{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Kom godt i gang R80.20. Licensering","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nHej venner! Og vi er endelig n\u00e5et til den sidste, afsluttende lektion i Check Point Getting Started<\/b>. I dag vil vi tale om et meget vigtigt emne \u2014 Licensering<\/b>. Jeg skal skynde mig at advare om, at denne lektion ikke er en udt\u00f8mmende guide til valg af udstyr eller licenser. Det er blot en kort opsummering af de vigtigste punkter, som enhver Check Point-administrator b\u00f8r kende. Hvis du virkelig er usikker p\u00e5, hvilken licens eller enhed du skal v\u00e6lge, s\u00e5 vil det v\u00e6re bedst at kontakte fagfolk, alts\u00e5 os :). Der er mange faldgruber, som det er sv\u00e6rt at forklare indenfor rammerne af kurset, og det kan heller ikke huskes med det samme.
\nLektion vil v\u00e6re helt teoretisk, s\u00e5 I kan slukke for jeres testservere og slappe af. I slutningen af artiklen finder du en video lektion, hvor jeg fort\u00e6ller alt mere detaljeret.<\/a><\/noindex><\/p>\n

Licensering af gateway<\/h3>\n

\nLad os starte med at beskrive licensspecifikationerne for sikkerhedsgateways. Dette g\u00e6lder b\u00e5de for fysiske enheder og virtuelle maskiner. Antag, at du har besluttet at k\u00f8be en gateway. Det er umuligt bare at k\u00f8be en fysisk enhed eller virtuel maskine uden \"abonnementer\"! Der findes tre abonnementsformer:<\/p>\n

\"13.
\n
\nOg nu den f\u00f8rste interessante detalje! Du kan kun k\u00f8be en enhed eller virtuel maskine med abonnementerne NGTP eller NGTX. Men n\u00e5r du skal forny dit abonnement, vil det v\u00e6re muligt at v\u00e6lge pakken NGFW, hvis du ikke har brug for blades som AV, AB, URL, AS, TE og TX. S\u00e5dan er det. Abonnementerne kan k\u00f8bes for et \u00e5r, to eller tre \u00e5r.<\/p>\n

Jeg kan g\u00e6tte dit f\u00f8rste sp\u00f8rgsm\u00e5l! \u201cHvad vil der ske, hvis abonnementet ikke fornyes?<\/b>\u201d. Jeg har tydeligt markeret med gr\u00f8nt de blades, der altid vil fungere, og UDEN fornyelse. De s\u00e5kaldte perpetual blades. De \u00f8vrige blades, som kr\u00e6ver konstant opdatering, vil simpelthen stoppe med at fungere. Bortset fra at IPS vil have nogle grundl\u00e6ggende signaturer (men de er meget f\u00e5). Dette g\u00e6lder b\u00e5de for fysiske enheder og virtuelle maskiner, dvs. vSec.<\/p>\n

Jeg har fremh\u00e6vet tre blades, der ikke er inkluderet i nogen pakke: DLP, MAB og Capsule.<\/p>\n

Husk ogs\u00e5, at hvis du k\u00f8ber en klynge-l\u00f8sning, b\u00f8r du v\u00e6lge en model med suffikset HA (dvs. High Availability) som det andet apparat. P\u00e5 billedet er der et eksempel p\u00e5 gateway 5400. Det var, hvad ang\u00e5r gateways. Nu til management serveren.<\/p>\n

Licensering af management server<\/h3>\n

\nSom vi allerede har n\u00e6vnt i de tidlige lektioner, er der to scenarier for implementering af Check Point: Standalone (hvor b\u00e5de gateway og management er p\u00e5 \u00e9n enhed) og Distributed (hvor management-serveren flyttes til en separat enhed). Men mulighederne stopper ikke her. Lad os se p\u00e5 tre typiske scenarier for implementering af management-serveren:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. K\u00f8b af dedikeret NGSM<\/b>. Den mest popul\u00e6re mulighed. Du v\u00e6lger enten hardwareenheden Smart-1 eller en virtuel server. Du v\u00e6lger selvf\u00f8lgelig baseret p\u00e5, hvor mange gateways du skal administrere, 5, 10, 25 osv. Efter at have implementeret denne enhed kan du bruge de fire n\u00f8gler til management-serverens blade: NPM (dvs. politikadministration), Logging and Status (dvs. logning), Smart Event (SIEM fra Check Point, som giver os al rapportering) og Compliance (dette er vurdering af kvaliteten af indstillingerne, enten i forhold til overholdelse af regulatoriske krav som PCI DSS eller bare Best Practice). Her kan man se, at NPM og LS-bladerne er permanente, dvs. de vil fungere uden fornyelse af abonnementer, mens Smart Event og Compliance-bladerne kun f\u00f8lger med det f\u00f8rste \u00e5r! Derefter skal de fornyes mod ekstra omkostninger. Dette er et vigtigt punkt, husk det. Og hvis man kan klare sig uden Compliance-bladet, s\u00e5 er Smart Event bestemt n\u00f8dvendigt for alle.<\/li>\n
  2. K\u00f8b af dedikeret Event Management-server<\/b> UDOVER den allerede eksisterende server<\/a> NGSM-management. Hvorfor er det n\u00f8dvendigt? Problemet er, at funktionaliteten til logning og is\u00e6r Smart Event \"spiser\" betydelige systemressourcer. Og hvis der er mange logs, kan det f\u00f8re til \"h\u00e6ngninger\" p\u00e5 serveren<\/a> administrationen. Derfor praktiseres det ofte at flytte denne funktionalitet til en separat enhed, hardwareenheden Smart-1 eller igen en virtuel server. Store integrationer med et stort antal logs kr\u00e6ver n\u00e6sten altid en dedikeret server til Smart Event. Den kan s\u00e5ledes modtage logs. P\u00e5 denne m\u00e5de vil din management-server kun udf\u00f8re management-funktioner. Det \u00f8ger betydeligt systemets stabilitet og respons. Som man kan bem\u00e6rke, n\u00e5r man k\u00f8ber en dedikeret Smart Event-server, f\u00e5r man disse to blade til permanent brug, selv uden fornyelse. Over en horisont p\u00e5 3-4 \u00e5r vil det endda v\u00e6re mere \u00f8konomisk fordelagtigt end at k\u00f8be fornyelser af Smart Event for en almindelig NGSM-server hvert \u00e5r.<\/li>\n
  3. Dedikeret log management-server<\/b>, som suppleres af NGSM og Smart Event-serverne. Meningen synes klar. Ved et MEGET stort antal logs kan vi flytte logningsfunktionen til en separat server. En dedikeret Log-server har ogs\u00e5 en permanent licens og kr\u00e6ver ikke forl\u00e6ngelse.<\/li>\n<\/ol>\n

    <\/p>\n

    Video lektion<\/h3>\n

    \nHer finder du yderligere information om licensadministration og teknisk support fra Check Point:
    \n

    \r\n \"Afspil\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Kilde:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Kom godt i gang med R80.20. Licensering | ProHoster","description":"Hej venner!","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}