Moni kwa aliyense amene akupitiriza kuwerenga nkhani za m'badwo watsopano wa NGFW Check Point wa banja la SMB (1500 series). MU tidayang'ana yankho la SMP (malo oyang'anira zipata za SMB). Lero ndikufuna kulankhula za Smart-1 Cloud portal, imadziyika yokha ngati yankho lochokera ku SaaS Check Point, imakhala ngati Management Server mumtambo, kotero idzakhala yoyenera kwa NGFW Check Point iliyonse. Kwa amene mwangobwera kumene nafe, ndiroleni ndikukumbutseni mitu yomwe tinakambirana kale: , , .
Tiyeni tiwone mbali zazikulu za Smart-1 Cloud:
- Yankho limodzi lapakati pakuwongolera zida zanu zonse za Check Point (zipata zenizeni komanso zakuthupi pamagawo osiyanasiyana).
- Ndondomeko zodziwika za ma Blades onse zimakulolani kuti muchepetse njira zoyendetsera (kupanga / kusintha malamulo a ntchito zosiyanasiyana).
- Thandizo la njira ya mbiri mukamagwira ntchito ndi zoikamo pachipata. Udindo wa kulekanitsa ufulu wopeza pamene akugwira ntchito mu portal, kumene olamulira ma netiweki, akatswiri ofufuza, ndi zina zotero angathe kuchita ntchito zosiyanasiyana nthawi imodzi.
- Kuyang'anira ziwopsezo, zomwe zimapereka zipika ndi kuwonera zochitika pamalo amodzi.
- Kuthandizira kulumikizana kudzera pa API. Wogwiritsa ntchito amatha kukhazikitsa njira zodzipangira okha, kupangitsa kuti ntchito za tsiku ndi tsiku zikhale zosavuta.
- Kufikira pa intaneti. Imachotsa zoletsa zokhudzana ndi chithandizo cha ma OS apawokha ndipo ndizowoneka bwino.
Kwa iwo omwe amadziwa kale mayankho a Check Point, kuthekera koyambira komwe kumaperekedwa sikusiyana ndi kukhala ndi Management Server yodzipatulira pamalo anu. Adzakhala olondola pang'ono, koma pankhani ya Smart-1 Cloud, kukonza seva yoyang'anira kumaperekedwa ndi akatswiri a Check Point. Zimaphatikizapo: kupanga zosunga zobwezeretsera, kuyang'anira malo aulere pazama media, kukonza zolakwika, kukhazikitsa mapulogalamu aposachedwa. Njira yosamuka (kusamutsa) zoikamo imakhalanso yosavuta.
Chilolezo
Tisanadziwe momwe njira yoyendetsera mtambo imagwirira ntchito, tiyeni tiphunzire za ziphaso kuchokera kwa wogwira ntchitoyo. .
Kuwongolera chipata chimodzi:
Kulembetsa kumatengera masamba osankhidwa osankhidwa; pali mayendedwe atatu onse:
- Utsogoleri. 50 GB yosungirako, 1 GB tsiku lililonse kwa zipika.
- Management + SmartEvent. 100 GB yosungirako, 3 GB zipika tsiku, lipoti m'badwo.
- Management + Compliance + SmartEvent. Kusungirako kwa 100 GB, 3 GB zolemba zatsiku ndi tsiku, kupanga malipoti, malingaliro a zoikamo potengera machitidwe achitetezo azidziwitso.
*Kusankha kumatengera zinthu zambiri: mtundu wa zipika, kuchuluka kwa ogwiritsa ntchito, kuchuluka kwa magalimoto.
Palinso kulembetsa kuti muzitha kuyang'anira zipata 5. Sitidzakambirana mwatsatanetsatane - mutha kupeza zambiri kuchokera .
Kukhazikitsidwa kwa Smart-1 Cloud
Aliyense atha kuyesa yankho; kuti muchite izi, muyenera kulembetsa mu Infinity Portal - ntchito yamtambo kuchokera ku Check Point, komwe mutha kupeza mwayi woyeserera madera otsatirawa:
- Chitetezo cha Mtambo (CloudGuard SaaS, CloudGuard Native);
- Chitetezo cha Network (CloudGuard Connect, Smart-1 Cloud, Infinity SOC);
- Chitetezo chomaliza (, SandBlast Agent Cloud Management, Sandblast Mobile).
Tidzalowa mudongosolo ndi inu (kulembetsa kumafunika kwa ogwiritsa ntchito atsopano) ndikupita ku Smart-1 Cloud solution:
Mudzauzidwa mwachidule za ubwino wa yankho ili (Kasamalidwe ka zomangamanga, palibe kuyika kofunikira, zosintha zokha).
Pambuyo podzaza minda, muyenera kudikirira mpaka akaunti yanu itakonzeka kulowa mu portal:
Opaleshoniyo ikayenda bwino, mudzalandira zidziwitso zolembetsa ndi imelo (zomwe zimafotokozedwa mukalowa mu Infinity Portal), ndipo mudzatumizidwanso kutsamba loyambira la Smart-1 Cloud.
Ma portal omwe alipo:
- Tsegulani SmartConsole. Gwiritsani ntchito pulogalamu yomwe yaikidwa pa PC yanu, kapena gwiritsani ntchito mawonekedwe a intaneti.
- Kulunzanitsa ndi chinthu pachipata.
- Kugwira ntchito ndi zipika.
- Makonda
Kulumikizana ndi chipata
Tiyeni tiyambe ndi kulunzanitsa Chipata Chachitetezo; kuti muchite izi, muyenera kuwonjezera ngati chinthu. Pitani ku tabu "Connect Gateway"
Muyenera kuyika dzina lachipata lapadera; mutha kuwonjezera ndemanga ku chinthucho. Kenako dinani "Kulembetsa".
Chipata cha pachipata chidzawoneka chomwe chidzafunika kulumikizidwa ndi Management Server potsatira malamulo a CLI pachipata:
- Onetsetsani kuti JHF (Jumbo Hotfix) yaposachedwa yaikidwa pachipata.
- Khazikitsani chizindikiro cholumikizira: khazikitsani chitetezo-chipata maas pa chizindikiro chovomerezeka
- Yang'anani momwe mungalumikizitsire:
Mkhalidwe wa MaaS: Wothandizidwa
MaaS Tunnel State: Up
MaaS domain-name:
Service-Identifier.maas.checkpoint.com
Chipata IP cha MaaS Communication: 100.64.0.1
Ntchito za Mass Tunnel zikakwezedwa, muyenera kupitiliza kukhazikitsa kulumikizana kwa SIC pakati pa chipata ndi Smart-1 Cloud mu Smartconsole. Ngati opareshoniyo yayenda bwino, chipata chapamwamba chidzapezedwa, tiyeni tiphatikizepo chitsanzo:
Chifukwa chake, mukamagwiritsa ntchito Smart-1 Cloud, chipatacho chimalumikizidwa ndi netiweki ya "grey" 10.64.0.1.
Ndiroleni ndiwonjezere kuti pamapangidwe athu chipata chokha chimafikira pa intaneti pogwiritsa ntchito NAT, chifukwa chake, palibe adilesi ya IP yapagulu pamawonekedwe ake, komabe, titha kuwongolera kuchokera kunja. Ichi ndi chinthu china chosangalatsa cha Smart-1 Cloud, chifukwa chomwe subnet yoyang'anira yosiyana imapangidwa ndi ma adilesi ake a IP.
Pomaliza
Mukawonjezera bwino chipata chowongolera kudzera pa Smart-1 Cloud, mumatha kupeza zonse, monga mu Smart Console. Pa masanjidwe athu, tidayambitsa mtundu wapaintaneti; m'malo mwake, ndi makina okweza omwe ali ndi kasitomala wowongolera.
Mutha kudziwa zambiri za kuthekera kwa Smart Console ndi kamangidwe ka Check Point mwa olemba athu .
Ndizo zonse lero, tikuyembekezera nkhani yomaliza ya mndandanda, momwe tidzakhudzire luso lokonzekera bwino la banja la SMB 1500 lomwe lili ndi Gaia 80.20 Embedded.
. Dzimvetserani (, , , , )
Source: www.habr.com
