{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Getting Started R80.20. Licenseerimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nTere, s\u00f5brad! Ja me oleme l\u00f5puks j\u00f5udnud viimase, kokkuv\u00f5tva tunni juurde Check Pointi alustamiseks.<\/b>T\u00e4na r\u00e4\u00e4gime v\u00e4ga t\u00e4htsast teemast \u2014 Litsentseerimine<\/b>. Kiirustan hoiatama, et see tund ei ole ammendav juhend seadmete v\u00f5i litsentside valimiseks. See on vaid \u00fclevaade peamistest punktidest, millest iga Check Pointi administraator peaks teadma. Kui te t\u00f5eliselt muretsete litsentsi v\u00f5i seadme valimise \u00fcle, siis on parem p\u00f6\u00f6rduda professionaalide, st meie poole :). On palju peidetud ohte, millest on \u00fcsna raske r\u00e4\u00e4kida kursuse raames, ja ka neid kohe meeles pidada ei saa.
\nMeie tund saab olema t\u00e4iesti teoreetiline, nii et v\u00f5ite oma mudelserverid v\u00e4lja l\u00fclitada ja l\u00f5\u00f5gastuda. Artikli l\u00f5pus leiate videokursuse, kus r\u00e4\u00e4gin k\u00f5igest \u00fcksikasjalikumalt.<\/a><\/noindex><\/p>\n

L\u00e4bip\u00e4\u00e4sude litsentseerimine<\/h3>\n

\nAlustame turvagateway'ide litsentsimise erip\u00e4rade kirjeldamisest. See kehtib nii riistvara seadmete kui ka virtuaalsete lahenduste kohta. Oletame, et otsustasite osta gateway. Lihtsalt riistvara v\u00f5i virtuaalse seadme ostmine ilma 'tellimusteta' \u2014 ei ole v\u00f5imalik! Samuti on kolm erinevat tellimuste varianti:<\/p>\n

\"13.
\n
\nJa n\u00fc\u00fcd esimene huvitav omadus! Seadet v\u00f5i virtuaalmasinat saate osta ainult NGTP v\u00f5i NGTX tellimustega. Kui aga olete oma tellimuse v\u00e4lja vahetamas, saate valida NGFW paketi, kui teile ei ole vaja AV, AB, URL, AS, TE ja TX blade'e. Selline on olukord. Tellimusi saab osta \u00fcheks, kaheks v\u00f5i kolmeks aastaks.<\/p>\n

V\u00f5in ennustada teie esimest k\u00fcsimust! \"Mis juhtub, kui tellimust ei pikenda?<\/b>\". Olen spetsiaalselt rohelisega esile t\u00f5stnud need blade'id, mis t\u00f6\u00f6tavad KOGU AJA, ja ILMA pikenduseta. Nii nimetatud perpetual blade'id. \u00dclej\u00e4\u00e4nud blade'id, mis vajavad pidevat uuendamist, lakkavad lihtsalt t\u00f6\u00f6lemast. No \u00fctleme, IPS-l j\u00e4\u00e4vad t\u00f6\u00f6tama ainult m\u00f5ned v\u00f5tmesignatuurid (aga neid on v\u00e4ga v\u00e4he). See kehtib nii riistvara kui ka virtuaalmasinate, st vSeci kohta.<\/p>\n

Eraldi punktina olen esile t\u00f5stnud kolm blade'i, mis ei kuulu \u00fchtegi komplekti, need on: DLP, MAB ja Capsule.<\/p>\n

Samuti pidage meeles, et kui ostate klastrilahenduse, siis valige teise seadmena mudel, millel on sufiks HA (st High Availability). Pildil on n\u00e4ide 5400 v\u00e4ravast. See puudutas v\u00e4ravaid. N\u00fc\u00fcd serverihalduse kohta.<\/p>\n

Halduse serveri litsentsimine<\/h3>\n

\nNagu juba varasemates tundides mainitud, on Check Pointi rakendamiseks kaks stsenaariumi: Standalone (kui nii v\u00e4rav kui ka haldus asuvad \u00fchel seadmel) ja Distributed (kui haldusseade paigutatakse eraldi seadmele). Siiski ei piirdu valikud sellega. Vaatame kolme t\u00fc\u00fcpilist stsenaariumi haldusseadmestiku paigaldamiseks:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. Eraldiseisva NGSM ostmine<\/b>. K\u00f5ige populaarsem variant. Valite kas seadme Smart-1 v\u00f5i virtuaalserveri. Loomulikult valite s\u00f5ltuvalt sellest, kui palju v\u00e4ravaid kavatsete hallata, 5, 10, 25 jne. Selle seadme kasutusele v\u00f5tmisel saate kasutada nelja p\u00f5hikomplekti haldustootes: NPM (nt poliitikate haldamine), Logging and Status (nt logimine), Smart Event (Check Pointi SIEM, mis annab meile kogu aruandluse) ja Compliance (see on seadistuste kvaliteedi hindamine, olgu need siis vastavuse hindamine mingitele regulatiivsetele n\u00f5uetele, nagu PCI DSS, v\u00f5i lihtsalt parimad praktikaid). Siit on selgelt n\u00e4ha, et NPM- ja LS-blaidid on pidevad blaidid, st need t\u00f6\u00f6tavad ka ilma tellimuste pikendamiseta, kuid Smart Event ja Compliance blaide pakutakse ainult esimesel aastal! Hiljem tuleb neid eraldi tasu eest pikendada. See on oluline punkt, \u00e4rge unustage seda. Ja kui ilma Compliance blaidita on veel v\u00f5imalik elada, siis Smart Event on kindlasti vajalik k\u00f5igile.<\/li>\n
  2. P\u00fchendatud s\u00fcndmuste juhtimisse serveri ostmine<\/b> SNE t\u00f5hustamiseks olemasoleva s\u00fcsteemiga serverile<\/a> NGSM haldamiseks. Miks see vajalik on? Asi on selles, et logimisfunktsioon ja eriti Smart Event \u201e\u00e4\u00e4rmiselt\u201d kulutab m\u00e4rkimisv\u00e4\u00e4rselt s\u00fcsteemiressursse. Ja kui logisid on \u00fcsna palju, v\u00f5ib see p\u00f5hjustada viivitusi. serveril<\/a> Seet\u00f5ttu kasutatakse sageli selle funktsiooni viimist eraldi seadmesse, nagu Smart-1 v\u00f5i virtuaalkeskkonda. Suured integreeringud, mis sisaldavad suurt hulka logisid, vajavad praktiliselt alati spetsiaalset serverit Smart Event'i jaoks. See v\u00f5ib samuti logisid vastu v\u00f5tta. Nii j\u00e4\u00e4b teie juhtimisseade ainult juhtimisfunktsioonide t\u00e4itmisele. See t\u00f5stab oluliselt s\u00fcsteemi stabiilsust ja reageerimise kiirus. Nagu v\u00f5ite m\u00e4rkida, kui ostate spetsiaalse Smart Event serveri, saate need kaks blade'i pidevaks kasutamiseks, isegi ilma pikendamiseta. 3\u20134 aasta perspektiivis osutub see isegi majanduslikult kasulikumaks kui osta igal aastal tavaliseks NGSM serveriks Smart Event pikendusi.<\/li>\n
  3. Spetsiaalne Log management server<\/b>, mis t\u00e4iendab NGSM ja Smart Event servereid. Usun, et m\u00f5te on selge. V\u00e4ga suure logihulga korral saame logimise funktsiooni viia eraldi serverisse. Spetsiaalne Log server omab samuti alaliste litsentse ja ei vaja pikendamist.<\/li>\n<\/ol>\n

    <\/p>\n

    Videokursus<\/h3>\n

    \nSiit leiate t\u00e4iendavat teavet litsentside haldamise ja Check Point'i tehnilise toe kohta:
    \n

    \r\n \"Vaata\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Allikas:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Getting Started R80.20. Litsentseerimine | ProHoster","description":"Tere tulemast, s\u00f5brad! Ja me oleme l\u00f5puks j\u00f5udnud viimase, l\u00f5petava tunni juurde Check Point Getting Started. T\u00e4na r\u00e4\u00e4gime v\u00e4ga olulisel teemal \u2014 litsentseerimine. Pean teatama, et see tund ei ole ammendav juhend seadme v\u00f5i litsentside valimiseks. See on vaid l\u00fchike \u00fclevaade peamistest punktidest, mida iga Check Pointi administraator peaks teadma. Kui te t\u00f5eliselt muretsete valiku p\u00e4rast,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}