Moni, abwenzi! Ndipo tidafika komaliza, phunziro lomaliza la Check Point Poyambira. Lero tikambirana za mutu wofunikira kwambiri - Chilolezo. Ndikufulumira kukuchenjezani kuti phunziro ili silondomeko yokwanira yosankha zida kapena zilolezo. Ichi ndi chidule chabe cha mfundo zazikuluzikulu zomwe woyang'anira Check Point aliyense ayenera kudziwa. Ngati mukudabwa kwambiri ndi kusankha kwa chilolezo kapena chipangizo, ndiye kuti ndi bwino kutembenukira kwa akatswiri, i.e. kwa ife :). Pali misampha yambiri yomwe ndi yovuta kwambiri kukamba pamaphunzirowa, ndipo simungathe kukumbukira nthawi yomweyo.
Phunziro lathu likhala longopeka kwathunthu, kotero mutha kuzimitsa ma seva anu akunyoza ndikupumula. Kumapeto kwa nkhaniyi mudzapeza phunziro la kanema komwe ndikufotokozera zonse mwatsatanetsatane.
Chilolezo cha Gateway
Tiyeni tiyambe ndi kufotokozera za zilolezo za zipata zachitetezo. Kuphatikiza apo, izi zimagwiranso ntchito pamakina apamwamba a hardware ndi makina enieni. Tiyerekeze kuti mwaganiza zogula chipata. Sizingatheke kungogula chidutswa cha hardware kapena makina enieni popanda "zolembetsa"! Pali njira zitatu zolembetsa:
Ndipo tsopano chinthu choyamba chosangalatsa! Mutha kugula chipangizo kapena makina enieni okhala ndi zolembetsa za NGTP kapena NGTX. Koma mukakonzanso zolembetsa zanu, mutha kusankha kale phukusi la NGFW ngati simukufuna masamba a AV, AB, URL, AS, TE ndi TX. Iyi ndi mphindi. Zolembetsa zokha zitha kugulidwa kwa nthawi ya chaka chimodzi, ziwiri kapena zitatu.
Ndikhoza kulosera funso lanu loyamba! βKodi chimachitika ndi chiyani ngati kulembetsa sikunayambitsidwenso?" Ndidawunikira makamaka masamba obiriwira omwe azigwira ntchito NTHAWI ZONSE, NDIPOPANDA zowonjezera. Otchedwa osatha pales. Masamba otsala omwe amafunikira kusinthidwa kosalekeza amangosiya kugwira ntchito. Chabwino, mwina IPS idzakhalabe ndi ma signature ofunikira omwe akugwira ntchito (koma ndi ochepa kwambiri). Izi ndi zoona kwa hardware ndi makina enieni, i.e. vSec.
Monga chinthu chosiyana, ndidawunikira masamba atatu omwe sanaphatikizidwe mu zida zilizonse: DLP, MAB ndi Capsule.
Kumbukiraninso kuti ngati mutagula njira yothetsera masango, ndiye sankhani chitsanzo chokhala ndi suffix HA (ie High Availability) ngati chipangizo chachiwiri. Chithunzichi chikuwonetsa chitsanzo cha gateway 5400. Izi zikukhudza zipata. Tsopano seva yoyang'anira.
Kupereka chilolezo cha seva
Monga tanenera kale m'maphunziro oyambirira, pali zochitika ziwiri zogwiritsira ntchito Check Point: Standalone (pamene khomo ndi kasamalidwe zili pa chipangizo chimodzi) ndi Kugawidwa (pamene seva yoyang'anira imayikidwa pa chipangizo china). Komabe, zosankhazo sizimathera pamenepo. Tiyeni tiwone zochitika zitatu zogwiritsira ntchito seva yoyang'anira:
- Kugula odzipereka a NGSM. Njira yotchuka kwambiri. Sankhani zida za Smart-1 kapena zida zenizeni. Mumasankha, kutengera momwe mungayendetsere zipata, 5, 10, 25, etc. Potumiza chipangizochi, mutha kugwiritsa ntchito masamba 4 owongolera ma seva: NPM (ie kasamalidwe ka mfundo), Kudula mitengo ndi Status (ie kudula mitengo), Smart Event (SIEM yochokera ku Check Point, yomwe imatipatsa malipoti onse) ndi Compliance (ichi ndi kuwunika kwa makonda, mwina potsatira malamulo ena, PCI DSS yomweyo, kapena Kuchita Bwino Kwambiri). Mutha kuwona nthawi yomweyo kuti masamba a NPM ndi LS ndi masamba okhazikika, i.e. idzagwira ntchito popanda kulembetsanso, koma masamba a Smart Event ndi Compliance amaphatikizidwa kwa chaka choyamba chokha! Ndiye iwo ayenera kukonzedwanso kwa ndalama zosiyana. Iyi ndi mfundo yofunika, osayiwala. Ndipo ngati mutha kukhalabe popanda tsamba la Compliance, ndiye kuti aliyense amafunikira Smart Event.
- Kugula seva yodzipereka Yoyang'anira Zochitika KUWONJEZERA pa seva yoyang'anira NGSM yomwe ilipo. Nβchifukwa chiyani zimenezi zili zofunika? Chowonadi ndi chakuti ntchito yodula mitengo makamaka Smart Event "imadya" zida zamadongosolo abwino. Ndipo ngati pali zipika zambiri, ndiye kuti "mabuleki" pa seva yolamulira akhoza kubweretsa. Chifukwa chake, nthawi zambiri amasamutsa izi ku chipangizo china, Smart-1 hardware kapena, kachiwiri, makina enieni. Kuphatikizika kwakukulu ndi zipika zambiri pafupifupi nthawi zonse kumafunikira seva yodzipatulira ya Smart Event. Ikhozanso kulandira zipika. Mwanjira iyi seva yanu yoyang'anira imangogwira ntchito zowongolera. Izi zimathandizira kwambiri kukhazikika kwadongosolo komanso kuyankha. Monga mukuwonera, mukamagula seva yodzipatulira ya Smart Event, mumapeza masamba awiriwa kuti mugwiritse ntchito kosatha, ngakhale osakonzanso. Pazaka za 3-4, izi zitha kukhala zotsika mtengo kuposa kugula zowonjezera za Smart Event pa seva ya NGSM wamba chaka chilichonse.
- Seva yodzipereka ya Log management, yomwe imabwera kuwonjezera pa ma seva a NGSM ndi Smart Event. Ndikuganiza kuti tanthauzo lake ndi lomveka. Ngati pali mitengo yochuluka KWAMBIRI, tikhoza kusuntha ntchito yodula mitengo ku seva yosiyana. Seva yodzipatulira ya Log ilinso ndi layisensi yokhazikika ndipo sifunikira kukonzanso.
Vidiyo phunziro
Dziwani zambiri za kasamalidwe ka layisensi ndi thandizo laukadaulo la Check Point Pano:
Source: www.habr.com