Kwanan nan kwanan nan (a cikin 2016), kamfanin ya gabatar da sababbin na'urorin sa (duka ƙofofin ƙofofin da sabar sarrafawa). Bambancin maɓalli daga layin da ya gabata shine haɓaka yawan aiki sosai.
A cikin wannan labarin za mu mayar da hankali ne kawai a kan ƙananan samfurori. Za mu bayyana fa'idodin sabbin na'urori da yiwuwar ramummuka waɗanda ba koyaushe ake magana ba. Za mu kuma raba ra'ayi na sirri game da amfaninsu.
Duba layin layi
Kamar yadda kuke gani daga hoton, Check Point ya raba na'urorinsa zuwa manyan nau'ikan uku:
- High End Enterprise da Data Center (samfura , )
- ciniki (samfura )
- Kananan da Matsakaici Enterprise (samfura , , , , , , 1200R)
A wannan yanayin, ɗayan manyan halaye shine abin da ake kira SPU - Rukunin Wutar Tsaro. Wannan shine ma'aunin mallaka na Check Point wanda ke nuna ainihin aikin na'ura. A matsayin misali, bari mu kwatanta tsarin gargajiya na auna aikin Firewall (Mbps) tare da “sabon” dabara daga Check Point (SPU).
Dabarun gargajiya - Wutar Wuta ta Wuta
- Ana yin ma'auni a cikin yanayin dakin gwaje-gwaje akan zirga-zirgar "artificial".
- Ana kimanta aikin aikin Firewall kawai, ba tare da ƙarin kayayyaki kamar IPS, Ikon Aikace-aikacen, da sauransu ba.
- Yawancin lokaci ana yin gwaji tare da ka'idar Firewall ɗaya.
Hanyar Dubawa - Ƙarfin Tsaro
- Ma'auni akan zirga-zirgar mai amfani na gaske.
- Ana kimanta aikin duk ayyuka (Firewall, IPS, Ikon Aikace-aikacen, tace URL, da sauransu).
- An gwada akan daidaitattun manufofin da suka haɗa da dokoki da yawa.
Bincika Kayan aikin Girman Kayan Kayan Aiki
Don haka, lokacin zabar samfurin Check Point mai dacewa, yana da kyau a dogara da siga Sashin Wutar Tsaro. Ana nuna shi a cikin kowane takaddar bayanai na na'urar. Ba za ku iya ƙididdige SPU mai dacewa don hanyar sadarwar ku da kanku ba. Ana iya yin wannan kawai tare da taimakon abokin tarayya wanda ke da damar yin amfani da kayan aiki Bincika Kayan aikin Girman Kayan Kayan Aiki:
Don zaɓar mafi kyawun bayani, kuna buƙatar la'akari da sigogi kamar:
- Faɗin tashar Intanet;
- Jimillar abin da aka fitar na ƙofa (na iya bambanta da tashar Intanet idan, alal misali, kun raba cibiyar sadarwar gida ta amfani da Check Point);
- Yawan masu amfani akan hanyar sadarwa;
- Ayyukan da ake buƙata (Firewall, Anti-Virus, Anti-Bot, Control Application, URL Filtering, IPS, Barazana Kwaikwayo, da sauransu).
Hakanan akwai ƙarin saituna masu dabara waɗanda ke bayyana abin da zirga-zirgar waɗannan ruwan za a yi amfani da su zuwa:
Bayan ƙayyadaddun duk halayen, zaku iya karɓar rahoton da ke kwatanta na'urori masu dacewa:
Anan zaka iya ganin SPU da ake buƙata (72 a cikin yanayinmu) da shawarar da aka ba da shawarar (144). Hakanan samfuran kansu tare da bayanin nauyin su da "ajiye" don zirga-zirga da ruwan wukake. Lokacin zabar samfurin, koyaushe ana ba da shawarar ɗaukar na'ura daga yankin kore (watau lodi har zuwa kashi 50):
Wannan yana tabbatar da cewa babu matsaloli yayin ɗaukar nauyi ko haɓaka haɓakawa a faɗin tashar Intanet. Lokacin zabar na'ura, koyaushe tambayi abokin tarayya don samar da irin wannan rahoto. Ana iya sauke misalin .
Tsohon vs Sabuwa
Bayan fahimtar babban ma'aunin da ke nuna aikin na'urori, za mu iya duban sabbin samfura don ƙanana da matsakaitan masana'antu. Kamar yadda aka ambata a sama, Check Point yana da duka yanki - Kananan da Matsakaici Enterprise (samfuran 3200, 3100, 1490, 1470, 1450, 1430, 1200R). Ana iya kiran waɗannan na'urori sabuntawa na tsohuwar jerin 2012 (2200, 1180, 1140, 1120). Don fahimtar mahimman bambance-bambance, la'akari da hoton da ke ƙasa:
(farashi suna cikin GPL, ban da VAT da tallafin fasaha)
Kamar yadda kake gani, jerin 2016 sun haɓaka aiki sosai (SPU), kuma farashin ya kasance a kusan matakin ɗaya (ban da samfurin 3200). Sabon layin kuma ya hada da samfuri 3100, amma ba tukuna babu sanarwa kuma an haramta shigo da shi cikin Rasha! Ku tuna da wannan!
Idan muka sake lissafin farashin SPU ɗaya, to, samfurin 1450 shine mafi daidaituwa. A ƙasa za mu kalli sabon jerin abubuwan Dubawa.
Tsare-tsare don aiwatar da na'urorin SMB
Kamar yadda ake iya gani daga adadi, akwai manyan yanayin aiwatarwa guda biyu don na'urorin SMB:
- A cikin tsoho yanayin ƙofa. A wannan yanayin, ana shigar da Check Point azaman na'urar kewaye kuma ana gudanar da ita a cikin gida.
- Ƙofar reshe. A wannan yanayin, ana sarrafa kayan aikin reshe a tsakiya (ta amfani da uwar garken Gudanarwa) daga babban ofishin.
Domin jerin и Akwai wasu fasaloli a kowane yanayi. Za mu dube su a kasa.
Farashin SMB3000
A halin yanzu akwai "guda biyu na baƙin ƙarfe" - 3200 и 3100. Kamar yadda aka bayyana a baya, 3100 ba za a iya shigo da su cikin kasar ba. Amma ga 3200, yana da kyakkyawan maye gurbin tsohuwar jerin 2200. Na'urar tana gudanar da cikakken tsarin Gaia (duka R77.30 da R80.10). Idan ka yi amfani da na'urar a matsayin babbar ƙofa a cikin ƙaramin kasuwanci, za ka iya tsammanin aiki mai zuwa:
- Tashar Intanet - 50Mbit;
- Jimlar bandwidth - 300 Mbit;
- Yawan masu amfani - 200.
Kamar yadda kake gani, nauyin na'urar a cikin wannan yanayin shine 47% kuma wannan yana tare da gudanarwa na gida, watau. Tsayayyar daidaitawa (ƙarin game da keɓantacce da rarrabawa ). Daga gwaninta na sirri zan iya cewa tare da gudanarwa na gida ba a ba da shawarar wuce nauyin 50% ba, saboda ... Ana iya samun matsaloli tare da sarrafawa (zai rage gudu).
Idan ana ɗaukar na'urar azaman na'urar reshe (watau tare da keɓantaccen gudanarwa na tsakiya), to alamun za su yi girma sosai. Kuma za ku iya riga shigar da yankin rawaya a cikin girman (watau, tare da nauyin 50% zuwa 70%). Kuna iya duba bayanan na'urar .
Farashin SMB1400
Wannan jerin ya haɗa da na'urori da yawa a lokaci ɗaya: 1490, 1470, 1450, 1430 (Madaidaicin madaidaicin 1120, 1140 da 1180).
Duk da cewa waɗannan su ne mafi ƙanƙanta samfuran Check Point, suna da duk ayyukan da suka dace:
- Ana iya haɗa na'urorin SMB cikin gungu na HA (Aiki / Jiran aiki);
- Kusan dukkan ruwan wukake na software suna samuwa (kamar a kan “manyan” guda na kayan masarufi);
- za a iya sarrafa su a gida da kuma tsakiya (ta amfani da Sabar Gudanarwa na gargajiya);
- akwai gyare-gyare tare da WiFi, ADSL da PoE;
- za ka iya haɗa 3G modem;
- Akwai kayan ɗora kayan ɗora.
Duk da haka, yana da daraja gargadi game da wasu iyakoki / fasali:
- Na'urar tana da matsala Gaia a cikin jirgin, kuma Gaia 77.20 An saka. Wannan ƙayyadaddun ya faru ne saboda ƙirar na'urar (ana amfani da na'urori masu sarrafa ARM). Idan akwai iko na gida (ke tsaye), ba za ku iya amfani da SmartConsole na yau da kullun ba. Maimakon haka, akwai hanyar sadarwa ta yanar gizo. Kuna iya ganin ta a wannan bidiyon:
Misali yayi la'akari da jerin 700, amma bisa ka'ida ba a sayar da shi a Rasha ba. - Ayyukan Cire Barazani baya aiki. Barazana Kwaikwayo kawai. Kuna iya ganin menene
- Ba shi yiwuwa a haɗa tari a yanayin Raba Load. Wadancan. yaudara ta hanyar siyan kayan masarufi guda biyu "mai arha" da rarraba kaya a cikin gungu tsakanin su ba zai yi aiki ba.
- Tare da gudanarwa na gida akwai ƙuntatawa mai tsanani game da binciken HTTPS.
- Anti-Virus duban kayan tarihi baya aiki.
- Babu aikin DLP.
Abubuwan ƙarshe na ƙila sune mafi mahimmancin ƙuntatawa waɗanda galibi ana yin shiru. Don cikakken binciken HTTPS, za a tilasta muku yin amfani da sabar Gudanarwa na gargajiya. A wannan yanayin, zaku sarrafa na'urar azaman ƙofa mai cikakken (kusan cika) sigar Gaia.
Ana iya samun sauran hani na Gaia Embedded anan . Tabbatar duba su kafin yanke shawarar siye.
Misali, yi la'akari da ƙaramin ofishi mai ma'auni masu zuwa:
- Tashar Intanet - 50Mbit;
- Jimlar bandwidth - 200 Mbit;
- Yawan masu amfani - 200;
- Gudanar da gida (hanyar yanar gizo).
Kamar yadda ake iya gani daga girman girman, samfurin 1490 ya sami nasarar jimre wa wannan aikin tare da nauyin 46% (ba tare da barin yankin kore ba). Tare da sadaukarwar gudanarwa, 1470 za su jimre da wannan aikin.
Za'a iya duba takaddun bayanai don na'urori masu jeri 1400 .
Model 1200R
Wannan samfurin da kyar ake iya kiransa SMB. Wannan ya riga ya zama maganin masana'antu kuma watakila ya cancanci labarin daban. Yanzu ba za mu yi la'akari da wannan samfurin daki-daki ba.
Webinar
Ana iya samun ƙarin cikakkun bayanai game da na'urorin SMB a cikin gidan yanar gizon mu na baya:
binciken
A ra'ayina, sabbin samfuran SMB sun zama masu nasara sosai. Ayyukan na'urori sun karu sosai yayin da suke kiyaye matakin farashin. Ban shirya yin magana game da tsadar tsada / arha na na'urori ba, saboda Waɗannan ra'ayoyin sun bambanta sosai ga kamfanoni daban-daban.
Samfurin Zan ba da shawarar shi ga ƙananan kamfanoni waɗanda ke da sha'awar matsakaicin matakin kariya don farashi mai ma'ana. Bugu da ƙari, wannan zaɓi ne mai kyau ga waɗanda suka riga sun saba aiki tare da cikakken sigar Gaia. Hakanan ana samun sigar R80.10 anan. Lokacin da aka karɓi sanarwa don 3100, alamar farashin zai ƙara raguwa kaɗan. Wannan zaɓi ne mai dacewa don rassan.
Na'urorin jeri suna da kyakkyawan sulhu kuma suna da mafi kyawun farashi / ingancin rabo (musamman dangane da farashin da 1 SPU). Waɗannan na'urori suna da kyau ga rassan akan kasafin kuɗi. Yin amfani da sarrafawa ta tsakiya, zaku iya sarrafa na'urori kamar ƙofofin yau da kullun tare da cikakken sigar Gaia. Amma, kuma, kar a manta game da , wanda ya kamata ka san kanka da shi.
PS Ina so in gode Alexey Matveev () don taimako a shirya kayan.
source: www.habr.com