Onani mayankho a Point SMB. Zitsanzo zatsopano zamakampani ang'onoang'ono ndi nthambi

Posachedwapa (mu 2016), kampaniyo Onani Point adawonetsa zida zake zatsopano (zonse zipata ndi ma seva owongolera). Kusiyanitsa kwakukulu kuchokera pamzere wapitawu ndikokulitsa kwambiri zokolola.

M'nkhaniyi tidzangoyang'ana pa zitsanzo zapansi. Tidzafotokozera ubwino wa zipangizo zatsopano ndi zovuta zomwe zingatheke zomwe sizikambidwa nthawi zonse. Tidzagawananso zowona zakugwiritsa ntchito kwawo.

Onani mndandanda wa Point

Monga mukuwonera pachithunzichi, Check Point imagawa zida zake m'magulu akulu atatu:

• High End Enterprise ndi Data Center (zitsanzo 23800, 23500, 15600, 15400)
• ogwira (zitsanzo 5900, 5800, 5600, 5400, 5200, 5100)
• Makampani Ang'onoang'ono ndi Apakati (zitsanzo 3200, 3100, 1490, 1470, 1450, 14301200R)

Pankhaniyi, chimodzi mwazinthu zazikulu ndi zomwe zimatchedwa SPU - Magawo a Mphamvu Zachitetezo. Uwu ndiye muyeso waumwini wa Check Point womwe umawonetsa momwe chida chikuyendera. Mwachitsanzo, tiyeni tiyerekeze njira yanthawi zonse yoyezera magwiridwe antchito a Firewall (Mbps) ndi njira “yatsopano” yochokera ku Check Point (SPU).

Njira Yachikale - Kutulutsa kwa Firewall

• Kuyeza kumachitika mu labotale pamayendedwe "opanga".
• Kugwira ntchito kwa Firewall kokha kumawunikidwa, popanda ma module owonjezera monga IPS, Application Control, etc.
• Kuyesa kumachitika ndi lamulo limodzi la Firewall.

Check Point Methodology - Mphamvu Yachitetezo

• Miyezo pamayendedwe enieni a ogwiritsa ntchito.
• Kuchita kwa magwiridwe antchito onse (Firewall, IPS, Control Control, kusefa ulalo, etc.) kumawunikidwa.
• Kuyesedwa pa ndondomeko yokhazikika yomwe ili ndi malamulo ambiri.

Yang'anani Chida cha Kukula kwa Zida Zamagetsi

Choncho, posankha chitsanzo choyenera cha Check Point, ndi bwino kudalira chizindikiro Security Power Unit. Imasonyezedwa mu datasheet iliyonse ya chipangizocho. Simudzatha kuwerengera SPU yoyenera pa netiweki yanu nokha. Izi zitha kuchitika mothandizidwa ndi mnzake yemwe ali ndi chida Yang'anani Chida cha Kukula kwa Zida Zamagetsi:

Kuti musankhe njira yabwino kwambiri, muyenera kuganizira magawo monga:

• M'lifupi njira ya intaneti;
• Kuchulukirachulukira kwa zipata (zingasiyane ndi njira yapaintaneti ngati, mwachitsanzo, mudagawa maukonde akomweko pogwiritsa ntchito Check Point);
• Chiwerengero cha ogwiritsa ntchito pa intaneti;
• Ntchito zofunika (Firewall, Anti-Virus, Anti-Bot, Application Control, URL Seltering, IPS, Threat Emulation, etc.).

Palinso makonda owoneka bwino omwe amafotokoza momwe masamba awa adzagwiritsire ntchito:

Pambuyo pofotokoza mawonekedwe onse, mutha kulandira lipoti lofotokoza zida zoyenera:

Apa mutha kuwona SPU yofunikira (72 mwathu) ndi yovomerezeka (144). Komanso zitsanzo zomwe zili ndi kufotokozera za katundu wawo ndi "kusungira" magalimoto ndi masamba. Posankha chitsanzo, nthawi zonse tikulimbikitsidwa kutenga chipangizo kuchokera kumalo obiriwira (ie, kukweza mpaka 50 peresenti):

Izi zimawonetsetsa kuti palibe mavuto panthawi yochulukirachulukira kapena kuwonjezereka kokonzekera kukula kwa njira ya intaneti. Posankha chipangizo, nthawi zonse funsani mnzanuyo kuti apereke lipoti lofanana. Chitsanzo akhoza dawunilodi apa.

Zakale vs Zatsopano

Popeza tamvetsetsa gawo lalikulu lomwe likuwonetsa magwiridwe antchito a zida, titha kuyang'anitsitsa mitundu yatsopano yamabizinesi ang'onoang'ono ndi apakatikati. Monga tafotokozera pamwambapa, Check Point ili ndi gawo lonse - Makampani Ang'onoang'ono ndi Apakati (zitsanzo 3200, 3100, 1490, 1470, 1450, 1430, 1200R). Zida izi zitha kutchedwa zosintha za mndandanda wakale wa 2012 (2200, 1180, 1140, 1120). Kuti mumvetse kusiyana kwakukulu, ganizirani chithunzi chili pansipa:

(mitengo ili mu GPL, kupatula VAT ndi chithandizo chaukadaulo)

Monga mukuonera, mndandanda wa 2016 wakula kwambiri (SPU), ndipo mitengo imakhalabe pamtunda womwewo (kupatulapo chitsanzo cha 3200). Mzere watsopano umaphatikizaponso chitsanzo 3100, koma pakali pano palibe zidziwitso ndipo kulowetsa ku Russia ndikoletsedwa! Kumbukirani izi!

Ngati tiwerengeranso mtengo wa SPU imodzi, ndiye kuti mtundu wa 1450 ndiye wabwino kwambiri. Pansipa tiwona mwatsatanetsatane mndandanda watsopano wa Check Point.

Mapulani ogwiritsira ntchito zida za SMB

Monga tikuwonera pachithunzichi, pali zochitika zazikulu ziwiri zoyendetsera zida za SMB:

1. Mu njira yokhazikika pachipata. Pankhaniyi, Check Point imayikidwa ngati chipangizo chozungulira ndikuyendetsedwa kwanuko.
2. Chipata cha nthambi. Pankhaniyi, zida zanthambi zimayendetsedwa pakati (pogwiritsa ntchito Management seva) kuchokera ku ofesi yayikulu.

Za mndandanda 3000 и 1400 Pali zinthu zina munjira iliyonse. Tiziwona pansipa.

Zithunzi za SMB3000

Pakali pano pali "zidutswa zachitsulo" ziwiri - 3200 и 3100. Monga tanena kale, 3100 sichingalowetsedwe mdziko muno. Ponena za 3200, ndizosintha bwino kwambiri mndandanda wakale wa 2200. Chipangizochi chimagwiritsa ntchito Gaia (onse R77.30 ndi R80.10). Ngati mugwiritsa ntchito chipangizochi ngati chipata chachikulu mubizinesi yaying'ono, mutha kuyembekezera zotsatirazi:

1. Njira yapaintaneti - 50 Mbit;
2. Chiwerengero cha bandwidth - 300 Mbit;
3. Chiwerengero cha ogwiritsa ntchito - 200.

Monga mukuonera, katundu wa chipangizo pankhaniyi ndi 47% ndipo izi ndi zoyang'anira m'deralo, i.e. Yoyimira kasinthidwe (zambiri za standalone ndi kugawa apa). Kuchokera pazomwe ndakumana nazo nditha kunena kuti ndi kasamalidwe kaderako sikuvomerezeka kupitilira katundu wa 50%, chifukwa ... Pakhoza kukhala mavuto ndi kuwongolera (kuchepetsa).
Ngati chipangizocho chimatengedwa ngati chipangizo cha nthambi (i.e. chokhala ndi kasamalidwe kosiyana), ndiye kuti zizindikirozo zidzakhala zapamwamba kwambiri. Ndipo mutha kulowa kale m'dera lachikasu pakukula kwake (ie, ndi katundu wa 50% mpaka 70%). Mutha kuwona zidziwitso za chipangizocho apa.

Zithunzi za SMB1400

Mndandandawu umaphatikizapo zida zingapo nthawi imodzi: 1490, 1470, 1450, 1430 (Kusintha kwanzeru kwa 1120, 1140 ndi 1180).

Ngakhale kuti awa ndi mitundu yaying'ono kwambiri ya Check Point, ali ndi magwiridwe antchito onse:

• Zipangizo za SMB zitha kusonkhanitsidwa kukhala gulu la HA (Active/ Standby);
• Pafupifupi masamba onse a mapulogalamu alipo (monga pazidutswa "zazikulu" za hardware);
• imatha kuyendetsedwa kwanuko komanso pakati (pogwiritsa ntchito Seva Yachikhalidwe Yoyang'anira);
• pali zosintha ndi WiFi, ADSL ndi PoE;
• mukhoza kulumikiza 3G modem;
• Zida zopangira rack zilipo.

Komabe, ndikofunikira kuchenjeza za zolepheretsa / zina:

• Chipangizocho chili ndi Gaia yolakwika pa bolodi, ndi Gaia 77.20 Yophatikizidwa. Kuchepetsa uku kumachitika chifukwa cha kapangidwe ka chipangizocho (ma processor a ARM amagwiritsidwa ntchito). Pankhani yakuwongolera kwanuko (yoyimirira), simungathe kugwiritsa ntchito SmartConsole mwachizolowezi. M'malo mwake, pali mawonekedwe a intaneti. Mutha kuziwona muvidiyoyi:
  
  Chitsanzo chimaganizira za mndandanda wa 700, koma kwenikweni sichigulitsidwa ku Russia.
• Zowopsa M'zigawo ntchito sikugwira ntchito. Zowopseza Emulation kokha. Inu mukhoza kuwona chomwe icho chiri apa
• Ndikosatheka kusonkhanitsa gulu mu Load Sharing mode. Iwo. kunyenga pogula zidutswa ziwiri "zotsika mtengo" za hardware ndikugawa katundu mumagulu pakati pawo sizingagwire ntchito.
• Ndi oyang'anira akomweko pali zoletsa zazikulu pakuwunika kwa HTTPS.
• Kusanthula kwa ma antivayirasi pazosungidwa sikugwira ntchito.
• Palibe ntchito ya DLP.

Mfundo zomalizira mwina ndizo zoletsa zofunika kwambiri zomwe nthawi zambiri zimangokhala chete. Kuti muwunikenso kwathunthu HTTPS, mudzakakamizika kugwiritsa ntchito seva yodzipatulira ya Management. Pankhaniyi, mudzawongolera chipangizochi ngati chipata chokhala ndi mtundu wathunthu (pafupifupi) wa Gaia.

Zoletsa zina za Gaia Embedded zitha kupezeka Pano apa. Onetsetsani kuti mwawayang'ana musanapange chisankho chogula.

Mwachitsanzo, lingalirani ofesi yaying'ono yokhala ndi magawo awa:

• Njira yapaintaneti - 50 Mbit;
• Chiwerengero cha bandwidth - 200 Mbit;
• Chiwerengero cha ogwiritsa ntchito - 200;
• Kasamalidwe ka malo (mawonekedwe a Webusaiti).

Monga tikuwonera pakukula, mtundu wa 1490 umalimbana bwino ndi ntchitoyi ndi katundu wa 46% (popanda kusiya malo obiriwira). Ndi oyang'anira odzipereka, a 1470 athana ndi ntchitoyi.
Tsamba la data la zida za 1400 zitha kuwonedwa apa.

Chithunzi cha 1200R

Mtunduwu sungathe kutchedwa SMB. Iyi ndi kale njira yothetsera mafakitale ndipo mwina ikuyenera kukhala ndi nkhani yosiyana. Tsopano sitingaganizire chitsanzo ichi mwatsatanetsatane.

Webinar

Zambiri za zida za SMB zitha kupezeka patsamba lathu lapitalo:

anapezazo

Malingaliro anga, mitundu yatsopano ya SMB idakhala yopambana. Magwiridwe a zida zawonjezedwa kwambiri posunga mtengo wamtengo. Sindine wokonzeka kulankhula za mtengo wapamwamba / wotsika mtengo wa zipangizo, chifukwa Malingaliro awa ndi osiyana kwambiri ndi makampani osiyanasiyana.

lachitsanzo 3200 Ndikupangira makampani ang'onoang'ono omwe ali ndi chidwi ndi chitetezo chokwanira pamtengo wokwanira. Kuphatikiza apo, ichi ndi chisankho chabwino kwa iwo omwe adazolowera kale kugwira ntchito ndi mtundu wonse wa Gaia. Mtundu wa R80.10 ukupezekanso pano. Chidziwitso cha 3100 chikalandiridwa, mtengo wamtengo umatsika pang'ono. Iyi ndi njira yabwino kwa nthambi.

Zida zotsatizana 1400 ndizogwirizana bwino ndipo zimakhala ndi chiŵerengero chamtengo wapatali / khalidwe labwino (makamaka potengera mtengo pa 1 SPU). Zida izi ndi zabwino kwa nthambi pa bajeti. Pogwiritsa ntchito kasamalidwe kapakati, mutha kuyang'anira zida ngati zipata zokhazikika zokhala ndi mtundu wathunthu wa Gaia. Koma, kachiwiri, musaiwale za zoletsa, zomwe muyenera kuzidziwa bwino.

PS Ndikufuna kuthokoza Alexey Matveev (Malingaliro a kampani RRC) kuti athandizidwe pokonzekera nkhaniyo.

Source: www.habr.com