{"id":31130,"date":"2019-10-31T21:39:37","date_gmt":"2019-10-31T18:39:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-check-point-getting-started-r80-20-access-control\/"},"modified":"2019-10-31T21:39:37","modified_gmt":"2019-10-31T18:39:37","slug":"7-check-point-getting-started-r80-20-access-control","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","title":{"rendered":"7. Check Point Getting Started R80.20. Juurdep\u00e4\u00e4su kontroll","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7. Check Point Getting Started R80.20. Juurdep\u00e4\u00e4su kontroll\" src=\"\/wp-content\/uploads\/2019\/04\/0ab2e6565c08db47bcb9fbbc2733c3dc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTere tulemast seitsmendale tunnile, kus hakkame t\u00f6\u00f6tama turvapoliitikatega. T\u00e4na paigaldame esmakordselt poliitika meie v\u00e4ravasse, st teeme l\u00f5puks \u00abinstall policy\u00bb. P\u00e4rast seda saab liiklus juba v\u00e4rava kaudu liikuda! <br \/>\n\u00dcldiselt on poliitikad Check Pointi seisukohalt \u00fcsna ulatuslik m\u00f5isted. Turvapoliitikaid saab jagada kolme t\u00fc\u00fcpi:<\/p>\n<ol>\n<li><b>Juhtimise kontroll<\/b>. Siia kuuluvad sellised blade'id nagu: tulem\u00fc\u00fcr, rakenduse kontroll, URL-i filtreerimine, sisu teadlikkus, mobiilne juurdep\u00e4\u00e4s, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"21\">VPN<\/a>. St k\u00f5ik, mis puudutab liikluse lubamist v\u00f5i piiramist.<\/li>\n<li><b>Ohtude v\u00e4ltimine<\/b>. Siin kasutatakse blade'e: IPS, viiruset\u00f5rje, botivastane, ohtude emulatsioon, ohtude ekstraheerimine. St funktsioonid, mis kontrollivad liikluse v\u00f5i sisu, mis on juba l\u00e4binud juurdep\u00e4\u00e4sukontrolli. <\/li>\n<li><b>T\u00f6\u00f6laudade turve<\/b>. Need on juba poliitikad, mis haldavad l\u00f5pp-punkti agente (st t\u00f6\u00f6jaamade kaitse). Seda teemat me p\u00f5him\u00f5tteliselt kursuse raames ei k\u00e4sitle.<\/li>\n<\/ol>\n<p>\nK\u00e4esolevas tunnis hakkame r\u00e4\u00e4kima juurdep\u00e4\u00e4sukontrolli poliitikatest.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Juurdep\u00e4\u00e4sukontrolli koostisosad<\/h3>\n<p>\nJuurdep\u00e4\u00e4sukontroll on esimene poliitika, mis peab olema paigaldatud v\u00e4ravasse. Ilma selle poliitikata ei saa teised (ohtude v\u00e4ltimine, t\u00f6\u00f6laudade turve) lihtsalt paigalduda. Nagu juba mainitud, h\u00f5lmavad juurdep\u00e4\u00e4sukontrolli poliitikad mitmeid blade'e:<\/p>\n<ul>\n<li>Tulem\u00fc\u00fcr;<\/li>\n<li>Rakenduse &amp; URL-i filtreerimine;<\/li>\n<li>Sisu teadlikkus;<\/li>\n<li>Mobiilne juurdep\u00e4\u00e4s;<\/li>\n<li>NAT.<\/li>\n<\/ul>\n<p>\nKuna me vaatame alguses vaid \u00fchte \u2013 tulem\u00fc\u00fcri.<\/p>\n<h3>Neljast sammust tulem\u00fc\u00fcri seadistamisel<\/h3>\n<p>\nPoliitika paigaldamiseks v\u00e4ravasse peame kindlasti l\u00e4bima j\u00e4rgmised punktid:<\/p>\n<ol>\n<li>M\u00e4\u00e4rata v\u00e4rava liidesed vastavatesse <b>turvazoonidesse<\/b> (olgu need siis sise-, v\u00e4line, DMZ jne)<\/li>\n<li>Seada \u00fcles <b>Anti-Spoofing<\/b>;<\/li>\n<li>Luua v\u00f5rguobjektid (<b>V\u00f5rgud, Hostid, Serverid<\/b> jne.) See on oluline! Nagu juba \u00f6eldud, t\u00f6\u00f6tab Check Point ainult objektide kaudu. Lihtsalt IP-aadressi lisamine ligip\u00e4\u00e4suloendis ei \u00f5nnestu;<\/li>\n<li>Luua <b>Ligip\u00e4\u00e4sukohtude<\/b>-id (v\u00e4hemalt \u00fcks).<\/li>\n<\/ol>\n<p>\nIlma nende seadistusteta ei saa poliitikad lihtsalt paigalduda!<\/p>\n<h3>Video \u00f5ppetund<\/h3>\n<p>\nNagu tavaliselt, lisame videokursuse, kus teeme p\u00f5hilise juurdep\u00e4\u00e4sukontrolli seadistamise protseduuri ja vormime soovitatud ligip\u00e4\u00e4suloendid.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"dxp7_Dr_-lA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/dxp7_Dr_-lA\/hqdefault.jpg\" alt=\"M\u00e4ngi videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>J\u00e4tkake meie j\u00e4lgimist ja liituge meiega <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube'i kanalis<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/447196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 7-\u0439 \u0443\u0440\u043e\u043a, \u0433\u0434\u0435 \u043c\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u043d\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0430 \u043d\u0430\u0448 \u0448\u043b\u044e\u0437, \u0442.\u0435. \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u00abinstall policy\u00bb. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437 \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a! \u0412\u043e\u043e\u0431\u0449\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f Check Point, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u043f\u043e\u043d\u044f\u0442\u0438\u0435. Security Policies \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 3 \u0442\u0438\u043f\u0430: Access Control. \u0421\u044e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477. Check Point Getting Started R80.20. Juurdep\u00e4\u00e4sukontroll | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:37+00:00","article:modified_time":"2019-10-31T18:39:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31130","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:48:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:22:34","updated":"2026-02-04 14:48:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31130"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31130\/revisions"}],"predecessor-version":[{"id":156650,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31130\/revisions\/156650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}