{"id":31130,"date":"2019-10-31T21:39:37","date_gmt":"2019-10-31T18:39:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-check-point-getting-started-r80-20-access-control\/"},"modified":"2019-10-31T21:39:37","modified_gmt":"2019-10-31T18:39:37","slug":"7-check-point-getting-started-r80-20-access-control","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","title":{"rendered":"7. Check Point Ies\u0101c\u0113jiem R80.20. Piek\u013cuves kontrole","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7. Check Point Ies\u0101c\u0113jiem R80.20. Piek\u013cuves kontrole\" src=\"\/wp-content\/uploads\/2019\/04\/0ab2e6565c08db47bcb9fbbc2733c3dc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nLaipni l\u016bdzam 7. nodarb\u012bb\u0101, kur\u0101 m\u0113s s\u0101ksim darbu ar dro\u0161\u012bbas politik\u0101m. \u0160odien pirmo reizi uzst\u0101d\u012bsim politiku uz m\u016bsu v\u0101rtejas, t.i., beidzot veiksim \u00abinstall policy\u00bb. P\u0113c tam caur v\u0101rteju var\u0113s pl\u016bst satiksme! <br \/>\nVisp\u0101r, politik\u0101m Check Point skat\u012bjum\u0101 ir diezgan pla\u0161a j\u0113ga. Dro\u0161\u012bbas politikas var iedal\u012bt 3 tipos:<\/p>\n<ol>\n<li><b>Piek\u013cuves kontrole<\/b>. Taj\u0101s ietilpst t\u0101di bleydi k\u0101: ugunsm\u016bris, lietojumprogrammu kontrole, URL filtr\u0113\u0161ana, satura apzi\u0146a, mobil\u0101 piek\u013cuve, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"21\">VPN<\/a>. T.i., viss, kas attiecas uz satiksmes at\u013cau\u0161anu vai ierobe\u017eo\u0161anu.<\/li>\n<li><b>Threat Prevention<\/b>. \u0160eit tiek izmantoti Bleydi: IPS, pretv\u012brusu, pretbotu, draudu emul\u0101cija, draudu ekstrakcija. T.i., funkcijas, kas p\u0101rbauda satiksmes vai satura saturu, kas jau ir izg\u0101jis cauri Piek\u013cuves kontrolei. <\/li>\n<li><b>Darba staciju dro\u0161\u012bba<\/b>. Tas ir jau politikas, kas p\u0101rvalda galapunktu a\u0123entus (t.i., darba staciju aizsardz\u012bba). Par to m\u0113s kurs\u0101 \u012bsti nerun\u0101sim.<\/li>\n<\/ol>\n<p>\n\u0160aj\u0101 nodarb\u012bb\u0101 m\u0113s s\u0101ksim run\u0101t par Piek\u013cuves kontroli.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Piek\u013cuves kontroles sast\u0101vs<\/h3>\n<p>\nPiek\u013cuves kontrole ir pirm\u0101 politika, kas j\u0101uzst\u0101da uz v\u0101rtejas. Bez \u0161\u012bs politikas citas (Draudu nov\u0113r\u0161ana, Darba staciju dro\u0161\u012bba) vienk\u0101r\u0161i netiks uzst\u0101d\u012btas. K\u0101 min\u0113ts iepriek\u0161, Piek\u013cuves kontroles politikas ietver vair\u0101kus bleydus:<\/p>\n<ul>\n<li>Ugunsm\u016bris;<\/li>\n<li>Lietojumprogrammu &amp; URL filtr\u0113\u0161ana;<\/li>\n<li>Satura apzi\u0146a;<\/li>\n<li>Mobil\u0101 piek\u013cuve;<\/li>\n<li>NAT.<\/li>\n<\/ul>\n<p>\nS\u0101ksim ar vienu - Ugunsm\u016bri.<\/p>\n<h3>\u010cetri so\u013ci ugunsm\u016bra iestat\u012b\u0161anai<\/h3>\n<p>\nLai uzst\u0101d\u012btu politiku uz v\u0101rtejas, mums noteikti b\u016bs j\u0101veic \u0161\u0101di so\u013ci:<\/p>\n<ol>\n<li>Noteikt v\u0101rtejas interfeisus atbilsto\u0161\u0101s <b>dro\u0161\u012bbas zon\u0101<\/b> (lai ar\u012b t\u0101 var\u0113tu b\u016bt iek\u0161\u0113j\u0101, \u0101r\u0113j\u0101, DMZ utt.)<\/li>\n<li>Iestat\u012bt <b>Pretviltot\u0101ju<\/b>;<\/li>\n<li>Izveidot t\u012bkla objektus (<b>T\u012bkli, viesi, serveri<\/b> utt.) Tas ir svar\u012bgi! K\u0101 jau teicu, Check Point str\u0101d\u0101 tikai ar objektiem. Vienk\u0101r\u0161i ielikt piek\u013cuves sarakst\u0101 tikai IP adresi neizdosies;<\/li>\n<li>Izveidot <b>Piek\u013cuves saraksti<\/b>-us (vismaz vienu).<\/li>\n<\/ol>\n<p>\nBez \u0161iem iestat\u012bjumiem politikas vienk\u0101r\u0161i netiks uzst\u0101d\u012btas!<\/p>\n<h3>Video m\u0101c\u012bba<\/h3>\n<p>\nK\u0101 parasti, pievienojam video nodarb\u012bbu, kur\u0101 veiksim pamata Piek\u013cuves kontroles iestat\u012b\u0161anas proced\u016bru un izveidosim ieteiktos piek\u013cuves sarakstus.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"dxp7_Dr_-lA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/dxp7_Dr_-lA\/hqdefault.jpg\" alt=\"Atska\u0146ot video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Sekojiet l\u012bdzi jauniem materi\u0101liem un pievienojieties m\u016bsu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube kan\u0101lam<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/447196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 7-\u0439 \u0443\u0440\u043e\u043a, \u0433\u0434\u0435 \u043c\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u043d\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0430 \u043d\u0430\u0448 \u0448\u043b\u044e\u0437, \u0442.\u0435. \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u00abinstall policy\u00bb. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437 \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a! \u0412\u043e\u043e\u0431\u0449\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f Check Point, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u043f\u043e\u043d\u044f\u0442\u0438\u0435. Security Policies \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 3 \u0442\u0438\u043f\u0430: Access Control. \u0421\u044e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477. Check Point S\u0101kums R80.20. Piek\u013cuves kontrole | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:37+00:00","article:modified_time":"2019-10-31T18:39:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31130","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:48:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:22:34","updated":"2026-02-04 14:48:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=31130"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31130\/revisions"}],"predecessor-version":[{"id":156650,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31130\/revisions\/156650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/23098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=31130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=31130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=31130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}