3. NGFW don ƙananan kasuwancin. Wayar da bayanai mara waya: WiFi da LTE

Sannu, masoyi masu karatu na TS Solution blog, muna ci gaba da jerin labaran don mafita na NGFW CheckPoint a cikin sashin SMB. Don saukakawa, zaku iya fahimtar kanku tare da kewayon ƙirar, bincika halaye da iyawa a ciki bangare na farko, to muna ba da shawarar juyawa zuwa buɗewa da saitin farko ta amfani da misalin ainihin kayan aikin 1590 Check Point in kashi na biyu.

Ga waɗanda suke kawai samun saba da kewayon samfurin SMB - dace da ƙananan ofisoshin ko rassan har zuwa mutane 200 (lokacin zabar samfurin 1590). Ɗaya daga cikin fasalulluka na wannan iyali shine goyan bayan sadarwar mara waya; wannan na iya zama da amfani lokacin da kayan aikin ke da na'urori masu adaftar WiFi ko NGFW yana buƙatar samun damar Intanet ta hanyar sadarwar wayar hannu. Don ayyukan da aka jera za ku buƙaci fasaha: WiFi, LTE. Wannan labarin game da wannan ne, inda za mu duba:

1. Kunnawa da daidaita yanayin NGFW WiFi.
2. Kunnawa da daidaita yanayin aiki na LTE na NGFW.
3. Gabaɗaya ƙarshe game da fasahar mara waya don NGFW.

NGFW da WiFi

Idan muka koma kashi na 2 na jerin mu, mun bar zaɓi don haɗin haɗin mai amfani da mara waya ta naƙasa, don haka kuna buƙatar zuwa shafin. Na'ura → Network → Mara waya

A cikin hoton da na bayar, akwai yuwuwar hanyoyin aiki na WiFi guda biyu:

1. 2.4 GHz mita ne wanda yawancin tsararraki na na'urorin mara waya daban-daban ke tallafawa.
2. 5 GHz mita ne wanda shine ƙa'idar zamani don aiki tare da na'urorin mara waya; ana samun tallafi a duk wayoyin hannu na zamani, allunan da kwamfyutocin zamani.

Hakanan daga hoton (a sama) zaku iya lura cewa na riga na kunna yanayin aiki na 5 GHz, bari mu saita 2.4 GHz tare, don yin wannan, danna maɓallin. "Shirya".

A cikin taga ƙirƙirar wurin samun dama, an umarce mu da mu saka madaidaicin saiti na sigogi. Kuna iya amfani da kalmar sirri ko uwar garken Radius azaman hanyar tantancewa. Zaɓin "Ba da damar shiga wannan hanyar sadarwa zuwa cibiyoyin sadarwa na gida" shine ke da alhakin samun damar abokan cinikin ku mara waya zuwa albarkatun ciki waɗanda ke bayan Check Point NGFW. Da zarar an daidaita batun ku, zaku iya canza ƙarin sigogi.

Akwai saitunan

Bayan na'urar da aka gwada ta haɗa zuwa wurin shiga ku, za mu iya tabbatar da cewa tana kan hanyar sadarwar mu, je zuwa shafin: Logs & Sa idanu → Matsayi → Na'urori masu aiki mara waya

Idan muka danna abu mai suna, za mu ga kaddarorin abokin ciniki da aka haɗa:

Baya ga bayanai game da na'urar, Ina la'akari da zaɓuɓɓuka masu amfani masu zuwa:

• ajiye abu don amfani a cikin dokoki (1);
• toshe damar zuwa wannan abokin ciniki (2).

Bugu da ari, dangane da saitunan mu na Aikace-aikacen Blade (a cikin kalmomin CheckPoint, ɗayan nau'ikan), danna hanyoyin haɗin yanar gizo masu yuwuwar haɗari an hana.

Muna ƙoƙarin buɗe ɗaya daga cikin nau'ikan akan na'urar hannu ta hanyar haɗa ta hanyar WiFi zuwa NGFW Check Point kuma, don haka, samun damar Intanet ta hanyarsa.

Kammalawa: Mai amfani bai sami damar shiga rukunin yanar gizon ba, wanda ke cikin rukunin Anonymizer.

Don haka, mun kalli saitin asali don haɗa masu amfani ta amfani da WiFi; wannan ya dace a cikin ƙananan ofisoshi inda akwai na'urorin mara waya da yawa. A lokaci guda, Maganin Check Point NGFW yana ba ku damar kare masu amfani da ku daga lahani da abun ciki na ƙeta, kuma kuna da zaɓuɓɓuka masu sassauƙa don saka idanu masu runduna mara waya. Ina so in ambaci gudanarwa daban ta amfani da aikace-aikacen hannu; an kwatanta hanyar a ɗayan mu labarai.

NGFW da LTE

Model 1570, 1590 sun zo tare da modem na LTE, wanda ke ba ku damar amfani da Micro/Nano SIM kuma ta haka za ku kafa haɗin 4G. Ga waɗanda suke da sha'awar, za mu bar ɗan taƙaitaccen tunatarwa a ƙarƙashin ɓarna.

Umarnin shigar da SIM

Don haka kun shigar da SIM ɗin, bayan haka kuna buƙatar komawa Gaia Portal kuma ku je sashe na gaba Na'ura → Network → Intanet. Ta hanyar tsoho, zaku sami haɗin WAN guda ɗaya; kuna buƙatar ƙirƙirar sabon haɗi ta bin kibiya ja.

Inda za mu buƙaci saita sunan haɗin, ƙayyade nau'in dubawa (a cikin yanayin mu Cellular)

Bugu da ƙari, buɗe shafin "Sabbin Sadarwa", Anan yana yiwuwa a aika ta atomatik: buƙatun ARP zuwa hanyar da ta dace, fakitin ICMP zuwa ƙayyadaddun tushe, Na lura cewa zaku iya ƙayyade albarkatun ku don saka idanu.

Tab "Cellular" ke da alhakin zabar fifiko tsakanin SIMs, shigar da bayanan tantancewa idan an buƙata (APN, PIN).

A cikin tab "Babba" Yana yiwuwa a saita saitunan cibiyar sadarwa:

• saituna don dubawa (MTU, MAC)
• QOS
• ISP Redundancy
• NAT
• DHCP

Bayan ka ƙirƙiri sabon nau'in haɗin kai, za ka sami tebur na haɗin Intanet a ciki Na'ura → Network → Intanet:

A cikin hoton da aka gabatar a sama mun ga sabon haɗin "LTE_TELE2", kamar yadda ƙila kuka yi tsammani, wannan SIM ne daga mai ba da sabis na Tele2. Tebur yana ba da bayani game da matakin siginar, yana nuna adadin asarar da lokacin jinkiri. Bugu da ƙari, yana yiwuwa a buɗe zaɓi Kulawar Haɗi.

A cikin taga saka idanu muna ganin sakamakon aika buƙatun zuwa sabobin uku, ɗayan su al'ada ne (ya.ru). An nuna anan:

• yawan asarar fakiti;
• yawan kurakurai na hanyar sadarwa;
• lokacin amsawa (matsakaici, ƙarami da matsakaicin);
• jita-jita.

Idan kuna sha'awar bayanin tsarin game da modem LTE akan NGFW Check Point, to yakamata ku je Logs & Sa idanu → Bincike → Kayan aiki → Kula da Modem na salula:

Bayan haka, mun bincika saurin samun damar Intanet don mai watsa shiri na ƙarshe, wanda aka haɗa da NGFW ta hanyar WiFi (5 GHz), kuma ƙofar kanta tana amfani da haɗin LTE don aika fakiti zuwa Cibiyar Sadarwar Duniya. Mun kwatanta ƙimar da aka samu tare da halin da ake ciki lokacin da ake amfani da wuri iri ɗaya, amma wayar tana haɗawa da Intanet kai tsaye. Don dacewa, ana ɓoye sakamakon a ƙarƙashin mai ɓarna.

Sakamakon SpeedTest

Tabbas, waɗannan alamun suna da kurakurai da halayensu, bari mu gabatar da hasashen: NGFW 1590 yana ƙara ƙarfin siginar salula mai shigowa ta amfani da eriya biyu na waje. An tabbatar da wannan bayanin a kaikaice ta sakamakon SpeedTest, wanda aka gudanar a ƙarƙashin yanayi iri ɗaya kuma yana nuna raguwa a cikin Ping da latency zuwa albarkatu iri ɗaya.

Abu

NGFW+LTE

Wayar hannu + LTE

Ping (ms)

30

34

Jitter (ms)

7.2

5.2

Gudun shigowa (Mbp/s)

16.1

12

Gudun fita (Mbp/s)

10.9

2.97

Domin auna ingancin eriya na waje na NGFW Check Point 1590, mun auna matakin liyafar sigina, sannan ta amfani da menu na injiniya mun yi irin wannan ma'auni don wayar. An gabatar da sakamakon a ƙasa:

Saboda haka, ana ɗaukar matakin ƙarfin karɓar siginar mafi kyau lokacin da mummunan ƙimarsa ya kasance 0. Ƙimar da aka samu don wayar ita ce (-109 dBm), don modem (-61 dBm). Wanda gabaɗaya yana tabbatar da hasashen mu kuma yana nuna kwanciyar hankali na sadarwar LTE na dangin NGFW SMB.

Janar karshe

Don taƙaita ɓangaren yau, an yi la'akari da fasaha guda biyu: WiFi da LTE, waɗanda ke tallafawa ta hanyar 1570, 1590 Check Point model.

Don ƙananan ofisoshin da rassan, ba koyaushe yana yiwuwa a shigar da wuraren samun damar mara waya ba, don haka NGFW zai taimaka wajen tsara hanyar sadarwa mara waya, kuma mafi mahimmanci, kare irin waɗannan masu amfani.

Dangane da modem na tushen LTE na NGFW, a ganina, waɗannan shari'o'in amfani za su kasance cikin buƙata:

1. Rashin haɗin waya zuwa Intanet. A wannan yanayin, za a tilasta muku yin amfani da sadarwar wayar hannu don samar da haɗin Intanet. Wannan yanayin kuma yana da dacewa ga takamaiman kamfanoni waɗanda nau'ikan ayyukansu ke buƙatar sanya "wayar hannu" na kayan aikin sadarwar su, ba tare da la'akari da yanayin ba (yanayi, wadatar sadarwar waya, da sauransu).
2. Ajiye babban tashar shiga mai waya. Bari in tunatar da ku cewa NGFW yana goyan bayan aiki tare da SIM guda biyu, wannan yana ƙara haƙurin kuskuren kayan aikin ku a yayin wani haɗari tare da ɗayan hanyoyin haɗin waya. Hakanan zaka iya kunna haɗin LTE da hannu, ya danganta da yanayin amfanin ku.

Babban zaɓi na kayan akan Check Point daga Magani na TS. Ku kasance da mu (sakon waya, Facebook, VK, TS Magani Blog, Yandex Zen).

source: www.habr.com