Yuav ntsuas qhov ua tau zoo ntawm kev teeb tsa NGFW li cas
Txoj haujlwm tshaj plaws yog los xyuas seb koj lub firewall tau teeb tsa zoo npaum li cas. Txhawm rau ua qhov no, muaj kev pabcuam pub dawb thiab kev pabcuam los ntawm cov tuam txhab uas cuam tshuam nrog NGFW.
Piv txwv li, koj tuaj yeem pom hauv qab no tias Palo Alto Networks muaj peev xwm ncaj qha los ntawm khiav ib qho kev soj ntsuam ntawm firewall txheeb cais - SLR daim ntawv qhia lossis kev soj ntsuam ntawm kev ua raws li kev coj ua zoo tshaj plaws - BPA daim ntawv tshaj tawm. Cov no yog cov khoom siv dawb hauv online uas koj tuaj yeem siv yam tsis muaj kev txhim kho.
Ntsiab lus
Expedition (Migration Tool)
Ib qho kev xaiv nyuaj rau kev kuaj xyuas koj cov chaw yog rub tawm cov khoom siv dawb (yav tas los Migration Tool). Nws yog rub tawm los ua Virtual Appliance rau VMware, tsis tas yuav muaj teeb tsa nrog nws - koj yuav tsum rub tawm cov duab thiab xa nws hauv qab VMware hypervisor, tso nws thiab mus rau lub vev xaib interface. Qhov kev siv hluav taws xob no xav tau ib zaj dab neeg sib cais, tsuas yog cov chav kawm ntawm nws siv sijhawm 5 hnub, muaj ntau txoj haujlwm tam sim no, suav nrog Kev Kawm Tshuab thiab kev tsiv teb tsaws ntawm ntau yam kev teeb tsa ntawm cov cai, NAT thiab cov khoom rau cov tuam txhab Firewall sib txawv. Kuv yuav sau ntxiv txog Machine Learning hauv qab no hauv cov ntawv nyeem.
Txoj Cai Optimizer
Thiab qhov kev xaiv yooj yim tshaj plaws (IMHO), uas kuv yuav qhia rau koj paub ntau ntxiv hnub no, yog txoj cai optimizer tsim rau hauv Palo Alto Networks interface nws tus kheej. Txhawm rau ua kom pom nws, kuv tau teeb tsa lub firewall hauv tsev thiab sau ib txoj cai yooj yim: tso cai rau ib qho twg. Hauv txoj ntsiab cai, qee zaum kuv pom cov cai zoo li no txawm nyob hauv cov koom tes hauv tuam txhab. Lawm, kuv tau qhib tag nrho NGFW kev ruaj ntseg profiles, raws li koj tuaj yeem pom hauv lub screenshot:
Lub screenshot hauv qab no qhia txog qhov piv txwv ntawm kuv lub tsev tsis muaj teeb meem firewall, qhov twg yuav luag tag nrho cov kev sib txuas poob rau hauv txoj cai kawg: AllowAll, raws li tuaj yeem pom los ntawm cov txheeb cais hauv Hit Count kem.
Xoom Ntseeg
Muaj ib txoj hauv kev rau kev ruaj ntseg hu ua . Qhov no txhais li cas: peb yuav tsum tso cai rau cov neeg hauv lub network raws nraim cov kev sib txuas uas lawv xav tau thiab tsis lees paub txhua yam. Ntawd yog, peb yuav tsum tau ntxiv cov cai meej rau cov ntawv thov, cov neeg siv, pawg URL, hom ntaub ntawv; pab kom tag nrho IPS thiab antivirus kos npe, pab kom sandboxing, DNS tiv thaiv, siv IoC los ntawm cov ntaub ntawv muaj kev cuam tshuam kev txawj ntse. Feem ntau, muaj cov haujlwm tsim nyog thaum teeb tsa firewall.
Los ntawm txoj kev, qhov tsawg kawg nkaus teeb tsa tsim nyog rau Palo Alto Networks NGFW tau piav qhia hauv ib qho ntawm SANS cov ntaub ntawv: - Kuv pom zoo pib nrog nws. Thiab ntawm chav kawm, muaj cov txheej txheem zoo tshaj plaws rau kev teeb tsa firewall los ntawm cov chaw tsim khoom: .
Yog li, kuv muaj firewall nyob hauv tsev rau ib lub lim tiam. Cia peb saib seb qhov kev tsheb khiav zoo li cas hauv kuv lub network:
Yog tias koj txheeb los ntawm tus naj npawb ntawm cov ntu, feem ntau ntawm lawv yog tsim los ntawm bittorent, ces tuaj SSL, ces QUIC. Cov no yog cov txheeb cais rau ob qho tib si nkag mus thiab tawm mus: muaj ntau qhov kev soj ntsuam sab nraud ntawm kuv lub router. Muaj 150 daim ntawv thov sib txawv ntawm kuv lub network.
Yog li, tag nrho cov no tau plam los ntawm ib txoj cai. Tam sim no cia saib dab tsi Txoj Cai Optimizer hais txog qhov no. Yog tias koj saib saum toj no ntawm lub screenshot ntawm lub interface nrog kev ruaj ntseg cov cai, tom qab ntawd hauv qab sab laug koj pom lub qhov rais me me uas qhia rau kuv tias muaj cov cai uas tuaj yeem ua kom zoo. Wb nyem qhov ntawd.
Dab tsi Txoj Cai Optimizer qhia:
- Cov cai twg tsis tau siv tag nrho, 30 hnub, 90 hnub. Qhov no pab txiav txim siab tshem tawm tag nrho.
- Cov ntawv thov twg tau teev tseg hauv cov cai, tab sis tsis muaj cov ntawv thov no raug kuaj pom hauv cov tsheb. Qhov no tso cai rau koj tshem tawm cov ntawv thov tsis tsim nyog hauv kev tso cai.
- Dab tsi cov cai tso cai rau txhua yam, tab sis muaj cov ntawv thov tiag tiag uas yuav ua tau zoo los qhia meej meej raws li Zero Trust methodology.
Wb nias rau Unused.
Txhawm rau qhia nws ua haujlwm li cas, kuv tau ntxiv ob peb txoj cai thiab txog tam sim no lawv tsis tau plam ib pob ntawv hnub no. Nov yog lawv daim ntawv teev npe:
Tej zaum dhau sij hawm yuav muaj tsheb khiav mus nyob ntawd thiab tom qab ntawd lawv yuav ploj ntawm daim ntawv teev npe no. Thiab yog tias lawv nyob hauv daim ntawv teev npe no rau 90 hnub, ces koj tuaj yeem txiav txim siab tshem tawm cov cai no. Tom qab tag nrho, txhua txoj cai muab lub sijhawm rau tus neeg nyiag nkas.
Muaj qhov teeb meem tiag tiag thaum teeb tsa lub firewall: ib tus neeg ua haujlwm tshiab los, saib cov cai ntawm firewall, yog tias lawv tsis muaj lus pom thiab nws tsis paub vim li cas txoj cai no tau tsim, txawm tias nws xav tau tiag tiag, txawm tias nws tuaj yeem ua tau. raug tshem tawm: mam li nco dheev tus neeg mus so thiab tom qab 30 hnub, kev khiav tsheb rov qab los ntawm qhov kev pabcuam nws xav tau. Thiab tsuas yog txoj haujlwm no pab nws txiav txim siab - tsis muaj leej twg siv nws - rho tawm nws!
Nyem rau Unused App.
Peb nyem rau ntawm Unused App nyob rau hauv lub optimizer thiab pom tias nthuav cov ntaub ntawv qhib nyob rau hauv lub ntsiab qhov rais.
Peb pom tias muaj peb txoj cai, qhov twg cov naj npawb ntawm cov ntawv tso cai thiab cov ntawv thov uas tau dhau txoj cai no txawv.
Peb tuaj yeem nyem thiab pom cov npe ntawm cov ntawv thov no thiab sib piv cov npe no.
Piv txwv li, nyem rau ntawm khawm Sib piv rau txoj cai Max.
Ntawm no koj tuaj yeem pom tias cov ntawv thov facebook, instagram, telegram, vkontakte tau tso cai. Tab sis nyob rau hauv kev muaj tiag, tsheb tsuas mus rau ib co ntawm cov sub-applications. Ntawm no koj yuav tsum nkag siab tias daim ntawv thov facebook muaj ntau daim ntawv thov.
Tag nrho cov npe ntawm NGFW daim ntawv thov tuaj yeem pom ntawm lub portal thiab nyob rau hauv lub firewall interface nws tus kheej, nyob rau hauv cov khoom-> Daim ntawv thov seem thiab hauv kev tshawb nrhiav, ntaus lub npe thov: facebook, koj yuav tau txais cov txiaj ntsig hauv qab no:
Yog li, qee qhov ntawm cov ntawv thov no tau pom los ntawm NGFW, tab sis qee qhov tsis yog. Qhov tseeb, koj tuaj yeem txwv tsis pub thiab tso cai sib txawv sub-functions ntawm Facebook. Piv txwv li, tso cai saib cov lus, tab sis txwv tsis pub sib tham lossis hloov ntaub ntawv. Raws li txoj cai Optimizer tham txog qhov no thiab koj tuaj yeem txiav txim siab: tsis tso cai rau txhua daim ntawv thov Facebook, tab sis tsuas yog cov tseem ceeb xwb.
Yog li, peb pom tau tias cov npe sib txawv. Koj tuaj yeem paub tseeb tias cov cai tso cai tsuas yog cov ntawv thov uas tau mus hauv lub network. Txhawm rau ua qhov no, koj nyem lub pob MatchUsage. Nws hloov tawm li no:
Thiab koj tuaj yeem ntxiv cov ntawv thov uas koj xav tias tsim nyog - khawm Ntxiv rau sab laug ntawm lub qhov rais:
Thiab tom qab ntawd txoj cai no tuaj yeem siv tau thiab sim. Nrog koj zoo siab!
Nyem Tsis Apps Specified.
Hauv qhov no, lub qhov rais kev ruaj ntseg tseem ceeb yuav qhib.
Muaj feem ntau yuav muaj ntau txoj cai hauv koj lub network uas daim ntawv thov qib L7 tsis tau teev meej meej. Thiab hauv kuv lub network muaj txoj cai zoo li no - cia kuv ceeb toom koj tias kuv tau ua thaum pib teeb tsa, tshwj xeeb los qhia tias Txoj Cai Optimizer ua haujlwm li cas.
Daim duab qhia tau hais tias txoj cai AllowAll tau tso cai 9 gigabytes ntawm kev khiav tsheb nyob rau lub sijhawm txij Lub Peb Hlis 17 txog Lub Peb Hlis 220, uas yog 150 qhov sib txawv ntawm kuv lub network. Thiab qhov ntawd tsis txaus. Feem ntau, qhov nruab nrab qhov loj me ntawm cov tuam txhab network muaj 200-300 daim ntawv thov sib txawv.
Yog li, ib txoj cai tso cai rau ntau txog 150 daim ntawv thov. Feem ntau qhov no txhais tau hais tias lub firewall tsis raug teeb tsa kom raug, vim tias feem ntau ib txoj cai tso cai rau 1-10 daim ntawv thov rau ntau lub hom phiaj. Cia peb pom cov ntawv thov no yog dab tsi: nyem lub pob Sib piv:
Qhov zoo tshaj plaws rau tus thawj tswj hwm hauv Txoj Cai Optimizer muaj nuj nqi yog Match Usage khawm - koj tuaj yeem tsim txoj cai nrog nias ib zaug, qhov twg koj yuav nkag mus rau tag nrho 150 daim ntawv thov rau hauv txoj cai. Ua qhov no manually yuav siv sij hawm ntev heev. Tus naj npawb ntawm cov haujlwm rau tus thawj coj ua haujlwm, txawm tias ntawm kuv lub network ntawm 10 cov khoom siv, yog qhov loj heev.
Kuv muaj 150 daim ntawv thov sib txawv khiav hauv tsev, hloov gigabytes ntawm kev khiav tsheb! Thiab koj muaj pes tsawg?
Tab sis dab tsi tshwm sim hauv lub network ntawm 100 li lossis 1000 lossis 10000? Kuv tau pom firewalls nrog 8000 txoj cai thiab kuv zoo siab heev tias cov thawj coj tam sim no muaj cov cuab yeej siv automation yooj yim.
Qee cov ntawv thov uas L7 daim ntawv thov tsom xam module hauv NGFW pom thiab pom tias koj yuav tsis xav tau hauv lub network, yog li koj tsuas yog tshem lawv tawm ntawm cov npe tso cai, lossis clone cov cai siv khawm Clone (hauv lub ntsiab interface) thiab tso cai rau lawv nyob rau hauv ib daim ntawv thov txoj cai, thiab hauv Koj yuav thaiv lwm daim ntawv thov raws li lawv yeej tsis xav tau ntawm koj lub network. Cov ntawv thov no feem ntau suav nrog bittorent, chav, ultrasurf, tor, zais qhov hauv xws li tcp-over-dns thiab lwm yam.
Zoo, cia peb nyem rau ntawm lwm txoj cai thiab pom dab tsi koj tuaj yeem pom muaj:
Yog, muaj cov ntawv thov raug rau multicast. Peb yuav tsum tso cai rau lawv saib cov yeeb yaj kiab online ua haujlwm. Nyem Match Usage. Zoo heev! Tsaug Txoj Cai Optimizer.
Yuav ua li cas txog Machine Learning?
Tam sim no nws yog fashionable los tham txog automation. Qhov kuv tau piav qhia tawm - nws pab tau ntau heev. Muaj ib qho ntxiv uas kuv yuav tsum tham txog. Qhov no yog Machine Learning functionality tsim rau hauv Expedition utility, uas twb tau hais los saum toj no. Hauv qhov kev siv hluav taws xob no, nws muaj peev xwm hloov cov cai los ntawm koj lub firewall qub los ntawm lwm lub chaw tsim khoom. Kuj tseem muaj peev xwm txheeb xyuas Palo Alto Networks cov tsheb thauj mus los uas twb muaj lawm thiab qhia tias yuav sau cov cai li cas. Qhov no zoo ib yam li kev ua haujlwm ntawm Txoj Cai Optimizer, tab sis hauv Kev Tshawb Fawb nws tseem nthuav dav ntxiv thiab koj tau muab cov npe ntawm cov kev cai npaj ua ntej - koj tsuas yog xav pom zoo rau lawv.
Txhawm rau kuaj qhov kev ua haujlwm no, muaj kev ua haujlwm hauv chav kuaj - peb hu nws ua kev sim tsav. Qhov kev sim no tuaj yeem ua tiav los ntawm kev nkag mus rau hauv virtual firewalls, uas Palo Alto Networks cov neeg ua haujlwm hauv Moscow yuav tso tawm ntawm koj qhov kev thov.
Kev thov tuaj yeem xa mus rau [email tiv thaiv] thiab hauv daim ntawv thov sau: "Kuv xav ua UTD rau Txoj Haujlwm Kev Nkag Tebchaws."
Qhov tseeb, kev sim ua haujlwm hu ua Unified Test Drive (UTD) muaj ntau txoj kev xaiv thiab tag nrho lawv tom qab thov.
Tsuas yog cov neeg siv sau npe tuaj yeem koom nrog hauv daim ntawv ntsuam xyuas. thov.
Koj puas xav tau ib tus neeg los pab koj txhim kho koj txoj cai firewall?
-
Yog
-
Tsis
-
Kuv yuav ua tag nrho kuv tus kheej
Tseem tsis tau muaj leej twg pov npav. Tsis muaj abstentions.
Tau qhov twg los: www.hab.com