{"id":93433,"date":"2020-09-07T07:42:37","date_gmt":"2020-09-07T05:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40"},"modified":"2020-09-07T07:42:37","modified_gmt":"2020-09-07T05:42:37","slug":"proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","title":{"rendered":"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/7acecf42ffba8732d9006924b54aa490.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bol<em>e<\/em>prije dvije godine pisali smo o tome kako se pred svakim administratorom Check Point \u0440\u0430\u043d\u043e ili \u043f\u043e\u0437\u0434\u043d\u043e postavlja pitanje a\u017euriranja na novu verziju. U ovoj <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\"><u>\u010dlanku<\/u><\/a><\/noindex> bilo je opisano a\u017euriranje s verzije R77.30 na R80.10. Usput, u sije\u010dnju 2020. R77.30 je postala certificirana verzija FSTEK-a. Me\u0111utim, tijekom 2 godine u Check Point-u se mnogo promijenilo. U \u010dlanku \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\"><u>Check Point Gaia R80.40. \u0160to \u0107e biti novo?<\/u><\/a><\/noindex>\u201d opisane su sve novine, kojih ima mnogo. U ovom \u010dlanku postupak a\u017euriranja bit \u0107e opisan maksimalno detaljno.&nbsp;<\/p>\n<p>Kao \u0161to je poznato, postoje 2 opcije implementacije Check Point-a: Samostalni i Distribuirani, dakle bez posve\u0107enog upravlja\u010dkog poslu\u017eitelja i s posve\u0107enim. Opcija Distribuirani se krajnje preporu\u010duje iz nekoliko razloga:<\/p>\n<ul>\n<li>\n<p>minimalizira optere\u0107enje na resurse gateway-a;<\/p>\n<\/li>\n<li>\n<p>nije potrebno planirati prozor za odr\u017eavanje kako bi se obavile radnje s upravlja\u010dkim serverom;<\/p>\n<\/li>\n<li>\n<p>prikladan rad SmartEvent-a, jer u samostalnoj opciji te\u0161ko da \u0107e raditi;<\/p>\n<\/li>\n<li>\n<p>klaster od gateway-a je krajnje preporu\u010dljiv graditi u Distribuiranoj konfiguraciji.<\/p>\n<\/li>\n<\/ul>\n<p>Uzimaju\u0107i u obzir sve prednosti Distribuirane konfiguracije, razmotrit \u0107emo a\u017euriranje upravlja\u010dkog servera i sigurnosnog gateway-a odvojeno.<\/p>\n<h3>A\u017euriranje Security Management Server-a (SMS)<\/h3>\n<p>Postoje 2 na\u010dina a\u017euriranja SMS-a:<\/p>\n<ul>\n<li>\n<p>pomo\u0107u CPUSE (kroz Gaia Portal)<\/p>\n<\/li>\n<li>\n<p>pomo\u0107u Migration Tools (potrebna je \u010dista instalacija \u2014 <strong>fresh install<\/strong>)<\/p>\n<\/li>\n<\/ul>\n<p>A\u017euriranje kori\u0161tenjem CPUSE nije preporu\u010deno kolegama iz Check Point-a, jer va\u0161a verzija datote\u010dnog sustava i jezgre ne\u0107e biti a\u017eurirana. Me\u0111utim, ovaj na\u010din ne zahtijeva migraciju politika i mnogo je br\u017ei i jednostavniji nego drugi na\u010din.<\/p>\n<p>\u010cista instalacija i migracija politika pomo\u0107u Migration Tools \u2014 ovo je preporu\u010dena metoda. Osim novih datote\u010dnih sustava i jezgre OS-a, \u010desto se doga\u0111a da baza podataka SMS postane \"zaprljana\", a \u010dista instalacija je izvrsno rje\u0161enje za dodavanje brzine radu poslu\u017eitelja.<\/p>\n<p>1) Prvi korak prilikom bilo kojeg a\u017euriranja je izrada sigurnosnih kopija i snimaka stanja. Ako imate fizi\u010dki upravlja\u010dki server, sigurnosna kopija treba biti napravljena iz web su\u010delja Gaia Portal. Idite na karticu <em>Maintenance &gt; System Backup &gt; Backup<\/em>. Zatim odredite mjesto za pohranu sigurnosne kopije. To mo\u017ee biti SCP, FTP, TFTP server ili lokalno na ure\u0111aju, no tada \u0107ete tu sigurnosnu kopiju kasnije morati prebaciti na server ili ra\u010dunalo.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/d365a22846bdc716bcf0adf90cd5c851.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 1. Izrada sigurnosne kopije u Gaia Portalu<\/p>\n<p>2) Zatim napravite snapshot u odjeljku <em>Odr\u017eivost \u2192 Upravljanje snapshot-ima \u2192 Novi. <\/em>Razlika izme\u0111u backup-a i snapshot-a je u tome \u0161to snapshot sadr\u017ei vi\u0161e informacija, uklju\u010duju\u0107i sve instalirane hotfixe. Ipak, bolje je napraviti i jedno i drugo.<\/p>\n<p>Ako je va\u0161 upravlja\u010dki server instaliran kao virtualna ma\u0161ina, preporu\u010duje se napraviti backup virtualne ma\u0161ine ugra\u0111enim sredstvima hypervizora. To je jednostavno br\u017ee i pouzdanije.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/c2bd3da4f9eddcf8524f7006f8e8e37d.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 2. Izrada snapshot-a u Gaia Portal<\/p>\n<p>3) Spremite konfiguraciju ure\u0111aja iz Gaia Portala. Mo\u017eete snimiti sve kartice postavki u Gaia Portalu, ili iz Clisha unijeti naredbu <strong>save configuration<\/strong>. Zatim prebacite datoteku na svoj PC pomo\u0107u WinSCP-a ili drugog klijenta.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/bcdf28ffb804edd3ece43f3cd0b11ee6.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 3. Spremanje konfiguracije u tekstualnu datoteku)<\/p>\n<p><strong>Napomena<\/strong><em><strong>: <\/strong><\/em>Ako WinSCP ne omogu\u0107ava povezivanje, promijenite shell korisnika u \/bin\/bash ili u web su\u010delju u odjeljku Korisnici, ili upi\u0161ite naredbu<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash<\/strong>.<\/p>\n<p>A\u017euriranje putem CPUSE-a<\/p>\n<p>4) Prva 3 koraka su obavezna za bilo koju opciju a\u017euriranja. Ako ste se odlu\u010dili za jednostavniji put a\u017euriranja, idite u web su\u010delje i odaberite <em>A\u017euriranja (CPUSE) &gt; Status i akcije &gt; Glavne verzije &gt; Check Point R80.40 Gaia Fresh Install and Upgrade. <\/em>Desnom tipkom mi\u0161a kliknite na ovo a\u017euriranje i odaberite <em>Provjera. <\/em>Zapo\u010dnite proces provjere koji \u0107e trajati nekoliko minuta, nakon \u010dega \u0107ete vidjeti poruku da se ure\u0111aj mo\u017ee a\u017eurirati. Ako vidite pogre\u0161ke, potrebno ih je ispraviti.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/a02b7b395d395c6eb36e90f8824e516b.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 4. A\u017euriranje putem CPUSE-a<\/p>\n<p>5) A\u017eurirajte na najnoviju verziju CDT (Central Deployment Tool) \u2014 alat koji se pokre\u0107e na upravlja\u010dkom poslu\u017eitelju i omogu\u0107uje instalaciju a\u017euriranja, paketa a\u017euriranja, upravljanje sigurnosnim kopijama, snimcima, skriptama i mnogo drugim. Neaktualna verzija CDT-a mo\u017ee dovesti do problema s a\u017euriranjem. Preuzmite CDT s <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal\/role\/supportcenterUser\/page\/default.psml\/media-type\/html?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=104450\"><u>vezi<\/u><\/a><\/noindex>.<\/p>\n<p>6) Nakon \u0161to ste preuzeli arhivu na SMS, prebacite je u bilo koju direktoriju putem WinSCP-a, spojite se putem SSH na SMS i pre\u0111ite u ekspertni na\u010din. Podsje\u0107am da korisnik WinSCP mora imati shell <strong>\/bin\/bash<\/strong>!<\/p>\n<p>7) Unesite naredbe:<strong>&nbsp;<\/strong><\/p>\n<p><em>cd \/somepathtoCDT\/<\/em><\/p>\n<p><em>tar -zxvf .tgz<\/em><\/p>\n<p><em>rpm -Uhv \u2014force CPcdt-00-00.i386.rpm<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/6c1f64e57f24d9fb6d117fa3a7a09461.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 5. Instalacija Central Deployment Tool (CDT)<\/p>\n<p>8) Sljede\u0107i korak je instalacija slike R80.40. Desnom tipkom mi\u0161a kliknite na a\u017euriranje <em>Preuzmi, <\/em>zatim <em>Instaliraj.<\/em> Imajte na umu da a\u017euriranje traje 20-30 minuta, a upravlja\u010dki poslu\u017eitelj ne\u0107e biti dostupan neko vrijeme. Stoga, ima smisla dogovoriti prozor za odr\u017eavanje.<\/p>\n<p>9) Sve licence i sigurnosne politike se \u010duvaju, stoga bi trebali preuzeti novu <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex>.<\/p>\n<p>10) Pove\u017eite se na SMS novog SmartConsole-a i postavite sigurnosne politike. Tipka <em>Install Policy<\/em> je u gornjem lijevom kutu.<\/p>\n<p>11) Va\u0161 SMS je a\u017euriran, sljede\u0107e je instalirati najnoviji hitni popravak. Na kartici <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Hotfixes <\/em>desnom tipkom mi\u0161a <em>Verifier<\/em>, zatim <em>Install Update<\/em>. Ure\u0111aj \u0107e se automatski ponovno pokrenuti nakon instalacije a\u017euriranja.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/bced9cc3fce6f65835ffdff00a1ccdfb.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 6. Instalacija posljednjeg hitnog popravka preko CPUSE<\/p>\n<p>A\u017euriranje pomo\u0107u alata za migraciju<\/p>\n<p>4) Prvo tako\u0111er trebate a\u017eurirati na najnoviju verziju CDT \u2014 to\u010daka 5, 6, 7 iz odjeljka <em>\u201cA\u017euriranje pomo\u0107u CPUSE\u201d.<\/em><\/p>\n<p>5) Instalirajte paket alata za migraciju potreban za migraciju politika s upravlja\u010dkog poslu\u017eitelja. Mo\u017eete prona\u0107i alate za migraciju za verzije: R80.20, R80.20 M1, R80.20 M2, R80.30, R80.40. Trebate preuzeti alate za migraciju one verzije, <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk135172\"><u>vezi<\/u><\/a><\/noindex> na koju se \u017eelite a\u017eurirati <strong>, a ne one koju trenutno imate! U na\u0161em slu\u010daju to je R80.40.<\/strong>6) Zatim u web su\u010delju SMS idite na karticu<\/p>\n<p>Upgrades (CPUSE) &gt; Status and Actions &gt; Import Package &gt; Browse &gt; Odaberite preuzetu datoteku &gt; Import <em>Slika 7. Uvoz alata za migraciju<\/em>.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/b1b1164018a9750bfb952b1b650ea341.png\" style=\"display:block;margin: 0 auto;\" \/>7) Iz ekspertnog na\u010dina rada na SMS-u provjerite je li paket alata za migraciju instaliran pomo\u0107u komande (izlaz komande trebao bi se podudarati s brojem u nazivu arhive alata za migraciju):<\/p>\n<p>cpprod_util CPPROD_GetValue CPupgrade-tools-R80.40 BuildNumber 1<\/p>\n<p><em><strong>Slika 8. Provjera instalacije alata za migraciju<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/1a0e032ec53ee5a05f979637217a9562.png\" style=\"display:block;margin: 0 auto;\" \/>8) Idite u mapu $FWDIR\/scripts na upravlja\u010dkom poslu\u017eitelju:<\/p>\n<p>cd $FWDIR\/scripts<\/p>\n<p><em><strong>9) Pokrenite pre-upgrade verifier (provjeravaju\u0107i skript) pomo\u0107u komande (ako ima gre\u0161aka, ispravite ih prije daljnjih koraka):<\/strong><\/em><\/p>\n<p>.\/migrate_server verify -v R80.40<\/p>\n<p><em><strong>: ako vidite gre\u0161ku<\/strong><\/em><\/p>\n<p><strong>Napomena<\/strong>\u201cFailed to retrieve Upgrade Tools package\u201d <em>, ali ste provjerili da je arhiva uspje\u0161no uvezena (vidi to\u010dku 4), upotrijebite komandu:<\/em>.\/migrate_server verify -v R80.40 -skip_upgrade_tools_check<\/p>\n<p><em><strong>Slika 9. Pokretanje skripta za provjeru<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/a6b29e5fb7b3c183ec3c9fc92c32db6c.png\" style=\"display:block;margin: 0 auto;\" \/>10) Izvezite sigurnosne politike pomo\u0107u komande:<\/p>\n<p>.\/migrate_server export -v R80.40 \/\/.tgz<\/p>\n<p><em><strong>Slika 10. Izvoz sigurnosnih politika<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/1bd0c4604bdcc5640280f1cbed4837b1.png\" style=\"display:block;margin: 0 auto;\" \/>, ali ste provjerili da je arhiva uspje\u0161no uvezena (to\u010dka 7), upotrijebite komandu:<\/p>\n<p><strong>Napomena<\/strong>\u201cFailed to retrieve Upgrade Tools package\u201d <em>, ali ste provjerili da je arhiva uspje\u0161no uvezena (vidi to\u010dku 4), upotrijebite komandu:<\/em>.\/migrate_server export -skip_upgrade_tools_check -v R80.40 \/\/.tgz<\/p>\n<p><em><strong>.\/migrate_server export -skip_upgrade_tools_check -v R80.40 \/\/.tgz<\/strong><\/em><\/p>\n<p>11) Izra\u010dunajte MD5 hash i spremite izlaz naredbe:<\/p>\n<p><em><strong>md5sum \/\/.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/f0c2e03613eba64d1047011a135db217.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 11. Izra\u010dunavanje MD5 hash-a<\/p>\n<p>12) Pomo\u0107u WinSCP-a premjestite ovu datoteku na svoj ra\u010dunalni ure\u0111aj.<\/p>\n<p>13) Unesite naredbu <strong>df -h <\/strong>i zabilje\u017eite postotak odnosa direktorija prema zauzetom prostoru.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/09d8134e5f5813530b389d36a4f2001c.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 12. Postotak odnosa direktorija na SMS-u<\/p>\n<p>14.1)  <strong>U slu\u010daju da imate stvarni SMS<\/strong><\/p>\n<p>14.1.1) Pomo\u0107u <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> kreira se bootabilni USB stick s imid\u017eom <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>.&nbsp;<\/p>\n<p>14.1.2) Preporu\u010dujem da pripremite najmanje 2 bootabilna sticks, jer ponekad stick mo\u017eda ne\u0107e biti prepoznat.&nbsp;<\/p>\n<p>14.1.3) Kao administrator pokrenite<em> ISOmorphic.exe. <\/em>U to\u010dki 1 odaberite preuzeti imid\u017e Gaia R80.40, a u to\u010dki 4 stick. To\u010dke 2 i 3 ne trebate mijenjati. <strong>ne trebate<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/8718bfa85d3a4f0d3aa371b3adcdc064.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 13. Kreiranje bootabilnog sticka<\/p>\n<p>14.1.4) Odaberite opciju <em>\u201cInstaliraj automatski bez potvrde\u201d <\/em>i va\u017eno je navesti model va\u0161eg kontrolnog poslu\u017eitelja. U slu\u010daju SMS-a odaberite tre\u0107i ili \u010detvrti redak.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/56f0106357b3d39edd8b7bafa5bb1f80.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 14. Odabir modela ure\u0111aja za kreiranje bootabilnog sticka<\/p>\n<p>14.1.5) Nakon toga isklju\u010dite appliance, umetnite USB stick u USB port, spojite se konzolnim kabelom preko COM porta na ure\u0111aj i uklju\u010dite SMS. Proces instalacije odvija se sam. IP adresa po defaultu \u2014 <strong>192.168.1.1\/24<\/strong>, a podaci za prijavu <strong>admin \/ admin<\/strong>.<\/p>\n<p>14.1.6) Sljede\u0107i korak je povezivanje s web su\u010deljem na Gaia Portalu (adresa po defaultu <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><strong><u>https:\/\/192.168.1.1<\/u><\/strong><\/a><\/noindex>), gdje \u0107ete pro\u0107i inicijalizaciju ure\u0111aja. Tijekom inicijalizacije uglavnom kliknite <em>Dalje, <\/em>jer gotovo sve postavke mo\u017eete promijeniti kasnije. Me\u0111utim, odmah mo\u017eete promijeniti IP adresu, DNS postavke i hostname.<\/p>\n<p>14.2) <strong>U slu\u010daju da imate virtualni SMS<\/strong><\/p>\n<p>14.2.1) Nikako ne smijete brisati stari SMS, kreirajte novu virtualnu ma\u0161inu s istim resursima (CPU, RAM, HDD) s istom IP adresom. Usput, RAM i HDD mo\u017eete dodati, jer verzija R80.40 je malo zahtjevnija. Da ne bi do\u0161lo do sukoba IP adresa, isklju\u010dite stari SMS i zapo\u010dnite instalaciju novog.<\/p>\n<p>14.2.2) Tijekom instalacije Gaie postavite aktualnu IP adresu i dodijelite za direktorij <strong>\/root<\/strong> odgovaraju\u0107u koli\u010dinu prostora. Postotak odnosa direktorija trebao bi vam otprilike <strong>ostati sa\u010duvan<\/strong>, koristite izlaz <strong>df -h<\/strong>.<\/p>\n<p>15) U trenutku odabira vrste instalacije <em>\u201cVrsta instalacije\u201d <\/em>Odaberite prvu opciju, jer vjerojatno nemate MDS (Multi-Domain Server). Ako imate MDS, to zna\u010di da ste upravljali mnogim domenama iz razli\u010ditih SMS entiteta istovremeno. U tom slu\u010daju trebate odabrati drugu to\u010dku.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/4f04ee96ab5b888f5187de677255af90.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 15. Odabir tipa instalacije Gaia<\/p>\n<p>16) Najva\u017enija to\u010dka koju ne mo\u017eete popraviti bez ponovne instalacije \u2014 izbor entiteta. Treba odabrati <em><strong>Upravljanje sigurno\u0161\u0107u<\/strong><\/em> i pritisnite <em>Dalje. <\/em>Sve ostalo ostavite prema zadanim postavkama.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/8a9f13889696bf7c95d50a6580c62722.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 16. Odabir tipa entiteta pri instalaciji Gaia<\/p>\n<p>17) Kada se ure\u0111aj ponovo pokrene, pove\u017eite se s web su\u010deljem putem <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><u>https:\/\/192.168.1.1<\/u><\/a><\/noindex> ili drugog IP adresa, ako ste ga promijenili.<\/p>\n<p>18)&nbsp;Prenesite postavke sa snimaka ekrana u sve kartice Gaia Portala, u kojima je ne\u0161to bilo pode\u0161eno, ili iz clish izvr\u0161ite naredbu <strong>load configuration .txt<\/strong>. Ovu konfiguracijsku datoteku trebate prethodno prenijeti na SMS.<\/p>\n<p><strong>Napomena<\/strong><em><strong>: <\/strong><\/em>S obzirom na to da je OS nov, WinSCP ne dopu\u0161ta povezivanje kao admin, promijenite korisniku shell na \/bin\/bash ili u web su\u010delju u kartici Korisnici, ili upisom naredbe<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>ili stvorite novog korisnika.<\/p>\n<p>19) Prenesite datoteku s eksportiranim politikama sa starog upravlja\u010dkog poslu\u017eitelja u bilo koji direktorij. Zatim idite u konzolu u stru\u010dni na\u010din i provjerite sla\u017ee li se MD5 hash s prethodnim. U suprotnom, izvoz treba ponoviti:<\/p>\n<p><em><strong>md5sum<\/strong> <strong>\/&lt;Full Path&gt;\/&lt;Name of Exported File&gt;.tgz<\/strong><\/em><\/p>\n<p>20) Ponovite to\u010dku 6 i instalirajte Upgrade Tools na novi SMS u Gaia Portalu u kartici <em>A\u017euriranja (CPUSE) &gt; Status i akcije.<\/em><\/p>\n<p>21) Upisite naredbu u stru\u010dnom na\u010dinu:<\/p>\n<p><em><strong>.\/migrate_server import -v R80.40 -skip_upgrade_tools_check \/\/.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/9eab781ee0bd7f589859ff7360da35e7.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 17. Uvoz politika sigurnosti na novi SMS<\/p>\n<p>22) Uklju\u010dite usluge naredbom <strong>cpstart<\/strong>.<\/p>\n<p>23) Preuzmite novi <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> i pove\u017eite se s upravlja\u010dkim poslu\u017eiteljem. Idite u <em>Izbornik &gt; Upravljanje licenci i paketa (SmartUpdate)<\/em> i provjerite jeste li zadr\u017eali licencu. <\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/ab3a9b5ea4a778f7430861ac99de2ead.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 18. Provjera instaliranih licenci<\/p>\n<p>24) Postavite politiku sigurnosti na gateway ili klaster \u2014 <em>Install Policy<\/em>.<\/p>\n<h2>A\u017euriranje Security Gateway (SG)<\/h2>\n<p>Sigurnosni gateway mo\u017ee se a\u017eurirati putem CPUSE-a, kao i upravlja\u010dki poslu\u017eitelj, ili ponovo instalirati \u2014 <strong>fresh install<\/strong>. Iz mog iskustva, u 99% slu\u010dajeva svi ponovo instaliraju Security Gateway jer to traje gotovo isto vrijeme kao a\u017euriranje putem CPUSE, a dobivate \u010disti a\u017eurirani OS bez gre\u0161aka.<\/p>\n<p>Na sli\u010dan na\u010din kao sa SMS-om prvo je potrebno napraviti sigurnosnu kopiju i snimak, kao i sa\u010duvati postavke iz Gaia Portala. Obratite se to\u010dkama 1, 2 i 3 u odjeljku. <em>\u201eA\u017euriranje Security Management Servera\u201c<\/em>.<\/p>\n<p>A\u017euriranje putem CPUSE-a<\/p>\n<p>A\u017euriranje Security Gatewaya putem CPUSE odvija se na isti na\u010din kao i a\u017euriranje Security Management Servera, stoga, vratite se na po\u010detak \u010dlanka.<\/p>\n<p>Va\u017ena napomena: a\u017euriranje SG zahtijeva <strong>ponovno pokretanje<\/strong>! Stoga izvr\u0161ite a\u017euriranje u prozoru za odr\u017eavanje. Ako imate klaster, najprije a\u017eurirajte pasivnu nodu, zatim prebacite uloge i a\u017eurirajte drugu nodu. U slu\u010daju klastera prozore za odr\u017eavanje mo\u017eete izbje\u0107i.<\/p>\n<p>Instalacija nove verzije OS-a na Security Gateway<\/p>\n<p><strong>1.1) U slu\u010daju da imate fizi\u010dki SG<\/strong><\/p>\n<p>1.1.1) Pomo\u0107u <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> kreira se bootabilni USB stick s imid\u017eom <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>. Slika je ista kao na SMS-u, me\u0111utim, postupak izrade bootable flash drivea izgleda malo druga\u010dije.<\/p>\n<p>1.1.2) Preporu\u010dujem pripremu najmanje 2 bootable flash drivea, jer se ponekad dogodi da flash drive nije prepoznat.&nbsp;<\/p>\n<p>1.1.3) S administratorskim privilegijama na ra\u010dunalu pokrenite<em> ISOmorphic.exe. <\/em>U to\u010dki 1 odaberite preuzeti imid\u017e Gaia R80.40, a u to\u010dki 4 stick. To\u010dke 2 i 3 ne trebate mijenjati. <strong>ne trebate<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/526c027ff55a2b9e47b53940583d9e81.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 19. Izrada bootable flash drive-a<\/p>\n<p>1.1.4) Odaberite opciju <em>\u201cInstaliraj automatski bez potvrde\u201d, <\/em>i va\u017eno je navesti model va\u0161eg Security Gateway-a \u2014 redovi 2 ili 3. Ako se radi o fizi\u010dkom sandboxu (SandBlast Appliance), odabiremo red 5.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/2f3a348bf2875a82cb47183527fd0fe2.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 20. Odabir modela ure\u0111aja za izradu bootable flash drive-a<\/p>\n<p>1.1.5) Nakon toga isklju\u010dite appliance, umetnite USB stick u USB port, spojite se konzolnim kabelom preko COM porta na ure\u0111aj i uklju\u010dite gateway. Proces instalacije odvija se sam. IP adresa po defaultu \u2014 <strong>192.168.1.1\/24<\/strong>, a podaci za prijavu <strong>admin \/ admin<\/strong>. Prvo treba a\u017eurirati <strong>pasivnu nodu<\/strong>, zatim postaviti politiku na nju, prebaciti uloge i onda a\u017eurirati drugu nodu. Vjerojatno \u0107e biti potrebno odr\u017eavanje.<\/p>\n<p>1.1.6) Sljede\u0107i korak je povezivanje s web su\u010deljem na Gaia Portalu, gdje prolazite kroz prvu inicijalizaciju ure\u0111aja. Tijekom inicijalizacije uglavnom pritiskate <em>Dalje, <\/em>jer gotovo sve postavke mo\u017eete promijeniti kasnije. Me\u0111utim, odmah mo\u017eete promijeniti IP adresu, DNS postavke i hostname.<\/p>\n<p><strong>1.2) U slu\u010daju da imate virtualni SG<\/strong><\/p>\n<p>1.2.1) Kreirajte novu virtualnu ma\u0161inu sa istim ili ve\u0107im resursima (CPU, RAM, HDD), jer verzija R80.40 zahtijeva ne\u0161to vi\u0161e. Da ne bi do\u0161lo do sukoba IP adresa, isklju\u010dite stari gateway i zapo\u010dnite instalaciju novog sa istom IP adresom. Stari SG mo\u017ee se slobodno ukloniti, jer na njemu nema ni\u0161ta vrijedno, po\u0161to su sve najva\u017enije stvari \u2014 sigurnosna politika \u2014 na upravlja\u010dkom serveru.<\/p>\n<p>1.2.2) Tijekom instalacije OS-a postavite aktualnu IP-adresu i dodijelite <strong>\/root<\/strong> prikladnu koli\u010dinu prostora za direktorij.<\/p>\n<p>3) Pove\u017eite se putem HTTPS port na gateway i zapo\u010dnite proces inicijalizacije. Prilikom odabira vrste instalacije <em>\u201cVrsta instalacije\u201d <\/em>odaberite prvu opciju \u2014 Security Gateway i\/ili Security Management.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/d775729e7a6890e97621d2d56e993ce7.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 21. Odabir vrste instalacije Gaia<\/p>\n<p>4) Najva\u017enija ta\u010dka \u2014 izbor entiteta (Products). Treba odabrati <em><strong>Security Gateway<\/strong><\/em> i, ako imate klaster, ozna\u010dite <em><strong>\"Unit is a part of a cluster, type: ClusterXL\"<\/strong><\/em>. Ako imate klaster VRRP, odaberite takvu vrstu, ali to je malo vjerojatno.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/822897faf0380d1bcb5b6c1412aae51a.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 22. Odabir vrste entiteta prilikom instalacije Gaia<\/p>\n<p>5) U sljede\u0107em koraku postavite jednokratnu SIC lozinku za uspostavljanje povjerenja sa upravlja\u010dkim serverom. Ova lozinka se koristi za generisanje certifikata, a upravlja\u010dki server \u0107e komunicirati sa gateway-em putem \u0161ifrovanog kanala. Potvrdite <em>\"Connect to your Management as a Service\" <\/em>ako je upravlja\u010dki server smje\u0161ten u oblaku. Nedavno smo napisali o tome <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517370\/\"><u>\u010dlanak<\/u><\/a><\/noindex> i koliko je ugodno i jednostavno upravljanje serverom u oblaku.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/eccc5423cafd0356eb1dafbd560eb150.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 23. Kreiranje SIC <\/p>\n<p>6) Zapo\u010dnite proces inicijalizacije na sljede\u0107oj kartici. Kada se ure\u0111aj ponovo pokrene, pove\u017eite se s web su\u010deljem i prenesite postavke iz snimki zaslona u sve kartice Gaia Portala gdje je ne\u0161to bilo postavljeno ili izvedite naredbu <strong>load configuration .txt<\/strong>. Ovu datoteku konfiguracije treba unaprijed prenijeti na sigurnosni gateway.<\/p>\n<p><strong>Napomena<\/strong><em><strong>: <\/strong><\/em>S obzirom na to da je OS nov, WinSCP ne dopu\u0161ta povezivanje kao admin, promijenite korisniku shell na \/bin\/bash ili u web su\u010delju u kartici Korisnici, ili upisom naredbe<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>ili kreirajte novog korisnika s tim shell-om.<\/p>\n<p>7) Otvorite <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> i u\u0111ite u objekt sigurnosnog gatewaya koji ste upravo ponovo instalirali. Otvorite karticu<em> General Properties &gt; Communication &gt; Reset SIC <\/em>i unesite lozinku zadanu u to\u010dki 5.<\/p>\n<p><img decoding=\"async\" alt=\"Postupak a\u017euriranja Check Point s R80.20\/R80.30 na R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/f0b755e9e09bb07478cd52ce26afbd8f.png\" style=\"display:block;margin: 0 auto;\" \/>Slika 24. Uspostavljanje povjerenja s novim sigurnosnim gatewayem<\/p>\n<p>8) Verzija Gaia na objektu trebala bi se promijeniti; ako se ne promijeni, promijenite je ru\u010dno. Zatim postavite politiku na gatewayu.<\/p>\n<p>9) U Gaia Portalu idite na karticu <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Hotfixes <\/em>i instalirajte posljednji hotfix. Ure\u0111aj \u0107e <strong>ponovo pokrenuti <\/strong>tokom instalacije!<\/p>\n<p>10) U slu\u010daju klastera, promijenite uloge nodova i ponovite iste korake za drugi nod.<\/p>\n<h2>Zaklju\u010dak<\/h2>\n<p>Poku\u0161ao sam napraviti \u0161to jasniji i sveobuhvatniji vodi\u010d za nadogradnju s verzije R80.20\/R80.30 na trenutno aktuelnu R80.40, budu\u0107i da se mnogo toga promijenilo. Verzija <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517378\/\"><u>Gaia R81<\/u><\/a><\/noindex> ve\u0107 je dostupna u demo re\u017eimu, ali postupak nadogradnje ostaje vi\u0161e-manje identi\u010dan. Slijede\u0107i slu\u017ebeni <noindex><a rel=\"nofollow\" href=\"https:\/\/sc1.checkpoint.com\/documents\/R80.40\/WebAdminGuides\/EN\/CP_R80.40_Installation_and_Upgrade_Guide\/Content\/Topics-IUG\/Upgrading-Management-Servers-and-Log-Servers.htm?tocpath=Upgrade%20of%20Security%20Management%20Servers%20and%20Log%20Servers%7C_____0\"><u>vodi\u010d<\/u><\/a><\/noindex> od Check Point, i vi sami mo\u017eete razumjeti sve finese.<\/p>\n<p>Za sve upite slobodno se obratite nama. Rado \u0107emo vam pomo\u0107i s najkompleksnijim a\u017euriranjima i slu\u010dajevima unutar na\u0161e tehni\u010dke podr\u0161ke. <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>CPSupport<\/u><\/a><\/noindex>. Tako\u0111er na na\u0161oj <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\"><u>web stranici<\/u><\/a><\/noindex> mo\u017eete naru\u010diti provjeru postavki Check Pointa ili zatra\u017eiti besplatnu <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>zahtjev<\/u><\/a><\/noindex> za tehni\u010dki slu\u010daj.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\"><strong><u>Velika zbirka materijala o Check Point od TS Solution<\/u><\/strong><\/a><\/noindex>. Pratite a\u017euriranja (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517716\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93434,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Postupak a\u017euriranja Check Pointa s R80.20\/R80.30 na R80.40 | ProHoster","description":"Vi\u0161e od dvije godine smo.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-07T05:42:37+00:00","article:modified_time":"2020-09-07T05:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93433","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:47:32","updated":"2022-10-02 09:45:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/93433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=93433"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/93433\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/93434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=93433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=93433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=93433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}