{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 je nyn\u00ed v EA. Prvn\u00ed pohled","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nNov\u00e1 verze Gaia R81 byla zve\u0159ejn\u011bna v p\u0159edb\u011b\u017en\u00e9m p\u0159\u00edstupu (EA). D\u0159\u00edve jsme se mohli sezn\u00e1mit s pl\u00e1novan\u00fdmi novinkami<\/a><\/noindex> v pozn\u00e1mk\u00e1ch k verzi. Nyn\u00ed m\u00e1me p\u0159\u00edle\u017eitost pod\u00edvat se na to v re\u00e1ln\u00e9m \u017eivot\u011b. K tomu byla sestavena standardn\u00ed sch\u00e9ma se specializovan\u00fdm \u0159\u00eddic\u00edm serverem a br\u00e1nou. Samoz\u0159ejm\u011b jsme nestihli prov\u00e9st v\u0161echny kompletn\u00ed testy, ale jsme p\u0159ipraveni sd\u00edlet, co ihned zaujme p\u0159i sezn\u00e1men\u00ed s nov\u00fdm syst\u00e9mem. Pod t\u00edmto bodem uv\u00e1d\u00edme hlavn\u00ed momenty, kter\u00e9 jsme zd\u016fraznili p\u0159i prvn\u00edm sezn\u00e1men\u00ed se syst\u00e9mem (hodn\u011b obr\u00e1zk\u016f).
\n<\/a><\/noindex><\/p>\n

Spr\u00e1va<\/h3>\n

\nP\u0159i inicializaci br\u00e1ny m\u00e1te mo\u017enost ihned se p\u0159ipojit k cloudov\u00e9mu \u0159\u00eddic\u00edmu serveru \u2014 Smart 1 Cloud<\/b> (ozna\u010dovan\u00fd jako MaaS):<\/p>\n

\"Check
\nTo je pom\u011brn\u011b nov\u00e1 funkce (je i v posledn\u00edch verz\u00edch 80.40) a my o tomto servisu pov\u00edme trochu v\u00edce v nejbli\u017e\u0161\u00ed dob\u011b<\/a><\/noindex>. Hlavn\u00ed v\u00fdhodou (podle na\u0161eho n\u00e1zoru) je dlouho o\u010dek\u00e1van\u00e1 mo\u017enost spr\u00e1vy p\u0159es prohl\u00ed\u017ee\u010d \ud83d\ude42<\/p>\n

VxLAN a GRE<\/h3>\n

\nPrvn\u00ed, co jsme za\u010dali kontrolovat, byla podpora VxLAN a GRE. Pozn\u00e1mky k verzi n\u00e1s nezklamaly, v\u0161echno je na sv\u00e9m m\u00edst\u011b:<\/p>\n

\"Check
\n
\nM\u016f\u017eeme diskutovat o nutnosti t\u011bchto funkc\u00ed na NGFW, ale je lep\u0161\u00ed, kdy\u017e m\u00e1 u\u017eivatel takovou mo\u017enost.<\/p>\n

Infinity Threat Prevention<\/h3>\n

\nSnad toto je prvn\u00ed, co zaujme, kdy\u017e za\u010dnete upravovat bezpe\u010dnostn\u00ed politiku. P\u0159ibylo nov\u00e9 varianty aktivace b\u0159it\u016f Threat Prevention \u2014 Infinity. Tedy nen\u00ed nutn\u00e9 vyb\u00edrat, kter\u00e9 b\u0159ity zapnout, Check Point rozhodl za n\u00e1s (u\u017e nev\u00edm, jak moc je to dobr\u00e9):<\/p>\n

\"Check
\nP\u0159itom samoz\u0159ejm\u011b z\u016fst\u00e1v\u00e1 mo\u017enost obvykl\u00e9ho samostatn\u00e9ho nastaven\u00ed b\u0159it\u016f.<\/p>\n

Infinity Threat Prevention Policy<\/h3>\n

\nKdy\u017e u\u017e jsme mluvili o Threat Prevention, pod\u00edvejme se rovnou na politiku. Snad toto je jedno z nejv\u00fdznamn\u011bj\u0161\u00edch zm\u011bn:<\/p>\n

\"Check
\n
\nJak je vid\u011bt, p\u0159ibylo mnohem v\u00edce p\u0159ednastaven\u00fdch politik. M\u016f\u017eete podrobn\u011b vid\u011bt, v \u010dem se mezi nimi li\u0161\u00ed kliknut\u00edm na Help me decide<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nToto je dynamick\u00e1 politika a aktualizuje se bez va\u0161eho z\u00e1sahu.<\/p>\n

Change Report<\/h3>\n

\nKone\u010dn\u011b m\u016f\u017eeme v pohodln\u00e9 form\u011b vid\u011bt, co p\u0159esn\u011b se zm\u011bnilo b\u011bhem \u00fapravy konfigurace:<\/p>\n

\"Check
\n
\nExistuje obecn\u00e1 zpr\u00e1va:<\/p>\n

\"Check
\n
\nA jsou zcela konkr\u00e9tn\u00ed sekce:<\/p>\n

\"Check
\n\"Check
\n
\nVelmi pohodln\u00e9 sledovat zm\u011bny.<\/p>\n

Web Management pro Endpoint<\/h3>\n

\nJak jist\u011b v\u00edte, na \u0159\u00eddic\u00edm serveru m\u016f\u017eete aktivovat Endpoint Management a spravovat agenty SandBlast. Ve verzi R81 byla p\u0159id\u00e1na zaj\u00edmav\u00e1 funkce \u2014 spr\u00e1va prost\u0159ednictv\u00edm prohl\u00ed\u017ee\u010de. Aktivuje se to pom\u011brn\u011b zaj\u00edmav\u00fdm zp\u016fsobem. Mus\u00edte vstoupit do re\u017eimu expert<\/b> a zadat p\u0159\u00edkaz \u201cweb_mgmt_start\u201d<\/b>, a pot\u00e9 p\u0159ej\u00edt na adresu \u2014 https:\/\/:4434\/sba\/. A p\u0159ed v\u00e1mi se otev\u0159e webov\u00e1 konzole:<\/p>\n

\"Check
\n
\n\u010c\u00e1ste\u010dn\u011b jsme o t\u00e9to platform\u011b hovo\u0159ili v \u010dl\u00e1nc\u00edch "Check Point SandBlast Agent Management Platform<\/a><\/noindex>" od Alexeje Malko. Pravda, ta konzole byla tehdy dostupn\u00e1 pouze v cloudu, nyn\u00ed v\u0161ak funguje i na m\u00edstn\u00edch \u0159\u00eddic\u00edch serverech.<\/p>\n

Smart Update<\/h3>\n

\nP\u0159i pokusu o p\u0159id\u00e1n\u00ed licenc\u00ed prost\u0159ednictv\u00edm star\u00e9ho dobr\u00e9ho Smart Update v\u00e1s konzole s l\u00e1skou upozorn\u00ed, \u017ee nyn\u00ed to lze ud\u011blat, ani\u017e byste vy\u0161li z ji\u017e zn\u00e1m\u00e9 Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nVelmi o\u010dek\u00e1van\u00e1 funkce. Nyn\u00ed lze v pravidlech NAT pou\u017e\u00edvat Access Roles<\/b>, Security Zones<\/b> nebo Updatable Objects<\/b>. Existuj\u00ed p\u0159\u00edpady, kdy je to velmi u\u017eite\u010dn\u00e9 a pot\u0159ebn\u00e9.<\/p>\n

Z\u00e1v\u011br<\/h3>\n

\nTo je pro zat\u00edm v\u0161e. Je zde je\u0161t\u011b mnoho dal\u0161\u00edch novinek, kter\u00e9 vy\u017eaduj\u00ed testov\u00e1n\u00ed (IoT, Azure AD, Upgrade, Logs API atd.). Jak jsem ji\u017e psal v\u00fd\u0161e, brzy zve\u0159ejn\u00edme p\u0159ehled nov\u00e9 cloudov\u00e9 \u0159\u00eddic\u00ed syst\u00e9m \u2014 Smart-1 Cloud<\/a><\/noindex><\/b>. Sledujte aktualizace na na\u0161ich kan\u00e1lech (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>)!<\/p>\n

Tak\u00e9 nezapom\u00ednejte na na\u0161i rozs\u00e1hlou sb\u00edrku materi\u00e1l\u016f o Check Point<\/a><\/noindex>.
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 je nyn\u00ed EA. Prvn\u00ed pohled | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}