{"id":33222,"date":"2019-10-31T21:51:25","date_gmt":"2019-10-31T18:51:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-check-point-getting-started-r80-20-identity-awareness\/"},"modified":"2019-10-31T21:51:25","modified_gmt":"2019-10-31T18:51:25","slug":"10-check-point-getting-started-r80-20-identity-awareness","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","title":{"rendered":"10. Check Point Getting Started R80.20. Identity Awareness","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"10. Check Point Getting Started R80.20. Identity Awareness\" src=\"\/wp-content\/uploads\/2019\/05\/d02cb12971142bfe4ca1cb67c6466a95.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTere tulemast juubeli \u2014 10. \u00f5ppetundi. T\u00e4na r\u00e4\u00e4gime veel \u00fchest Check Pointi blade'ist \u2014 <b>Identiteedi teadlikkus<\/b>. Juba varakult, kui kirjeldasime NGFW-d, oleme m\u00e4\u00e4ratlenud, et sellel peab olema v\u00f5imalus reguleerida juurdep\u00e4\u00e4su kontode, mitte IP-aadresside p\u00f5hjal. See on enamasti seotud kasutajate suurenenud mobiilsusega ja BYOD mudeli \u2014 tood oma seade \u2014 laialdase levikuga. Ettev\u00f5ttes v\u00f5ib olla palju inimesi, kes \u00fchenduvad WiFi kaudu, saavad d\u00fcnaamilise IP ja veelgi erinevatest v\u00f5rgu segmentidest. Proovige siin luua juurdep\u00e4\u00e4suloendeid IP-aadresside p\u00f5hjal. Siin ei tule kasutajate tuvastamiseta l\u00e4bi. Ja just identiteedi teadlikkuse blade aitab meil sellega toime tulla.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Kuid k\u00f5igepealt selgitage v\u00e4lja, milleks kasutatakse kasutajate tuvastamist k\u00f5ige sagedamini?<\/p>\n<ol>\n<li>Kasutajate kontode p\u00f5hjal v\u00f5rgu juurdep\u00e4\u00e4su piiramiseks, mitte IP-aadresside. Juurdep\u00e4\u00e4su saab reguleerida nii lihtsalt Internetile kui ka paljudele teistele v\u00f5rgu segmentidele, n\u00e4iteks DMZ-le.<\/li>\n<li>Juurdep\u00e4\u00e4s <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"34\">VPN<\/a>. Olete n\u00f5us, et kasutajale on oluliselt mugavam kasutada oma domeeni kontot autentimiseks, mitte veel \u00fchte v\u00e4lja m\u00f5eldud parooli.<\/li>\n<li>Check Pointi haldamiseks on samuti vajalik konto, millel v\u00f5ivad olla erinevad \u00f5igused.<\/li>\n<li>Ja k\u00f5ige meeldivam osa \u2014 Aruandlus. Oluliselt meeldivam on aruannetes n\u00e4ha konkreetseid kasutajaid, mitte nende IP-aadresse.<\/li>\n<\/ol>\n<p>\nSamal ajal toetab Check Point kahte t\u00fc\u00fcpi kasutajakontosid:<\/p>\n<ul>\n<li><b>Kohalikud sisemised kasutajad<\/b>. Kasutaja luuakse kohalikes haldusserveri andmebaasides.<\/li>\n<li><b>V\u00e4lised kasutajad<\/b>. V\u00e4liseks kasutajate andmebaasiks v\u00f5ib olla Microsoft Active Directory v\u00f5i m\u00f5ni muu LDAP-server.<\/li>\n<\/ul>\n<p>\nT\u00e4na r\u00e4\u00e4gime v\u00f5rgu juurdep\u00e4\u00e4sust. V\u00f5rgu juurdep\u00e4\u00e4su haldamiseks, kui on olemas Active Directory, kasutatakse objektina (allikas v\u00f5i sihtkoht) nn <b>Juurdep\u00e4\u00e4surool<\/b>, mis v\u00f5imaldab kasutada kolme kasutaja parameetrit:<\/p>\n<ol>\n<li><b>V\u00f5rk<\/b> \u2014 st. v\u00f5rk, millega kasutaja \u00fcritab \u00fchenduda<\/li>\n<li><b>AD kasutaja v\u00f5i kasutajar\u00fchm<\/b> \u2014 need andmed saadakse otse AD serverist<\/li>\n<li><b>Masin<\/b> \u2014 t\u00f6\u00f6jaam.<\/li>\n<\/ol>\n<p>\nSamal ajal saab kasutajate tuvastamist teha mitmel viisil:<\/p>\n<ul>\n<li><b>AD-p\u00e4ring<\/b>Check Point loebib AD serveri logisid autentifitseeritud kasutajate ja nende IP-aadresside osas. AD domeenis olevad arvutid tuvastatakse automaatselt.<\/li>\n<li><b>Brahhsel p\u00f5hinev autentimine<\/b>Kasutaja brauseri kaudu tuvastamine (Captive Portal v\u00f5i Transparent Kerberos). Seda kasutatakse k\u00f5ige sagedamini seadmete puhul, mis ei kuulu domeeni.<\/li>\n<li><b>Terminaliserverid<\/b>Sellisel juhul toimub tuvastamine spetsiaalse terminali agendi abil (paigaldatakse terminaliserverisse).<\/li>\n<\/ul>\n<p>\nNeed on kolm k\u00f5ige levinumat varianti, kuid on veel kolm:<\/p>\n<ul>\n<li><b>Identiteediagendid<\/b>Kasutajate arvutitesse paigaldatakse spetsiaalne agent.<\/li>\n<li><b>Identiteedikogujad<\/b>Erinev utiliit, mis paigaldatakse Windows Serverisse ja kogub autentimise logisid mitme jaoks. Tegelikult on see h\u00e4davajalik variant suure kasutajate arvu korral.<\/li>\n<li><b>RADIUS arvestus<\/b>Ja kuhu ka ilma vana hea RADIUSeta.<\/li>\n<\/ul>\n<p>\nSelles tunnis demonstreerin teist varianti \u2014 brahhsel p\u00f5hinev. Arvan, et piisavalt teooriat, liikume n\u00fc\u00fcd praktika juurde.<\/p>\n<h3>Video \u00f5ppetund<\/h3>\n<p>\n<center><div class=\"youtube-placeholder\" data-id=\"Ud0i8rHEoJ0\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/Ud0i8rHEoJ0\/hqdefault.jpg\" alt=\"M\u00e4ngi videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>J\u00e4tkake meie j\u00e4lgimist ja liituge meiega <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube'i kanalis<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/450526\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u044e\u0431\u0438\u043b\u0435\u0439\u043d\u044b\u0439 \u2014 10-\u0439 \u0443\u0440\u043e\u043a. \u0418 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0431\u043b\u0435\u0439\u0434\u0435 Check Point \u2014 Identity Awareness. \u0415\u0449\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043f\u0440\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 NGFW, \u043c\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u043d\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u043e \u044d\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33222","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710. Check Point R80.20 alustamine. Identiteedi teadlikkus | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:25+00:00","article:modified_time":"2019-10-31T18:51:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33222","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:49:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:44:42","updated":"2026-02-04 14:49:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33222"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33222\/revisions"}],"predecessor-version":[{"id":156663,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33222\/revisions\/156663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/24959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}