Pambuyo pofalitsa Zaka zoposa ziwiri zapita, zitsanzo za mndandanda wa 1400 tsopano zachotsedwa pa malonda. Yafika nthawi yosintha ndi zatsopano, ntchito CheckPoint idayesa kukhazikitsa mndandanda wa 1500. M'nkhaniyi tiwona zitsanzo zoteteza maofesi ang'onoang'ono kapena nthambi zamakampani, tidzapereka mawonekedwe aukadaulo, mawonekedwe operekera (malayisensi, kasamalidwe ndi kasamalidwe kachitidwe), ndikukhudza matekinoloje atsopano ndi zosankha.
Chingwe
Mitundu yatsopano ya SMB ndi: 1530, 1550, 1570, 1570R. Mutha kuwona malondawo pa CheckPoint portal. Mwachidziwitso, tidzawagawa m'magulu atatu: chipata cha chitetezo cha ofesi ndi chithandizo cha WIFI (1530, 1550), chipata cha chitetezo cha ofesi ndi WIFI + 4G / LTE thandizo (1570, 1550), chipata cha chitetezo cha mafakitale (1570R).
Zithunzi za 1530
Mitunduyi ili ndi ma network 5 olumikizira netiweki yakomweko ndi mawonekedwe a 1 olowera pa intaneti, bandwidth yawo ndi 1 GB. Ikupezekanso ndi USB-C Console. Koma za luso makhalidwe, ndiye Zitsanzozi zimapereka chiwerengero chachikulu cha magawo omwe amayezedwa, koma tidzakambirana zofunikira kwambiri (m'malingaliro athu).
makhalidwe a
1530
1550
Chiwerengero chochulukira cholumikizira pamphindikati
10 500
14 000
Chiwerengero chochulukira cholumikizira nthawi imodzi
500 000
500 000
Kudutsa ndi Firewall + Kupewa Zowopsa (Mbit/C)
340
450
Kudutsa ndi Firewall + IPS (Mbit/C)
600
800
Bandwidth ya Firewall (Mbps)
1000
1000
* Kupewa Zowopsa kumatanthauza masamba otsatirawa: Firewall, Application Control ndi IPS.
Mitundu 1530, 1550 ili ndi magwiridwe antchito angapo:
- Gaia 80.20 Mndandanda wophatikizidwa wazosankha ukuwonetsedwa mu CheckPoint
- Layisensi ya Mobile Access yamalumikizidwe 100 nthawi imodzi imaphatikizidwa ndi kugula kwa chipangizo chilichonse. Ndikoyenera kuganizira kuti gawo ili la mtundu wa SMB NGFW limakupatsani mwayi wosunga pa kugula kosiyana kwa malayisensi a Mobile Access, omwe samaphatikizidwa pogula mndandanda wamitundu ina ya CheckPoint.
- Kutha kuyang'anira zipata zachitetezo pogwiritsa ntchito pulogalamu yam'manja ya Watch Tower (zambiri zinalembedwa patsamba lathu )
Kwa omwe mndandanda wa 1530, 1550: Mzerewu ndi woyenerera ku maofesi a nthambi okhala ndi anthu 100, umapereka maulumikizidwe akutali, ndipo njira zosiyanasiyana zoyendetsera ntchito zilipo.
Zithunzi za 1570
Zitsanzo zakale za mndandanda wa 1500 zili ndi 8 zolumikizira zolumikizira zakomweko, mawonekedwe a 1 a DMZ ndi mawonekedwe a 1 a intaneti (bandwidth ya madoko onse ndi 1 GB / s). Zomwe zilipo ndi USB 3.0 Port ndi USB-C Console. Mitundu imabwera ndi chithandizo cha ma modemu a 4G/LTE. Thandizo lamakhadi a Micro-SD limaphatikizidwa kuti likulitse kukumbukira mkati mwa chipangizocho.
Zofotokozera zikufotokozedwa pansipa:
makhalidwe a
1570
1590
Chiwerengero chochulukira cholumikizira pamphindikati
15 750
21 000
Chiwerengero chochulukira cholumikizira nthawi imodzi
500 000
500 000
Njira Yopewera Zowopsa (Mbps)
500
660
Kudutsa ndi Firewall + IPS (Mbit/C)
970
1300
Bandwidth ya Firewall (Mbps)
2800
2800
Mitundu 1570, 1590 ili ndi magwiridwe antchito angapo:
- Gaia 80.20 Mndandanda wophatikizidwa wazosankha ukuwonetsedwa mu .
- Chilolezo cha Mobile Access cha ma 200 olumikizana nthawi imodzi
amabwera ndi kugula kwa chipangizo chilichonse. Ndikoyenera kuganizira kuti gawo ili la mtundu wa SMB NGFW limakupatsani mwayi wosunga pa kugula kosiyana kwa malayisensi a Mobile Access, omwe samaphatikizidwa pogula mndandanda wamitundu ina ya CheckPoint. - Kutha kuyang'anira zipata zachitetezo pogwiritsa ntchito pulogalamu yam'manja ya Watch Tower (zambiri zinalembedwa patsamba lathu ).
Kwa omwe mndandanda wa 1570, 1590: Mzerewu ndi woyenera maofesi a anthu 200, amapereka kulumikiza kwakutali, ndipo ali ndi ntchito zapamwamba kwambiri pakati pa banja la SMB.
Poyerekeza zitsanzo zam'mbuyo:
makhalidwe a
1470
1490
Kupititsa ndi Kupewa Zowopsa + Zozimitsa moto (Mbit/C)
500
550
Kudutsa ndi Firewall + IPS (Mbit/C)
625
800
1570R
NGFW 1570R CheckPoint ndiyofunika chidwi chapadera. Idapangidwa makamaka kwa makampani opanga mafakitale ndipo idzakhala yosangalatsa kwa makampani omwe amagwira ntchito m'munda wa: zoyendera, kuchotsa zinthu zamchere (mafuta, gasi, etc.), kupanga zinthu zosiyanasiyana.
1570R idapangidwa poganizira mawonekedwe ndi momwe amagwiritsidwira ntchito:
- chitetezo chozungulira pa intaneti ndikuwongolera zida zanzeru;
- kuthandizira ma protocol a ICS/SCADA, cholumikizira cha GPS;
- kulekerera zolakwika mukamagwira ntchito m'malo ovuta kwambiri (kutentha kwambiri / kutsika, mvula, kugwedezeka kwakukulu).
Makhalidwe a NGFW
1570 Zakale
Chiwerengero chochulukira cholumikizira pamphindikati
13 500
Chiwerengero chochulukira cholumikizira nthawi imodzi
500 000
Njira Yopewera Zowopsa (Mbps)
400
Kudutsa ndi Firewall + IPS (Mbit/C)
700
Bandwidth ya Firewall (Mbps)
1900
Mikhalidwe yogwiritsira ntchito
-40ΒΊC ~ 75ΒΊC (-40ΒΊF ~ +167ΒΊF)
Zikalata zamphamvu
EN/IEC 60529 IEC 60068-2-27 kugwedezeka, IEC 60068-2-6 kugwedezeka
Kuphatikiza apo, tiwonetsa padera magwiridwe antchito a 1570R:
- Gaia 80.20 Mndandanda wophatikizidwa wazosankha ukuwonetsedwa mu .
- Chilolezo cha Mobile Access cha ma 200 olumikizana nthawi imodzi
kuperekedwa ndi kugula kwa chipangizocho. Ndikoyenera kulingalira kuti mbali iyi ya mtundu watsopano wa SMB NGFW imakupatsani mwayi wosunga pa kugula kwapadera kwa ziphaso za Mobile Access, zomwe sizikuphatikizidwa pogula mndandanda wamitundu ina ya CheckPoint. - Kutha kuyang'anira zipata zachitetezo pogwiritsa ntchito pulogalamu yam'manja ya Watch Tower (zambiri zinalembedwa patsamba lathu )
- Kupanga zodziwikiratu za mfundo/malamulo a zida za IoT pomwe zidalumikizidwa ndi netiweki yanu. Lamuloli limapangidwa pa chipangizo chilichonse chanzeru ndipo limalola ma protocol okhawo omwe amafunikira kuti azigwira ntchito moyenera.
1500 mndandanda wowongolera
Poganizira zaukadaulo ndi kuthekera kwa zida zatsopano za banja la SMB, ndikofunikira kudziwa kuti pali njira zosiyanasiyana zowongolera ndi kasamalidwe kawo. Ma ziwembu otsatirawa alipo:
- Ulamuliro wa m'deralo.
Nthawi zambiri amagwiritsidwa ntchito m'mabizinesi ang'onoang'ono komwe kuli maofesi angapo ndipo palibe kasamalidwe kapakati pazitukuko. Ubwinowu ukuphatikiza: kutumizidwa ndi kasamalidwe ka NGFW, kuthekera kolumikizana ndi zida zakomweko. Zoyipazi zimaphatikizapo zoperewera zomwe zimagwirizanitsidwa ndi kuthekera kwa Gaia: kusowa kwa mulingo wolekanitsa malamulo, zida zowunikira zochepa, kusowa kwa malo osungirako zipika.
- Kuwongolera kwapakati kudzera pa Seva Yodzipatulira Yoyang'anira. Njirayi imagwiritsidwa ntchito ngati woyang'anira amatha kuyang'anira ma NGFW angapo; amatha kupezeka pamasamba osiyanasiyana. Ubwino wa njirayi ndi kusinthasintha komanso kuwongolera mkhalidwe wonse wa zomangamanga, ndipo zosankha zina za Gaia 80.20 Zophatikizidwa zimangopezeka ndi dongosololi.
- Centralized management kudzera . Ichi ndi chilemba chatsopano cha kasamalidwe ka NGFW kuchokera ku CheckPoint. Seva Yanu Yoyang'anira imayikidwa mumtambo, kuyang'anira konse kumachitika kudzera pa Web Interface, kukulolani kuti musadalire OS ya PC yanu. Kuonjezera apo, seva yoyang'anira imasungidwa ndi akatswiri a CheckPoint, ntchito yake imadalira mwachindunji magawo osankhidwa ndipo imakhala yosavuta.
- Centralized management kudzera (Security Management Portal). Yankholi likuphatikiza kuyika pamtambo kapena pamalo omwe amagawana nawo pa intaneti omwe amatha kuyang'anira zida za 10 za SMB nthawi imodzi.
- Kutha kulamulira pogwiritsa ntchito chipangizo cham'manja cha Watch Tower kumapezeka pokhapokha mutagwiritsa ntchito njira zonse zowongolera (onani mfundo 1-4). Werengani zambiri za izi m'nkhani yathu
Tiyeni tiwone zomwe zili zofunika kwambiri m'malingaliro athu:
- Kulephera kugwiritsa ntchito Mobile Access Portal. Ogwiritsa azitha kugwiritsa ntchito Remote Access kuti apeze zida zamakampani zamkati, koma sangathe kulumikizana ndi portal ya SSL ndi mapulogalamu omwe mwasindikiza.
- Masamba kapena zosankha zotsatirazi sizimathandizidwa: Chidziwitso Chokhazikika, DLP, Zinthu Zosinthidwa, Kuwunika kwa SSL popanda kugawa, Kuchotsa Zowopsa, MTA yokhala ndi cheke cha Threat Emulation, Antivayirasi yosanthula zakale, ClusterXL mu Load Sharing mode.
Pamapeto pa nkhaniyi, ndikufuna kudziwa kuti mutu wa mayankho a NGFW a SMB wasamukira ku gawo latsopano lothandizira ndi kulumikizana; chifukwa cha kutulutsidwa kwa mtundu wa 80.20 Wophatikizidwa, malire apezeka pakati pa zosankha za mtundu wathunthu wa Gaia ndi luso la zida zamaofesi ang'onoang'ono. Tikukonzekera kupitiliza kusindikiza mndandanda wankhani zophunzitsira, pomwe tikambirana za masinthidwe oyambira a SMB, kukonza magwiridwe antchito ndi zosankha zawo zatsopano.
. Dzimvetserani (, , , , ).
Source: www.habr.com