{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 er nu EA. F\u00f8rste kig","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nDen nye version af Gaia R81 er blevet udgivet til tidlig adgang (EA). Tidligere kunne man f\u00e5 indsigt i de planlagte nyheder<\/a><\/noindex> i release notes. Nu har vi mulighed for at se det i praksis. Der blev samlet en standard skema med en dedikeret kontrolserver og gateway. Selvom vi ikke har haft tid til at gennemf\u00f8re alle omfattende tests, er vi klar til at dele det, der straks fanger \u00f8jet, n\u00e5r man m\u00f8der det nye system. Nedenfor de vigtigste punkter, vi fremh\u00e6vede ved f\u00f8rste m\u00f8de med systemet (mange billeder).
\n<\/a><\/noindex><\/p>\n

Administration<\/h3>\n

\nVed initialisering af gatewayen f\u00e5r du mulighed for straks at oprette forbindelse til cloud-kontrolserveren \u2014 Smart 1 Cloud<\/b> (den s\u00e5kaldte MaaS):<\/p>\n

\"Check
\nDette er en relativt ny funktion (den findes ogs\u00e5 i de seneste tages 80.40), og vi vil fort\u00e6lle lidt mere om denne service i den n\u00e6rmeste fremtid<\/a><\/noindex>. Den st\u00f8rste fordel (set fra vores perspektiv) \u2014 den l\u00e6nge ventede mulighed for at administrere via browseren \ud83d\ude42<\/p>\n

VxLAN og GRE<\/h3>\n

\nDet f\u00f8rste, vi kiggede n\u00e6rmere p\u00e5, var underst\u00f8ttelsen af VxLAN og GRE. Release Notes l\u00f8j ikke, alt er p\u00e5 plads:<\/p>\n

\"Check
\n
\nMan kan diskutere n\u00f8dvendigheden af disse funktioner p\u00e5 NGFW, men det er stadig bedre, n\u00e5r brugeren har en s\u00e5dan mulighed.<\/p>\n

Infinity Threat Prevention<\/h3>\n

\nDet er nok det f\u00f8rste, man l\u00e6gger m\u00e6rke til, n\u00e5r man begynder at justere sikkerhedspolitikken. En ny aktiveringsmulighed for Threat Prevention-blade er blevet tilf\u00f8jet \u2014 Infinity. Dvs. man beh\u00f8ver ikke v\u00e6lge, hvilke blade man vil aktivere, Check Point har taget beslutningen for os (jeg ved ikke, hvor godt det er):<\/p>\n

\"Check
\nDu har selvf\u00f8lgelig stadig mulighed for at tilpasse indstillingerne for bladene, som du plejer.<\/p>\n

Infinity Threat Prevention Policy<\/h3>\n

\nDa vi nu taler om Threat Prevention, lad os straks tage et kig p\u00e5 Politikken. Det er nok en af de mest betydningsfulde \u00e6ndringer:<\/p>\n

\"Check
\n
\nSom man kan se, er der nu meget flere forudindstillede politikker. Man kan se n\u00e6rmere p\u00e5 forskellene mellem dem ved at klikke p\u00e5 Help me decide<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nDet er en dynamisk politik, som opdateres uden din deltagelse.<\/p>\n

Change Report<\/h3>\n

\nEndelig kan man p\u00e5 en praktisk m\u00e5de se, hvad der pr\u00e6cist er \u00e6ndret i l\u00f8bet af konfigurationsjusteringen:<\/p>\n

\"Check
\n
\nDer er en overordnet rapport:<\/p>\n

\"Check
\n
\nOg der er meget specifikke sektioner:<\/p>\n

\"Check
\n\"Check
\n
\nDet er meget praktisk at holde \u00f8je med \u00e6ndringerne.<\/p>\n

Web Management til Endpoint<\/h3>\n

\nSom du sikkert ved, kan man p\u00e5 administrationsserveren aktivere Endpoint Management og styre SandBlast-agenter. I R81 er der tilf\u00f8jet en interessant mulighed - browserbaseret styring. Dette aktiveres p\u00e5 en ret interessant m\u00e5de. Man skal ind i CLI og skifte til expert<\/b> og indtaste kommandoen \u201cweb_mgmt_start\u201d<\/b>, og derefter navigere til adressen - https:\/\/:4434\/sba\/. S\u00e5 \u00e5bner webkonsollen sig foran dig:<\/p>\n

\"Check
\n
\nVi har delvist beskrevet denne platform i artiklerne "Check Point SandBlast Agent Management Platform<\/a><\/noindex>" af Alexey Malko. Faktisk var en s\u00e5dan konsol kun tilg\u00e6ngelig i skyen, men nu fungerer det ogs\u00e5 p\u00e5 lokale administrationsservere.<\/p>\n

Smart Update<\/h3>\n

\nN\u00e5r du fors\u00f8ger at tilf\u00f8je licenser via den gamle gode Smart Update, vil konsollen venligt advare dig om, at dette nu kan g\u00f8res uden at forlade den velkendte Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nEn funktion, vi har ventet p\u00e5. Nu kan der i NAT-reglerne bruges Access Roles<\/b>, Security Zones<\/b> eller Updatable Objects<\/b>. Der er situationer, hvor dette er meget nyttigt og n\u00f8dvendigt.<\/p>\n

Konklusion<\/h3>\n

\nDet er alt for nu. Der er stadig mange nyheder, der kr\u00e6ver test (IoT, Azure AD, Opdatering, Logs API osv.). Som n\u00e6vnt tidligere vil vi snart udgive en anmeldelse af det nye cloud administration system - Smart-1 Cloud<\/a><\/noindex><\/b>. Hold \u00f8je med opdateringer p\u00e5 vores kanaler (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>)!<\/p>\n

Glem heller ikke vores store samling af materialer om Check Point<\/a><\/noindex>.
\n
Kilde: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 er nu EA. F\u00f8rste indtryk | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}