{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 most m\u00e1r EA. Els\u0151 pillant\u00e1s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nA Gaia R81 \u00faj verzi\u00f3ja korai hozz\u00e1f\u00e9r\u00e9sben (EA) ker\u00fclt publik\u00e1l\u00e1sra. Kor\u00e1bban megismerkedhett\u00fcnk a tervezett \u00fajdons\u00e1gokkal<\/a><\/noindex> a kiad\u00e1si jegyzetekben. Most lehet\u0151s\u00e9g\u00fcnk ny\u00edlt, hogy val\u00f3s k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt is megn\u00e9zz\u00fck ezt. Ehhez egy standard architekt\u00far\u00e1t \u00e1ll\u00edtottunk \u00f6ssze egy dedik\u00e1lt vez\u00e9rl\u0151 szerverrel \u00e9s \u00e1tj\u00e1r\u00f3val. Term\u00e9szetesen nem volt id\u0151nk minden \u00e1tfog\u00f3 tesztet elv\u00e9gezni, de boldogan megosztjuk azt, ami els\u0151 pillant\u00e1sra szemet sz\u00fart az \u00faj rendszer bemutat\u00e1sakor. A r\u00e9szletekben \u00f6sszegy\u0171jt\u00f6tt\u00fck a legfontosabb szempontokat, amelyeket az els\u0151 tal\u00e1lkoz\u00f3nk sor\u00e1n kiemelt\u00fcnk (sok k\u00e9ppel).
\n<\/a><\/noindex><\/p>\n

Kezel\u00e9s<\/h3>\n

\nA kapu inicializ\u00e1l\u00e1sakor lehet\u0151s\u00e9ge van azonnal csatlakozni a felh\u0151alap\u00fa vez\u00e9rl\u0151 szerverhez \u2014 Smart 1 Cloud<\/b> (\u00fagynevezett MaaS):<\/p>\n

\"Check
\nEz egy viszonylag \u00faj lehet\u0151s\u00e9g (m\u00e1r a legfrissebb 80.40-es verzi\u00f3kban is el\u00e9rhet\u0151), \u00e9s a k\u00f6zelj\u00f6v\u0151ben kicsit r\u00e9szletesebben besz\u00e9l\u00fcnk err\u0151l a szolg\u00e1ltat\u00e1sr\u00f3l. Itt a f\u0151 el\u0151ny (v\u00e9lem\u00e9ny\u00fcnk szerint) \u2014 a r\u00e9g\u00f3ta v\u00e1rt b\u00f6ng\u00e9sz\u0151s ir\u00e1ny\u00edt\u00e1s lehet\u0151s\u00e9ge \ud83d\ude42<\/a><\/noindex>VxLAN \u00e9s GRE<\/p>\n

Az els\u0151 dolog, amit ellen\u0151rizni kezdt\u00fcnk \u2014 a VxLAN \u00e9s GRE t\u00e1mogatotts\u00e1g. A kiad\u00e1si jegyzetek nem hazudtak, minden a hely\u00e9n van:<\/h3>\n

\nVitatkozni lehet arr\u00f3l, hogy sz\u00fcks\u00e9g van-e ezekre a funkci\u00f3kra az NGFW-n, de mindenk\u00e9ppen jobb, ha a felhaszn\u00e1l\u00f3nak van ilyen v\u00e1laszt\u00e1sa.<\/p>\n

\"Check
\n
\nInfinity Threat Prevention<\/p>\n

Val\u00f3sz\u00edn\u0171leg ez az els\u0151, ami szemet sz\u00far, amikor elkezdi m\u00f3dos\u00edtani a biztons\u00e1gi politik\u00e1t. \u00daj opci\u00f3k\u00e9nt megjelent a Threat Prevention blade-ek aktiv\u00e1l\u00e1sa \u2014 Infinity. Azaz nem kell kiv\u00e1lasztani, mely blade-eket kapcsolja be, a Check Point mindent elint\u00e9zett helyett\u00fcnk (nem tudom, mennyire j\u00f3 ez):<\/h3>\n

\nViszont term\u00e9szetesen megmarad a megszokott, \u00f6n\u00e1ll\u00f3 blade-be\u00e1ll\u00edt\u00e1s lehet\u0151s\u00e9ge.<\/p>\n

\"Check
\nInfinity Threat Prevention Policy<\/p>\n

Mivel a Threat Prevention-r\u0151l besz\u00e9l\u00fcnk, n\u00e9zz\u00fck meg azonnal a politik\u00e1t. Val\u00f3sz\u00edn\u0171leg ez az egyik legfontosabb v\u00e1ltoz\u00e1s:<\/h3>\n

\nAmint l\u00e1that\u00f3, sokkal t\u00f6bb el\u0151re konfigur\u00e1lt politika jelent meg. R\u00e9szletesen megtekinthetj\u00fck, miben k\u00fcl\u00f6nb\u00f6znek ezek egym\u00e1st\u00f3l, ha r\u00e1kattintunk a<\/p>\n

\"Check
\n
\nHelp me decide Ez a politika dinamikus, \u00e9s friss\u00fcl az \u00d6n r\u00e9szv\u00e9tele n\u00e9lk\u00fcl.<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nChange Report<\/p>\n

V\u00e9gre egy k\u00e9nyelmes form\u00e1ban meg lehet n\u00e9zni, hogy pontosan mi v\u00e1ltozott a konfigur\u00e1ci\u00f3 m\u00f3dos\u00edt\u00e1sa sor\u00e1n:<\/h3>\n

\nVan egy \u00e1ltal\u00e1nos jelent\u00e9s:<\/p>\n

\"Check
\n
\n\u00c9s vannak teljesen konkr\u00e9t szakaszok:<\/p>\n

\"Check
\n
\nNagyon k\u00e9nyelmes nyomon k\u00f6vetni a v\u00e1ltoz\u00e1sokat.<\/p>\n

\"Check
\n\"Check
\n
\nWeb Management az Endpoint sz\u00e1m\u00e1ra<\/p>\n

Web Management az Endpoint sz\u00e1m\u00e1ra<\/h3>\n

\nAhogy biztosan tudja, a kezel\u0151 szerveren aktiv\u00e1lhatja az Endpoint Management-ot \u00e9s kezelheti a SandBlast \u00fcgyn\u00f6k\u00f6ket. Az R81-ben egy \u00e9rdekes lehet\u0151s\u00e9get adtak hozz\u00e1 \u2014 a b\u00f6ng\u00e9sz\u0151n kereszt\u00fcli vez\u00e9rl\u00e9st. Ez egy igaz\u00e1n \u00e9rdekes m\u00f3don aktiv\u00e1lhat\u00f3. A CLI-ben expert m\u00f3dba kell l\u00e9pni, expert<\/b> \u00e9s be\u00edrni a parancsot \u201cweb_mgmt_start\u201d<\/b>, majd navig\u00e1ljon a k\u00f6vetkez\u0151 c\u00edmre \u2014 https:\/\/:4434\/sba\/. Ekkor megny\u00edlik a webkonzole:<\/p>\n

\"Check
\n
\nR\u00e9szben besz\u00e9lt\u00fcnk err\u0151l a platformr\u00f3l az "Check Point SandBlast Agent Management Platform<\/a><\/noindex>" c\u00edm\u0171 cikkben, amelyet Alexej Malko \u00edrt. Igaz, hogy ott csak a felh\u0151ben volt el\u00e9rhet\u0151 egy ilyen konzol, most viszont m\u00e1r helyi kezel\u0151szervereken is m\u0171k\u00f6dik.<\/p>\n

Smart Update<\/h3>\n

\nA r\u00e9gi j\u00f3 Smart Update-on kereszt\u00fcl pr\u00f3b\u00e1lva licencet hozz\u00e1adni, a konzol kedvesen figyelmeztet, hogy ezt most m\u00e1r nem sz\u00fcks\u00e9ges elhagyni az eddig megszokott Smart Console-b\u00f3l:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nNagyon v\u00e1rt funkci\u00f3. Mostant\u00f3l a NAT szab\u00e1lyokban haszn\u00e1lhat\u00f3k Access Roles<\/b>, Security Zones<\/b> vagy Updatable Objects<\/b>. Vannak esetek, amikor ez nagyon hasznos \u00e9s sz\u00fcks\u00e9ges.<\/p>\n

Z\u00e1r\u00e1s<\/h3>\n

\nEddig is ennyi. M\u00e9g sok \u00faj\u00edt\u00e1st tesztelni kell (IoT, Azure AD, Upgrade, Logs API \u00e9s \u00edgy tov\u00e1bb). Ahogy m\u00e1r eml\u00edtettem, a k\u00f6zelj\u00f6v\u0151ben publik\u00e1lni fogunk egy \u00e1ttekint\u00e9st az \u00faj felh\u0151alap\u00fa kezel\u0151rendszerr\u0151l \u2014 Smart-1 Cloud<\/a><\/noindex><\/b>. K\u00f6vesse friss\u00edt\u00e9seinket csatorn\u00e1inkon (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>)!<\/p>\n

Ne feledkezzen meg a nagy Check Point anyaggy\u0171jt\u00e9s\u00fcnkr\u0151l<\/a><\/noindex>.
\n
Forr\u00e1s: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 most m\u00e1r EA. Els\u0151 benyom\u00e1sok | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}