{"id":89739,"date":"2020-07-26T01:42:18","date_gmt":"2020-07-25T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka"},"modified":"2020-07-26T01:42:18","modified_gmt":"2020-07-25T23:42:18","slug":"2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","title":{"rendered":"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/b17e2b30240cfa92fa78ac24dbd126e2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4tkame artiklite sarja uue SMB CheckPoint mudelivaliku kohta, meenutame, et <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">esimeses osas<\/a><\/noindex> oleme kirjeldanud uute mudelite omadusi ja v\u00f5imalusi, juhtimis- ja haldamismeetodeid. T\u00e4na vaatleme suurema mudeli seeriast: CheckPoint 1590 NGFW. Esitame l\u00fchikese \u00fclevaate sellest osast:<\/p>\n<p><\/p>\n<ol>\n<li>Seadme lahti pakkimine (komponentide kirjeldus, f\u00fc\u00fcsiline ja v\u00f5rgu\u00fchendus).<\/li>\n<li>Seadme esialgne aktiveerimine.<\/li>\n<li>Esialgne konfigureerimine.<\/li>\n<li>T\u00f6\u00f6kindluse hindamine. <\/li>\n<\/ol>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Seadme lahti pakkimine<\/h2>\n<p><\/p>\n<p>Seadmest tutvumine algab seadme v\u00e4lja v\u00f5tmisest karbist, komponentide lahti v\u00f5tmisest ja detailide paigaldamisest, kl\u00f5psake spoileril, kus on l\u00fchidalt tutvustatud protsessi<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">NGFW 1590 tarnimine<\/b><br \/>\n                        <img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/868d20466d642d38d748058e9f33ae37.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> L\u00fchidalt komponentidest:<\/p>\n<p><\/p>\n<ul>\n<li>NGFW 1590;<\/li>\n<li>Toiteadapter;<\/li>\n<li>2 Wifi-antennid (2.4 GHz ja 5 GHz);<\/li>\n<li>2 LTE-antennid;<\/li>\n<li>Bro\u0161\u00fc\u00fcrid dokumentatsiooniga (l\u00fchike juhend esialgseks \u00fchendamiseks, litsentsileping jne.)<\/li>\n<\/ul>\n<p>\nMis puutub v\u00f5rguportidesse ja liidestesse, siis siin on k\u00f5ik kaasaegsed v\u00f5imalused liikluse edastamiseks ja suhtlemiseks, eraldi on v\u00e4lja toodud DMZ-ala port, USB 3.0 arvuti s\u00fcnkroniseerimiseks. <\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/de1442162762a4c29dcff0d2badfcc3f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Mudel 1590 on saanud uuendatud disaini, kaasaegsed valikud traadita \u00fchendamiseks ja m\u00e4lu laiendamiseks: 2 pesa Micro\/Nano SIMi jaoks LTE re\u017eiimis. (sellest v\u00f5imalusest plaanime \u00fcksikasjalikult kirjutada \u00fches j\u00e4rgnevates artiklites, mis on p\u00fchendatud traadita \u00fchendustele); SD-kaardi pesa.\n<\/p>\n<p><\/p>\n<p>1590 NGFW v\u00f5imaluste ja teiste uute mudelite kohta saate lugeda <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">1. osa<\/a><\/noindex> SMB CheckPoint lahenduste artiklite sarjast. Alustame seadme esialgse aktiveerimisega. \n<\/p>\n<p><\/p>\n<h2>Esialgne aktiveerimine<\/h2>\n<p><\/p>\n<p>Meie pidevad lugejad peaksid juba olema kursis, et 1500 seeria SMB mudelitel on uus operatsioonis\u00fcsteem 80.20 Embedded, mis sisaldab uuendatud liidest ja t\u00e4iustatud v\u00f5imalusi.\n<\/p>\n<p><\/p>\n<p>Et alustada seadme aktiveerimist, on vajalik:\n<\/p>\n<p><\/p>\n<ol>\n<li>Tagada toide v\u00e4rava jaoks. <\/li>\n<li>\u00dchendada v\u00f5rgujuhe teie arvutist LAN-1 v\u00e4ravas.<\/li>\n<li>Valikuliselt saab seadmele kohe interneti\u00fchenduse tagamiseks \u00fchendada liidese WAN-porti.<\/li>\n<li>Liigutage Gaia Embedded portaali: <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1:4434\/\">https:\/\/192.168.1.1:4434\/<\/a><\/noindex><\/li>\n<\/ol>\n<p><\/p>\n<p>Kui eelnevalt nimetatud sammud on tehtud, peate Gaia portaali lehele minnes kinnitama, et avate lehe usaldamata sertifikaadiga, p\u00e4rast mida k\u00e4ivitub portaali seadistuste wizard:\n<\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/0f9c59f8aee0b0cb4e402ab6478ecb39.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Teid tervitab leht, kus on n\u00e4idatud teie seadme mudel, peate minema j\u00e4rgmisse sektsiooni:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/802a2d07d265f205ed7f4c289d7c83ac.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>K\u00fcsimus on konto loomises, et autentida, samuti on v\u00f5imalus t\u00e4psustada k\u00f5rged paroolin\u00f5uded administraatorile ja m\u00e4rkida riik, kus plaanite v\u00e4rava kasutada.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/7a1c641cb3425b35a403e97b3aca2d9c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine aken k\u00e4sitleb kuup\u00e4eva ja kellaaja seadistusi, on v\u00f5imalik seada need k\u00e4sitsi v\u00f5i kasutada ettev\u00f5tte NTP-serverit.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/b1162711e3f1e73e4bb7090eccbfde84.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine samm on seadme nime m\u00e4\u00e4ramine ja ettev\u00f5tte domeeni m\u00e4\u00e4ramine v\u00e4rava teenuste korrektseks toimimiseks Internetis.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/5bc4e62401fa71b6e2f42550f3c88965.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine samm k\u00e4sitleb NGFW halduse liigi valimist, siin on oluline m\u00e4rkida:<\/p>\n<p><\/p>\n<ol>\n<li>Kohalik haldus. See on saadaval variant lokaalseks haldamiseks Gaia Portaali veebilehe kaudu.<\/li>\n<li>Tsentraalse halduse. See halduse liik h\u00f5lmab s\u00fcnkroniseerimist p\u00fchendatud CheckPoint haldusserveriga, s\u00fcnkroniseerimist Smart1-Cloud'i v\u00f5i SMP (SMB haldusteenus) abil.<\/li>\n<\/ol>\n<p><\/p>\n<p>K\u00e4esolevas artiklis keskendume Kohaliku halduse meetodile, saate valida vajaliku meetodi. P\u00fchendatud haldusserveriga s\u00fcnkroniseerimise protsessi tundma\u00f5ppimiseks pakume <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=v5SugzYFBhE&amp;list=PLqio-3dnMW5_2cStMfIezwcAzzDCjX86C&amp;index=7\"> link<\/a><\/noindex> CheckPoint Getting Started koolitusprogrammist, mille on koostanud TS Solution. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/c39e8ede7b45aecc40adf83dc32f0bc6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Seej\u00e4rel kuvatakse aken, kus m\u00e4\u00e4ratakse v\u00e4rava liideste t\u00f6\u00f6re\u017eiim:\n<\/p>\n<p><\/p>\n<ul>\n<li>Switch re\u017eiim t\u00e4hendab, et alamv\u00f5rk on kergesti ligip\u00e4\u00e4setav \u00fchelt liidese juurest teise. <\/li>\n<li>Disable Switch re\u017eiim deaktiveerib Switch re\u017eiimi, iga port marsruutib liiklust nagu eraldi v\u00f5rgu fragment.<\/li>\n<\/ul>\n<p><\/p>\n<p>Samuti on soovitatav m\u00e4\u00e4rata DHCP aadresside ala, mida kasutatakse v\u00e4rava kohalike liidestega \u00fchendamisel.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/d0a03e50f8b138e0518af07d9f6671a2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine samm on v\u00e4rava seadistamine juhtmevaba re\u017eiimi t\u00f6\u00f6ks, plaanime seda aspekti p\u00f5hjalikumalt k\u00e4sitleda \u00fches artiklis, seet\u00f5ttu oleme seadistused edasi l\u00fckanud. Te v\u00f5ite luua uue juhtmevaba p\u00e4\u00e4supunkti, m\u00e4\u00e4rata parooli ja valida juhtmevaba kanali t\u00f6\u00f6re\u017eiimi (2.4 GHz v\u00f5i 5 GHz).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/5039a036b3645b1d02d39835c6c107c4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine samm pakub v\u00e4lja juurdep\u00e4\u00e4su konfiguratsiooni ettev\u00f5tte administraatoritele. Vaikimisi on juurdep\u00e4\u00e4su\u00f5igused lubatud, kui \u00fchendus toimub j\u00e4rgmistelt:<\/p>\n<p><\/p>\n<ol>\n<li>Ettev\u00f5tte sisemine alamv\u00f5rk <\/li>\n<li>Usaldusv\u00e4\u00e4rne traadita v\u00f5rk <\/li>\n<li>VPN tunnel<\/li>\n<\/ol>\n<p><\/p>\n<p>Valik juurdep\u00e4\u00e4suks v\u00e4ravale Interneti kaudu on vaikimisi keelatud, see toob kaasa suuri riske ja selle lubamiseks peab olema m\u00f5juv p\u00f5hjus, vastasel juhul soovitame j\u00e4tta nagu meie n\u00e4ites. Samuti on v\u00f5imalus m\u00e4\u00e4rata, millised IP-aadressid saavad \u00fchendust v\u00e4ravaga.<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/b3bd7f25aeb71b75392595f7efad22b6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>J\u00e4rgmine aken k\u00e4sitleb litsentside aktiveerimist, seadme esialgse algatamise ajal esitatakse teile 30-p\u00e4evane prooviperiood. Aktiveerimiseks on saadaval kaks meetodit: <\/p>\n<p><\/p>\n<ol>\n<li> Kui on olemas Interneti-\u00fchendus, aktiveeritakse litsents automaatselt.<\/li>\n<li> Kui aktiveerite litsentsi offline, tuleb teha j\u00e4rgmist: laadige litsents alla UserCenterist, registreerige oma seade spetsiaalses <noindex><a rel=\"nofollow\" href=\"https:\/\/smbregistration.checkpoint.com\">portaalis<\/a><\/noindex>. Edasi m\u00f5lemas juhus, peate k\u00e4sitsi importima alla laaditud litsentsi.<\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/e0eb47e8dab7d4ece07e0e44a6e4bd35.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>L\u00f5puks pakub seadistuste wizard viimases aknas valikute lubamiseks blade'id, m\u00e4rkides, et blade QOS lubatakse ainult p\u00e4rast esialgset algatamist. L\u00f5petuseks peaksite saama l\u00f5petamise akna, mis summeerib teie seade.<\/p>\n<h2>Esialgne seadistus<\/h2>\n<p><\/p>\n<p> Esmalt soovitame kontrollida litsentside seisundit, sellest s\u00f5ltub edasine seadistamine. Liikuge vahekaardile \u201cKODU\u201d \u2192 \u201cLitsents\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/ffafde17f0545d500176d8ba8a82ec65.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Kui litsentsid on aktiveeritud, soovitame kohe v\u00e4rskendada uusimale versioonile, selleks liikuge vahekaardile \u201cSEADE\u201d \u2192 \u201cS\u00fcsteemi toimingud\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/ba7484d0e39800db7a122c3dda5db6b1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>S\u00fcsteemi v\u00e4rskendused asuvad Firmware Upgrade punktis. Meie puhul on installitud uusim ja viimane versioon.\n<\/p>\n<p><\/p>\n<p>J\u00e4rgmine soovin l\u00fchidalt selgitada s\u00fcsteemi blade'ide v\u00f5imalusi ja seadistusi. Loogiliselt v\u00f5ib jagada juurdep\u00e4\u00e4su poliitikateks (Firewall, Rakenduse kontroll, URL filtreerimine) ja Ohu ennetamine (IPS, Viiruset\u00f5rje, Anti-Bot, Ohu simuleerimine).<\/p>\n<p><\/p>\n<p>Liigume vahekaardile Juurdep\u00e4\u00e4su poliitika \u2192 Blade Control:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/381db11e773c4a61d30df502f6a0abb0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Vaikimisi kasutatakse STANDARD re\u017eiimi, mis lubab: v\u00e4ljaminev liiklus Internetti, liiklus kohalikus v\u00f5rgus, kuid blokib sissetuleva liikluse Internetist.\n<\/p>\n<p><\/p>\n<p>Mis osas b\u043b\u0435\u0439\u0434\u043e\u0432 APPLICATIONS &amp; URL FILTERING, siis on vaikimisi seadistatud k\u00f5rge riskitasemega veebisaitide blokeerimine, samuti failivahetusprogrammide (Torrent, File Storage jne) blokeerimine. Samuti on v\u00f5imalik k\u00e4sitsi blokkeerida veebisaite kategooriate alusel.<\/p>\n<p><\/p>\n<p>Tuletame meelde valikut kasutajate liikluse jaoks 'Limit bandwidth consuming applications', mis v\u00f5imaldab piirata v\u00e4ljamineva\/sisse tuleva liikluse kiirus grupi rakenduste jaoks. \n<\/p>\n<p><\/p>\n<p>Edasi avame jaotise Policy, kus vaikimisi reeglid on automaatselt genereeritud vastavalt eelnevalt kirjeldatud seadistustele. \n<\/p>\n<p><\/p>\n<p>Jaotis NAT t\u00f6\u00f6tab vaikimisi re\u017eiimis Global Hide Nat Automatic, st k\u00f5ik sisemised hostid saavad Internetti p\u00e4\u00e4seda avaliku IP-aadressiga. On v\u00f5imalus seadistada NAT reeglid k\u00e4sitsi, et avaldada teie veebirakendusi v\u00f5i teenuseid. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/3c7f69f0ac7c34358cc2f3561d0f31e3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Edasi jaotis, mis k\u00e4sitleb kasutajate autentimist v\u00f5rgus, pakub kahte v\u00f5imalust: Active Directory Queries (integreerimine teie AD-ga), Browser-Based-Authentication (kasutaja sisestab domeeni mandaadid portaalis).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/123734ef6cde261992e6e369271c797f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Eraldi tasub r\u00e4\u00e4kida SSL-inspektsioonist, kuna HTTPS-liiklus osakaal globaalses v\u00f5rgus kasvab aktiivselt. Vaatame, milliseid v\u00f5imalusi pakub CheckPoint SMB-lahenduste jaoks, selleks liikuda jaotisse SSL-Inspection \u2192 Policy:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/a3da719f47a7aee7ca98e3f6e043282c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Seadetes on v\u00f5imalik auditeerida HTTPS-liiklust, tuleb impordida sertifikaat ja installida see usaldusv\u00e4\u00e4rsete sertifikaatide keskusse l\u00f5ppkasutaja masinates. \n<\/p>\n<p><\/p>\n<p>Mugav valik on BYPASS re\u017eiim eelnevalt m\u00e4\u00e4ratud kategooriate jaoks, mis s\u00e4\u00e4stab oluliselt aega inspektsiooni sissel\u00fclitamisel. \n<\/p>\n<p><\/p>\n<p>P\u00e4rast reeglite seadistamist Firewall\/Application tasemel peaks liikuma turvapoliitikate h\u00e4\u00e4lestamise juurde (Threat Prevention), selleks siseneme vastavasse jaotisse:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/30b4cbd037f8517e81c2557dbdc5fd98.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Avatud lehel n\u00e4eme aktiveeritud b\u043b\u0435\u0439de, allkirjade ja andmebaaside uuenduste olekuid. Samuti pakutakse valida profiil v\u00f5rgu perimeetri kaitseks, kuvatakse vastavad seadistused.\n<\/p>\n<p><\/p>\n<p>Erinev jaotis 'IPS Protections' v\u00f5imaldab konfigureerida tegevust kindla turvaallkirja suhtes.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/9718b22b843742b6916dceb342e24a8d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Hiljuti kirjutasime oma blogis <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511012\/\">globaalsetest haavatavustest<\/a><\/noindex> Windows Serveri jaoks \u2014 SigRed. Kontrollime selle olemasolu Gaia Embedded 80.20-s, viies sisse p\u00e4ringu 'CVE-2020-1350'<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/7af359b881b41e382b98ddb7fda53403.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAntud signatuuri kohta on avastatud kirje, millele saab rakendada \u00fcht tegevust. (vaikimisi Prevent kriitilise ohu taseme jaoks). Vastavalt SMB lahendusega ei j\u00e4\u00e4te ilma v\u00e4rskendustest ja toest, see on t\u00e4isv\u00e4\u00e4rtuslik NGFW lahendus filiaalide jaoks kuni 200 inimesele CheckPointilt.<\/p>\n<h2>T\u00f6\u00f6tavuse hindamine<\/h2>\n<p>\nArtikli l\u00f5petuseks tahaksin m\u00e4rkida, et p\u00e4rast algse seadistamise ja konfigureerimise etappe on olemas t\u00f6\u00f6riistad probleemide t\u00f5rkeotsimiseks SMB lahendustes. Saate minna sektsiooni \u201cHOME\u201d \u2192 \u201cTools\u201d. Saadaval olevad valikud:<\/p>\n<ul>\n<li>s\u00fcsteemiressursside j\u00e4lgimine;<\/li>\n<li>suunamisdiagramm;<\/li>\n<li>CheckPointi pilveteenuste k\u00e4ttesaadavuse kontrollimine;<\/li>\n<li>CPinfo genereerimine;<\/li>\n<\/ul>\n<p><\/p>\n<p>Samuti on saadaval sisseehitatud v\u00f5rgu k\u00e4sud: Ping, Traceroute, Traffic Capture.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW v\u00e4ikeettev\u00f5tetele. Lahtiv\u00f5tmine ja seadistamine\" src=\"\/wp-content\/uploads\/2020\/07\/d3f2b1c24bd7f9f882ad78f8838ac8e0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Nii oleme t\u00e4na vaadanud ja uurinud NGFW 1590 esmast \u00fchendamist ja seadistamist, sarnaseid toiminguid teete kogu 1500 SMB Checkpoint seeria puhul. Saadavad valikud n\u00e4itasid meile k\u00f5rget varieeruvust seadeteks, toetades kaasaegseid liiklust kaitsemeetodeid v\u00f5rgu perimeetril. <\/p>\n<p>\nPraeguseks on CheckPointi lahendused v\u00e4ikeste kontorite ja filiaalide kaitseks (kuni 200 inimest) varustatud laia valiku vahenditega ning kasutavad k\u00f5ige uuemaid tehnoloogiaid (pilvep\u00f5hine haldamine, SIM-kaartide tugi, m\u00e4lumahu laiendamine SD-kaartide abil jne). J\u00e4tkake meiega ja lugedes TS Solution artikleid, plaanime j\u00e4tkuvalt v\u00e4lja anda osasid NGFW CheckPoint SMB perest, kohtumiseni!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Suur kogumik materjale Check Pointi kohta TS Solutionilt<\/a><\/noindex>. J\u00e4lgige uuendusi (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511462\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0446\u0438\u043a\u043b \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043d\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u044f\u0434\u043e\u043c SMB CheckPoint, \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u0440\u0448\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u0435\u0440\u0438\u0438: CheckPoint 1590 NGFW. \u041f\u0440\u0438\u043b\u043e\u0436\u0438\u043c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438: \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0443\u044e\u0449\u0438\u0445, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435). \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89740,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89739","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. NGFW v\u00e4ikeettev\u00f5tetele. Pakendamine ja seadistamine | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T23:42:18+00:00","article:modified_time":"2020-07-25T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89739","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:05:27","updated":"2022-10-01 11:43:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/89739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=89739"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/89739\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/89740"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=89739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=89739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=89739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}