Bayan bugawa Fiye da shekaru biyu sun shude, yanzu an cire samfuran jerin 1400 daga siyarwa. Lokaci ya yi don canje-canje da sababbin abubuwa, wani aiki CheckPoint yayi ƙoƙarin aiwatarwa a cikin jerin 1500. A cikin labarin za mu dubi samfurori don kare ƙananan ofisoshin ko rassan kamfani, za mu gabatar da halaye na fasaha, fasalin bayarwa (lasisi, gudanarwa da tsarin gudanarwa), da kuma taɓa sababbin fasaha da zaɓuɓɓuka.
Layin layi
Sabbin samfuran SMB sune: 1530, 1550, 1570, 1570R. Kuna iya duba samfuran a Portal CheckPoint. A hankali, za mu raba su zuwa rukuni uku: ƙofar tsaro na ofis tare da tallafin WIFI (1530, 1550), ƙofar tsaro na ofis tare da tallafin WIFI + 4G/LTE (1570, 1550), ƙofar tsaro don masana'antu (1570R).
Fitowa ta 1530, 1550
Samfuran suna da hanyoyin sadarwa na cibiyar sadarwa guda 5 don cibiyar sadarwar gida da 1 dubawa don samun damar Intanet, bandwidth ɗin su shine 1 GB. Hakanan akwai na USB-C Console. Amma ga halaye na fasaha, to Wadannan samfurori suna ba da adadi mai yawa na ma'auni, amma za mu mayar da hankali kan mafi mahimmanci (a ra'ayinmu).
Fasali
1530
1550
Matsakaicin adadin haɗin kai a sakan daya
10 500
14 000
Matsakaicin adadin haɗin haɗin kai
500 000
500 000
Kayan aiki tare da Firewall + Rigakafin Barazana (Mbit/C)
340
450
Kayan aiki tare da Firewall + IPS (Mbit/C)
600
800
Bandwidth Firewall (Mbps)
1000
1000
* Rigakafin Barazana yana nufin magudanar ruwa masu zuwa: Firewall, Ikon Aikace-aikace da IPS.
Model 1530, 1550 suna da ayyuka da yawa:
- Gaia 80.20 An gabatar da jerin zaɓuɓɓukan da aka haɗa a ciki CheckPoint
- An haɗa lasisin shiga wayar hannu don haɗin kai 100 tare da siyan kowace na'ura. Yana da kyau a yi la'akari da cewa wannan fasalin kewayon ƙirar SMB NGFW yana ba ku damar adanawa akan keɓantaccen siyan lasisin Samun Wayar hannu, waɗanda ba a haɗa su yayin siyan wasu jerin samfuran CheckPoint.
- Ikon sarrafa hanyar tsaro ta amfani da aikace-aikacen wayar hannu na Watch Tower (an rubuta ƙarin bayani a cikin mu )
Ga wanda jerin 1530, 1550: wannan layin ya dace da ofisoshin reshe na mutane 100, yana ba da haɗin kai daga nesa, kuma akwai hanyoyin gudanarwa iri-iri.
Fitowa ta 1570, 1590
Tsofaffin samfura a cikin jerin jerin 1500 suna da musaya 8 don haɗin gida, 1 dubawa don DMZ da 1 dubawa don haɗin Intanet (bandwidth na duk tashar jiragen ruwa shine 1 GB / s). Hakanan akwai tashar USB 3.0 da USB-C Console. Samfuran suna zuwa tare da goyan bayan 4G/LTE modem. An haɗa tallafi don katunan Micro-SD don faɗaɗa ƙwaƙwalwar ajiyar ciki na na'urar.
An gabatar da ƙayyadaddun bayanai a ƙasa:
Fasali
1570
1590
Matsakaicin adadin haɗin kai a sakan daya
15 750
21 000
Matsakaicin adadin haɗin haɗin kai
500 000
500 000
Hanyoyin Rigakafin Barazana (Mbps)
500
660
Kayan aiki tare da Firewall + IPS (Mbit/C)
970
1300
Bandwidth Firewall (Mbps)
2800
2800
Model 1570, 1590 suna da ayyuka da yawa:
- Gaia 80.20 An gabatar da jerin zaɓuɓɓukan da aka haɗa a ciki .
- Lasin Samun Wayar hannu don haɗin kai 200 na lokaci guda
ya zo tare da siyan kowane ɗayan na'urorin. Yana da kyau a yi la'akari da cewa wannan fasalin kewayon ƙirar SMB NGFW yana ba ku damar adanawa akan keɓantaccen siyan lasisin Samun Wayar hannu, waɗanda ba a haɗa su yayin siyan wasu jerin samfuran CheckPoint. - Ikon sarrafa hanyar tsaro ta amfani da aikace-aikacen wayar hannu na Watch Tower (an rubuta ƙarin bayani a cikin mu ).
Ga wanda jerin 1570, 1590: wannan layin ya dace da ofisoshin har zuwa mutane 200, yana ba da haɗin kai na nesa, kuma yana da mafi girman aiki a tsakanin dangin SMB.
Don kwatantawa samfurori na baya:
Fasali
1470
1490
Ƙaddamarwa tare da Rigakafin Barazana + Firewall (Mbit/C)
500
550
Kayan aiki tare da Firewall + IPS (Mbit/C)
625
800
1570R
NGFW 1570R CheckPoint ya cancanci kulawa ta musamman. An haɓaka shi musamman don masana'antar masana'antu kuma zai kasance da sha'awar kamfanonin da ke aiki a fagen: sufuri, hakar albarkatun ma'adinai (man, iskar gas, da sauransu), samar da kayayyaki daban-daban.
An tsara 1570R la'akari da fasali da yanayin amfani da shi:
- tsaro kewaye cibiyar sadarwa da iko akan na'urori masu wayo;
- goyon bayan masana'antu ICS/SCADA ladabi, GPS connector;
- Haƙurin kuskure lokacin aiki a cikin matsanancin yanayi (high / low yanayin zafi, hazo, ƙara girgiza).
Halayen NGFW
1570 Rufe
Matsakaicin adadin haɗin kai a sakan daya
13 500
Matsakaicin adadin haɗin haɗin kai
500 000
Hanyoyin Rigakafin Barazana (Mbps)
400
Kayan aiki tare da Firewall + IPS (Mbit/C)
700
Bandwidth Firewall (Mbps)
1900
Yanayin aiki na amfani
-40ºC ~ 75ºC (-40ºF ~ +167ºF)
Takaddun shaida don ƙarfi
EN/IEC 60529, IEC 60068-2-27 girgiza, IEC 60068-2-6 girgiza
Bugu da ƙari, za mu bambanta da dama ayyuka na 1570R:
- Gaia 80.20 An gabatar da jerin zaɓuɓɓukan da aka haɗa a ciki .
- Lasin Samun Wayar hannu don haɗin kai 200 na lokaci guda
wanda aka kawo tare da siyan na'urar. Yana da kyau a yi la'akari da cewa wannan fasalin sabon kewayon ƙirar SMB NGFW yana ba ku damar adanawa akan keɓantaccen siyan lasisin Samun Wayar hannu, waɗanda ba a haɗa su yayin siyan wasu jerin samfuran CheckPoint. - Ikon sarrafa hanyar tsaro ta amfani da aikace-aikacen wayar hannu na Watch Tower (an rubuta ƙarin bayani a cikin mu )
- Ƙirƙirar manufofi/dokoki ta atomatik don na'urorin IoT lokacin da aka haɗa su zuwa cibiyar sadarwar ku ta gida. An ƙirƙira ƙa'idar don kowane na'ura mai wayo kuma yana ba da damar waɗancan ka'idodin da yake buƙatar aiki daidai.
1500 jerin sarrafawa
Bayan yin la'akari da halaye na fasaha da damar sababbin na'urori na dangin SMB, ya kamata a lura cewa akwai hanyoyi daban-daban na gudanarwa da gudanarwa. Akwai tsare-tsare masu zuwa:
- Ikon gida.
Yawancin lokaci ana amfani da shi a cikin ƙananan masana'antu inda akwai ofisoshi da yawa kuma babu tsarin kula da ababen more rayuwa. Abubuwan da ake amfani da su sun haɗa da: ƙaddamar da iya aiki da gudanarwa na NGFW, ikon yin hulɗa da na'urori a cikin gida. Lalacewar sun haɗa da gazawar da ke da alaƙa da iyawar Gaia: rashin matakin rabuwar ƙa'idodi, ƙayyadaddun kayan aikin sa ido, rashin ma'ajin rajistan ayyukan.
- Gudanarwa ta tsakiya ta hanyar uwar garken Gudanar da kwazo. Ana amfani da wannan hanyar a yanayin da mai gudanarwa zai iya sarrafa NGFW da yawa; ana iya kasancewa a wurare daban-daban. Fa'idar wannan hanyar ita ce sassauƙa da iko akan yanayin abubuwan more rayuwa gabaɗaya, kuma wasu zaɓuɓɓukan Haɗe-haɗe na Gaia 80.20 suna samuwa kawai tare da wannan makirci.
- Gudanarwa ta tsakiya ta hanyar . Wannan sabon rubutun ne don sarrafa NGFW daga CheckPoint. Ana tura Sabar Gudanarwar ku a cikin yanayin girgije, duk gudanarwa yana faruwa ta hanyar Interface na Yanar Gizo, yana ba ku damar dogaro da OS na PC ɗin ku. Bugu da ƙari, ƙwararrun CheckPoint ne ke kula da uwar garken gudanarwa, aikin sa ya dogara kai tsaye ga sigogin da aka zaɓa kuma yana da sauƙin daidaitawa.
- Gudanarwa ta tsakiya ta hanyar (Shafin Gudanar da Tsaro). Wannan bayani ya haɗa da gira-gizai ko kan-gida na tashar yanar gizo guda ɗaya da aka raba wacce ke da ikon sarrafa na'urorin SMB har 10 a lokaci guda.
- Ana samun ikon sarrafawa ta na'urar tafi da gidanka ta Watch Tower kawai bayan ƙaddamar da cikakken zaɓi na sarrafawa (duba maki 1-4). Kara karantawa game da wannan fasalin a cikin mu
Bari mu haskaka mafi mahimmanci a ra'ayinmu:
- Rashin ikon tura Portal Access Portal. Masu amfani za su iya amfani da Samun Nesa don samun damar albarkatun kamfani na ciki, amma ba za su iya haɗawa zuwa tashar SSL tare da aikace-aikacen da aka buga ba.
- Ba a goyan bayan ruwan wukake ko zaɓuɓɓuka masu zuwa: Faɗakarwar Abun ciki, DLP, Abubuwan Sabuntawa, Binciken SSL ba tare da rarrabuwa ba, Cire Barazana, MTA tare da duban Barazana, Antivirus don ma'ajiyar bayanai, ClusterXL a cikin Yanayin Raba Load.
A ƙarshen labarin, Ina so in lura cewa batun NGFW mafita na SMB ya koma wani sabon matakin tallafi da hulɗa; saboda sakin sigar 80.20 Embedded, an sami daidaito tsakanin zaɓuɓɓukan cikakken sigar Gaia da kayan aikin kayan aiki don ƙananan ofisoshi. Muna shirin ci gaba da buga jerin labaran horo, inda za mu yi la'akari da ƙayyadaddun ƙayyadaddun hanyoyin SMB, daidaita ayyukan aiki da sababbin zaɓuɓɓukan su.
. Ku kasance da mu (, , , , ).
source: www.habr.com