{"id":92931,"date":"2020-09-01T13:43:08","date_gmt":"2020-09-01T11:43:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings"},"modified":"2020-09-01T13:43:08","modified_gmt":"2020-09-01T11:43:08","slug":"4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","title":{"rendered":"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/a0d4603cacecf98f5312fe32383bf08c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVelkommen til den fjerde artikel i serien om Check Point SandBlast Agent Management Platform. I de tidligere artikler (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511768\/\">den f\u00f8rste<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">anden<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/513254\/\">tredje<\/a><\/noindex>) har vi detaljeret beskrevet webkonsolens interface og funktioner samt gennemg\u00e5et Threat Prevention-politikken og testet den mod forskellige trusler. Denne artikel er dedikeret til den anden sikkerhedskomponent - Data Protection-politikken, der er ansvarlig for at beskytte data, der er gemt p\u00e5 brugerens enhed. I denne artikel vil vi ogs\u00e5 se p\u00e5 afsnittene Deployment og Global Policy Settings.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Data Protection-politikken<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xg\/gn\/p9\/xggnp9rvyyf5ovui9vdxv0dpmuy.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/d3f6f895f6633034ca466ca9f54da3e3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Data Protection-politikken giver mulighed for at konfigurere adgangen til data, der er gemt p\u00e5 den arbejdsstation, s\u00e5 kun autoriserede brugere kan f\u00e5 adgang ved hj\u00e6lp af funktioner som Full Disk Encryption og Boot Protection. I \u00f8jeblikket underst\u00f8ttes f\u00f8lgende muligheder for disk kryptering: for Windows - Check Point Encryption eller BitLocker Encryption, for MacOS - File Vault. Lad os se n\u00e6rmere p\u00e5 funktionerne og indstillingerne for hver mulighed.<\/p>\n<h4>Check Point Encryption<\/h4>\n<p>\nCheck Point Encryption er den standard metode til disk kryptering i Data Protection-politikken og sikrer kryptering af alle systemfiler (midlertidige, systemfiler, slettede) i baggrunden uden at p\u00e5virke brugerens enheds ydeevne. Efter krypteringen bliver disken utilg\u00e6ngelig for ikke-autoriserede brugere.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hv\/lr\/du\/hvlrdum9mu88ub0clodrkc3ny5i.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/8176a8f0ca55c05ac6dadff33534008b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Den prim\u00e6re indstilling for Check Point Encryption er 'Enable Pre-boot', som kr\u00e6ver autentificering af brugerne f\u00f8r operativsystemet indl\u00e6ses. Denne mulighed anbefales, da den forhindrer omg\u00e5else af autentifikation p\u00e5 operativsystemsniveau. Der er ogs\u00e5 mulighed for at konfigurere tidsindstillinger for midlertidig omg\u00e5else af Pre-boot-funktionen:<\/p>\n<ul>\n<li><i>Allow OS login after temporary bypass<\/i> \u2014 deaktivering af Pre-boot-funktionen og overgang til autentificering i operativsystemet;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow pre-boot bypass (Wake On LAN \u2013 WOL)<\/i> \u2014 deaktivering af Pre-boot-funktionen p\u00e5 computere, der er tilsluttet administration serveren via Ethernet; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow bypass script<\/i> \u2014 giver mulighed for at konfigurere omg\u00e5else af Pre-boot-funktionen ved at angive tidspunkt og dato for, hvorn\u00e5r scriptet skal starte og indstillinger for afslutning af omg\u00e5elsen; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow LAN bypass<\/i> \u2014 deaktivering af Pre-boot-funktionen, n\u00e5r der er tilsluttet et lokalt netv\u00e6rk.<\/li>\n<\/ul>\n<p>\nDe n\u00e6vnte muligheder for midlertidig omg\u00e5else af Pre-boot-funktionen anbefales ikke at bruge uden klare \u00e5rsager (f.eks. tekniske arbejder eller fejlfinding), og den bedste l\u00f8sning sikkerhedsm\u00e6ssigt er at aktivere Pre-boot-funktionen uden midlertidige omg\u00e5elsesregler. Hvis det er n\u00f8dvendigt at omg\u00e5 Pre-boot, anbefales det at s\u00e6tte de mindst n\u00f8dvendige tidsrammer i indstillingerne for midlertidig omg\u00e5else for ikke at reducere beskyttelsesniveauet i l\u00e6ngere tid.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/js\/1i\/dh\/js1idhttoiq0eikit7afjtegxiy.gif\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/689919312946d768721d4638140aa337.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ved brug af Check Point Encryption er der ogs\u00e5 mulighed for at konfigurere avancerede indstillinger i politikken for Data Protection, f.eks. at tilpasse krypteringsparametre mere fleksibelt og justere forskellige aspekter af Pre-boot-funktionen og Windows-godkendelse.<\/p>\n<h4>BitLocker Encryption<\/h4>\n<p>\nBitLocker er en del af operativsystemet Windows og giver mulighed for at kryptere harddiske og flytbare media. Check Point BitLocker Management er en komponent i Windows-tjenester, der automatisk startes sammen med SandBlast Agent-klienten og bruger API til at styre BitLocker-teknologien.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ij\/1u\/od\/ij1uodbdmmfbjmgantnxjrogvlo.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/c8f328978ba8f8906a112765fd7e4571.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>N\u00e5r du v\u00e6lger BitLocker Encryption som metode til diskryptering i politikken for Data Protection, kan f\u00f8lgende indstillinger konfigureres:<\/p>\n<ul>\n<li><i>Initial Encryption<\/i> \u2014 indstillinger for initial kryptering, som muligg\u00f8r kryptering af hele disken (Encrypt entire drive), hvilket anbefales til maskiner med eksisterende brugerdata (filer, dokumenter osv.), eller kun kryptere data (Encrypt used disk space only), hvilket anbefales til nye Windows-installationer;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Drives to encrypt<\/i> \u2014 valg af drev\/parter til kryptering, muligheden for at kryptere alle drev (All drives) eller kun partitionen med operativsystemet (OS drive only);<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Encryption algorithm<\/i> \u2014 valg af krypteringsalgoritme, den anbefalede er Windows Default, men der er ogs\u00e5 mulighed for at angive XTS-AES-128 eller XTS-AES-256.<\/li>\n<\/ul>\n<p><\/p>\n<h4>File Vault<\/h4>\n<p>\nFile Vault er et standard krypteringsv\u00e6rkt\u00f8j fra Apple, der sikrer adgang til dataene p\u00e5 brugerens computer kun for autoriserede brugere. Med File Vault installeret skal brugeren indtaste en adgangskode for at starte systemet og f\u00e5 adgang til de krypterede filer. Brug af File Vault er den eneste metode til at sikre beskyttelse af lagrede data i politikken for Data Protection for brugere af MacOS.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/sy\/e9\/y4\/sye9y49s_dd2ur0e44bh5dg16uc.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/4446e97032af97f69490314ec0ab346d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>For File Vault, the setting \"Enable automatic user acquisition\" is available, which requires user authorization before the disk encryption process begins. If this feature is enabled, it is possible to specify the number of users that need to authorize before SandBlast Agent applies the Pre-boot feature, or to specify the number of days after which the Pre-boot feature will be automatically implemented for all authorized users if at least one user has authorized in the system during this period.<\/p>\n<h3>Datagendannelse<\/h3>\n<p>\nIn case of problems with system boot, various data recovery methods can be utilized. The administrator can initiate the recovery process of encrypted data from the Computer Management \u2192 Full Disk Encryption Actions section. If Check Point Encryption is used, the previously encrypted disk can be decrypted to access all stored files. After this procedure, the disk encryption process must be restarted to implement the Data Protection policy.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jj\/ox\/ui\/jjoxuiqkkamq99bj90kflpureco.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/5e2c5fda53a0be8fda406aa267f991d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>When selecting BitLocker as the disk encryption method for data recovery, the Recovery Key ID of the troubled computer must be entered to generate the Recovery Key, which must then be entered by the user to access the encrypted disk.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/wf\/ba\/ma\/wfbamafl41wqwzp7anrpp1tdfbo.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/b9acf560cef0b3f44d751ac03fdfc8a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>For MacOS users using File Vault to protect stored information, the recovery process involves the administrator generating the Recovery Key based on the Serial Number of the troubled machine and entering this key followed by a password reset.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/dq\/56\/dx\/dq56dxec6pgpevw7if69jhipnzc.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/7682e2be9541e5f606a85c0880353397.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Deployment Policy<\/h2>\n<p>\nSince the release of <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">the second article<\/a><\/noindex>, which covered the web console management interface, Check Point has made some changes to the Deployment section \u2014 it now includes the subsection <i>Software Deployment<\/i>, where the configuration (enabling\/disabling blades) for already installed agents is set up, and the subsection <i>Export Package<\/i>, where packages with pre-installed blades can be created for further installation on user machines, for example, using Active Directory group policies. Let\u2019s look at the Software Deployment subsection, where all SandBlast Agent blades are enabled.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/0q\/9e\/ae\/0q9eaeuyltbg5lewff7riijdvkg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/1a9dd697ba8422e8d511f07b9cc916b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Jeg minder om, at standardpolitikken for Deployment kun inkluderer blades i kategorien Threat Prevention. I betragtning af den tidligere n\u00e6vnte politik for Data Protection kan denne kategori nu inkluderes til installation og brug p\u00e5 kundens maskine med SandBlast Agent. Det giver mening at aktivere Remote Access VPN-funktionen, som vil g\u00f8re det muligt for brugeren at oprette forbindelse til virksomhedens netv\u00e6rk, samt kategorien Access and Compliance, der inkluderer funktioner som Firewall &amp; Application Control og kontrol af brugerens maskine i forhold til Compliance-politikken.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/r9\/a6\/lh\/r9a6lhui24xkbzuprmhz1eeuhvu.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/2f79464dbae43bafb8e631106b40efa6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>                        <b class=\"spoiler_title\">Export Package<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/43\/fs\/cf\/43fscffpzgaw7jfd8w2lhsfohwo.gif\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/34fa39766267a87adde5a701e8d2ab4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Underafdelingen Export Packages er ekstremt nem at bruge: for at oprette en konfigurationspakke skal du angive navnet, v\u00e6lge operativsystem (for Windows ogs\u00e5 angive arkitektur) og agentens version, hvorefter du v\u00e6lger de sikkerhedspolitikker, der skal integreres i pakken. Desuden kan du angive en virtuel gruppe, som computersystemer med den installerede pakke vil v\u00e6re en del af, samt v\u00e6lge VPN Site med forudinstallerede forbindelsesadresser og autentifikationsparametre (VPN Sites konfigureres i sektionen Export Packages \u2192 Manage VPN Sites). Dette sidste punkt er is\u00e6r praktisk, da det eliminerer risikoen for brugerfejl ved konfiguration af VPN-forbindelsesparametre.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yy\/f7\/fm\/yyf7fmc0iggigkmg3in9ck1fwxg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/9c1e08ea73bb98879df13dc3db930c08.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Global Policy Settings<\/h2>\n<p>\nI indstillingerne for Global Policy Settings konfigureres en af de vigtigste parametre - adgangskoden til at fjerne SandBlast Agent fra brugerens maskine. Efter installationen af agenten vil brugeren ikke kunne fjerne den uden at indtaste adgangskoden, som som standard er ordet<b>hemmelig<\/b>(uden anf\u00f8rselstegn). Denne standardadgangskode er dog let at finde i \u00e5bne kilder, og ved implementeringen af l\u00f8sningen SandBlast Agent anbefales det at \u00e6ndre standardadgangskoden til at fjerne agenten. I Management Platform kan politikken kun indstilles 5 gange med standardadgangskoden, s\u00e5 \u00e6ndring af adgangskoden for at fjerne agenten er uundg\u00e5elig.<br \/>\nDerudover konfigureres dataindstillingerne i Global Policy Settings, som kan sendes til Check Point for analyse og forbedring af tjenesten ThreatCloud.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/2s\/af\/ye\/2safyeunswbcpdlwblgve5seem0.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/71170c628acb9b9506208949693c841a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Fra Global Policy Settings kan ogs\u00e5 parametrene for disk-krypteringspolitik konfigureres, specifikt kravene til adgangskoden: kompleksitet, brugens varighed, muligheden for at bruge en tidligere gyldig adgangskode osv. I dette afsnit kan du uploade dine egne billeder i stedet for standardbillederne til Pre-boot eller OneCheck.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/na\/u6\/sv\/nau6sv-ig4wkruxkbiqycjdzn7y.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/f4f8c110b7151c34b763bd99badddb98.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Oprettelse af politik<\/h2>\n<p>\nN\u00e5r man har sat sig ind i mulighederne for politikken Data Protection og konfigureret de relevante parametre i afsnittet Deployment, kan man p\u00e5begynde installationen af den nye politik, der inkluderer disk kryptering ved hj\u00e6lp af Check Point Encryption og de \u00f8vrige SandBlast Agent blades. Efter installationen af politikken p\u00e5 Management Platform vil klienten modtage en meddelelse om, at de skal installere den nye version af politikken nu eller uds\u00e6tte installationen til et senere tidspunkt (maksimalt 2 dage).<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/d4\/3x\/g1\/d43xg1y8yhgirqzk4lbk5q06hey.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/01c3e7d69cd0297504f190c697fe5a1f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Efter at have afsluttet download og installation af den nye politik, vil SandBlast Agent tilbyde brugeren at genstarte computeren for at aktivere Full Disk Encryption beskyttelsen.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ld\/rk\/ik\/ldrkikt7ac3gvxpd1x5ikigr13k.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/1f1ae7557786ef5bc709def906379a47.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Efter genstarten skal brugeren indtaste sine legitimationsoplysninger i vinduet til autentificering af Check Point Endpoint Security \u2013 dette vindue vil dukke op hver gang f\u00f8r operativsystemet starter (Pre-boot). Der er mulighed for at v\u00e6lge Single Sign-On (SSO) for automatisk at bruge legitimationsoplysningerne ved autentificering i Windows.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/gj\/in\/dv\/gjindvx57lyzglftzai0ejwv0cg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/69b820deb9d9b3466b9f6d57c2ee4e26.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>I tilf\u00e6lde af succesfuld autentificering f\u00e5r brugeren adgang til sit system, mens processen med disk kryptering p\u00e5begyndes 'bag kulisserne'. Denne operation p\u00e5virker ikke maskinens funktionalitet, selvom den kan tage lang tid (afh\u00e6ngigt af diskens st\u00f8rrelse). N\u00e5r krypteringsprocessen er afsluttet, kan vi sikre os, at alle blades er aktiveret og fungerer, disken er krypteret, og brugerens maskine er beskyttet. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/pc\/x-\/m0\/pcx-m0z1exs-2g3-0paws5hq7jk.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Data Protection politik. Deployment og globale politikindstillinger\" src=\"\/wp-content\/uploads\/2020\/09\/5cd266eb1731cbc74fdb0ce6458e3ce7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>Konklusion<\/h3>\n<p>\nLad os opsummere: i denne artikel har vi set n\u00e6rmere p\u00e5 SandBlast Agents muligheder for at beskytte informationen, der er gemt p\u00e5 brugerens maskine, ved hj\u00e6lp af disk kryptering i politikken Data Protection, unders\u00f8gt indstillingerne for distribution af politikker og agenter via afsnittet Deployment og installeret en ny politik med regler for disk kryptering og yderligere blades p\u00e5 brugerens maskine. I n\u00e6ste artikel i cyklen vil vi grundigt gennemg\u00e5 mulighederne for logf\u00f8ring og rapportering i Management Platform og SandBlast Agent-klienten.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Et stort udvalg af materialer om Check Point fra TS Solution<\/a><\/noindex>. For ikke at g\u00e5 glip af de n\u00e6ste publikationer om emnet SandBlast Agent Management Platform \u2014 hold \u00f8je med opdateringerne p\u00e5 vores sociale medier (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/515172\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 (\u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f) \u043c\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Threat Prevention \u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0451 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0443\u0433\u0440\u043e\u0437\u0430\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435 Data Protection, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92932,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92931","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. Politik Data Protection. Deployment og Global Policy Indstillinger | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T11:43:08+00:00","article:modified_time":"2020-09-01T11:43:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92931","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:58:24","updated":"2022-10-04 10:52:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=92931"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92931\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/92932"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=92931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=92931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=92931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}