{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Getting Started R80.20. Litsentsimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nTere, s\u00f5brad! Ja l\u00f5puks oleme j\u00f5udnud viimase, kokkuv\u00f5tva \u00f5ppetunni juurde Check Point Getting Started.<\/b>T\u00e4na r\u00e4\u00e4gime v\u00e4ga olulisest teemast \u2014 Litsentseerimine<\/b>. Kiire hoiatus, et see \u00f5ppetund ei ole ammendav juhend seadmete v\u00f5i litsentside valimiseks. See on vaid l\u00fchikokkuv\u00f5te v\u00f5tmehetkedest, mida peab teadma iga Check Pointi administraator. Kui te olete t\u00f5eliselt mures litsentsi v\u00f5i seadme valimise p\u00e4rast, on parem p\u00f6\u00f6rduda professionaalide, st meie poole :). Palju on peidetud takistusi, millest on raske r\u00e4\u00e4kida kursuse raames, ja seda k\u00f5ike pole ka kohe meelde j\u00e4tta.
\nMeie \u00f5ppetund on t\u00e4ielikult teoreetiline, nii et v\u00f5ite oma modelleerimisserverid v\u00e4lja l\u00fclitada ja l\u00f5\u00f5gastuda. Artikli l\u00f5pus leiate video \u00f5ppetunni, kus ma r\u00e4\u00e4gin k\u00f5igest p\u00f5hjalikumalt.<\/a><\/noindex><\/p>\n

Litsentsimine v\u00e4ravast<\/h3>\n

\nAlustame turvav\u00e4ravate litsentsimise erip\u00e4rade kirjeldamisest. See kehtib nii riistvaraliste apseetide kui ka virtuaalsete s\u00fcsteemide kohta. Oletame, et olete otsustanud osta v\u00e4rava. Ostmine lihtsalt riistvara v\u00f5i virtuaalmasina n\u00e4ol ilma \u201etellimusteta\u201d \u2014 ei ole v\u00f5imalik! Samas on kolm tellimuse varianti:<\/p>\n

\"13.
\n
\nJa n\u00fc\u00fcd esimene huvitav omadus! Seadet v\u00f5i virtuaalmasinat saate osta ainult NGTP v\u00f5i NGTX tellimustega. Kui aga te pikendate oma tellimust, on teil juba v\u00f5imalik valida NGFW pakett, juhul kui teile ei ole vajalikud AV, AB, URL, AS, TE ja TX blade'id. Selline olukord. Enda tellimusi saab osta \u00fche, kahe v\u00f5i kolme aasta jooksul.<\/p>\n

Oskan ennustada teie esimest k\u00fcsimust! \u201cMis juhtub, kui tellimust ei pikendata?<\/b>\u201d. Olen spetsiaalselt rohelise v\u00e4rviga esile t\u00f5stnud need blade'id, mis t\u00f6\u00f6tavad K\u00d5IK T\u00c4IESTI, ja TANU pikendamata. Nii-\u00f6elda pidevad blade'id. \u00dclej\u00e4\u00e4nud blade'id, mis vajavad pidevat uuendamist, lihtsalt l\u00f5petavad t\u00f6\u00f6tamise. No ja IPS-i puhul j\u00e4\u00e4vad t\u00f6\u00f6le v\u00f5tmesignaaturid (aga neid on v\u00e4ga v\u00e4he). See kehtib nii riistvara kui virtuaalsete s\u00fcsteemide kohta, st vSec.<\/p>\n

Erakordselt olen v\u00e4lja toonud kolm blade'i, mis ei kuulu \u00fchtegi komplekti, nimelt: DLP, MAB ja Capsule.<\/p>\n

Samuti pidage meeles, et kui ostate klastrilahenduse, siis valige teise seadmena mudel, millel on suffix HA (st High Availability). Pildil on n\u00e4ide 5400 v\u00e4rava kohta. Nii palju v\u00e4ravate kohta. N\u00fc\u00fcd juhtimisseerver.<\/p>\n

Kasutamise litsentsimise server<\/h3>\n

\nNagu me juba varasemates \u00f5ppetundides r\u00e4\u00e4kisime, on Check Point'i rakendamiseks kaks stsenaariumi: Seisev (kui nii v\u00e4rav kui ka haldus on \u00fches seadmes) ja Jaotatud (kui haldusserver viiakse eraldi seadmesse). Kuid need valikud sellega ei piirdu. Vaatame kolme t\u00fc\u00fcpilist stsenaariumi haldusserveri levitamiseks:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. P\u00fchendatud NGSMi ostmine<\/b>. K\u00f5ige populaarsem variant. Valite kas Smart-1 riistvara v\u00f5i virtuaalse masina. Loomulikult valite vastavalt sellele, kui palju v\u00e4ravaid te hallata kavatsete, 5, 10, 25 jne. Selle seadme juurutamisel saate kasutada nelja peamist haldusserveri blade'i: NPM (st poliitikate haldamine), Logging and Status (st logimine), Smart Event (Check Pointi SIEM, mis annab meile kogu aruandluse) ja Compliance (see on seadistuste kvaliteedi hindamine, kas siis mingite regulatiivsete n\u00f5uete, nagu PCI DSS, v\u00f5i lihtsalt parimate praktikate kohaselt). Siit on ka n\u00e4ha, et NPM ja LS blade'id on pidevad blade'id, st need t\u00f6\u00f6tavad ka ilma tellimuste pikendamiseta, kuid Smart Event ja Compliance blade'id on komplektis ainult esimesel aastal! Edasi tuleb neid eraldi tasu eest pikendada. See on oluline punkt, \u00e4rge unustage. Ja kui suurel m\u00e4\u00e4ral saab ilma Compliance blade'ita hakkama, siis Smart Event on juba iga\u00fchele h\u00e4davajalik.<\/li>\n
  2. P\u00fchendatud Event Management serveri ostmine<\/b> LISAKS juba olemasolevale serveri<\/a> NGSM halduss\u00fcsteemile. Miks seda on vaja? Asi on selles, et logimise funktsionaal ja eriti Smart Event \"v\u00f5tab\" \u00fcsna m\u00e4rkimisv\u00e4\u00e4rseid s\u00fcsteemseid ressursse. Ja kui logisid on p\u00e4ris palju, v\u00f5ib see p\u00f5hjustada \"h\u00e4ireid\" halduss\u00fcsteemis. serveris<\/a> Seet\u00f5ttu praktiseeritakse sageli selle funktsionaalsuse viimist eraldi seadmesse, Smart-1 riistvarasse v\u00f5i taas virtuaalmasinasse. Suured integratsioonid suure hulga logidega n\u00f5uavad peaaegu alati p\u00fchendatud serverit Smart Event'i jaoks. See v\u00f5ib ka logisid vastu v\u00f5tta. Seega t\u00e4idab teie haldusserver ainult haldusfunktsioone. See suurendab s\u00fcsteemi stabiilsust ja reageerimiskiirust oluliselt. Nagu v\u00f5ite m\u00e4rgata, saadetakse p\u00fchendatud Smart Event serveri ostmisel need kaks blade'i p\u00fcsivaks kasutamiseks isegi ilma pikendamata. 3-4 aastase perspektiiviga v\u00f5ib see isegi olla \u00f6konoomsem kui osta igal aastal Smart Eventi pikendamiseks tavap\u00e4rase NGSM serveri jaoks.<\/li>\n
  3. P\u00fchendatud Log Management server<\/b>, mis aitab NGSM ja Smart Event serveritega. Usun, et m\u00f5te on selge. KUI LOGE ON V\u00c4GA PALJU, saame logimise funktsiooni viia eraldi serverisse. Eraldiseisev Log server vajab samuti p\u00fcsivat litsentsi ja ei vaja uuendamist.<\/li>\n<\/ol>\n

    <\/p>\n

    Video \u00f5ppetund<\/h3>\n

    \nSiit leiate lisainfot litsentside haldamise ja Check Point tehnilise toe kohta:
    \n

    \r\n \"M\u00e4ngi\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Allikas:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Getting Started R80.20. Litsentsimine | ProHoster","description":"Tere, s\u00f5brad!","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}