e1n\u00ed VPN).<\/li>\n<li>Vytvo\u0159te a bez probl\u00e9m\u016f pracujte s prost\u0159ed\u00edm velk\u00e9 \u0161k\u00e1ly VPN (LSV) s pomoc\u00ed profil\u016f LSV.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">6. Filtrace URL<\/b><\/p>\n<ul>\n<li>Vylep\u0161en\u00e1 \u0161k\u00e1lovatelnost a odolnost.<\/li>\n<li>Roz\u0161\u00ed\u0159en\u00e9 mo\u017enosti \u0159e\u0161en\u00ed probl\u00e9m\u016f.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">7. NAT<\/b><\/p>\n<ul>\n<li>Vylep\u0161en\u00fd mechanismus p\u0159id\u011blov\u00e1n\u00ed port\u016f NAT \u2014 na bezpe\u010dnostn\u00edch br\u00e1n\u00e1ch s 6 nebo v\u00edce instancemi CoreXL Firewall, v\u0161echny instance pou\u017e\u00edvaj\u00ed stejn\u00fd pool port\u016f NAT, co\u017e optimalizuje vyu\u017eit\u00ed a op\u011btovn\u00e9 pou\u017eit\u00ed port\u016f.<\/li>\n<li>Sledov\u00e1n\u00ed vyu\u017eit\u00ed port\u016f NAT v CPView a s SNMP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">8. Hlasov\u00e9 slu\u017eby p\u0159es IP (VoIP)<\/b>V\u00edce instanc\u00ed CoreXL Firewall obsluhuje protokol SIP pro zv\u00fd\u0161en\u00ed v\u00fdkonu.<\/p>\n<p><b class=\"spoiler_title\">9. VPN pro vzd\u00e1len\u00fd p\u0159\u00edstup<\/b>Pou\u017eijte strojov\u00e9 certifik\u00e1ty pro rozli\u0161en\u00ed mezi firemn\u00edmi a nefiremn\u00edmi za\u0159\u00edzen\u00edmi a nastavte politiku, kter\u00e1 vy\u017eaduje pou\u017e\u00edv\u00e1n\u00ed pouze firemn\u00edch za\u0159\u00edzen\u00ed. Vym\u00e1h\u00e1n\u00ed m\u016f\u017ee b\u00fdt p\u0159ed p\u0159ihl\u00e1\u0161en\u00edm (pouze ov\u011b\u0159en\u00ed za\u0159\u00edzen\u00ed) nebo po p\u0159ihl\u00e1\u0161en\u00ed (ov\u011b\u0159en\u00ed za\u0159\u00edzen\u00ed a u\u017eivatele).<\/p>\n<p><b class=\"spoiler_title\">10. Agent mobiln\u00edho p\u0159\u00edstupu<\/b>Vylep\u0161en\u00e1 bezpe\u010dnost koncov\u00fdch bod\u016f na vy\u017e\u00e1d\u00e1n\u00ed v r\u00e1mci agenta mobiln\u00edho p\u0159\u00edstupu pro podporu v\u0161ech hlavn\u00edch webov\u00fdch prohl\u00ed\u017ee\u010d\u016f. Pro v\u00edce informac\u00ed viz sk113410.<\/p>\n<p><b class=\"spoiler_title\">11. CoreXL a Multi-Queue<\/b><\/p>\n<ul>\n<li>Podpora automatick\u00e9ho p\u0159id\u011blov\u00e1n\u00ed CoreXL SND a instanc\u00ed firewallu, kter\u00e9 nevy\u017eaduj\u00ed restartov\u00e1n\u00ed bezpe\u010dnostn\u00ed br\u00e1ny.<\/li>\n<li>Vylep\u0161en\u00ed z hlediska u\u017eivatelsk\u00e9ho z\u00e1\u017eitku \u2014 bezpe\u010dnostn\u00ed br\u00e1na automaticky m\u011bn\u00ed po\u010det CoreXL SND a instanc\u00ed firewallu a konfiguraci Multi-Queue na z\u00e1klad\u011b sou\u010dasn\u00e9ho zat\u00ed\u017een\u00ed provozu.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">12. Klustering<\/b><\/p>\n<ul>\n<li>Podpora Cluster Control Protocol v re\u017eimu Unicast, co\u017e eliminuje pot\u0159ebu CCP.<\/li>\n<\/ul>\n<p>Re\u017eimy Broadcast nebo Multicast:<\/p>\n<ul>\n<li>\u0160ifrov\u00e1n\u00ed Cluster Control Protocol je nyn\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed povoleno.<\/li>\n<li>Nov\u00fd re\u017eim ClusterXL - Aktivn\u00ed\/Aktivn\u00ed, kter\u00fd podporuje \u010dleny clusteru na r\u016fzn\u00fdch geografick\u00fdch m\u00edstech, kter\u00e9 se nach\u00e1zej\u00ed na r\u016fzn\u00fdch pods\u00edt\u00edch a maj\u00ed r\u016fzn\u00e9 IP adresy.<\/li>\n<li>Podpora \u010dlen\u016f clusteru ClusterXL, kte\u0159\u00ed provozuj\u00ed r\u016fzn\u00e9 verze softwaru.<\/li>\n<li>Eliminov\u00e1na pot\u0159eba konfigurace MAC Magic p\u0159i p\u0159ipojen\u00ed n\u011bkolika cluster\u016f na stejnou pods\u00ed\u0165.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">13. VSX<\/b><\/p>\n<ul>\n<li>Podpora upgradu VSX pomoc\u00ed CPUSE v port\u00e1lu Gaia.<\/li>\n<li>Podpora re\u017eimu Active Up v VSLS.<\/li>\n<li>Podpora statistick\u00fdch zpr\u00e1v CPView pro ka\u017ed\u00fd virtu\u00e1ln\u00ed syst\u00e9m.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">14. Zero Touch<\/b>Jednoduch\u00fd proces nastaven\u00ed Plug &amp; Play pro instalaci za\u0159\u00edzen\u00ed \u2014 eliminuj\u00edc\u00ed pot\u0159ebu technick\u00fdch znalost\u00ed a nutnost p\u0159ipojit se k za\u0159\u00edzen\u00ed pro po\u010d\u00e1te\u010dn\u00ed konfiguraci.<\/p>\n<p><b class=\"spoiler_title\">15. Gaia REST API<\/b>Gaia REST API poskytuje nov\u00fd zp\u016fsob, jak \u010d\u00edst a odes\u00edlat informace na servery, kter\u00e9 b\u011b\u017e\u00ed na opera\u010dn\u00edm syst\u00e9mu Gaia. Viz sk143612.<\/p>\n<p><b class=\"spoiler_title\">16. Pokro\u010dil\u00e9 sm\u011brov\u00e1n\u00ed<\/b><\/p>\n<ul>\n<li>Vylep\u0161en\u00ed OSPF a BGP umo\u017e\u0148uj\u00ed resetovat a restartovat soused\u011bn\u00ed OSPF pro ka\u017edou instanci CoreXL Firewall bez pot\u0159eby restartovat sm\u011brovac\u00ed d\u00e9mon.<\/li>\n<li>Vylep\u0161en\u00ed obnovy sm\u011bru pro lep\u0161\u00ed zpracov\u00e1n\u00ed nekonzistenc\u00ed sm\u011brov\u00e1n\u00ed BGP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">17. Nov\u00e9 mo\u017enosti j\u00e1dra<\/b><\/p>\n<ul>\n<li>Upgrade Linux j\u00e1dra.<\/li>\n<li>Nov\u00fd syst\u00e9m odd\u011blen\u00ed (gpt):<\/li>\n<li>Podporuje v\u00edce ne\u017e 2TB fyzick\u00fdch\/logick\u00fdch disk\u016f<\/li>\n<li>Rychlej\u0161\u00ed souborov\u00fd syst\u00e9m (xfs)<\/li>\n<li>Podpora v\u011bt\u0161\u00edho syst\u00e9mov\u00e9ho \u00falo\u017ei\u0161t\u011b (testov\u00e1no a\u017e do 48TB)<\/li>\n<li>Zlep\u0161en\u00ed v\u00fdkonu souvisej\u00edc\u00edho s I\/O<\/li>\n<li>V\u00edcevlakno:<\/li>\n<li>\u00dapln\u00e1 podpora Gaia Clish pro p\u0159\u00edkazy Multi-Queue<\/li>\n<li>Automatick\u00e1 konfigurace \u201ezapnuto ve v\u00fdchoz\u00edm nastaven\u00ed\u201c<\/li>\n<li>Podpora SMB v2\/v3 v mobiln\u00edm p\u0159\u00edstupu<\/li>\n<li>P\u0159id\u00e1na podpora NFSv4 (klient) (NFS v4.2 je v\u00fdchoz\u00ed verze NFS)<\/li>\n<li>Podpora nov\u00fdch syst\u00e9mov\u00fdch n\u00e1stroj\u016f pro lad\u011bn\u00ed, monitorov\u00e1n\u00ed a konfiguraci syst\u00e9mu<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">18. CloudGuard Controller<\/b><\/p>\n<ul>\n<li>Zlep\u0161en\u00ed v\u00fdkonu pro p\u0159ipojen\u00ed k extern\u00edm datov\u00fdm centr\u016fm.<\/li>\n<li>Integrace s VMware NSX-T.<\/li>\n<li>Podpora dal\u0161\u00edch API p\u0159\u00edkaz\u016f pro vytv\u00e1\u0159en\u00ed a \u00fapravu objekt\u016f serveru datov\u00e9ho centra.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">19. V\u00edce-dom\u00e9nov\u00fd server<\/b><\/p>\n<ul>\n<li>Z\u00e1lohov\u00e1n\u00ed a obnova jednotliv\u00e9ho serveru pro spr\u00e1vu dom\u00e9ny na v\u00edce-dom\u00e9nov\u00e9m serveru.<\/li>\n<li>Migrace serveru pro spr\u00e1vu dom\u00e9ny z jednoho v\u00edce-dom\u00e9nov\u00e9ho serveru na jin\u00fd v\u00edce-dom\u00e9nov\u00fd server pro spr\u00e1vu bezpe\u010dnosti.<\/li>\n<li>Migrace serveru pro spr\u00e1vu bezpe\u010dnosti na server pro spr\u00e1vu dom\u00e9ny na v\u00edce-dom\u00e9nov\u00e9m serveru.<\/li>\n<li>Migrace serveru pro spr\u00e1vu dom\u00e9ny na server pro spr\u00e1vu bezpe\u010dnosti.<\/li>\n<li>Vr\u00e1tit dom\u00e9nu na v\u00edce-dom\u00e9nov\u00e9m serveru nebo serveru pro spr\u00e1vu bezpe\u010dnosti ke p\u0159edchoz\u00edmu vyd\u00e1n\u00ed pro dal\u0161\u00ed \u00fapravy.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">20. SmartTasks a API<\/b><\/p>\n<ul>\n<li>Nov\u00e1 metoda autentizace spr\u00e1vy API, kter\u00e1 pou\u017e\u00edv\u00e1 automaticky generovan\u00fd kl\u00ed\u010d API.<\/li>\n<li>Nov\u00e9 p\u0159\u00edkazy spr\u00e1vy API pro vytv\u00e1\u0159en\u00ed objekt\u016f clusteru.<\/li>\n<li>Centr\u00e1ln\u00ed nasazen\u00ed Jumbo Hotfix Akumul\u00e1toru a hotfix\u016f z aplikace SmartConsole nebo pomoc\u00ed API umo\u017e\u0148uje instalaci nebo aktualizaci v\u00edce bezpe\u010dnostn\u00edch br\u00e1n a cluster\u016f sou\u010dasn\u011b.<\/li>\n<li>SmartTasks \u2014 Konfigurace automatick\u00fdch skript\u016f nebo HTTPS po\u017eadavk\u016f vyvolan\u00fdch \u00fakoly administr\u00e1tora, jako je publikace relace nebo instalace politiky.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">21. Nasazen\u00ed<\/b>Centr\u00e1ln\u00ed nasazen\u00ed Jumbo Hotfix Akumul\u00e1toru a hotfix\u016f z aplikace SmartConsole nebo pomoc\u00ed API umo\u017e\u0148uje instalaci nebo aktualizaci v\u00edce bezpe\u010dnostn\u00edch br\u00e1n a cluster\u016f sou\u010dasn\u011b.<\/p>\n<p><b class=\"spoiler_title\">22. SmartEvent<\/b>Sd\u00edlen\u00ed pohled\u016f a zpr\u00e1v SmartView s ostatn\u00edmi administr\u00e1tory.<\/p>\n<p><b class=\"spoiler_title\">23. Export\u00e9r protokol\u016f<\/b>Export protokol\u016f filtrovan\u00fdch podle hodnot pol\u00ed.<\/p>\n<p><b class=\"spoiler_title\">24. Endpoint Security<\/b><\/p>\n<ul>\n<li>Podpora \u0161ifrov\u00e1n\u00ed BitLocker pro \u0161ifrov\u00e1n\u00ed cel\u00e9ho disku.<\/li>\n<li>Podpora extern\u00edch certifik\u00e1t\u016f Certifika\u010dn\u00edch autorit pro klienta Endpoint Security<\/li>\n<li>autentizaci a komunikaci se serverem pro spr\u00e1vu Endpoint Security.<\/li>\n<li>Podpora dynamick\u00e9 velikosti bal\u00ed\u010dk\u016f klienta Endpoint Security na z\u00e1klad\u011b vybran\u00fdch<\/li>\n<li>funkc\u00ed pro nasazen\u00ed.<\/li>\n<li>Politika nyn\u00ed m\u016f\u017ee \u0159\u00eddit \u00farove\u0148 ozn\u00e1men\u00ed pro koncov\u00e9 u\u017eivatele.<\/li>\n<li>Podpora persistentn\u00edho VDI prost\u0159ed\u00ed v \u0159\u00edzen\u00ed politiky koncov\u00fdch bod\u016f.<\/li>\n<\/ul>\n<h3>Co se n\u00e1m nejv\u00edce l\u00edbilo (na z\u00e1klad\u011b \u00fakol\u016f klient\u016f)<\/h3>\n<p>Jak vid\u00edte, je tu spousta novinek. Ale pro n\u00e1s, jako pro <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\">syst\u00e9mov\u00e9ho integr\u00e1tora<\/a><\/noindex>, existuje n\u011bkolik velmi zaj\u00edmav\u00fdch aspekt\u016f (kter\u00e9 jsou tak\u00e9 zaj\u00edmav\u00e9 pro na\u0161e klienty). N\u00e1\u0161 top 10:<\/p>\n<ol>\n<li>Kone\u010dn\u011b byla zaji\u0161t\u011bna pln\u00e1 podpora IoT za\u0159\u00edzen\u00ed. Je ji\u017e obt\u00ed\u017en\u00e9 naj\u00edt spole\u010dnost, kter\u00e1 by takov\u00e9 za\u0159\u00edzen\u00ed nem\u011bla.<\/li>\n<li>Inspekce TLS byla nyn\u00ed p\u0159evedena do samostatn\u00e9 vrstvy. To je mnohem pohodln\u011bj\u0161\u00ed ne\u017e nyn\u00ed (v 80.30). Nen\u00ed t\u0159eba spou\u0161t\u011bt star\u00fd Legacy Dashboard. Nav\u00edc je nyn\u00ed v politice inspekce HTTPS mo\u017en\u00e9 pou\u017e\u00edvat Aktualizovateln\u00e9 objekty, jako jsou slu\u017eby Office365, Google, Azure, AWS atd. To je velmi pohodln\u00e9, kdy\u017e je pot\u0159eba nastavit v\u00fdjimky. P\u0159esto v\u0161ak st\u00e1le nen\u00ed podpora tls 1.3. Z\u0159ejm\u011b to \u201edohon\u00ed\u201c n\u00e1sleduj\u00edc\u00ed hotfix.<\/li>\n<li>V\u00fdznamn\u00e9 zm\u011bny pro Anti-Virus a SandBlast. Nyn\u00ed je mo\u017en\u00e9 kontrolovat protokoly jako SCP, SFTP a SMBv3 (mimochodem, tento v\u00edcekan\u00e1lov\u00fd protokol u\u017e nikdo jin\u00fd nekontroluje).<\/li>\n<li>Do mno\u017estv\u00ed vylep\u0161en\u00ed, kter\u00e1 se t\u00fdkaj\u00ed Site-to-Site VPN. Nyn\u00ed je mo\u017en\u00e9 nastavit v\u00edce VPN dom\u00e9n na br\u00e1n\u011b, kter\u00e1 je sou\u010d\u00e1st\u00ed n\u011bkolika VPN komunit. To je velmi praktick\u00e9 a mnohem bezpe\u010dn\u011bj\u0161\u00ed. Krom\u011b toho si Check Point kone\u010dn\u011b vzpomn\u011bl na Route Based VPN a m\u00edrn\u011b zlep\u0161il jeho stabilitu\/kompatibilitu.<\/li>\n<li>Objevila se velmi \u017e\u00e1dan\u00e1 funkce pro vzd\u00e1len\u00e9 u\u017eivatele. Nyn\u00ed je mo\u017en\u00e9 autentizovat nejen u\u017eivatele, ale i za\u0159\u00edzen\u00ed, z n\u011bho\u017e se p\u0159ipojuje. Nap\u0159\u00edklad chceme povolit p\u0159ipojen\u00ed p\u0159es VPN pouze z firemn\u00edch za\u0159\u00edzen\u00ed. To se samoz\u0159ejm\u011b prov\u00e1d\u00ed pomoc\u00ed certifik\u00e1t\u016f. Tak\u00e9 je nyn\u00ed mo\u017en\u00e9 automaticky p\u0159ipojovat (SMB v2\/v3) sd\u00edlen\u00e9 slo\u017eky pro vzd\u00e1len\u00e9 u\u017eivatele s VPN klientem.<\/li>\n<li>Do\u0161lo k mnoha zm\u011bn\u00e1m v pr\u00e1ci clusteru. Ale snad jedna z nejzaj\u00edmav\u011bj\u0161\u00edch je mo\u017enost fungov\u00e1n\u00ed clusteru, kde br\u00e1ny maj\u00ed r\u016fzn\u00e9 verze Gaia. To je u\u017eite\u010dn\u00e9 p\u0159i pl\u00e1novan\u00e9 aktualizaci.<\/li>\n<li>Zlep\u0161ily se mo\u017enosti Zero Touch. U\u017eite\u010dn\u00e1 funkce pro ty, kte\u0159\u00ed \u010dasto instaluj\u00ed \"mal\u00e9\" br\u00e1ny (nap\u0159\u00edklad pro bankomaty).<\/li>\n<li>Pro logy je nyn\u00ed podporov\u00e1no \u00falo\u017ei\u0161t\u011b a\u017e 48 TB.<\/li>\n<li>M\u016f\u017eete \"sd\u00edlet\" sv\u00e9 dashboardy SmartEvent s ostatn\u00edmi administr\u00e1tory.<\/li>\n<li>Log Exporter nyn\u00ed umo\u017e\u0148uje prov\u00e1d\u011bt p\u0159edfiltraci odes\u00edlan\u00fdch zpr\u00e1v podle pot\u0159ebn\u00fdch pol\u00ed. To znamen\u00e1, \u017ee do va\u0161ich SIEM syst\u00e9m\u016f budou proch\u00e1zet pouze pot\u0159ebn\u00e9 logy a ud\u00e1losti.<\/li>\n<\/ol>\n<h3>Aktualizace<\/h3>\n<p>Mo\u017en\u00e1 si mnoho lid\u00ed u\u017e vyhled\u00e1v\u00e1 informace o aktualizaci. Nesp\u011bchejte. Nejd\u0159\u00edve by m\u011bla verze 80.40 p\u0159ej\u00edt do General Availability. Ale ani pot\u00e9 se nemus\u00ed ihned aktualizovat. Lep\u0161\u00ed je po\u010dkat alespo\u0148 na prvn\u00ed hotfix.<br \/>\nMo\u017en\u00e1 mnoho lid\u00ed \"sed\u00ed\" na star\u0161\u00edch verz\u00edch. Mohu \u0159\u00edci, \u017ee minim\u00e1ln\u011b u\u017e je mo\u017en\u00e9 (a dokonce nutn\u00e9) aktualizovat na 80.30. To u\u017e je stabiln\u00ed a osv\u011bd\u010den\u00fd syst\u00e9m!<\/p>\n<p>M\u016f\u017eete se tak\u00e9 p\u0159ihl\u00e1sit k na\u0161im ve\u0159ejnostem (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>), kde m\u016f\u017eete sledovat vznik nov\u00fdch materi\u00e1l\u016f o Check Point a dal\u0161\u00edch bezpe\u010dnostn\u00edch produktech.<\/p>\n<p class=\"for_users_only_msg\">Pouze registrovan\u00ed u\u017eivatel\u00e9 se mohou \u00fa\u010dastnit ankety. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">P\u0159ihlaste se<\/a><\/noindex>, pros\u00edm.<\/p>\n<h2 class=\"default-block__polling-title\">Jakou verzi Gaia pou\u017e\u00edv\u00e1te?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">                    R77.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R77.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.20<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    Jin\u00e9<\/li>\n<\/ul>\n<p>Hlasovalo 13 u\u017eivatel\u016f. Zdr\u017eelo se 6 u\u017eivatel\u016f.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gaia R80.40. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Early Access, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430. \u041c\u044b, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u043c\u043e\u043c\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u0441 \u043d\u0430\u0448\u0435\u0439 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f. \u0417\u0430\u0431\u0435\u0433\u0430\u044f \u0432\u043f\u0435\u0440\u0435\u0434, \u043c\u043e\u0433\u0443 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0442\u043e\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28701,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38235","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:22:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R80.40. Co bude nov\u00e9ho? | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:28+00:00","article:modified_time":"2020-12-21T07:34:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38235","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 21:04:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:13:22","updated":"2026-01-23 21:04:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38235"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38235\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/28701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}