Moni, owerenga okondedwa a blog ya TS Solution, tikupitiliza zolemba za NGFW CheckPoint mu gawo la SMB. Kuti mukhale omasuka, mutha kudzidziwa bwino ndi mtundu wamitundu, phunzirani mawonekedwe ndi kuthekera kwake
Kwa iwo omwe akungodziwana ndi mtundu wa SMB - oyenera maofesi ang'onoang'ono kapena nthambi za anthu 200 (posankha chitsanzo 1590). Chimodzi mwazinthu za banjali ndikuthandizira kulumikizana opanda zingwe; izi zitha kukhala zothandiza ngati zomangamanga zili ndi zida zomwe zili ndi adaputala ya WiFi kapena NGFW ikufunika intaneti kudzera pamafoni. Pantchito zomwe zalembedwa mudzafunika matekinoloje: WiFi, LTE. Nkhaniyi ikunena za izi, pomwe tiwona:
- Kuthandizira ndikusintha mawonekedwe a NGFW WiFi.
- Kuthandizira ndikusintha mawonekedwe a LTE a NGFW.
- Zotsatira zazambiri zamaukadaulo opanda zingwe a NGFW.
NGFW ndi WiFi
Ngati tibwerera ku gawo 2 la mndandanda wathu, tidasiya mwayi wolumikizira opanda zingwe, chifukwa chake muyenera kupita ku tabu. Chipangizo → Network → Wopanda zingwe
Pazithunzi zomwe ndidapereka, pali mitundu iwiri yogwiritsira ntchito WiFi:
- 2.4 GHz ndi ma frequency omwe amathandizidwa ndi mibadwo yambiri ya zida zamagetsi zosiyanasiyana.
- 5 GHz ndi ma frequency omwe ndi mulingo wamakono wogwirira ntchito ndi zida zopanda zingwe; thandizo limapezeka m'mafoni onse amakono, mapiritsi ndi laputopu.
Komanso kuchokera pa skrini (pamwambapa) mutha kuzindikira kuti ndathandizira kale mawonekedwe a 5 GHz, tiyeni tikhazikitse 2.4 GHz palimodzi, kuti tichite izi, dinani batani. "Konzani".
Pazenera lopanga malo ofikira, tikufunsidwa kuti titchule magawo oyambira. Mutha kugwiritsa ntchito mawu achinsinsi kapena seva ya Radius ngati njira yotsimikizira. Njira ya "Lolani mwayi kuchokera pa netiweki iyi kupita ku netiweki yakomweko" ili ndi udindo wopezera makasitomala anu opanda zingwe kuzinthu zamkati zomwe zili kuseri kwa Check Point NGFW. Mfundo yanu ikakonzedwa, mutha kusintha magawo ambiri.
Zokonda zomwe zilipo
Chida chomwe chikuyesedwa chikalumikizidwa pamalo anu olowera, titha kuwonetsetsa kuti chili pa netiweki yathu, pitani pa tabu: Zolemba & Kuwunika → Mkhalidwe → Zida Zopanda Zingwe
Ngati tidina pa chinthu chokhala ndi dzina, tiwona mawonekedwe a kasitomala wolumikizidwa:
Kuphatikiza pa chidziwitso cha chipangizochi, ndimaganiziranso zotsatirazi zothandiza:
- kusunga chinthu chogwiritsidwa ntchito m'malamulo (1);
- letsani mwayi wopeza kasitomala uyu (2).
Kupitilira apo, kutengera makonda athu a Application Blade (mu mawu a CheckPoint, imodzi mwama module), kudina maulalo omwe angakhale oopsa ndikoletsedwa.
Timayesa kutsegula imodzi mwamagulu pazida zam'manja polumikiza kudzera pa WiFi kupita ku NGFW Check Point ndipo, motero, kupeza intaneti kudzera mu izo.
Kutsiliza: Wogwiritsa sanathe kupeza tsambalo, lomwe lili m'gulu la Anonymizer.
Chifukwa chake, tayang'ana zoyambira zolumikizira ogwiritsa ntchito pogwiritsa ntchito WiFi; izi ndizosavuta m'maofesi ang'onoang'ono pomwe pali zida zambiri zopanda zingwe. Panthawi imodzimodziyo, yankho la Check Point NGFW limakupatsani mwayi woteteza ogwiritsa ntchito anu ku ziwopsezo ndi zinthu zoyipa, ndipo muli ndi zosankha zosinthika zowunikira omwe ali ndi zingwe. Ndikufuna kutchula payokha utsogoleri pogwiritsa ntchito foni yam'manja; njirayo idafotokozedwa m'modzi mwathu
NGFW ndi LTE
Mitundu 1570, 1590 imabwera ndi modemu ya LTE, yomwe imakupatsani mwayi wogwiritsa ntchito Micro/Nano SIM ndikukhazikitsa kulumikizana kwa 4G. Kwa iwo omwe ali ndi chidwi, tidzasiya chikumbutso chachifupi pansi pa wowononga.
Malangizo oyika SIM
Chifukwa chake mwayika SIM, pambuyo pake muyenera kubwerera ku Gaia Portal ndikupita ku gawo lotsatira Chipangizo → Network → intaneti. Mwachikhazikitso, mudzakhala ndi kulumikizidwa kumodzi kwa WAN; muyenera kupanga cholumikizira chatsopano potsatira muvi wofiyira.
Kumene tidzafunika kukhazikitsa dzina lolumikizirana, dziwani mtundu wa mawonekedwe (kwathu Ma Cellular)
Kuphatikiza apo, tsegulani tabu "Kuwunika Kulumikizana", apa ndizotheka kutumiza zokha: pempho la ARP ku njira yosasinthika, mapaketi a ICMP kumagwero odziwika, ndikuwona kuti mutha kufotokoza zomwe mungagwiritse ntchito pakuwunika.
Tab "Mafoni" ali ndi udindo wosankha zinthu zofunika kwambiri pakati pa ma SIM, kuyika data yotsimikizika ngati ikufunika (APN, PIN).
Mu tabu «Zapamwamba» Ndi zotheka kukhazikitsa zokonda pa netiweki:
- makonda a mawonekedwe (MTU, MAC)
- Chithunzi cha QOS
- Kusintha kwa ISP
- NAT
- DHCP
Mukapanga mtundu watsopano wolumikizira, mupeza tebulo la ma intaneti Chipangizo → Network → intaneti:
Pazithunzi zomwe zaperekedwa pamwambapa tikuwona kulumikizana kwatsopano "LTE_TELE2", monga momwe mungaganizire, iyi ndi SIM yochokera kwa omwe amapereka Tele2. Gome limapereka chidziwitso cha mlingo wa chizindikiro, chimasonyeza kuchuluka kwa zotayika ndi nthawi yochedwa. Kuphatikiza apo, ndizotheka kutsegula njirayo Kuwunika Kulumikizana.
Pazenera lowunikira tikuwona zotsatira zotumizira zopempha mpaka ma seva atatu, imodzi mwazo ndi mwambo (ya.ru). Zowonetsedwa apa:
- kutayika kwa paketi;
- kuchuluka kwa zolakwika zamaneti;
- nthawi yoyankhira (avareji, ochepa ndi opambana);
- jitter.
Ngati mukufuna kudziwa zambiri zamodemu ya LTE pa NGFW Check Point, muyenera kupita Zolemba ndi Kuwunika→ Kuzindikira → Zida → Modemu Yam'manja Yam'manja:
Kenako, tidasanthula liwiro la intaneti kwa omaliza, omwe amalumikizidwa ndi NGFW kudzera pa WiFi (5 GHz), ndipo chipata chokha chimagwiritsa ntchito kulumikizana kwa LTE kutumiza mapaketi ku Global Network. Tidayerekeza zomwe tapeza ndi zomwe zikuchitika pomwe malo omwewo amagwiritsidwa ntchito, koma foni imalumikizana ndi intaneti mwachindunji. Kuti zikhale zosavuta, zotsatira zake zimabisika pansi pa wowononga.
Zotsatira za SpeedTest
Zoonadi, zizindikirozi zili ndi zolakwika ndi makhalidwe awo, tiyeni tiyike patsogolo lingaliro: NGFW 1590 imakulitsa mphamvu ya chizindikiro cha ma cell omwe akubwera pogwiritsa ntchito tinyanga ziwiri zakunja. Mawu awa akutsimikiziridwa molakwika ndi zotsatira za SpeedTest, zomwe zimachitidwa pansi pazikhalidwe zomwezo ndikuwonetsa kuchepa kwa Ping ndi latency kuzinthu zomwezo.
Cholinga
NGFW+LTE
Mobile+LTE
Ping (ms)
30
34
Jitter (ms)
7.2
5.2
Liwiro lobwera (Mbp/s)
16.1
12
Liwiro lotuluka (Mbp/s)
10.9
2.97
Pofuna kuyesa mphamvu ya NGFW Check Point 1590 antennas akunja, tinayeza mlingo wolandirira ma siginecha, ndiyeno pogwiritsa ntchito menyu ya uinjiniya tinapanga muyeso womwewo wa foni. Zotsatira zikuperekedwa pansipa:
Chifukwa chake, mulingo wa mphamvu yolandirira ma siginecha umaonedwa kuti ndi wabwino kwambiri pamene mtengo wake woyipa umakhala 0. Mtengo womwe umapezeka patelefoni unali (-109 dBm), pa modemu (-61 dBm). Zomwe zimatsimikizira malingaliro athu ndikuwonetsa kukhazikika kwa kulumikizana kwa LTE kwa banja la NGFW SMB.
Mfundo zomaliza
Kuti tifotokoze mwachidule gawo lamasiku ano, matekinoloje awiri adaganiziridwa: WiFi ndi LTE, zomwe zimathandizidwa ndi mitundu ya 1570, 1590 Check Point.
Kwa maofesi ang'onoang'ono ndi nthambi, sizingatheke kukhazikitsa malo osiyana opanda zingwe, kotero NGFW idzathandizira kukonza maukonde opanda zingwe, ndipo chofunika kwambiri, kuteteza ogwiritsa ntchito.
Ponena za modemu ya LTE yochokera ku NGFW, m'malingaliro mwanga, milandu yotsatirayi ikufunika:
- Kusowa kolumikizana ndi mawaya pa intaneti. Pankhaniyi, mudzakakamizika kugwiritsa ntchito mafoni a m'manja kuti mupereke intaneti. Izi ndizofunikanso kwa makampani ena omwe mtundu wawo wantchito umafuna kuyika "mafoni" amtundu wa maukonde awo, mosasamala kanthu za momwe zinthu zilili (malo, kupezeka kwa mawaya, ndi zina).
- Kusungitsa njira yayikulu yolumikizira mawaya. Ndiroleni ndikukumbutseni kuti NGFW imathandizira kugwira ntchito ndi ma SIM awiri, izi zimawonjezera kulekerera kolakwika kwa zomangamanga zanu pakachitika ngozi ndi imodzi mwamalumikizidwe a waya. Mukhozanso kulumikiza pamanja LTE, kutengera momwe mumagwiritsira ntchito.
Source: www.habr.com