{"id":93433,"date":"2020-09-07T07:42:37","date_gmt":"2020-09-07T05:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40"},"modified":"2020-09-07T07:42:37","modified_gmt":"2020-09-07T05:42:37","slug":"proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","title":{"rendered":"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/7acecf42ffba8732d9006924b54aa490.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kaks<em>aastat tagasi kirjutasime, et iga Check Pointi administreerija seisab varem v\u00f5i hiljem silmitsi k\u00fcsimusega uuendamisest uuele versioonile. Selles<\/em>kaks aastat tagasi kirjutasime sellest, et iga Check Pointi administraatori ees kerkib varem v\u00f5i hiljem k\u00fcsimus uuele versioonile \u00fcleminekust. Antud <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\"><u>artiklis<\/u><\/a><\/noindex> oli kirjeldatud uuendamist versioonist R77.30 versioonile R80.10. \u00dcks asi, jaanuaris 2020 sai R77.30 FSTEK-i sertifitseeritud versiooniks. Kuid kahe aastaga on Check Pointis palju muutunud. Artiklis \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\"><u>Check Point Gaia R80.40. Mis uudised on tulemas?<\/u><\/a><\/noindex>\u201d on kirjeldatud k\u00f5iki uuendusi, mida on palju. Selles artiklis on uuendamise protseduur v\u00f5imalikult detailselt kirjeldatud.&nbsp;<\/p>\n<p>Nagu teada, on Check Pointi rakendamiseks kaks v\u00f5imalust: Standalone ja Distributed, st ilma spetsiaalse haldusserverita ja koos spetsiaalsega. Distributed variant on mitmel p\u00f5hjusel \u00e4\u00e4rmiselt soovitatav:<\/p>\n<ul>\n<li>\n<p>minimeeritakse v\u00e4rava ressursikoormus;<\/p>\n<\/li>\n<li>\n<p>ei ole vaja planeerida hooldusaken, et hooldust\u00f6id haldusserveriga teostada;<\/p>\n<\/li>\n<li>\n<p>SmartEvent t\u00f6\u00f6tab t\u00f5husamalt, kuna Standalone variandis ei pruugi see toimida;<\/p>\n<\/li>\n<li>\n<p>v\u00e4ravate klastrit soovitatakse ehitada Distributed konfiguratsioonis.<\/p>\n<\/li>\n<\/ul>\n<p>Arvestades k\u00f5iki Distributed konfiguratsiooni eeliseid, k\u00e4sitleme juhtimisserveri ja turvagateway uuendamist eraldi.<\/p>\n<h3>Turvahalduse Serveri (SMS) uuendamine<\/h3>\n<p>SMS-i uuendamiseks on olemas 2 meetodit:<\/p>\n<ul>\n<li>\n<p>kasutades CPUSE (Gaia Portali kaudu)<\/p>\n<\/li>\n<li>\n<p>Migration Tools abiliteerimisega (vajalik on puhas installatsioon \u2014 <strong>fresh install<\/strong>)<\/p>\n<\/li>\n<\/ul>\n<p>CPUSE kasutamine ei ole Check Pointi kolleegide poolt soovitatav, kuna see ei uuenda failis\u00fcsteemi versiooni ega kernelit. Kuid see meetod ei n\u00f5ua poliitikate migreerimist ja on palju kiirem ja lihtsam kui teine meetod.<\/p>\n<p>Puhas installatsioon ja poliitikate migreerimine Migration Tools abil \u2014 see on soovitatud meetod. Uute failis\u00fcsteemide ja operatsioonis\u00fcsteemi tuumade k\u00f5rval on tihti nii, et SMS andmebaas \u201eummistub\u201d, ning puhas installatsioon on sel puhul suurep\u00e4rane lahendus, et lisada serveri t\u00f6\u00f6 kiirus.<\/p>\n<p>1) Iga uuendamise esimene samm on varukoopiate ja snipe-shootide loomine. Kui teil on f\u00fc\u00fcsiline juhtimisserver, siis tehke varukoopia Gaia Portali veebiliidese kaudu. Minge vahekaardile <em>Maintenance &gt; System Backup &gt; Backup<\/em>. See for backup location. It can be SCP, FTP, TFTP server, or stored locally on the device; however, later you will need to transfer this backup to the server or computer.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/d365a22846bdc716bcf0adf90cd5c851.png\" style=\"display:block;margin: 0 auto;\" \/>Figure 1. Creating a backup in Gaia Portal<\/p>\n<p>2) Next, take a snapshot under the tab <em>Maintenance \u2192 Snapshot Management \u2192 New. <\/em>The difference between backups and snapshots is that snapshots contain more information, including all installed hotfixes. However, it's best to do both.<\/p>\n<p>If your management server is set up as a virtual machine, it's recommended to back up the virtual machine using the hypervisor's built-in tools. It's simply faster and more reliable.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/c2bd3da4f9eddcf8524f7006f8e8e37d.png\" style=\"display:block;margin: 0 auto;\" \/>Figure 2. Creating a snapshot in Gaia Portal<\/p>\n<p>3) Save the device configuration from Gaia Portal. You can take screenshots of all the settings tabs in Gaia Portal, or enter the command in Clish <strong>save configuration<\/strong>. Next, you should transfer the file to your PC using WinSCP or another client.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/bcdf28ffb804edd3ece43f3cd0b11ee6.png\" style=\"display:block;margin: 0 auto;\" \/>Figure 3. Saving configuration to a text file)<\/p>\n<p><strong>M\u00e4rkus<\/strong><em><strong>: <\/strong><\/em>if WinSCP does not allow connection, change the user shell to \/bin\/bash either in the web interface under Users or by entering the command<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash<\/strong>.<\/p>\n<p>Uuendamine CPUSE abil<\/p>\n<p>4) Esimesed 3 sammu on igasuguste uuenduste jaoks kohustuslikud. Kui soovite minna lihtsamat teed, minge veebiliideses vahekaardile <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Major Versions &gt; Check Point R80.40 Gaia Fresh Install and Upgrade. <\/em>Kui olete eelmise uuenduse kohal paremkl\u00f5psanud, valige <em>Verifier. <\/em>T\u00f5ukeprotsess kestab paar minutit, p\u00e4rast mida n\u00e4ete teadet, et seadet saab uuendada. Kui n\u00e4ete t\u00f5rkeid, tuleb need parandada.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/a02b7b395d395c6eb36e90f8824e516b.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 4. Uuendamine CPUSE kaudu<\/p>\n<p>5) Uuendage CDT (Central Deployment Tool) viimasele versioonile \u2014 t\u00f6\u00f6riist, mis on k\u00e4ivitatud haldusserveris ja v\u00f5imaldab installida uuendusi, uuenduspakette, hallata varukoopiaid, snapshot'e, skripte ja palju muud. Vananenud CDT versioon v\u00f5ib p\u00f5hjustada uuendamise probleeme. CDT-d saab alla laadida aadressilt <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal\/role\/supportcenterUser\/page\/default.psml\/media-type\/html?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=104450\"><u>lingi kaudu<\/u><\/a><\/noindex>.<\/p>\n<p>6) Pannes allalaaditud arhiivi SMS-i mis tahes kausta WinSCP kaudu, \u00fchendage SMS-iga SSH kaudu ja sisenega ekspertre\u017eiimi. Tuletan meelde, et WinSCP kasutajal peab olema shell <strong>\/bin\/bash<\/strong>!<\/p>\n<p>7) Sisestage k\u00e4sud:<strong>&nbsp;<\/strong><\/p>\n<p><em>cd \/somepathtoCDT\/<\/em><\/p>\n<p><em>tar -zxvf .tgz<\/em><\/p>\n<p><em>rpm -Uhv \u2014force CPcdt-00-00.i386.rpm<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/6c1f64e57f24d9fb6d117fa3a7a09461.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 5. Central Deployment Tooli (CDT) installimine<\/p>\n<p>8) J\u00e4rgmine samm on R80.40 pildi installimine. Paremkl\u00f5psake uuendamisel <em>Laadi alla, <\/em>seej\u00e4rel <em>Installi.<\/em> Pidage meeles, et uuendamine v\u00f5tab aega 20-30 minutit, ning juhtimiserver on m\u00f5nda aega mittesaadav. Seet\u00f5ttu on m\u00f5istlik kokku leppida hooldusaken.<\/p>\n<p>9) K\u00f5ik litsentsid ja turvapoliitikad s\u00e4ilitavad, seega tuleks teil n\u00fc\u00fcd alla laadida uus <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex>.<\/p>\n<p>10) \u00dchendage uue SmartConsole'iga SMS ja seadistage turvapoliitikad. Nupp <em>Installi poliitika<\/em> vasakus \u00fclanurgas.<\/p>\n<p>11) Teie SMS on uuendatud, j\u00e4rgmiseks tuleb installida k\u00f5ige uuem hotfix. Vahekaardil <em>Uuendused (CPUSE) &gt; Seis ja tegevused &gt; Hotfixid <\/em>kl\u00f5psake paremal klahvil <em>Verificator<\/em>, seej\u00e4rel <em>Installi uuendus<\/em>. Seade taask\u00e4ivitub p\u00e4rast uuenduse paigaldamist automaatselt.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/bced9cc3fce6f65835ffdff00a1ccdfb.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 6. Viimase hotfixi installimine l\u00e4bi CPUSE<\/p>\n<p>Uuendamine Migration Toolide abil<\/p>\n<p>4) Alustuseks tuleks samuti uuendada CDT viimasele versioonile \u2014 punktid 5, 6, 7 jaotises <em>\u201eUuendamine l\u00e4bi CPUSE\u201d.<\/em><\/p>\n<p>5) Paigaldage migreerimiseks vajalik Migration Tools pakett turvapoliitikate migreerimiseks juhtimiserverilt. Sellega seotud <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk135172\"><u>lingi kaudu<\/u><\/a><\/noindex> Leiate migreerimist\u00f6\u00f6riistu versioonide jaoks: R80.20, R80.20 M1, R80.20 M2, R80.30, R80.40. Laadige alla migreerimist\u00f6\u00f6riistad selle versiooni jaoks, <strong>kuhu soovite uuendada,<\/strong>, mitte selle, mis teil praegu on! Meie juhul on see R80.40.<\/p>\n<p>6) Edasi liikudes SMS veebivahendis minge vahekaardile <em>Uuendused (CPUSE) &gt; Statuse ja toimingute &gt; Impordi paketid &gt; Sirvi &gt; Valige allalaaditud fail &gt; Impordi<\/em>.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/b1b1164018a9750bfb952b1b650ea341.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 7. Migreerimist\u00f6\u00f6riistade importimine<\/p>\n<p>7) Eksperdivaatest SMS-is kontrollige, et migreerimist\u00f6\u00f6riistade pakett on installitud j\u00e4rgmise k\u00e4su abil (k\u00e4su v\u00e4ljund peaks vastama arhiivi nime numbrile):<\/p>\n<p><em><strong>cpprod_util CPPROD_GetValue CPupgrade-tools-R80.40 BuildNumber 1<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/1a0e032ec53ee5a05f979637217a9562.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 8. Migreerimist\u00f6\u00f6riistade installimise kontrollimine<\/p>\n<p>8) Liikuge juhtimiserveris kausta $FWDIR\/scripts:<\/p>\n<p><em><strong>cd $FWDIR\/scripts<\/strong><\/em><\/p>\n<p>9) K\u00e4ivitage eeluuenduse verifikaator (kontrollskript) j\u00e4rgmise k\u00e4su abil (kui esinevad vead, parandage need enne j\u00e4rgmisi samme):<\/p>\n<p><em><strong>.\/migrate_server verify -v R80.40<\/strong><\/em><\/p>\n<p><strong>M\u00e4rkus<\/strong>: kui n\u00e4ete viga <em>\u201cEba\u00f5nnestus uuendust\u00f6\u00f6riistade paketi allalaadimine\u201d<\/em>, kuid olete kontrollinud, et arhiiv on edukalt imporditud (vt punkt 4), kasutage k\u00e4su:<\/p>\n<p><em><strong>.\/migrate_server verify -v R80.40 -skip_upgrade_tools_check<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/a6b29e5fb7b3c183ec3c9fc92c32db6c.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 9. Kontrollskripti k\u00e4ivitamine<\/p>\n<p>10) Ekspordige turvapoliitikad j\u00e4rgmise k\u00e4su abil:<\/p>\n<p><em><strong>.\/migrate_server export -v R80.40 \/\/.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/1bd0c4604bdcc5640280f1cbed4837b1.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 10. Turvapoliitika eksportimine<\/p>\n<p><strong>M\u00e4rkus<\/strong>: kui n\u00e4ete viga <em>\u201cEba\u00f5nnestus uuendust\u00f6\u00f6riistade paketi allalaadimine\u201d<\/em>, kuid olete juba kinnitanud, et arhiv on edukalt imporditud (punkt 7), kasutage k\u00e4sku:<\/p>\n<p><em><strong>.\/migrate_server export -skip_upgrade_tools_check -v R80.40 \/&lt;T\u00e4is tee&gt;\/&lt;Eksporditud faili nimi&gt;.tgz<\/strong><\/em><\/p>\n<p>11) Arvutage MD5 rippkood ja salvestage k\u00e4sku v\u00e4ljund:<\/p>\n<p><em><strong>md5sum \/&lt;T\u00e4is tee&gt;\/&lt;Eksporditud faili nimi&gt;.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/f0c2e03613eba64d1047011a135db217.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 11. MD5 rippkoodi arvutamine<\/p>\n<p>12) Kasutades WinSCP, liigutage see fail oma arvutisse.<\/p>\n<p>13) Sisestage k\u00e4sk <strong>df -h <\/strong>ja salvestage kaustade protsentuaalne suhe, l\u00e4htudes kasutatavast mahust.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/09d8134e5f5813530b389d36a4f2001c.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 12. Kaustade protsentuaalne suhe SMS-is<\/p>\n<p>14.1)  <strong>Juhul, kui teil on reaalne SMS<\/strong><\/p>\n<p>14.1.1) Kasutades <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> looge k\u00e4ivitatav USB m\u00e4lupulk pildiga <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>.&nbsp;<\/p>\n<p>14.1.2) Soovitan valmistada ette v\u00e4hemalt 2 k\u00e4ivitatavat m\u00e4lupulka, kuna m\u00f5nikord ei pruugi m\u00e4lupulk olla loetav.&nbsp;<\/p>\n<p>14.1.3) Administratorina k\u00e4ivitage arvutis<em> ISOmorphic.exe. <\/em>Punktis 1 valige alla laaditud pilt Gaia R80.40, punktis 4 m\u00e4lupulk. Punkte 2 ja 3 ei pea muutma <strong>ei tohi<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/8718bfa85d3a4f0d3aa371b3adcdc064.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 13. K\u00e4ivitatava m\u00e4lupulga loomine<\/p>\n<p>14.1.4) Valige punkt <em>\u201cInstall automatically without confirmation\u201d <\/em>ja on oluline m\u00e4rkida teie serveri mudel. SMS-i puhul tuleks valida 3. v\u00f5i 4. rida.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/56f0106357b3d39edd8b7bafa5bb1f80.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 14. Seadmise mudeli valik alglaadimis USB-m\u00e4lupulkade jaoks<\/p>\n<p>14.1.5) Seej\u00e4rel viite seadme v\u00e4lja l\u00fclitamise, sisestate m\u00e4lupulga USB porti, \u00fchendate seadmestikabeli kaudu COM porti ja l\u00fclitate SMS-i sisse. Installimise protsess toimub automaatselt. Vaikimisi IP-aadress on \u2014 <strong>192.168.1.1\/24<\/strong>, ja sisselogimise andmed <strong>admin \/ admin<\/strong>.<\/p>\n<p>14.1.6) J\u00e4rgmine samm on veebiliidese avamine Gaia Portalis (vaikimisi aadress <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><strong><u>https:\/\/192.168.1.1<\/u><\/strong><\/a><\/noindex>), kus teete seadme initsialiseerimise. Initsialiseerimise ajal vajutate p\u00f5him\u00f5tteliselt <em>J\u00e4rgmine <\/em>, kuna peaaegu k\u00f5ik seaded on hiljem muudetavad. Siiski saate kohe t\u00f5lkida IP-aadressi, DNS-seaded ja hostinime.<\/p>\n<p>14.2) <strong>Kui teil on virtuaalne SMS<\/strong><\/p>\n<p>14.2.1) \u00c4rge mingil juhul eemaldage vana SMS-i, vaid looge uus virtuaalne masin samade ressurssidega (CPU, RAM, HDD) sama IP-aadressiga. \u00dcksikasjalikult: RAMi ja HDD-d v\u00f5ite lisada, kuna R80.40 versioon on veidi n\u00f5udlikum. IP-aadresside konflikti v\u00e4ltimiseks l\u00fclitage vana SMS v\u00e4lja ja alustage uue seadistamist.<\/p>\n<p>14.2.2) Gaia paigaldamise ajal seadistage p\u00e4evakohane IP-aadress ja eraldage kaustale <strong>\/root<\/strong> sobiv kogus ruumi. Teie kaustade protsentuaalne suhe peaks olema umbes <strong>salvestada<\/strong>, kasutage v\u00e4ljundit <strong>df -h<\/strong>.<\/p>\n<p>15) Paigaldus t\u00fc\u00fcbi valimise hetkel <em>\u201ePaigaldust\u00fc\u00fcp\u201d <\/em>valige esimene variant, kuna t\u00f5en\u00e4oliselt ei ole teil MDS (Mitme Domeeni Server). Kui teil on MDS, siis olete hallanud mitut domeeni erinevate SMS-\u00fcksuste alt samaaegselt. Sel juhul valige teine punkt.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/4f04ee96ab5b888f5187de677255af90.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 15. Paigaldus t\u00fc\u00fcbi valimine Gaia<\/p>\n<p>16) K\u00f5ige olulisem hetk, mida ei saa parandada ilma uuesti installimata \u2014 \u00fcksuse valik. Tuleb valida <em><strong>Security Management<\/strong><\/em> ja vajutage <em>Next. <\/em>Seej\u00e4rel k\u00f5ik vaikeseaded.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/8a9f13889696bf7c95d50a6580c62722.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 16. \u00dcksuse valimise valik Gaia installimise ajal<\/p>\n<p>17) Kui seade taask\u00e4ivitub, \u00fchenduge veebiliidese kaudu <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><u>https:\/\/192.168.1.1<\/u><\/a><\/noindex> v\u00f5i teise IP-aadressiga, kui olete seda muutnud.<\/p>\n<p>18)&nbsp;Kandke ekraanipiltidest saadud seaded \u00fcle k\u00f5ikidesse Gaia Portali vahekaartidesse, kus midagi oli seadistatud, v\u00f5i k\u00e4ivitage clish'is k\u00e4sk. <strong>load configuration .txt<\/strong>. See konfigureerimisfail tuleb eelnevalt \u00fcles laadida SMS-ile.<\/p>\n<p><strong>M\u00e4rkus<\/strong><em><strong>: <\/strong><\/em>kuna OS on uus, ei luba WinSCP adminina sisse logida, vahetage kasutaja shell \/bin\/bash-ks kas veebiliidese vahekaardil Users v\u00f5i sisestades k\u00e4su<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>v\u00f5i looge uus kasutaja.<\/p>\n<p>19) Laadige \u00fcles eksporditud poliitikad oma vanalt halduss\u00fcsteemilt m\u00f5nda kausta. Siis avage konsool ekspertre\u017eiimis ja kontrollige, et MD5 r\u00e4sisumma vastab varasemale. Vastasel juhul tuleb eksport teha uuesti:<\/p>\n<p><em><strong>md5sum<\/strong> <strong>\/&lt;Full Path&gt;\/&lt;Name of Exported File&gt;.tgz<\/strong><\/em><\/p>\n<p>20) Korrake punkt 6 ja installige Upgrade Tools uuele SMS-ile Gaia Portali vahekaardile <em>Upgrades (CPUSE) &gt; Seisundi ja tegevused.<\/em><\/p>\n<p>21) Sisestage k\u00e4sk ekspertre\u017eiimis:<\/p>\n<p><em><strong>.\/migrate_server import -v R80.40 -skip_upgrade_tools_check \/&lt;T\u00e4is tee&gt;\/&lt;Eksporditud faili nimi&gt;.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/9eab781ee0bd7f589859ff7360da35e7.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 17. Turvapoliitika import uuele SMS-ile<\/p>\n<p>22) L\u00fclitage teenused sisse k\u00e4suga <strong>cpstart<\/strong>.<\/p>\n<p>23) Laadige alla uus <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> ja \u00fchendage halduss\u00fcsteemiga. Avage <em>Men\u00fc\u00fc &gt; Halda litsentse ja pakette (SmartUpdate)<\/em> ja kontrollige, et teie litsents s\u00e4ilis. <\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/ab3a9b5ea4a778f7430861ac99de2ead.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 18. Installitud litsentside kontrollimine<\/p>\n<p>24) M\u00e4\u00e4rake turvapoliitika v\u00e4ravale v\u00f5i klastrile &#8212; <em>Installi poliitika<\/em>.<\/p>\n<h2>Security Gateway (SG) uuendamine<\/h2>\n<p>Turvav\u00e4ravat saab v\u00e4rskendada l\u00e4bi CPUSE, samuti nagu haldusseeriat, v\u00f5i installida uuesti &#8212; <strong>fresh install<\/strong>. Minu praktika n\u00e4itab, et 99% juhtudest installitakse Security Gateway uuesti, sest selleks kulub peaaegu sama palju aega kui CPUSE kaudu uuendamine, kuid saate puhta ja v\u00e4rskendatud operatsioonis\u00fcsteemi ilma bugideta.<\/p>\n<p>Sarnaselt SMS-ile tuleb esmalt luua varukoopia ja snapshots, samuti salvestada seaded Gaia Portaalist. Vaadake punkte 1, 2 ja 3 jaotises <em>&#171;Turvahalduse serveri v\u00e4rskendamine&#187;<\/em>.<\/p>\n<p>Uuendamine CPUSE abil<\/p>\n<p>Security Gateway uuendamine CPUSE kaudu toimub t\u00e4pselt samamoodi nagu Security Management Serveri uuendamine, seega vaadake artikli algust.<\/p>\n<p>Oluline hetk: SG uuendamine n\u00f5uab <strong>taask\u00e4ivitamist<\/strong>! Seet\u00f5ttu viige v\u00e4rskendamine l\u00e4bi hooldusakna. Kui teil on klaster, v\u00e4rskendage esmalt passiivne s\u00f5lm, seej\u00e4rel vahetage rollid ja v\u00e4rskendage teist s\u00f5lme. Klasteri puhul on hooldusakna v\u00e4ltimine v\u00f5imalik.<\/p>\n<p>Uue operatsioonis\u00fcsteemi installimine Security Gateway'l<\/p>\n<p><strong>1.1) Juhul, kui teil on reaalne SG<\/strong><\/p>\n<p>1.1.1) Kasutades <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> looge k\u00e4ivitatav USB m\u00e4lupulk pildiga <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>. Kujutis on sama mis SMS-il, kuid k\u00e4ivitusflashi loomise protseduur n\u00e4eb natuke erinev v\u00e4lja.<\/p>\n<p>1.1.2) Soovitan valmistada ette v\u00e4hemalt 2 k\u00e4ivitusflashi, kuna m\u00f5nikord ei pruugi flashi lugemine \u00f5nnestuda.&nbsp;<\/p>\n<p>1.1.3) K\u00e4ivitage administraatori \u00f5igustes arvutis<em> ISOmorphic.exe. <\/em>Punktis 1 valige alla laaditud pilt Gaia R80.40, punktis 4 m\u00e4lupulk. Punkte 2 ja 3 ei pea muutma <strong>ei tohi<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/526c027ff55a2b9e47b53940583d9e81.png\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 19. K\u00e4ivitatava USB-m\u00e4lupulga loomine<\/p>\n<p>1.1.4) Valige valik <em>\u201eInstall automatically without confirmation\u201d <\/em>ja on oluline n\u00e4idata oma Security Gateway mudelit &#8212; rida 2 v\u00f5i 3. Kui see on f\u00fc\u00fcsiline liivakast (SandBlast Appliance), siis valime rida 5.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/2f3a348bf2875a82cb47183527fd0fe2.png\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 20. Seadmestiku mudeli valik k\u00e4ivitatava USB-m\u00e4lupulga loomiseks<\/p>\n<p>1.1.5) Edasi l\u00fclitate seadme v\u00e4lja, sisestate m\u00e4lupulga USB-pessa, \u00fchendate konsooli kaabli kaudu COM-porti seadmega ja l\u00fclitate v\u00e4rava sisse. Installimisprotsess toimub iseenesest. Vaikimisi IP-aadress &#8212; <strong>192.168.1.1\/24<\/strong>, ja sisselogimise andmed <strong>admin \/ admin<\/strong>. Esmalt tuleb uuendada <strong>passiivne s\u00f5lme<\/strong>, seej\u00e4rel seadistage sellele poliitika, vahetage rolle ja seej\u00e4rel uuendage teist s\u00f5lme. T\u00f5en\u00e4oliselt on vajalik hooldusaken.<\/p>\n<p>1.1.6) J\u00e4rgmiseks sammuks on \u00fchendus veebiliidese kaudu Gaia Portalis, kus teete seadme esialgse seadistamise. Seadistamise ajal peate peamiselt vajutama <em>J\u00e4rgmine <\/em>, kuna peaaegu k\u00f5ik seaded on hiljem muudetavad. Siiski saate kohe t\u00f5lkida IP-aadressi, DNS-seaded ja hostinime.<\/p>\n<p><strong>1.2) Kui teil on virtuaalne SG<\/strong><\/p>\n<p>1.2.1) Looge uus virtuaalne masin sama v\u00f5i suuremate ressurssidega (CPU, RAM, HDD), kuna versioon R80.40 on veidi n\u00f5udlikum. IP-aadresside konfliktide v\u00e4ltimiseks l\u00fclitage v\u00e4lja vana v\u00e4rav ja alustage uue paigaldamist sama IP-aadressiga. Vana SG v\u00f5ib rahulikult kustutada, kuna sellele ei ole midagi olulist salvestatud, k\u00f5ik peamine \u2014 turvapoliitika \u2014 asub juhtimisseerveris.<\/p>\n<p>1.2.2) Operatsioonis\u00fcsteemi paigaldamise ajal seadistage sobiv IP-aadress ja m\u00e4\u00e4rake kaustale <strong>\/root<\/strong> m\u00f5istlik maht.<\/p>\n<p>3) \u00dchendage HTTPS-protokolli kaudu l\u00fcli ja alustage initsialiseerimisprotsessi. Paigalduse t\u00fc\u00fcbi valimise hetkel <em>\u201ePaigaldust\u00fc\u00fcp\u201d <\/em>valige esimene v\u00f5imalus \u2014 Security Gateway ja\/v\u00f5i Security Management.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/d775729e7a6890e97621d2d56e993ce7.png\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 21. Paigaldust\u00fc\u00fcbi valik Gaia<\/p>\n<p>4) Oluline punkt \u2014 \u00fcksuse (Products) valimine. Tuleb valida <em><strong>Security Gateway<\/strong><\/em> ja kui teil on klaster, siis m\u00e4rkige kastikene <em><strong>\u201eUnit is a part of a cluster, type: ClusterXL\u201d<\/strong><\/em>. Kui teil on VRRP klaster, valige see t\u00fc\u00fcp, kuid see on t\u00f5en\u00e4oliselt ebat\u00f5en\u00e4oline.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/822897faf0380d1bcb5b6c1412aae51a.png\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 22. Subjekti t\u00fc\u00fcbi valik Gaia paigaldamisel<\/p>\n<p>5) J\u00e4rgmises etapis seadke \u00fchekordne SIC parool usaldus suhte loomise jaoks juhtimisseerveriga. Selle parooli abil genereeritakse sertifikaat ja kr\u00fcpteeritud kanali kaudu suheldakse juhtimisseerveri ja v\u00e4rava vahel. M\u00e4rkige <em>\u201e\u00dchendage oma juhtimis- kui teenus\u201d <\/em>tuleb m\u00e4rkida, kui juhtimisseerver asub pilves. Me just hiljuti kirjutasime sellest <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517370\/\"><u>artiklile<\/u><\/a><\/noindex> ja kui mugav ja lihtne on pilvep\u00f5hine serveri juhtimine.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/eccc5423cafd0356eb1dafbd560eb150.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 23. SIC loomine <\/p>\n<p>6) Alustage initsialiseerimisprotsessi j\u00e4rgmises vahekaartis. Kui seade taask\u00e4ivitub, \u00fchendage see veebiliidese kaudu ja viige seaded Gaia Portalis k\u00f5ikidesse vahekaartidesse, kus midagi on seadistatud, v\u00f5i t\u00e4itke clish k\u00e4sk <strong>load configuration .txt<\/strong>. See konfiguraifail tuleb eelnevalt juhuslikult turvagateway'le laadida.<\/p>\n<p><strong>M\u00e4rkus<\/strong><em><strong>: <\/strong><\/em>kuna OS on uus, ei luba WinSCP adminina sisse logida, vahetage kasutaja shell \/bin\/bash-ks kas veebiliidese vahekaardil Users v\u00f5i sisestades k\u00e4su<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>v\u00f5i looge uus kasutaja sellise shelliga.<\/p>\n<p>7) Avage <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> ja minge turvagateway objekti juurde, mille just uuesti installisite. Avage vahekaart<em> \u00dcldised omadused &gt; Side &gt; Reset SIC <\/em>ja sisestage punktis 5 m\u00e4\u00e4ratud parool.<\/p>\n<p><img decoding=\"async\" alt=\"Check Pointi uuendamise protseduur R80.20\/R80.30-lt R80.40-le\" src=\"\/wp-content\/uploads\/2020\/09\/f0b755e9e09bb07478cd52ce26afbd8f.png\" style=\"display:block;margin: 0 auto;\" \/>Joonis 24. Usalduse loomine uue turvagateway'ga<\/p>\n<p>8) Gaia versioon objektis peab muutuma; kui see ei muutu, vahetage see k\u00e4sitsi. Seej\u00e4rel seadistage poliitika v\u00e4rava jaoks.<\/p>\n<p>9) Gaia Portalis minge vahekaardile <em>Uuendused (CPUSE) &gt; Seis ja tegevused &gt; Hotfixid <\/em>ja installige viimane hotfix. Seade l\u00e4heb <strong>taask\u00e4ivitusele <\/strong>paigaldamise ajal!<\/p>\n<p>10) Klustri puhul vahetage node'ide rolle ja tehke samad sammud teise node'i jaoks.<\/p>\n<h2>Kokkuv\u00f5te<\/h2>\n<p>Olen p\u00fc\u00fcdnud koostada v\u00f5imalikult selge ja k\u00f5ikeh\u00f5lmava juhendi versioonilt R80.20\/R80.30 praegusele versioonile R80.40, kuna palju on muutunud. Versioon <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517378\/\"><u>Gaia R81<\/u><\/a><\/noindex> on juba saadaval demo re\u017eiimis, kuid v\u00e4rskendamise protseduur j\u00e4\u00e4b enam-v\u00e4hem samaks. Juhindudes ametlikust <noindex><a rel=\"nofollow\" href=\"https:\/\/sc1.checkpoint.com\/documents\/R80.40\/WebAdminGuides\/EN\/CP_R80.40_Installation_and_Upgrade_Guide\/Content\/Topics-IUG\/Upgrading-Management-Servers-and-Log-Servers.htm?tocpath=Upgrade%20of%20Security%20Management%20Servers%20and%20Log%20Servers%7C_____0\"><u>juhendist<\/u><\/a><\/noindex> Check Pointilt, suudate ise k\u00f5igi n\u00fcanssidega toime tulla.<\/p>\n<p>K\u00fcsimuste korral v\u00f5ite meiega \u00fchendust v\u00f5tta. Oleme valmis aitama k\u00f5ige keerulisemate uuenduste ja juhtumitega meie tehnilise toe raames <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>CPSupport<\/u><\/a><\/noindex>. Samuti on meie <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\"><u>veebilehel<\/u><\/a><\/noindex> v\u00f5imalus tellida Check Pointi seadistuste auditi v\u00f5i esitada tasuta <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>taotlus<\/u><\/a><\/noindex> tehnilise juhtumi jaoks.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\"><strong><u>Suur valik materjale Check Pointi kohta TS Solutionilt<\/u><\/strong><\/a><\/noindex>. J\u00e4lgige v\u00e4rskendusi (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Dzen<\/a><\/noindex>).<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517716\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93434,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Pointi uuendusprotseduur R80.20\/R80.30-st R80.40-le | ProHoster","description":"\u00dcle kahe aasta tagasi kirjutasime, et iga Check Pointi administraatori ees kerkib varem v\u00f5i hiljem k\u00fcsimus, kuidas uuendada uusimale versioonile. Antud artiklis k\u00e4sitleti \u00fcleminekut versioonilt R77.30 versioonile R80.10. Muuseas, jaanuaris 2020 sai R77.30 FSTEK poolt sertifitseeritud versiooniks. Siiski on Check Pointis kahe aasta jooksul palju muutunud. Artiklis","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-07T05:42:37+00:00","article:modified_time":"2020-09-07T05:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93433","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:47:32","updated":"2022-10-02 09:45:58"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=93433"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93433\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/93434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=93433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=93433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=93433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}