{"id":31130,"date":"2019-10-31T21:39:37","date_gmt":"2019-10-31T18:39:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-check-point-getting-started-r80-20-access-control\/"},"modified":"2019-10-31T21:39:37","modified_gmt":"2019-10-31T18:39:37","slug":"7-check-point-getting-started-r80-20-access-control","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","title":{"rendered":"7. Check Point Getting Started R80.20. Access Control","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7. Check Point Getting Started R80.20. Access Control\" src=\"\/wp-content\/uploads\/2019\/04\/0ab2e6565c08db47bcb9fbbc2733c3dc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nWelcome to the 7th lesson, where we will begin working with security policies. Today, we will install a policy on our gateway for the first time, meaning we will finally perform an \u2018install policy\u2019. After this step, traffic will start flowing through the gateway! <br \/>\nIn general, policies from Check Point's perspective are quite a broad concept. Security Policies can be divided into three types:<\/p>\n<ol>\n<li><b>Access Control<\/b>. This includes blades such as: Firewall, Application Control, URL Filtering, Content Awareness, Mobile Access, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"21\">VPN<\/a>. That is, everything concerning the permission or restriction of traffic.<\/li>\n<li><b>Threat Prevention<\/b>. Here, blades used include: IPS, Anti-Virus, Anti-Bot, Threat Emulation, Threat Extraction. These are functions that check the content of traffic or content that has already passed through Access Control. <\/li>\n<li><b>Desktop Security<\/b>. This involves policies managing Endpoint agents (i.e., protecting workstations). We won't cover this topic within the scope of the course.<\/li>\n<\/ol>\n<p>\nIn this lesson, we will start discussing Access Control policies.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Access Control Composition<\/h3>\n<p>\nAccess Control is the first policy that must be set on the gateway. Without this policy, others (Threat Prevention, Desktop Security) simply will not be established. As mentioned earlier, Access Control policies include multiple blades:<\/p>\n<ul>\n<li>Firewall;<\/li>\n<li>Application &amp; URL Filtering;<\/li>\n<li>Content Awareness;<\/li>\n<li>Mobile Access;<\/li>\n<li>NAT.<\/li>\n<\/ul>\n<p>\nInitially, we will review only one \u2014 the Firewall.<\/p>\n<h3>Four Steps to Configure the Firewall<\/h3>\n<p>\nTo install a policy on the gateway, we MUST complete the following steps:<\/p>\n<ol>\n<li>Define the gateway interfaces corresponding to the <b>security zone<\/b> (whether Internal, External, DMZ, etc.)<\/li>\n<li>Set up <b>Anti-Spoofing<\/b>;<\/li>\n<li>Create network objects (<b>Networks, Hosts, Servers<\/b> , etc.) This is important! As I mentioned, Check Point only works with objects. You cannot simply insert an IP address into the access list;<\/li>\n<li>Create <b>Access-Lists<\/b>\u2014 at least one.<\/li>\n<\/ol>\n<p>\nWithout these settings, the policies simply will not be established!<\/p>\n<h3>Video lesson<\/h3>\n<p>\nAs usual, we are attaching a video lesson where we will carry out the procedure for basic Access Control configuration and form recommended access lists.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"dxp7_Dr_-lA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/dxp7_Dr_-lA\/hqdefault.jpg\" alt=\"Play video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Stay tuned for more and join our <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube channel<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/447196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 7-\u0439 \u0443\u0440\u043e\u043a, \u0433\u0434\u0435 \u043c\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u043d\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0430 \u043d\u0430\u0448 \u0448\u043b\u044e\u0437, \u0442.\u0435. \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u00abinstall policy\u00bb. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437 \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a! \u0412\u043e\u043e\u0431\u0449\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f Check Point, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u043f\u043e\u043d\u044f\u0442\u0438\u0435. Security Policies \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 3 \u0442\u0438\u043f\u0430: Access Control. \u0421\u044e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:37+00:00","article:modified_time":"2019-10-31T18:39:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31130","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:48:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:22:34","updated":"2026-02-04 14:48:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/31130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=31130"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/31130\/revisions"}],"predecessor-version":[{"id":156650,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/31130\/revisions\/156650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/23098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=31130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=31130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=31130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}