{"id":89773,"date":"2020-07-26T13:42:06","date_gmt":"2020-07-26T11:42:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway"},"modified":"2020-07-26T13:42:06","modified_gmt":"2020-07-26T11:42:06","slug":"1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway","title":{"rendered":"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/64aead45247fe582f9d56810dc192390.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA k\u00f6zz\u00e9t\u00e9tel ut\u00e1n <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/336298\/\">cikkb\u0151l sz\u00e1rmaznak<\/a><\/noindex> t\u00f6bb mint k\u00e9t \u00e9v telt el, a 1400-as sorozat modelljei ma m\u00e1r nem el\u00e9rhet\u0151k. Itt az ideje a v\u00e1ltoz\u00e1soknak \u00e9s \u00faj\u00edt\u00e1soknak, ezt a feladatot a CheckPoint a 1500-as sorozatban megpr\u00f3b\u00e1lta megval\u00f3s\u00edtani. A cikkben megvizsg\u00e1ljuk a kis irod\u00e1k vagy v\u00e1llalatok fi\u00f3kj\u00e1nak v\u00e9delm\u00e9re szolg\u00e1l\u00f3 modelleket, bemutatjuk a m\u0171szaki jellemz\u0151ket, a sz\u00e1ll\u00edt\u00e1si saj\u00e1toss\u00e1gokat (enged\u00e9lyez\u00e9s, ir\u00e1ny\u00edt\u00e1si \u00e9s adminisztr\u00e1ci\u00f3s s\u00e9m\u00e1k), \u00e9rinteni fogjuk az \u00faj technol\u00f3gi\u00e1kat \u00e9s opci\u00f3kat.<\/p>\n<h3>Modellk\u00edn\u00e1lat<\/h3>\n<p>\nAz \u00faj SMB modellek a k\u00f6vetkez\u0151k: 1530, 1550, 1570, 1570R. A term\u00e9kekkel a k\u00f6vetkez\u0151 webhelyen ismerkedhet meg <noindex><a rel=\"nofollow\" href=\"https:\/\/www.checkpoint.com\/products\/small-business-security\/#specs\">oldal\u00e1n<\/a><\/noindex> a CheckPoint port\u00e1lj\u00e1n. Logikailag h\u00e1rom csoportra osztjuk \u0151ket: irodai biztons\u00e1gi \u00e1tj\u00e1r\u00f3 WIFI t\u00e1mogat\u00e1ssal (1530, 1550), irodai biztons\u00e1gi \u00e1tj\u00e1r\u00f3 WIFI + 4G\/LTE t\u00e1mogat\u00e1ssal (1570, 1550), ipari biztons\u00e1gi \u00e1tj\u00e1r\u00f3 (1570R).<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h4>1530, 1550 sorozat<\/h4>\n<p>\n<img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/20c31dfc73e85029436d56f1f9bd441c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\nA modellek 5 h\u00e1l\u00f3zati interf\u00e9sszel rendelkeznek helyi h\u00e1l\u00f3zathoz \u00e9s 1 interf\u00e9sszel az Internethez, kapacit\u00e1suk 1 GB. USB-C konzol is rendelkez\u00e9sre \u00e1ll. Ami a m\u0171szaki jellemz\u0151ket illeti, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.checkpoint.com\/downloads\/products\/1500-security-gateway-datasheet.pdf\">DataSheet<\/a><\/noindex> e modellek sz\u00e9les v\u00e1laszt\u00e9k\u00e1t k\u00edn\u00e1lj\u00e1k a m\u00e9rhet\u0151 param\u00e9tereknek, mi a sz\u00e1munkra legfontosabbakra fogunk koncentr\u00e1lni.<\/p>\n<p>Jellemz\u0151k<\/p>\n<p><strong>1530<\/strong><\/p>\n<p><strong>1550<\/strong><\/p>\n<p>Maxim\u00e1lis kapcsolatok sz\u00e1ma m\u00e1sodpercenk\u00e9nt<\/p>\n<p>10 500 <\/p>\n<p>14 000<\/p>\n<p>Maxim\u00e1lis egyidej\u0171 kapcsolatok sz\u00e1ma<\/p>\n<p>500 000 <\/p>\n<p>500 000 <\/p>\n<p>\u00c1tviteli sebess\u00e9g T\u0171zfal + Fenyeget\u00e9smegel\u0151z\u00e9s eset\u00e9n (Mbit\/s)<\/p>\n<p>340<\/p>\n<p>450<\/p>\n<p>\u00c1tviteli sebess\u00e9g T\u0171zfal + IPS eset\u00e9n (Mbit\/s)<\/p>\n<p>600<\/p>\n<p>800<\/p>\n<p>T\u0171zfal \u00e1tviteli sebess\u00e9g (Mbit\/s)<\/p>\n<p>1000 <\/p>\n<p>1000 <\/p>\n<p>* A Fenyeget\u00e9smegel\u0151z\u00e9s alatt az al\u00e1bbi ind\u00edtott blade-ek \u00e9rtend\u0151k: T\u0171zfal, Alkalmaz\u00e1svez\u00e9rl\u00e9s \u00e9s IPS.<\/p>\n<p>A 1530, 1550 modellek k\u00fcl\u00f6nf\u00e9le funkcion\u00e1lis lehet\u0151s\u00e9gekkel rendelkeznek:<\/p>\n<ul>\n<li>Gaia 80.20 Embedded, az opci\u00f3k list\u00e1ja a k\u00f6vetkez\u0151ben tal\u00e1lhat\u00f3 <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk159772\">SK<\/a><\/noindex> CHeckPoint <\/li>\n<li> A Mobile Access enged\u00e9ly 100 egyidej\u0171 kapcsolatra b\u00e1rmelyik eszk\u00f6z megv\u00e1s\u00e1rl\u00e1sakor biztos\u00edtva van. Figyelembe kell venni, hogy ez a SMB NGFW modellcsal\u00e1d k\u00fcl\u00f6nlegess\u00e9ge, amely lehet\u0151v\u00e9 teszi a Mobile Access k\u00fcl\u00f6n v\u00e1s\u00e1rl\u00e1s\u00e1n\u00e1l megtakar\u00edt\u00e1st, ami m\u00e1s CheckPoint modellek v\u00e1s\u00e1rl\u00e1sakor nem \u00e9rhet\u0151 el.<\/li>\n<li>Lehet\u0151s\u00e9g a biztons\u00e1gi \u00e1tj\u00e1r\u00f3 mobilalkalmaz\u00e1ssal t\u00f6rt\u00e9n\u0151 kezel\u00e9s\u00e9re a Watch Tower haszn\u00e1lat\u00e1val (r\u00e9szletesebben \u00edrtunk err\u0151l a <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/488712\/\">cikkben.<\/a><\/noindex>)<\/li>\n<\/ul>\n<p>\n<u>Kinek val\u00f3 a 1530, 1550 sorozat<\/u>: ez a term\u00e9kcsal\u00e1d legfeljebb 100 f\u0151s fi\u00f3kirod\u00e1k sz\u00e1m\u00e1ra megfelel\u0151, t\u00e1voli kapcsolatokat biztos\u00edt, k\u00fcl\u00f6nf\u00e9le adminisztr\u00e1ci\u00f3s m\u00f3dszerekkel rendelkezik.<\/p>\n<h4>1570, 1590 sorozat<\/h4>\n<p>\n<img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/48b3782494f42de7276142274625c061.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA legnagyobb 1500-as sorozat\u00fa modellek 8 interf\u00e9sszel rendelkeznek lok\u00e1lis csatlakoz\u00e1sokhoz, 1 interf\u00e9sszel a DMZ-hez \u00e9s 1 interf\u00e9sszel az internetkapcsolathoz (az \u00f6sszes port s\u00e1vsz\u00e9less\u00e9ge 1 GBit\/s). USB 3.0 Port \u00e9s USB-C konzol is el\u00e9rhet\u0151. A modellek t\u00e1mogatj\u00e1k a 4G\/LTE modemeket. A k\u00e9sz\u00fcl\u00e9k bels\u0151 t\u00e1rol\u00f3j\u00e1nak b\u0151v\u00edt\u00e9s\u00e9re Micro-SD k\u00e1rty\u00e1k t\u00e1mogat\u00e1sa is akt\u00edv.<\/p>\n<p>A m\u0171szaki adatok al\u00e1bb tal\u00e1lhat\u00f3ak: <\/p>\n<p>Jellemz\u0151k<\/p>\n<p><strong>1570<\/strong><\/p>\n<p><strong>1590<\/strong><\/p>\n<p>Maxim\u00e1lis kapcsolatok sz\u00e1ma m\u00e1sodpercenk\u00e9nt<\/p>\n<p>15 750 <\/p>\n<p>21 000<\/p>\n<p>Maxim\u00e1lis egyidej\u0171 kapcsolatok sz\u00e1ma<\/p>\n<p>500 000 <\/p>\n<p>500 000 <\/p>\n<p>S\u00e1vsz\u00e9less\u00e9g a Threat Prevention sor\u00e1n (Mbit\/s)<\/p>\n<p>500<\/p>\n<p>660<\/p>\n<p>\u00c1tviteli sebess\u00e9g T\u0171zfal + IPS eset\u00e9n (Mbit\/s)<\/p>\n<p>970<\/p>\n<p>1300<\/p>\n<p>T\u0171zfal \u00e1tviteli sebess\u00e9g (Mbit\/s)<\/p>\n<p>2800 <\/p>\n<p>2800 <\/p>\n<p>A 1570-es \u00e9s 1590-es modellek sz\u00e1mos funkci\u00f3val rendelkeznek:<\/p>\n<ul>\n<li>Gaia 80.20 Embedded, az opci\u00f3k list\u00e1ja a k\u00f6vetkez\u0151ben tal\u00e1lhat\u00f3 <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk159772\">SK<\/a><\/noindex>.<\/li>\n<li>200 versenyk\u00e9pes csatlakoz\u00e1sra sz\u00f3l\u00f3 Mobile Access licenc <br \/>\nb\u00e1rmelyik k\u00e9sz\u00fcl\u00e9k megv\u00e1s\u00e1rl\u00e1sakor. Figyelembe kell venni, hogy ez a SMB NGFW sorozat kiemelked\u0151 jellemz\u0151je, amely lehet\u0151v\u00e9 teszi, hogy sp\u00f3roljon a k\u00fcl\u00f6n\u00e1ll\u00f3 Mobile Access licencek v\u00e1s\u00e1rl\u00e1s\u00e1n, amelyek m\u00e1s modellek v\u00e1s\u00e1rl\u00e1sakor nem tartoznak az alapcsomagba.<\/li>\n<li>Lehet\u0151s\u00e9g a biztons\u00e1gi \u00e1tj\u00e1r\u00f3 mobilalkalmaz\u00e1ssal t\u00f6rt\u00e9n\u0151 kezel\u00e9s\u00e9re a Watch Tower haszn\u00e1lat\u00e1val (r\u00e9szletesebben \u00edrtunk err\u0151l a <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/488712\/\">a Spotify d\u00f6nt\u00e9shozatali m\u00f3dszertan\u00e1r\u00f3l. Egyre t\u00f6bb felhaszn\u00e1l\u00f3 prefer\u00e1lja a zenehallgat\u00e1st mobilon a streaming szolg\u00e1ltat\u00e1sban, de a c\u00e9gn\u00e9l t\u00falnyom\u00f3r\u00e9szt webprogramoz\u00f3k dolgoznak. A Spotify elemezte ezt a helyzetet, \u00e9s \u00fagy d\u00f6nt\u00f6tt, hogy t\u00f6bb mobilfejleszt\u0151t vesz fel, valamint \u00e1tnevezi a webes szakembereket \u00faj ir\u00e1nyba:<\/a><\/noindex>).<\/li>\n<\/ul>\n<p>\n<u>Kinek val\u00f3 a 1570, 1590-es sorozat<\/u>: ez a sorozat 200 f\u0151ig alkalmas irod\u00e1k sz\u00e1m\u00e1ra, t\u00e1voli kapcsolatot biztos\u00edt, \u00e9s a legmagasabb teljes\u00edtm\u00e9nnyel rendelkezik az SMB csal\u00e1d tagjai k\u00f6z\u00f6tt.<\/p>\n<p>\u00d6sszehasonl\u00edt\u00e1s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.checkpoint.com\/downloads\/products\/1400-security-gateway-datasheet.pdf\">adatok<\/a><\/noindex> a kor\u00e1bbi modellekre:<\/p>\n<p>Jellemz\u0151k<\/p>\n<p><strong>1470<\/strong><\/p>\n<p><strong>1490<\/strong><\/p>\n<p>S\u00e1vsz\u00e9less\u00e9g a Threat Prevention + t\u0171zfal (Mbit\/s)<\/p>\n<p>500<\/p>\n<p>550<\/p>\n<p>\u00c1tviteli sebess\u00e9g T\u0171zfal + IPS eset\u00e9n (Mbit\/s)<\/p>\n<p>625<\/p>\n<p>800<\/p>\n<h4>1570R<\/h4>\n<p>\nK\u00fcl\u00f6n figyelmet \u00e9rdemel a CheckPoint NGFW 1570R modell. Kifejezetten az ipari szektor sz\u00e1m\u00e1ra lett fejlesztve, \u00e9s \u00e9rdekes lehet azok sz\u00e1m\u00e1ra, akik a k\u00f6vetkez\u0151 ter\u00fcleteken dolgoznak: sz\u00e1ll\u00edt\u00e1s, nyersanyagkitermel\u00e9s (k\u0151olaj, g\u00e1z stb.), k\u00fcl\u00f6nb\u00f6z\u0151 term\u00e9kek gy\u00e1rt\u00e1sa.<\/p>\n<p><img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/891ef4fa277d41c788467574e871ff47.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA 1570R a felhaszn\u00e1l\u00e1si k\u00f6r\u00fclm\u00e9nyek figyelembev\u00e9tel\u00e9vel lett tervezve:<\/p>\n<ul>\n<li>a h\u00e1l\u00f3zat perem\u00e9nek v\u00e9delme \u00e9s az intelligens eszk\u00f6z\u00f6k ellen\u0151rz\u00e9se;<\/li>\n<li>ipari protokollok ICS\/SCADA t\u00e1mogat\u00e1sa, GPS csatlakoz\u00f3val rendelkezik;<\/li>\n<li>megb\u00edzhat\u00f3s\u00e1g extr\u00e9m k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt (nagyon magas\/ alacsony h\u0151m\u00e9rs\u00e9klet, csapad\u00e9k, fokozott vibr\u00e1ci\u00f3).<\/li>\n<\/ul>\n<p><\/p>\n<p>NGFW jellemz\u0151k<\/p>\n<p><strong>1570 Rugged<\/strong><\/p>\n<p>Maxim\u00e1lis kapcsolatok sz\u00e1ma m\u00e1sodpercenk\u00e9nt<\/p>\n<p>13 500<\/p>\n<p>Maxim\u00e1lis egyidej\u0171 kapcsolatok sz\u00e1ma<\/p>\n<p>500 000 <\/p>\n<p>S\u00e1vsz\u00e9less\u00e9g a Threat Prevention sor\u00e1n (Mbit\/s)<\/p>\n<p>400<\/p>\n<p>\u00c1tviteli sebess\u00e9g T\u0171zfal + IPS eset\u00e9n (Mbit\/s)<\/p>\n<p>700<\/p>\n<p>T\u0171zfal \u00e1tviteli sebess\u00e9g (Mbit\/s)<\/p>\n<p>1900<\/p>\n<p>Haszn\u00e1lati k\u00f6r\u00fclm\u00e9nyek<\/p>\n<p>-40\u00baC ~ 75\u00baC (-40\u00baF ~ +167\u00baF)<\/p>\n<p>Tart\u00f3ss\u00e1gi tan\u00fas\u00edtv\u00e1nyok<\/p>\n<p>EN\/IEC 60529, IEC 60068-2-27 \u00fct\u00e9s, IEC 60068-2-6 vibr\u00e1ci\u00f3<\/p>\n<p>Ezenk\u00edv\u00fcl kiemelj\u00fck a 1570R egy sor funkci\u00f3j\u00e1t:<\/p>\n<ul>\n<li>Gaia 80.20 Embedded, az opci\u00f3k list\u00e1ja a k\u00f6vetkez\u0151ben tal\u00e1lhat\u00f3 <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal%20eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk159772\">SK<\/a><\/noindex>. <\/li>\n<li> 200 versenyk\u00e9pes csatlakoz\u00e1sra sz\u00f3l\u00f3 Mobile Access licenc <br \/>\nb\u00e1rmelyik k\u00e9sz\u00fcl\u00e9k megv\u00e1s\u00e1rl\u00e1sakor. Figyelembe kell venni, hogy ez a SMB NGFW \u00faj modellcsal\u00e1d jellemz\u0151je lehet\u0151v\u00e9 teszi, hogy sp\u00f3roljon a k\u00fcl\u00f6n\u00e1ll\u00f3 Mobile Access licencek v\u00e1s\u00e1rl\u00e1s\u00e1n, amelyek m\u00e1s modellek v\u00e1s\u00e1rl\u00e1sakor nem tartoznak az alapcsomagba.<\/li>\n<li> Lehet\u0151s\u00e9g a biztons\u00e1gi \u00e1tj\u00e1r\u00f3 mobilalkalmaz\u00e1ssal t\u00f6rt\u00e9n\u0151 kezel\u00e9s\u00e9re a Watch Tower haszn\u00e1lat\u00e1val (r\u00e9szletesebben \u00edrtunk err\u0151l a <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/488712\/\">a Spotify d\u00f6nt\u00e9shozatali m\u00f3dszertan\u00e1r\u00f3l. Egyre t\u00f6bb felhaszn\u00e1l\u00f3 prefer\u00e1lja a zenehallgat\u00e1st mobilon a streaming szolg\u00e1ltat\u00e1sban, de a c\u00e9gn\u00e9l t\u00falnyom\u00f3r\u00e9szt webprogramoz\u00f3k dolgoznak. A Spotify elemezte ezt a helyzetet, \u00e9s \u00fagy d\u00f6nt\u00f6tt, hogy t\u00f6bb mobilfejleszt\u0151t vesz fel, valamint \u00e1tnevezi a webes szakembereket \u00faj ir\u00e1nyba:<\/a><\/noindex>)<\/li>\n<li>Az IoT eszk\u00f6z\u00f6k politik\u00e1inak\/szab\u00e1lyainak automatikus l\u00e9trehoz\u00e1sa, amikor csatlakoznak a helyi h\u00e1l\u00f3zat\u00e1hoz. Minden okos k\u00e9sz\u00fcl\u00e9khez gener\u00e1l\u00f3dik egy szab\u00e1ly, amely csak azokat a protokollokat enged\u00e9lyezi, amelyek sz\u00fcks\u00e9gesek a megfelel\u0151 m\u0171k\u00f6d\u00e9shez. <\/li>\n<\/ul>\n<p><\/p>\n<h3>1500 sorozat kezel\u00e9se<\/h3>\n<p>\nA SMB csal\u00e1d \u00faj eszk\u00f6zeinek m\u0171szaki jellemz\u0151inek \u00e9s lehet\u0151s\u00e9geinek \u00e1tvizsg\u00e1l\u00e1sa sor\u00e1n \u00e9rdemes megeml\u00edteni, hogy t\u00f6bbf\u00e9le megk\u00f6zel\u00edt\u00e9s l\u00e9tezik a kezel\u00e9s\u00fck \u00e9s adminisztr\u00e1l\u00e1suk ter\u00e9n. A k\u00f6vetkez\u0151 tipikus s\u00e9m\u00e1k l\u00e9teznek:<\/p>\n<ol>\n<li>Helyi kezel\u00e9s.\n<p>Ez \u00e1ltal\u00e1ban kisv\u00e1llalkoz\u00e1sokn\u00e1l haszn\u00e1latos, ahol t\u00f6bb iroda van, \u00e9s hi\u00e1nyzik a k\u00f6zpontos\u00edtott infrastrukt\u00fara-ir\u00e1ny\u00edt\u00e1s. Az el\u0151ny\u00f6ket az NGFW el\u00e9rhet\u0151 telep\u00edt\u00e9se \u00e9s adminisztr\u00e1ci\u00f3ja, valamint a helyi eszk\u00f6z\u00f6kkel val\u00f3 interakci\u00f3 lehet\u0151s\u00e9ge jelenti. A h\u00e1tr\u00e1nyok k\u00f6z\u00e9 tartozik a Gaia korl\u00e1toz\u00e1sai: a szab\u00e1lyok sz\u00e9tv\u00e1laszt\u00e1s\u00e1nak hi\u00e1nya, a korl\u00e1tozott monitoroz\u00e1si lehet\u0151s\u00e9gek, a k\u00f6zpontos\u00edtott napl\u00f3z\u00e1s hi\u00e1nya.<\/p>\n<p><img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/52ca6c9543ec37d37ecfb7f8cbe35626.png\" style=\"display:block;margin: 0 auto;\" \/> <\/li>\n<li>K\u00f6zpontos\u00edtott kezel\u00e9s egy dedik\u00e1lt Management Serveren kereszt\u00fcl. Ez a megk\u00f6zel\u00edt\u00e9s akkor alkalmazhat\u00f3, ha az adminisztr\u00e1tor t\u00f6bb NGFW-t kezelhet, amelyek k\u00fcl\u00f6nb\u00f6z\u0151 helysz\u00edneken tal\u00e1lhat\u00f3k. Ennek a megk\u00f6zel\u00edt\u00e9snek az el\u0151nye a rugalmass\u00e1g \u00e9s az infrastrukt\u00fara \u00e1ltal\u00e1nos \u00e1llapot\u00e1nak ellen\u0151rz\u00e9se, valamint n\u00e9h\u00e1ny lehet\u0151s\u00e9g, amely csak ilyen s\u00e9m\u00e1n \u00e9rhet\u0151 el a Gaia 80.20 Embedded eset\u00e9ben.\n<p><img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/d32baaddd9f48962b9744e6236da784d.png\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>K\u00f6zpontos\u00edtott kezel\u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.checkpoint.com\/products\/smart-1-cloud-security-management\/\">Smart-1 Cloud<\/a><\/noindex>kereszt\u00fcl. Ez egy \u00faj forgat\u00f3k\u00f6nyv az NGFW CheckPoint \u00e1ltali kezel\u00e9s\u00e9re. A Management Server a felh\u0151ben telep\u00fcl, az \u00f6sszes kezel\u00e9s Web-interf\u00e9szen kereszt\u00fcl t\u00f6rt\u00e9nik, \u00edgy f\u00fcggetlen a PC oper\u00e1ci\u00f3s rendszer\u00e9t\u0151l. Tov\u00e1bb\u00e1 a kezel\u0151 szerver karbantart\u00e1sa a CheckPoint szakembereinek feladata, teljes\u00edtm\u00e9nye k\u00f6zvetlen\u00fcl a v\u00e1lasztott param\u00e9terekt\u0151l f\u00fcgg, \u00e9s k\u00f6nnyen sk\u00e1l\u00e1zhat\u00f3.\n<p><img decoding=\"async\" alt=\"1. NGFW kisv\u00e1llalkoz\u00e1soknak. \u00daj CheckPoint 1500 Security Gateway term\u00e9kcsal\u00e1d\" src=\"\/wp-content\/uploads\/2020\/07\/62c07b71c28f0d45bbf52aa2ccb2a7a3.png\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>K\u00f6zpontos\u00edtott kezel\u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.checkpoint.com\/products\/security-management-portal\/\">SMP<\/a><\/noindex> (Security Management Portal). Ez a megold\u00e1s mag\u00e1ban foglalja egy k\u00f6z\u00f6s web-port\u00e1l felh\u0151ben vagy helyben t\u00f6rt\u00e9n\u0151 telep\u00edt\u00e9s\u00e9t, amely egyszerre ak\u00e1r 10 000 SMB eszk\u00f6zt is k\u00e9pes kezelni. <\/li>\n<li>A Watch Tower mobil eszk\u00f6z\u00f6n kereszt\u00fcl t\u00f6rt\u00e9n\u0151 kezel\u00e9s lehet\u0151s\u00e9ge csak a teljes verzi\u00f3 telep\u00edt\u00e9se ut\u00e1n \u00e9rhet\u0151 el (l\u00e1sd az 1-4. pontokat). R\u00e9szletes inform\u00e1ci\u00f3 err\u0151l a funkci\u00f3r\u00f3l a mi <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/488712\/\">cikkben.<\/a><\/noindex><\/li>\n<\/ol>\n<p>\nKi kell emelni sz\u00e1munkra a legfontosabbakat:<\/p>\n<ol>\n<li>A Mobile Access Portal cannot be deployed. Users will be able to use Remote Access to access internal company resources, but they will not be able to connect to the SSL portal with your published applications. <\/li>\n<li>The following blades or options are not supported: Content Awareness, DLP, Updatable Objects, SSL inspection without categorization, Threat Extraction, MTA with Threat Emulation verification, Antivirus for scanning archives, ClusterXL in Load Sharing mode. <\/li>\n<\/ol>\n<p>\nAt the end of the article, I would like to note that the topic of NGFW solutions for SMB has reached a new level of support and interaction, thanks to the release of version 80.20 Embedded. A balance has been achieved between the options of the full version of Gaia and the capabilities of the hardware for small offices. We plan to continue publishing a series of educational articles where we will examine the basic configuration of SMB solutions, performance tuning, and their new options. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Sz\u00e9lesk\u00f6r\u0171 anyaggy\u0171jtem\u00e9ny a Check Point-r\u00f3l a TS Solution-t\u00f3l<\/a><\/noindex>. k\u00f6vess\u00e9k a friss\u00edt\u00e9seket (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u0442\u044c\u0438 \u043f\u0440\u043e\u0448\u043b\u043e \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442, \u043c\u043e\u0434\u0435\u043b\u0438 1400 \u0441\u0435\u0440\u0438\u0438 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0431\u0440\u0430\u043d\u044b \u0438\u0437 \u043f\u0440\u043e\u0434\u0430\u0436\u0438. \u041f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432, \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443 CheckPoint \u043f\u043e\u0441\u0442\u0430\u0440\u0430\u043b\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432 1500 \u0441\u0435\u0440\u0438\u0438. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0444\u0438\u043b\u0438\u0430\u043b\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0438 (\u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0441\u0445\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f), \u043a\u043e\u0441\u043d\u0435\u043c\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89773","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd471. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u041d\u043e\u0432\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 CheckPoint 1500 Security Gateway | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-26T11:42:06+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-26T11:42:06+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd471. NGFW for small businesses. The new CheckPoint 1500 Security Gateway line | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd471. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u041d\u043e\u0432\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 CheckPoint 1500 Security Gateway | ProHoster","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/1-ngfw-dlya-malogo-biznesa-novaya-linejka-checkpoint-1500-security-gateway","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-26T11:42:06+00:00","article:modified_time":"2020-07-26T11:42:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89773","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:04:37","updated":"2022-09-29 03:45:13","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/89773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=89773"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/89773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/89774"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=89773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=89773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=89773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}