{"id":90313,"date":"2020-07-31T01:42:22","date_gmt":"2020-07-30T23:42:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta"},"modified":"2020-07-31T01:42:22","modified_gmt":"2020-07-30T23:42:22","slug":"2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta","title":{"rendered":"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/bff4faa9fd430cae3f8bfc271dc3e4bb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokra\u010dujeme ve zkoum\u00e1n\u00ed nov\u00e9 cloudov\u00e9 platformy Check Point Management Platform pro spr\u00e1vu ochrany u\u017eivatelsk\u00fdch po\u010d\u00edta\u010d\u016f \u2013 SandBlast Agent. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511768\/\">V p\u0159edchoz\u00edm \u010dl\u00e1nku<\/a><\/noindex> Popisujeme hlavn\u00ed komponenty SandBlast Agent, seznamujeme se s architekturou Check Point Infinity a registrujeme aplikaci SandBlast Agent Management Platform na port\u00e1lu Infinity Portal. Dnes se podrobn\u011b pod\u00edv\u00e1me na webov\u00e9 rozhran\u00ed syst\u00e9mu spr\u00e1vy agent\u016f \u2013 tento \u010dl\u00e1nek se stane praktick\u00fdm pr\u016fvodcem v\u0161emi funkcemi a mo\u017enostmi cloudov\u00e9 konzole. A jako p\u0159\u00edpravu na dal\u0161\u00ed \u010dl\u00e1nek nainstalujeme SandBlast Agent a sezn\u00e1m\u00edme se s jeho rozhran\u00edm.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Struktura cloudov\u00e9 konzole spr\u00e1vy Management Platform<\/h3>\n<p>\nRozhran\u00ed SandBlast Agent Management Platform lze zjednodu\u0161en\u011b rozd\u011blit na t\u0159i slo\u017eky:<\/p>\n<ul>\n<li><i>\u0158\u00eddic\u00ed panel<\/i> \u2014 nach\u00e1z\u00ed se v horn\u00ed \u010d\u00e1sti rozhran\u00ed a umo\u017e\u0148uje plnit z\u00e1kladn\u00ed \u00fakoly spr\u00e1vy: spravovat \u00fa\u010dty, obracet se na technickou podporu Check Point a nastavovat profil administr\u00e1tora;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Naviga\u010dn\u00ed panel<\/i> \u2014 nach\u00e1z\u00ed se vlevo a umo\u017e\u0148uje se pohybovat mezi hlavn\u00edmi komponentami ovl\u00e1dac\u00edho panelu, jako jsou sekce nastaven\u00ed politik, zobrazen\u00ed protokol\u016f apod.;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Pracovn\u00ed prostor<\/i> \u2014 zab\u00edr\u00e1 v\u011bt\u0161\u00ed \u010d\u00e1st konzole spr\u00e1vy a zahrnuje mo\u017enosti nastavit sekce naviga\u010dn\u00edho panelu, zobrazovat grafick\u00e9 informace (protokoly, zpr\u00e1vy) a konfigurovat glob\u00e1ln\u00ed parametry syst\u00e9mu.<\/li>\n<\/ul>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/be\/_8\/id\/be_8idgcl2ewkruyy0z_mxn4m9a.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/f6bceebe601921eff3de1c49251a8859.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pod\u00edvejme se podrobn\u011bji na ka\u017ed\u00fd prvek syst\u00e9mu SandBlast Agent Management Platform. Pracovn\u00ed prostory budou podrobn\u011b pops\u00e1ny pro v\u0161echny komponenty naviga\u010dn\u00edho panelu, zat\u00edmco za\u010dneme mo\u017enostmi ovl\u00e1dac\u00edho panelu.<\/p>\n<h4>\u0158\u00eddic\u00ed panel<\/h4>\n<p>\nOvl\u00e1dac\u00ed panel se skl\u00e1d\u00e1 ze 6 komponent\u016f, poj\u010fme si je p\u0159edstavit zleva doprava. Prvn\u00edm je tla\u010d\u00edtko \u201eMenu\u201c, po jeho\u017e stisknut\u00ed se zobraz\u00ed va\u0161e aktu\u00e1ln\u00ed slu\u017eby port\u00e1lu, a umo\u017e\u0148uje p\u0159id\u00e1vat nov\u00e9 slu\u017eby z kategori\u00ed Cloud Protection, Network Protection a Endpoint Protection do va\u0161eho \u00fa\u010dtu. D\u00e1le n\u00e1sleduje n\u00e1zev aktu\u00e1ln\u00ed aplikace, ve kter\u00e9 pracujete \u2014 v tomto p\u0159\u00edpad\u011b je to SandBlast Agent Management Platform. Po kliknut\u00ed na ikonu aplikace se v\u017edy m\u016f\u017eete dostat do sekce \u201eOVERVIEW\u201c naviga\u010dn\u00edho panelu. T\u0159et\u00edm prvkem je ikona spr\u00e1vy \u00fa\u010dt\u016f, kter\u00e1 umo\u017e\u0148uje rychle p\u0159ep\u00ednat mezi \u00fa\u010dty spole\u010dnost\u00ed, ve kter\u00fdch jste administr\u00e1torem.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jv\/e0\/kr\/jve0kruwn5bumjb78yc3i08rdgk.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/797c7761a715a053dd177d7749b3379c.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>\u010ctvrtou komponentou ovl\u00e1dac\u00edho panelu je tla\u010d\u00edtko n\u00e1pov\u011bdy, kter\u00e9 umo\u017e\u0148uje kontaktovat technickou podporu Check Point p\u0159\u00edmo z konzole, p\u0159ej\u00edt na <noindex><a rel=\"nofollow\" href=\"https:\/\/status.checkpoint.com\">the site<\/a><\/noindex> pro sledov\u00e1n\u00ed stavu cloudov\u00fdch a webov\u00fdch prost\u0159edk\u016f Check Point, a tak\u00e9 z\u00edskat p\u0159\u00edstup k \u201eP\u0159\u00edru\u010dk\u00e1m administr\u00e1tora\u201c pro SandBlast Agent Management Platform a Infinity Portal. Dal\u0161\u00edm prvkem je v\u00e1\u0161 profil na Infinity Portal, po jeho\u017e stisknut\u00ed se m\u016f\u017eete \u201eprokousat\u201c k nastaven\u00ed profilu nebo se odhl\u00e1sit z aktu\u00e1ln\u00edho profilu. A nakonec, posledn\u00edm prvkem ovl\u00e1dac\u00edho panelu je tla\u010d\u00edtko pro p\u0159echod na web <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.checkpoint.com\">Infinity Portal<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/fk\/9n\/r4\/fk9nr4hkns2ca6rc3s0muykdhas.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/d082bd0848f474a33cbcef52658a7ed6.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>                        <b class=\"spoiler_title\">Nastaven\u00ed profilu Infinity Portal<\/b><br \/>\n                        Po kliknut\u00ed na n\u00e1zev va\u0161eho profilu Infinity Portal se otev\u0159e pracovn\u00ed prostor pro nastaven\u00ed profilu: m\u016f\u017eete zm\u011bnit zobrazovan\u00e9 jm\u00e9no u\u017eivatele a telefonn\u00ed \u010d\u00edslo, stejn\u011b jako zm\u011bnit jazyk rozhran\u00ed (v sou\u010dasn\u00e9 dob\u011b jsou k dispozici angli\u010dtina a japon\u0161tina) a vybrat \u00fa\u010det, ke kter\u00e9mu je profil p\u0159i\u0159azen. Krom\u011b toho m\u016f\u017eete zm\u011bnit aktu\u00e1ln\u00ed heslo profilu a aktivovat dvoufaktorovou autentizaci pomoc\u00ed Google Authenticator nebo Twilio Authy pro p\u0159\u00edstup k port\u00e1lu. Proces nastaven\u00ed dvoufaktorov\u00e9 autentizace je velmi jednoduch\u00fd \u2014 pomoc\u00ed aplikace se naskenuje QR k\u00f3d, pot\u00e9 se zad\u00e1 vygenerovan\u00fd p\u0159\u00edstupov\u00fd token a potvrd\u00ed se aktivace 2FA.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/rv\/nb\/im\/rvnbim2slv2p0qkpykw37v7qheo.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/287feacc19759363f2a5660f6daba614.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>Naviga\u010dn\u00ed panel<\/h3>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/kn\/zo\/qp\/knzoqpdtq9sdyhojfan-42pajng.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/c4e5ec3a153be6b569a1bcb2ac0ad0b0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ovl\u00e1dac\u00ed panel platformy SandBlast Agent Management obsahuje 9 sekc\u00ed v naviga\u010dn\u00edm panelu, jak ukazuje obr\u00e1zek n\u00ed\u017ee, kter\u00e9 umo\u017e\u0148uj\u00ed prov\u00e1d\u011bt \u0159adu \u00fakol\u016f souvisej\u00edc\u00edch s nasazen\u00edm a spr\u00e1vou agent\u016f a tak\u00e9 spravovat nastaven\u00ed webov\u00e9ho rozhran\u00ed. Pod\u00edvejme se stru\u010dn\u011b na ka\u017edou sekci a pro podrobn\u011bj\u0161\u00ed informace klikn\u011bte na spoiler s n\u00e1zvem po\u017eadovan\u00e9 sekce. Za\u010dn\u011bme:<\/p>\n<ul>\n<li><b>P\u0158EHLED<\/b> \u2014 sekce slo\u017een\u00e1 z n\u011bkolika \u0159\u00eddic\u00edch panel\u016f, kter\u00e9 zobrazuj\u00ed aktu\u00e1ln\u00ed stav klientsk\u00fdch stroj\u016f a agent\u016f z hlediska funk\u010dnosti (po\u010det chr\u00e1n\u011bn\u00fdch stroj\u016f, jejich verze opera\u010dn\u00edch syst\u00e9m\u016f, stav agent\u016f, chybov\u00e9 zpr\u00e1vy atd.) a z hlediska bezpe\u010dnosti (\u00fadaje o napaden\u00fdch a infikovan\u00fdch stroj\u00edch, aktivn\u00ed a zablokovan\u00e9 \u00fatoky, \u010dasov\u00e1 osa \u00fatok\u016f atd.);<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce P\u0158EHLED: podrobn\u011b<\/b><br \/>\n                        Tato sekce se skl\u00e1d\u00e1 ze dvou podsekc\u00ed: <i>Provozn\u00ed p\u0159ehled<\/i> a <i>Bezpe\u010dnostn\u00ed p\u0159ehled<\/i>. V prvn\u00ed podsekci, Provozn\u00ed p\u0159ehled, se zobrazuje informace o stavu u\u017eivatelsk\u00fdch stroj\u016f a agent\u016f: po\u010det chr\u00e1n\u011bn\u00fdch stroj\u016f, charakteristika u\u017eivatelsk\u00fdch po\u010d\u00edta\u010d\u016f (typ za\u0159\u00edzen\u00ed \u2014 osobn\u00ed po\u010d\u00edta\u010d\/notebook, typ opera\u010dn\u00edho syst\u00e9mu \u2014 Windows\/MacOS), statistika procesu nasazen\u00ed agent\u016f, \"zdravotn\u00ed stav\" stroj\u016f, informace o aktualizaci datab\u00e1z\u00ed antiviru na po\u010d\u00edta\u010d\u00edch, jako\u017e i verze nainstalovan\u00fdch agent\u016f SandBlast a verze pou\u017e\u00edvan\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f, a oblast s aktivn\u00edmi ud\u00e1lostmi (Upozorn\u011bn\u00ed). Z t\u00e9to podsekce lze st\u00e1hnout klienta SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/fe\/pq\/dl\/fepqdlfqtglo1vosdpklnazdcle.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/68556863f9127eb3cc5d560c7c3188f8.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Druh\u00e1 podsekce, Bezpe\u010dnostn\u00ed p\u0159ehled, zobrazuje informace o \u00farovni ochrany u\u017eivatelsk\u00fdch stroj\u016f a o \u00fatoc\u00edch (aktivn\u00edch a zablokovan\u00fdch). Tato podsekce umo\u017e\u0148uje filtrov\u00e1n\u00ed zobrazen\u00fdch informac\u00ed podle \u010dasu a tak\u00e9 nastaven\u00ed parametr\u016f vyhled\u00e1v\u00e1n\u00ed podle konkr\u00e9tn\u00edch objekt\u016f. Ka\u017ed\u00fd z blok\u016f sekce Bezpe\u010dnostn\u00ed p\u0159ehled m\u016f\u017ee b\u00fdt nastaven individu\u00e1ln\u011b \u2014 lze p\u0159id\u00e1vat diagramy r\u016fzn\u00fdch typ\u016f, kter\u00e9 budou zobrazovat informace podle zadan\u00e9ho filtru. Podsekci lze vyexportovat jako zpr\u00e1vu ve form\u00e1tech Excel\/PDF. Z t\u00e9to podsekce tak\u00e9 lze st\u00e1hnout klienta SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xc\/ip\/_n\/xcip_nwkx9eqper7glpw-xg27oi.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/18ba39fb48ebae3956114d5f87443916.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>POLITIKA<\/b> \u2014 sekce naviga\u010dn\u00edho panelu, kde se nastavuj\u00ed parametry jednotn\u00e9 bezpe\u010dnostn\u00ed politiky (tzv. Unified Policy) a tak\u00e9 se definuj\u00ed pravidla distribuce agent\u016f a glob\u00e1ln\u00ed nastaven\u00ed politik;<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce POLICY: podrobn\u011b<\/b><br \/>\n                        Prvn\u00ed podsekce, <i>Prevence hrozeb<\/i>, umo\u017e\u0148uje nastavovat pravidla bezpe\u010dnostn\u00ed politiky s uveden\u00edm objekt\u016f, k nim\u017e bude politika aplikov\u00e1na, a tak\u00e9 detailn\u011b konfigurovat fungov\u00e1n\u00ed bblade. Ka\u017ed\u00e9 pravidlo m\u016f\u017ee obsahovat nastaven\u00ed pro t\u0159i logick\u00e9 komponenty politiky Prevention hrozeb: Ochrana webu a soubor\u016f, Behavior\u00e1ln\u00ed ochrana, Anal\u00fdza a n\u00e1prava. Komponent Ochrana webu a soubor\u016f zahrnuje nastaven\u00ed filtrov\u00e1n\u00ed URL, ochranu stahov\u00e1n\u00ed, ochranu p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f a ochranu soubor\u016f. Komponent Behavior\u00e1ln\u00ed ochrana se skl\u00e1d\u00e1 z bblade Anti-Bot, Behavior Guard a Anti-Ransomware, Anti-Exploit. Komponent Anal\u00fdza a n\u00e1prava zahrnuje automatizovanou anal\u00fdzu \u00fatok\u016f (forenzn\u00ed anal\u00fdzu), n\u00e1pravu a reakci.<br \/>\nExistuj\u00ed 3 p\u0159ednastaven\u00e9 profily, kter\u00e9 upravuj\u00ed nastaven\u00ed bezpe\u010dnostn\u00edch komponent: Lad\u011bn\u00ed (v\u0161echny bblady jsou p\u0159evedeny do re\u017eimu Detekce), Doporu\u010den\u00e9 (\u010d\u00e1st bblade v re\u017eimu Detekce) a V\u00fdchoz\u00ed (pouze filtrov\u00e1n\u00ed URL v re\u017eimu Detekce). Tak\u00e9 v sekci Prevence hrozeb je mo\u017en\u00e9 p\u0159id\u00e1vat v\u00fdjimky (v Exclusions Center) k obch\u00e1zen\u00ed pravidel politiky.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ih\/yl\/gd\/ihylgdnsdkyfqlzhvdmuqstohya.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/f493d35932d55f68943ea0006008134a.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Druh\u00e1 podsekce \u2014 <i>Ochrana dat<\/i>, zahrnuje nastaven\u00ed \u0161ifrov\u00e1n\u00ed disku Full Disk Encryption. Podporuje se \u0161ifrov\u00e1n\u00ed Check Point a BitLocker pro Windows, File Vault pro MacOS. Krom\u011b toho je mo\u017en\u00e9 d\u00e1le konfigurovat parametry \u0161ifrov\u00e1n\u00ed, Pre-Boot Authentication a pokro\u010dil\u00e1 nastaven\u00ed Windows Authentication.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/vv\/kg\/mk\/vvkgmko1ycufkj4khupfyrmsn1o.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/d9be546d7b04bffe1f5ac8432a0a0edb.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e1sleduj\u00edc\u00ed podsekce \u2014 <i>Nasazen\u00ed<\/i>, v n\u00ed\u017e se nastavuj\u00ed parametry instalace komponent SandBlast Agent na u\u017eivatelsk\u00e9 stroje. V t\u00e9to podsekci je mo\u017en\u00e9 odd\u011blit pravidly politiky instalaci r\u016fzn\u00fdch bblade pro r\u016fzn\u00e9 stroje a verze agent\u016f.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/3p\/gw\/rv\/3pgwrvpacdi0tih-uhxgkjsjdl8.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/05df5f2eaa3eba91c40d6e73d730bd52.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Posledn\u00ed podsekce, <i>Glob\u00e1ln\u00ed nastaven\u00ed politiky<\/i>, umo\u017e\u0148uje nastavovat heslo pro odebr\u00e1n\u00ed SandBlast Agent z u\u017eivatelsk\u00e9ho stroje, m\u011bnit parametry dat pro p\u0159enos do Check Point a tak\u00e9 nastavovat charakteristiky hesla pro Full Disk Encryption.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/px\/4l\/zd\/px4lzdygb-8kjj_7oksnnzwk4gi.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/86ed3357b79a0057136907c0701fa6fa.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>SPR\u00c1VA PO\u010c\u00cdTA\u010c\u016e<\/b> \u2014 oblast naviga\u010dn\u00edho panelu, kter\u00e1 zobrazuje podrobn\u00e9 informace o v\u0161ech klientsk\u00fdch stroj\u00edch a tak\u00e9 umo\u017e\u0148uje spravovat logick\u00e9 skupiny po\u010d\u00edta\u010d\u016f, prov\u00e1d\u011bt nucen\u00e9 akce (Push Operation) a nastavovat \u0161ifrov\u00e1n\u00ed disku (Akce Full Disk Encryption);<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce SPR\u00c1VA PO\u010c\u00cdTA\u010c\u016e: podrobn\u011b<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/rf\/5v\/kk\/rf5vkkipzwpbubdhmkr0mwlcpw0.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/84e2db5a60e998255ac0a068e2d1377b.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>V sekci COMPUTER MANAGEMENT jsou t\u0159i hlavn\u00ed sou\u010d\u00e1sti: ikony nastaven\u00ed, zobrazen\u00ed informac\u00ed o u\u017eivatelsk\u00fdch stroj\u00edch a filtry pro nastaven\u00ed parametr\u016f zobrazen\u00ed. Poj\u010fme se pod\u00edvat na ikony nastaven\u00ed postupn\u011b zleva doprava: aktualizace informac\u00ed; export zpr\u00e1vy o vybran\u00e9m stroji ve form\u00e1tu CSV; vytvo\u0159en\u00ed Directory Scanner pro z\u00edsk\u00e1n\u00ed informac\u00ed o u\u017eivatel\u00edch, stroj\u00edch a skupin\u00e1ch z Active Directory; spr\u00e1va skupin (vytv\u00e1\u0159en\u00ed\/\u00faprava\/odstran\u011bn\u00ed); vytvo\u0159en\u00ed nov\u00e9 virtu\u00e1ln\u00ed skupiny; p\u0159id\u00e1n\u00ed u\u017eivatelsk\u00e9ho stroje do existuj\u00edc\u00ed virtu\u00e1ln\u00ed skupiny; p\u0159id\u00e1n\u00ed nucen\u00e9 akce z kategorie Push Operation (podrobn\u011bji pops\u00e1na v p\u0159\u00edslu\u0161n\u00e9 sekci); vytv\u00e1\u0159en\u00ed \u00faloh pro obnoven\u00ed dat z \u0161ifrovan\u00e9ho disku v p\u0159\u00edpad\u011b probl\u00e9m\u016f s p\u0159\u00edstupem (Full Disk Encryption Actions).<br \/>\n<i>Virtu\u00e1ln\u00ed skupiny<\/i> umo\u017e\u0148uj\u00ed spojen\u00ed u\u017eivatelsk\u00fdch stroj\u016f do logick\u00fdch skupin pro flexibiln\u00ed \u0159\u00edzen\u00ed. Tyto skupiny mohou b\u00fdt pou\u017eity jako alternativa k Active Directory, nebo ve spojen\u00ed s AD. Existuje n\u011bkolik virtu\u00e1ln\u00edch skupin, kter\u00e9 jsou automaticky p\u0159i\u0159azov\u00e1ny u\u017eivatelsk\u00fdm stroj\u016fm, nap\u0159\u00edklad Desktops, Laptops, Servers a dal\u0161\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/4b5e1cf41c45bd55279ca7653d950e88.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZobrazen\u00ed u\u017eivatelsk\u00fdch stroj\u016f lze p\u0159izp\u016fsobit podle filtr\u016f zobrazen\u00fdch na obr\u00e1zku v\u00fd\u0161e. Prvn\u00ed filtr (<i>by computers property<\/i>) m\u00e1 mnoho integrovan\u00fdch krit\u00e9ri\u00ed a umo\u017e\u0148uje zobrazovat u\u017eivatelsk\u00e9 po\u010d\u00edta\u010de podle jejich vlastnost\u00ed, stavu stroje nebo komponent\u016f SandBlast Agent. Druh\u00fd filtr (<i>by virtual group<\/i>) nab\u00edz\u00ed mo\u017enost v\u00fdb\u011bru podle virtu\u00e1ln\u00edch skupin, a t\u0159et\u00ed (<i>by organization unit<\/i>) podle parametr\u016f Active Directory.<\/p>\n<ul>\n<li><b>LOGS<\/b> \u2014 panel zobrazen\u00ed log\u016f, kter\u00fd zobrazuje statistiky na z\u00e1klad\u011b mnoha parametr\u016f (blades, z\u00e1va\u017enost ud\u00e1losti, stroje u\u017eivatel\u016f atd.) a poskytuje podrobn\u00e9 informace k jednotliv\u00fdm log\u016fm;<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce LOGS: podrobn\u011b<\/b><br \/>\n                        Tato sekce poskytuje pohodln\u00e9 rozhran\u00ed pro prozkoum\u00e1n\u00ed log\u016f s mno\u017estv\u00edm filtrovac\u00edch n\u00e1stroj\u016f. V pracovn\u00edm prostoru sekce LOGS se daj\u00ed rozli\u0161it \u010dty\u0159i slo\u017eky: horn\u00ed \u0159\u00e1dek pro vyhled\u00e1v\u00e1n\u00ed dotaz\u016f a v\u00fdb\u011br \u010dasov\u00e9ho r\u00e1mce; lev\u00fd panel se statistikou podle r\u016fzn\u00fdch krit\u00e9ri\u00ed; centr\u00e1ln\u00ed oblast s zobrazen\u00edm v\u0161ech log\u016f a hlavn\u00edmi informacemi o nich; prav\u00fd panel s v\u00fdstupem podrobn\u00fdch informac\u00ed o vybran\u00e9m logu. Je podporov\u00e1na mo\u017enost v\u00fdstupu log\u016f bez informac\u00ed o u\u017eivateli a stroji (Hide Identities) a export do Excel souboru.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ea\/yt\/n1\/eaytn1tonanyqelkwtxuyewgkyy.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/de20ea3466a9d428a4f55c6e981885bf.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>PUSH OPERATIONS<\/b> \u2014 sekce, ve kter\u00e9 jsou vytv\u00e1\u0159eny a sledov\u00e1ny \u00fakoly, kter\u00e9 jsou prov\u00e1d\u011bny na klientsk\u00e9m stroji n\u00e1siln\u011b (sb\u011br log\u016f, restartov\u00e1n\u00ed nebo vypnut\u00ed stroje, skenov\u00e1n\u00ed na p\u0159\u00edtomnost \u0161kodliv\u00fdch program\u016f\/soubor\u016f atd.);<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce PUSH OPERATIONS: podrobnosti<\/b><br \/>\n                        V t\u00e9to sekci jsou dv\u011b hlavn\u00ed pracovn\u00ed oblasti: v horn\u00ed \u010d\u00e1sti se konfiguruj\u00ed a zobrazuj\u00ed donucovac\u00ed \u00fakoly pro klientsk\u00e9 stroje, zat\u00edmco ve spodn\u00ed \u010d\u00e1sti se zobrazuj\u00ed podrobn\u00e9 informace o vybran\u00e9m \u00fakolu.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/su\/5o\/tv\/su5otv5lnvyiucswjsmplijk6ny.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/cf8e4f52c6b0f55094bd5991a3bd51b6.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Existuj\u00ed t\u0159i kategorie donucovac\u00edch operac\u00ed, z nich\u017e ka\u017ed\u00e1 m\u00e1 n\u011bkolik \u00fakol\u016f: v kategorii <i>Anti-Malware<\/i> to jsou Scan for Malware, Update malware signature Database, Restore files from quarantine; v kategorii <i>Forensics And Remediation<\/i> to jsou Analyze by Indicator, File Remediation; v kategorii <i>Agent Settings<\/i> to jsou Collect Client Logs, Repair Client, Shutdown Computer, Restart Computer. Tak\u00e9 ka\u017ed\u00e9mu donucovac\u00edmu \u00fakolu lze p\u0159i\u0159adit p\u0159esn\u00fd \u010das spu\u0161t\u011bn\u00ed a p\u0159idat koment\u00e1\u0159 s popisem.<\/p>\n<ul>\n<li><b>ENDPOINT SETTINGS<\/b> \u2014 sekce naviga\u010dn\u00edho panelu, ve kter\u00e9 se nastavuje integrace s Active Directory, parametry syst\u00e9mov\u00fdch zpr\u00e1v (Alerts), aktivuje se export log\u016f pomoc\u00ed Syslog, a tak\u00e9 je mo\u017en\u00e9 sledovat stav licenc\u00ed a vyb\u00edrat typ aktu\u00e1ln\u00ed politiky (u\u017eivatelsk\u00e9 nebo po\u010d\u00edta\u010dov\u00e9);<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce ENDPOINT SETTINGS: podrobnosti<\/b><br \/>\n                        Prvn\u00ed podsekce, <i>AD Scanners<\/i>, umo\u017e\u0148uje nastavit plnou synchronizaci port\u00e1lu s Active Directory va\u0161\u00ed organizace pro z\u00edsk\u00e1n\u00ed informac\u00ed o v\u0161ech u\u017eivatel\u00edch a stroj\u00edch. Ve v\u00fdchoz\u00edm nastaven\u00ed je aktivn\u00ed re\u017eim Organization Distributed Scan, ve kter\u00e9m stroje se nainstalovan\u00fdm SandBlast Agentem odes\u00edlaj\u00ed \u00fadaje o sv\u00e9 cest\u011b do konzoly pro spr\u00e1vu pro dal\u0161\u00ed zobrazen\u00ed v sekci COMPUTER MANAGEMENT. M\u016f\u017eete tak\u00e9 zm\u011bnit re\u017eim na Full Active Directory Sync, ve kter\u00e9m se v\u0161echna data z Active Directory na\u010dtou do konzoly pro spr\u00e1vu. Pro \u00fasp\u011b\u0161n\u00e9 skenov\u00e1n\u00ed je pot\u0159eba \u00fa\u010det s pln\u00fdmi pr\u00e1vy pro \u010dten\u00ed k: Active Directory root, v\u0161echny pod\u0159\u00edzen\u00e9 kontejnery a objekty, kontejner odstran\u011bn\u00fdch objekt\u016f.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yo\/zv\/ex\/yozvexesgzgo3cgwy1hev5sjb14.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/dde3073fc368c35b579a09d691420134.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Druh\u00fdm pododd\u011blen\u00edm je <i>Upozorn\u011bn\u00ed<\/i>, ve kter\u00e9m se nastavuj\u00ed parametry pro ozn\u00e1men\u00ed o kritick\u00fdch situac\u00edch, nap\u0159\u00edklad o naka\u017een\u00ed stroje nebo probl\u00e9mech s nasazen\u00edm agenta. V prav\u00e9 \u010d\u00e1sti pracovn\u00ed oblasti se nastavuj\u00ed parametry pro 12 p\u0159ednastaven\u00fdch kritick\u00fdch situac\u00ed, v\u010detn\u011b prahov\u00fdch hodnot aktivace a deaktivace ozn\u00e1men\u00ed. V tomto pododd\u011blen\u00ed je tak\u00e9 mo\u017en\u00e9 nastavit parametry po\u0161tovn\u00edho serveru pro odes\u00edl\u00e1n\u00ed ozn\u00e1men\u00ed na e-mail.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/za\/hw\/sr\/zahwsr3gey_ryz4iqnf6acx9onk.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/ff136ca312be1953799f0b42f7c2f138.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e1sleduje pododd\u011blen\u00ed <i>Export ud\u00e1lost\u00ed<\/i>, kter\u00e9 umo\u017e\u0148uje nastavit p\u0159enos log\u016f r\u016fzn\u00fdch form\u00e1t\u016f (Syslog, CEF, LEEF, Generic) na v\u00e1\u0161 logov\u00fd server. Tato mo\u017enost tak\u00e9 umo\u017e\u0148uje nastavit p\u0159enos log\u016f do va\u0161\u00ed SIEM syst\u00e9mu, na kter\u00e9m m\u016f\u017ee b\u00fdt spu\u0161t\u011bn Syslog agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/gw\/6m\/id\/gw6midzv4ngdoqvbiy7v8j3kx3k.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/be844f8792f1e5a2f962718b3e9b7e13.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e1sleduj\u00edc\u00ed podsekce \u2014 <i>Licences<\/i>, ve kter\u00e9m se zobrazuje informace o licenc\u00edch: unik\u00e1tn\u00ed kl\u00ed\u010d, status licence, po\u010det aktivn\u00edch agent\u016f a velikost kv\u00f3ty. Spr\u00e1va licenc\u00ed se prov\u00e1d\u00ed v nastaven\u00edch GLOBAL SETTINGS.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/mp\/-m\/nt\/mp-mntqtnvtg147hlu9i-nnatrm.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/0887191e9b9f3c205092c99a028cfc7e.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Posledn\u00edm pododd\u011blen\u00edm je <i>Re\u017eim provozu politiky<\/i>, ve kter\u00e9m se vyb\u00edr\u00e1 aktivn\u00ed typ politiky: Users based Policy nebo Computers based Policy. Jak je vid\u011bt z popisu politik na obr\u00e1zku n\u00ed\u017ee \u2014 li\u0161\u00ed se pou\u017eit\u00edm politik bu\u010f v\u00fdhradn\u011b pro stroje, nebo politika se pou\u017e\u00edv\u00e1 sm\u00ed\u0161en\u011b pro u\u017eivatele a stroje.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/9j\/d2\/if\/9jd2ifimkv-o8tsgotlo0r1ekdu.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/4e5783c2e23bf73f8b91397bc9f076be.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>SPR\u00c1VA SLU\u017dEB<\/b> \u2014 oblast panelu navigace, kter\u00e1 umo\u017e\u0148uje spravovat slu\u017ebu Endpoint Management Platform a pou\u017e\u00edvat SmartView pro zobrazen\u00ed podrobn\u00fdch zpr\u00e1v o bezpe\u010dnostn\u00edch ud\u00e1lostech, a tak\u00e9 z t\u00e9to sekce si m\u016f\u017eete st\u00e1hnout instala\u010dn\u00ed soubory pro aplikaci konzole SmartConsole a klienta SandBlast Agent;<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Odd\u00edl SPR\u00c1VA SLU\u017dEB: podrobn\u011b<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yx\/kr\/b1\/yxkrb1b5v19aujlugjtunqrafio.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/78e64b7d411a1b0244fad83277c0d5c9.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pracovn\u00ed oblast sekce MANAGEMENT SLU\u017dEB se skl\u00e1d\u00e1 ze t\u0159\u00ed komponent\u016f: spr\u00e1va slu\u017eby a zobrazen\u00ed dat o slu\u017eb\u011b, stejn\u011b jako p\u0159\u00edstup k SmartView (rozhran\u00ed je zobrazeno na obr\u00e1zku n\u00ed\u017ee) pro anal\u00fdzu log\u016f a zpr\u00e1v; panel pro sta\u017een\u00ed SmartConsole R80.40 \u2014 programu pro spr\u00e1vu produkt\u016f Check Point, v\u010detn\u011b SandBlast Agenta; panel pro sta\u017een\u00ed klienta SandBlast Agenta.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/pc\/vm\/fo\/pcvmfohs2h-ulf4ij0zigwizegk.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/de93d6724f861d6e8931b84892601766.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>PROAKTIVN\u00cd HLED\u00c1N\u00cd HROZEB<\/b> \u2014 sekce, ve kter\u00e9 se nastavuj\u00ed pravidla pro proaktivn\u00ed hled\u00e1n\u00ed hrozeb (zat\u00edm beta verze);<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce PROAKTIVN\u00cd HLED\u00c1N\u00cd HROZEB: podrobn\u011b<\/b><br \/>\n                        P\u0159\u00edstup k proaktivn\u00edmu hled\u00e1n\u00ed hrozeb umo\u017e\u0148uje uskute\u010dnit proaktivn\u00ed vyhled\u00e1v\u00e1n\u00ed anom\u00e1ln\u00ed nebo \u0161kodliv\u00e9 aktivity na u\u017eivatelsk\u00fdch stroj\u00edch s nainstalovan\u00fdm SandBlast Agentem \u2014 nap\u0159\u00edklad p\u0159\u00edstupy k dom\u00e9n\u00e1m, kter\u00e9 jsou pova\u017eov\u00e1ny Check Pointem za \u0161kodliv\u00e9, procesy spu\u0161t\u011bn\u00e9 pomoc\u00ed WMI, atd. Je zde mo\u017enost pou\u017e\u00edvat p\u0159ednastaven\u00e9 filtry pro vyhled\u00e1v\u00e1n\u00ed, nebo vytv\u00e1\u0159et vlastn\u00ed. Tato technologie vyu\u017e\u00edv\u00e1 Check Point ThreatCloud \u2014 neust\u00e1le aktualizovanou slu\u017ebu, kter\u00e1 p\u0159edstavuje glob\u00e1ln\u00ed s\u00ed\u0165 senzor\u016f detekuj\u00edc\u00edch hrozby a spole\u010dnost\u00ed, kter\u00e9 zas\u00edlaj\u00ed informace o hrozb\u00e1ch do Check Pointu. V sou\u010dasn\u00e9 dob\u011b je proaktivn\u00ed hled\u00e1n\u00ed hrozeb ve f\u00e1zi dokon\u010dov\u00e1n\u00ed a p\u0159\u00edstup k beta verzi je poskytov\u00e1n na vy\u017e\u00e1d\u00e1n\u00ed u Check Pointu. Tento n\u00e1stroj podrobn\u011b prozkoum\u00e1me v jednom z n\u00e1sleduj\u00edc\u00edch \u010dl\u00e1nk\u016f cyklu.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jn\/uh\/hh\/jnuhhh3ncn4o3v2dkcc-d-gkf8u.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/cd83cd0fb74c8d5273568832e009dab2.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<ul>\n<li><b>GLOB\u00c1LN\u00cd NASTAVEN\u00cd<\/b> \u2014 sekce glob\u00e1ln\u00edch nastaven\u00ed pro v\u0161echny va\u0161e aplikace na port\u00e1lu Infinity Portal, kter\u00e1 umo\u017e\u0148uje m\u011bnit nastaven\u00ed firemn\u00edho \u00fa\u010dtu na port\u00e1le, spravovat \u00fa\u010dty administr\u00e1tor\u016f a sledovat jejich \u010dinnosti, prohl\u00ed\u017eet stav smluv pro r\u016fzn\u00e9 aplikace \u00fa\u010dtu, stejn\u011b jako spravovat API kl\u00ed\u010de a exportovat logy z CloudGuard SaaS na v\u00e1\u0161 lok\u00e1ln\u00ed log server.<\/li>\n<\/ul>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Sekce GLOB\u00c1LN\u00cd NASTAVEN\u00cd: podrobn\u011b<\/b><br \/>\n                        Prvn\u00ed podsekce, <i>Nastaven\u00ed \u00fa\u010dtu<\/i>, zobrazuje n\u00e1zev va\u0161eho \u00fa\u010dtu a ID \u00fa\u010dtu, a tak\u00e9 umo\u017e\u0148uje nastavov\u00e1n\u00ed parametr\u016f pro donucuj\u00edc\u00ed autentizaci a \u010dasov\u00fd limit ne\u010dinnosti. Krom\u011b toho v t\u00e9to podsekci m\u016f\u017eete uv\u00e9st parametry pro autorizaci SSO a zm\u011bnit typ \u00fa\u010dtu (klient, partner kategorie Distributor\/Reseller nebo partner kategorie MSSP). <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/eb\/rv\/ts\/ebrvtsyjlii31mjocboorbdmbag.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/cc3fab58939449f3c1f10b385caade95.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Dal\u0161\u00ed podsekce, <i>U\u017eivatel\u00e9<\/i>, zobrazuje informace o spr\u00e1vc\u00edch va\u0161eho port\u00e1lu \u2014 kontaktn\u00ed \u00fadaje, jako\u017e i datum a \u010das registrace a posledn\u00edho p\u0159ihl\u00e1\u0161en\u00ed do port\u00e1lu. V t\u00e9to sekci lze p\u0159id\u00e1vat u\u017eivatele dvou typ\u016f \u2014 spr\u00e1vce a u\u017eivatele pouze pro \u010dten\u00ed.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/_s\/dp\/oc\/_sdpocjjqng25q7o-5kqtbr-sga.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/77595635928d2c1d9d9c2276d1ab48ff.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e1sleduje pododd\u011blen\u00ed <i>Audity<\/i>, umo\u017e\u0148uje sledovat akce spr\u00e1vc\u016f port\u00e1lu. Jak je zn\u00e1zorn\u011bno na obr\u00e1zku n\u00ed\u017ee \u2014 z\u00e1znamy o aktivit\u011b spr\u00e1vc\u016f obsahuj\u00ed u\u017eivatelsk\u00e9 jm\u00e9no, datum a \u010das ud\u00e1losti, slu\u017ebu, kategorii a typ ud\u00e1losti, jako\u017e i stru\u010dn\u00fd popis z\u00e1znamu. Nap\u0159\u00edklad v n\u00ed\u017ee uveden\u00fdch z\u00e1znamech byly zaznamen\u00e1ny ud\u00e1losti p\u0159ihl\u00e1\u0161en\u00ed do port\u00e1lu (Login), zm\u011bny typu \u00fa\u010dtu (Account Updated) na \u201cDistributor\u201d, jako\u017e i p\u0159id\u00e1n\u00ed dvoufaktorov\u00e9 autentizace pro p\u0159\u00edstup na port\u00e1l konkr\u00e9tn\u00edmu u\u017eivateli (User Updated). <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/oz\/1h\/du\/oz1hducy-2uepsee3fip5dshbgg.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/70f1767ea595f8ff7a2ff727a6483b19.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>\u010ctvrt\u00fdm pododd\u00edlem je <i>Smlouvy<\/i>, kter\u00fd zobrazuje informace o smlouv\u00e1ch pro va\u0161e aplikace na port\u00e1lu \u2014 doba platnosti smlouvy, po\u010det smluv a vyu\u017eit\u00ed kv\u00f3ty (pokud existuje). Tak\u00e9 v tomto pododd\u00edlu lze spravovat p\u0159idru\u017een\u00e9 \u00fa\u010dty Check Point z polo\u017eky P\u0158IDRU\u017dEN\u00c9 \u00da\u010cTY. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/8i\/sd\/hs\/8isdhsofxipoh5iq7ynmnvez10q.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/d01d7fe8716600156bbc4ed026ff9c7c.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e1sleduj\u00edc\u00ed podsekce \u2014 <i>API Kl\u00ed\u010de<\/i>, ve kter\u00e9m se spravuj\u00ed kl\u00ed\u010de API pro v\u0161echny dostupn\u00e9 aplikace Infinity Portal. P\u0159i generov\u00e1n\u00ed kl\u00ed\u010de se vytv\u00e1\u0159\u00ed Client ID a Secret Key, kter\u00e9 lze n\u00e1sledn\u011b pou\u017e\u00edvat pro p\u0159\u00edstup k port\u00e1lu z extern\u00edch aplikac\u00ed. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/5u\/pa\/ul\/5upaulxfqnhyf2yely6d1s5twok.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/0aaf7c1199d57ac46ff2e14d141bf9ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Posledn\u00ed dva pododd\u00edly \u2014 <i>Export ud\u00e1lost\u00ed<\/i> a <i>Nastaven\u00ed partnera<\/i>, p\u0159i\u010dem\u017e prvn\u00ed z nich popisuje proces exportu z\u00e1znam\u016f z CloudGuard SaaS na v\u00e1\u0161 lok\u00e1ln\u00ed log-server, a druh\u00fd umo\u017e\u0148uje prohl\u00ed\u017eet informace o \u00fa\u010dtech a p\u0159id\u00e1vat nov\u00e9 (pouze pro \u00fa\u010dty kategorie Partner). <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/o2\/rz\/7x\/o2rz7xj_4x58o8t0th_3rivzeuc.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/3af4740fb920e55417019e0b45697c8b.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xp\/id\/u3\/xpidu3fuodthqk_zdkegmyzurng.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/badf85534009cfd1c1e395235344e79e.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>SandBlast Agent: instalace a sezn\u00e1men\u00ed s rozhran\u00edm <\/h3>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Mo\u017enosti distribuce agent\u016f<\/b><br \/>\n                        Check Point popisuje dva zp\u016fsoby distribuce agent\u016f na u\u017eivatelsk\u00e9 po\u010d\u00edta\u010de: automatick\u00fd a manu\u00e1ln\u00ed. <i>Automatick\u00e9 nasazen\u00ed<\/i> \u2014 prov\u00e1d\u00ed se pomoc\u00ed instalace po\u010d\u00e1te\u010dn\u00edho klienta (Initial Client) s vyu\u017eit\u00edm ciz\u00edch \u0159e\u0161en\u00ed (nap\u0159\u00edklad skupinov\u00e9 politiky Active Directory) a n\u00e1sledn\u00fdm automatik\u00fdm nahr\u00e1n\u00edm politik na agenta. <i>Manu\u00e1ln\u00ed nasazen\u00ed<\/i> \u2014 stahuje se klient se zabudovan\u00fdmi politikami prevence hrozeb a\/nebo ochrany dat, kter\u00fd se pot\u00e9 distribuuje na u\u017eivatelsk\u00e1 za\u0159\u00edzen\u00ed pomoc\u00ed t\u0159et\u00edch stran. Prvn\u00ed zp\u016fsob je pohodln\u011bj\u0161\u00ed, proto\u017ee verze Initial Client je n\u011bkolikan\u00e1sobn\u011b men\u0161\u00ed ne\u017e plnohodnotn\u00e1 verze se v\u0161emi politikami, co\u017e umo\u017e\u0148uje agentovi b\u00fdt nap\u0159\u00edklad distribuov\u00e1n e-mailem jako p\u0159\u00edloha. Na druhou stranu, manu\u00e1ln\u00ed nasazen\u00ed nevy\u017eaduje \u010das na proces na\u010d\u00edt\u00e1n\u00ed politik a b\u0159it\u016f do agenta po instalaci \u2014 v\u0161echny komponenty jsou ji\u017e sou\u010d\u00e1st\u00ed bal\u00ed\u010dku SandBlast Agent.<\/p>\n<p>Vyu\u017eijeme automatick\u00e9 nasazen\u00ed agenta. Verzi Initial Client je mo\u017en\u00e9 st\u00e1hnout ze dvou sekc\u00ed konzole: Service Management a Overview. V sekci Service Management, p\u0159i v\u00fdb\u011bru mo\u017enosti Download Initial Client, se st\u00e1hne za\u010d\u00e1te\u010dn\u00ed klient. P\u0159i stahov\u00e1n\u00ed ze sekce Overview existuj\u00ed t\u0159i varianty sestaven\u00ed SandBlast Agent: Quick Install (Initial), Threat Prevention Agent a Data Protection &amp; Threat Prevention. Druh\u00e1 a t\u0159et\u00ed varianta jsou ur\u010deny pro manu\u00e1ln\u00ed nasazen\u00ed, zat\u00edmco prvn\u00ed je sestaven\u00ed Initial Client.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/_i\/ah\/nr\/_iahnr31pafp2r5hq9jfjnju13o.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/df20e0e1b5f3f6f5628c0f6c54ff1111.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Sta\u017een\u00fd soubor EPS.msi se p\u0159enese na u\u017eivatelsk\u00fd stroj, po \u010dem\u017e je nutn\u00e9 spustit proces instalace. Po \u00fasp\u011b\u0161n\u00e9 instalaci se na hlavn\u00edm panelu objev\u00ed ikona Check Point Endpoint Security, co\u017e signalizuje, \u017ee agent je odpojen od serveru spr\u00e1vy.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/_u\/6c\/qm\/_u6cqmlfgam42cymow846y2g2em.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/cf5acc6f11d80ab4ec13e26e89d056d3.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>V tuto chv\u00edli se klient automaticky pokou\u0161\u00ed p\u0159ipojit k cloudov\u00e9mu serveru spr\u00e1vy prost\u0159ednictv\u00edm vestav\u011bn\u00e9 adresy. Je to pom\u011brn\u011b rychl\u00fd proces a za p\u00e1r minut se objev\u00ed nov\u00e1 notifikace nazna\u010duj\u00edc\u00ed napl\u00e1novanou instalaci agenta. Tato zpr\u00e1va ozna\u010duje \u00fasp\u011b\u0161n\u00e9 spojen\u00ed agenta s cloudov\u00fdm serverem spr\u00e1vy.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/rz\/dk\/nk\/rzdknkztdl6dzfiinelgw9nrmno.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/0c49b6ae24207bcf8494016ef7d959b0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pokud kliknete prav\u00fdm tla\u010d\u00edtkem my\u0161i na ikonu Endpoint Security, m\u016f\u017eete z\u00edskat podrobn\u011bj\u0161\u00ed informace o p\u0159ipojen\u00ed k serveru spr\u00e1vy, nap\u0159\u00edklad n\u00e1zev serveru spr\u00e1vy, ke kter\u00e9mu se klient p\u0159ipojil, a aktu\u00e1ln\u00ed stav p\u0159ipojen\u00ed.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/q9\/2_\/la\/q92_la_wimp8kcro36pk2zdfop8.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/40688ee1aee0bf29b44a937bd691ca13.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Po \u00fasp\u011b\u0161n\u00e9m p\u0159ipojen\u00ed k \u0159\u00eddic\u00edmu serveru za\u010d\u00edn\u00e1 proces stahov\u00e1n\u00ed pot\u0159ebn\u00fdch komponent\u016f (v souladu s bezpe\u010dnostn\u00ed politikou) na u\u017eivatelsk\u00fd stroj. Administr\u00e1tor m\u016f\u017ee sledovat stav procesu instalace agenta v sekci Spr\u00e1va po\u010d\u00edta\u010de webov\u00e9 konzole \u0159\u00edzen\u00ed \u2014 po \u00fasp\u011b\u0161n\u00e9m p\u0159ipojen\u00ed u\u017eivatelsk\u00e9ho stroje k cloudov\u00e9mu \u0159\u00eddic\u00edmu serveru se jeho status v sekci Spr\u00e1va po\u010d\u00edta\u010de zm\u011bn\u00ed z Pl\u00e1nov\u00e1no na Stahov\u00e1n\u00ed. Po sta\u017een\u00ed a ov\u011b\u0159en\u00ed v\u0161ech komponent\u016f je u\u017eivateli nab\u00eddnuta instalace agenta ihned nebo odlo\u017een\u00ed procesu instalace. Pokud agent nebude u\u017eivateli nainstalov\u00e1n b\u011bhem 2 dn\u016f od po\u010d\u00e1tku procesu \u2014 agent se nainstaluje automaticky, o \u010dem\u017e je informov\u00e1no v okn\u011b s nab\u00eddkou zah\u00e1jen\u00ed instalace.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/78\/4c\/yq\/784cyqm5pvu4jqkmtcckrwpkyzq.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/6ae5b23f5fc1910a1ccf60b3255c5eaa.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Po zah\u00e1jen\u00ed instalace agenta se u\u017eivatelsk\u00fd stroj v sekci Spr\u00e1va po\u010d\u00edta\u010de konzole \u0159\u00edzen\u00ed zm\u011bn\u00ed na status Instalace. Po dokon\u010den\u00ed procesu instalace agenta lze otev\u0159\u00edt jeho rozhran\u00ed kliknut\u00edm prav\u00fdm tla\u010d\u00edtkem my\u0161i na ikonu Endpoint Security a v\u00fdb\u011brem mo\u017enosti Zobrazit p\u0159ehled.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/_u\/oi\/jv\/_uoijv2gs4hcfcpgvmhqej6qnpu.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/02534af9712ed4d34c0bea352b387044.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Po instalaci se doporu\u010duje stisknout \u201eAktualizovat nyn\u00ed\u201c, aby se inicioval proces aktualizace politik a datab\u00e1z\u00ed na agentovi. Prvn\u00ed aktualizace datab\u00e1ze Anti-Malware m\u016f\u017ee trvat n\u011bjakou dobu. Jakmile se v\u0161echny datab\u00e1ze aktualizuj\u00ed, spust\u00ed se automatick\u00e9 prvn\u00ed skenov\u00e1n\u00ed syst\u00e9mu. V tomto okam\u017eiku by m\u011bl b\u00fdt stroj klienta v konzole \u0159\u00edzen\u00ed zobrazen ve statusu Dokon\u010deno, co\u017e sv\u011bd\u010d\u00ed o \u00fasp\u011b\u0161n\u00e9 instalaci agenta. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/k6\/ci\/yd\/k6ciydwoi3ldc80e3h237kp1wvg.png\"><img decoding=\"async\" alt=\"2. Platforma pro spr\u00e1vu agenta Check Point SandBlast. Rozhran\u00ed webov\u00e9 konzole pro spr\u00e1vu a instalaci agenta\" src=\"\/wp-content\/uploads\/2020\/07\/e527e29694cb8371449ab8f5dd571b8c.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Poj\u010fme se sezn\u00e1mit s rozhran\u00edm agenta. V levn\u00edm doln\u00edm rohu je zobrazen status agenta (Online\/Odpojeno) a n\u00e1zev Va\u0161eho cloudov\u00e9ho \u0159\u00eddic\u00edho serveru \u2014 v na\u0161em p\u0159\u00edpad\u011b je to status \u201eOnline\u201c a n\u00e1zev serveru \u0159\u00edzen\u00ed \u201ematssolution\u201c. V prav\u00e9m doln\u00edm rohu je uvedena aktu\u00e1ln\u00ed verze agenta \u2014 m\u00e1me nainstalovanou verzi E83.11 (83.11.2702). Naviga\u010dn\u00ed panel agenta se skl\u00e1d\u00e1 z n\u011bkolika sekc\u00ed: <\/p>\n<ul>\n<li><b>P\u0159ehled<\/b> \u2014 hlavn\u00ed sekce, kter\u00e1 zobrazuje informace o stavu v\u0161ech blade\u016f a shod\u011b po\u010d\u00edta\u010de u\u017eivatele s bezpe\u010dnostn\u00ed politikou. Tak\u00e9 z t\u00e9to sekce lze \u201eproniknout\u201c do ka\u017ed\u00e9ho bladeu pro z\u00edsk\u00e1n\u00ed podrobn\u011bj\u0161\u00edch informac\u00ed o stavu a bezpe\u010dnostn\u00edch ud\u00e1lostech;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><b>Aktualizovat nyn\u00ed<\/b> \u2014 umo\u017e\u0148uje spustit proces kontroly aktu\u00e1lnosti platn\u00fdch bezpe\u010dnostn\u00edch politik a datab\u00e1z\u00ed na agentovi;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><b>Naskenujte syst\u00e9m nyn\u00ed<\/b> \u2014 spou\u0161t\u00ed proces skenov\u00e1n\u00ed syst\u00e9mu na p\u0159\u00edtomnost \u0161kodliv\u00e9ho softwaru nebo soubor\u016f;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><b>Advanced<\/b> \u2014 pokro\u010dil\u00e9 nastaven\u00ed agenta, kter\u00e9 umo\u017e\u0148uje zobrazit nainstalovanou politiku, prohl\u00e9dnout nebo shrom\u00e1\u017edit protokoly a tak\u00e9 pou\u017e\u00edt po\u010d\u00edta\u010d u\u017eivatele jako nasazovac\u00edho agenta.<\/li>\n<\/ul>\n<p>\nJeliko\u017e nebyly provedeny \u017e\u00e1dn\u00e9 zm\u011bny v po\u010d\u00e1te\u010dn\u00ed politice, agent moment\u00e1ln\u011b obsahuje pouze v\u00fdlisky politiky prevence hrozeb se standardn\u00edmi hodnotami. Podrobn\u011bji se obsahem po\u010d\u00e1te\u010dn\u00ed politiky prevence hrozeb budeme zab\u00fdvat v na\u0161em dal\u0161\u00edm \u010dl\u00e1nku tohoto cyklu.<\/p>\n<h3>Z\u00e1v\u011br<\/h3>\n<p>\nJe \u010das shrnout vykonanou pr\u00e1ci: v tomto \u010dl\u00e1nku jsme se podrobn\u011b sezn\u00e1mili s rozhran\u00edm webov\u00e9 konzole spr\u00e1vy platformy SandBlast Agent, nainstalovali agenta na u\u017eivatelsk\u00fd po\u010d\u00edta\u010d a prozkoumali jeho rozhran\u00ed. <\/p>\n<p>V na\u0161i dal\u0161\u00ed \u010d\u00e1sti cyklu prozkoum\u00e1me standardn\u00ed politiku prevence hrozeb a otestujeme ji na nejpopul\u00e1rn\u011bj\u0161\u00edch \u00fatoc\u00edch. Tak\u00e9 vytvo\u0159\u00edme vlastn\u00ed pravidla politiky pro zv\u00fd\u0161en\u00ed \u00farovn\u011b zabezpe\u010den\u00ed u\u017eivatelsk\u00e9ho po\u010d\u00edta\u010de.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Velk\u00e1 sb\u00edrka materi\u00e1l\u016f o Check Point od TS Solution<\/a><\/noindex>. Abyste nezme\u0161kali dal\u0161\u00ed publikace na t\u00e9ma SandBlast Agent Management Platform \u2014 sledujte na\u0161e aktualizace na soci\u00e1ln\u00edch m\u00e9di\u00edch (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Check Point Management Platform \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u2014 SandBlast Agent. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 SandBlast Agent, \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u043b\u0438\u0441\u044c \u0441 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043e\u0439 Check Point Infinity \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 SandBlast Agent Management Platform \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 Infinity Portal. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430\u043c\u0438 \u2014 \u0434\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":90314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-90313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. Check Point SandBlast Agent Management Platform. \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0430\u0433\u0435\u043d\u0442\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-30T23:42:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-30T23:42:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. Check Point SandBlast Agent Management Platform. Rozhran\u00ed webov\u00e9 konzole spr\u00e1vy a instalace agenta | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. Check Point SandBlast Agent Management Platform. \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0430\u0433\u0435\u043d\u0442\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-check-point-sandblast-agent-management-platform-interfejs-veb-konsoli-upravleniya-i-ustanovka-agenta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-30T23:42:22+00:00","article:modified_time":"2020-07-30T23:42:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90313","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:54:26","updated":"2022-09-30 21:28:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/90313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=90313"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/90313\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/90314"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=90313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=90313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=90313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}