{"id":33222,"date":"2019-10-31T21:51:25","date_gmt":"2019-10-31T18:51:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-check-point-getting-started-r80-20-identity-awareness\/"},"modified":"2019-10-31T21:51:25","modified_gmt":"2019-10-31T18:51:25","slug":"10-check-point-getting-started-r80-20-identity-awareness","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","title":{"rendered":"10. Check Point Iepaz\u012b\u0161an\u0101s ar R80.20. Identit\u0101tes apzi\u0146a","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"10. Check Point Iepaz\u012b\u0161an\u0101s ar R80.20. Identit\u0101tes apzi\u0146a\" src=\"\/wp-content\/uploads\/2019\/05\/d02cb12971142bfe4ca1cb67c6466a95.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nLaipni l\u016bdzam jubilejas \u2014 10. nodarb\u012bb\u0101. \u0160odien m\u0113s run\u0101sim par v\u0113l vienu Check Point bleydu \u2014 <b>Identity Awareness<\/b>. V\u0113l pa\u0161\u0101 s\u0101kum\u0101, aprakstot NGFW, m\u0113s noteic\u0101m, ka tam oblig\u0101ti j\u0101b\u016bt iesp\u0113jai regul\u0113t piek\u013cuvi, balstoties uz lietot\u0101ju kontiem, nevis IP adres\u0113m. Tas galvenok\u0101rt ir saist\u012bts ar palielin\u0101to lietot\u0101ju mobilit\u0101ti un pla\u0161o BYOD \u2014 bring your own device modeli. Uz\u0146\u0113mum\u0101 var b\u016bt daudz cilv\u0113ku, kuri piesl\u0113dzas pa WiFi, ieg\u016bst dinamiskas IP adreses un v\u0113l no da\u017e\u0101diem t\u012bkla segmentiem. M\u0113\u0123iniet \u0161eit izveidot piek\u013cuves sarakstus, balstoties uz IP adres\u0113m. Bez lietot\u0101ju identifik\u0101cijas to neizdosies izdar\u012bt. Un tie\u0161i bleyds Identity Awareness mums pal\u012bdz\u0113s \u0161aj\u0101 proces\u0101.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Bet vispirms izp\u0113t\u012bsim, kam visbie\u017e\u0101k tiek izmantota lietot\u0101ju identifik\u0101cija?<\/p>\n<ol>\n<li>Lai ierobe\u017eotu t\u012bkla piek\u013cuvi p\u0113c lietot\u0101ju kontiem, nevis p\u0113c IP adres\u0113m. Piek\u013cuve var tikt regul\u0113ta gan vienk\u0101r\u0161i uz internetu, gan uz jebkuriem citiem t\u012bkla segmentiem, piem\u0113ram, DMZ.<\/li>\n<li>Piek\u013cuve p\u0113c <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"34\">VPN<\/a>. Piekr\u012btiet, ka lietot\u0101jam ir daudz \u0113rt\u0101k izmantot savu dom\u0113na kontu autentifik\u0101cijai, nevis v\u0113l vienu izdom\u0101tu paroli.<\/li>\n<li>Lai p\u0101rvald\u012btu Check Point, ar\u012b nepiecie\u0161ams lietot\u0101ja konts, kuram var b\u016bt da\u017e\u0101das ties\u012bbas.<\/li>\n<li>Un pati pat\u012bkam\u0101 da\u013ca \u2014 Zi\u0146o\u0161anas. Ir daudz pat\u012bkam\u0101k redz\u0113t zi\u0146ojumos konkr\u0113tus lietot\u0101jus, nevis vi\u0146u IP adreses.<\/li>\n<\/ol>\n<p>\n\u0160aj\u0101 gad\u012bjum\u0101 Check Point atbalsta divus kontu veidus:<\/p>\n<ul>\n<li><b>Local Internal Users<\/b>. Lietot\u0101js tiek izveidots lok\u0101laj\u0101 p\u0101rvald\u012bbas servera datu b\u0101z\u0113.<\/li>\n<li><b>External Users<\/b>. K\u0101 \u0101r\u0113j\u0101 lietot\u0101ju datu b\u0101ze var kalpot Microsoft Active Directory vai jebkura cita LDAP servera.<\/li>\n<\/ul>\n<p>\n\u0160odien m\u0113s run\u0101sim par t\u012bkla piek\u013cuvi. Lai p\u0101rvald\u012btu t\u012bkla piek\u013cuvi, ja ir Active Directory, k\u0101 objekts (source vai destination) tiek izmantots t\u0101 sauktais <b>Access Role<\/b>, kas \u013cauj izmantot tr\u012bs lietot\u0101ja parametrus:<\/p>\n<ol>\n<li><b>T\u012bkls<\/b> \u2014 proti, t\u012bkls, no kura lietot\u0101js cen\u0161as piesl\u0113gties<\/li>\n<li><b>AD User vai User Group<\/b> \u2014 \u0161ie dati tiek izvilkti tie\u0161i no AD servera<\/li>\n<li><b>Machine<\/b> \u2014 darba stacija.<\/li>\n<\/ol>\n<p>\n\u0160aj\u0101 gad\u012bjum\u0101 lietot\u0101ju identifik\u0101cija var tikt veikta vair\u0101kiem veidiem:<\/p>\n<ul>\n<li><b>AD Query<\/b>. Check Point las\u012bs AD servera \u017eurn\u0101lus par autentific\u0113tiem lietot\u0101jiem un vi\u0146u IP adres\u0113m. Datori, kas atrodas AD dom\u0113n\u0101, tiek autom\u0101tiski identific\u0113ti.<\/li>\n<li><b>P\u0101rl\u016bkprogrammas autentifik\u0101cija<\/b>. Identifik\u0101cija caur lietot\u0101ja p\u0101rl\u016bkprogrammu (Captive Portal vai Transparent Kerberos). Visbie\u017e\u0101k tiek izmantota ier\u012bc\u0113m, kas nav dom\u0113n\u0101.<\/li>\n<li><b>Termin\u0101lu serveri<\/b>. \u0160aj\u0101 gad\u012bjum\u0101 identifik\u0101cija tiek veikta, izmantojot speci\u0101lu termin\u0101la a\u0123entu (install\u0113 uz termin\u0101la servera).<\/li>\n<\/ul>\n<p>\ntie ir tr\u012bs visizplat\u012bt\u0101kie varianti, bet ir v\u0113l tr\u012bs:<\/p>\n<ul>\n<li><b>Identit\u0101tes a\u0123enti<\/b>. Uz lietot\u0101ju datoriem tiek instal\u0113ts speci\u0101ls a\u0123ents.<\/li>\n<li><b>Identit\u0101tes kolektors<\/b>. Atsevi\u0161\u0137a util\u012bta, kas tiek instal\u0113ta uz Windows servera un apkopo autentifik\u0101cijas \u017eurn\u0101lus viet\u0101, kur\u0101 darbojas v\u0101rti. Praktiski oblig\u0101ts variants, ja ir liels lietot\u0101ju skaits.<\/li>\n<li><b>RADIUS uzskaite<\/b>. Nu, un kur\u0161 gan var iztikt bez vec\u0101 laba RADIUS.<\/li>\n<\/ul>\n<p>\n\u0160aj\u0101 lekcij\u0101 es demonstr\u0113\u0161u otro variantu \u2014 p\u0101rl\u016bkprogrammas b\u0101z\u0113tu. Dom\u0101ju, ka teorija ir pietiekama, p\u0101riesim pie prakses.<\/p>\n<h3>Video m\u0101c\u012bba<\/h3>\n<p>\n<center><div class=\"youtube-placeholder\" data-id=\"Ud0i8rHEoJ0\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/Ud0i8rHEoJ0\/hqdefault.jpg\" alt=\"Atska\u0146ot video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Sekojiet l\u012bdzi jauniem materi\u0101liem un pievienojieties m\u016bsu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube kan\u0101lam<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/450526\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u044e\u0431\u0438\u043b\u0435\u0439\u043d\u044b\u0439 \u2014 10-\u0439 \u0443\u0440\u043e\u043a. \u0418 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0431\u043b\u0435\u0439\u0434\u0435 Check Point \u2014 Identity Awareness. \u0415\u0449\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043f\u0440\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 NGFW, \u043c\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u043d\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u043e \u044d\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33222","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710. Check Point Getting Started R80.20. Identit\u0101tes apzi\u0146a | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:25+00:00","article:modified_time":"2019-10-31T18:51:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33222","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:49:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:44:42","updated":"2026-02-04 14:49:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/33222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=33222"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/33222\/revisions"}],"predecessor-version":[{"id":156663,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/33222\/revisions\/156663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/24959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=33222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=33222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=33222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}