{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 ju\u017c dost\u0119pna w wersji EA. Pierwsze spojrzenie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nNowa wersja Gaia R81 zosta\u0142a opublikowana w dost\u0119pie wczesnym (EA). Wcze\u015bniej mo\u017cna by\u0142o zapozna\u0107 si\u0119 z planowanymi nowo\u015bciami<\/a><\/noindex> w notatkach dotycz\u0105cych wersji. Teraz mamy mo\u017cliwo\u015b\u0107 zobaczenia tego na \u017cywo. W tym celu zosta\u0142a zbudowana standardowa konfiguracja z dedykowanym serwerem zarz\u0105dzania i bram\u0105. Naturalnie nie zd\u0105\u017cyli\u015bmy przeprowadzi\u0107 wszystkich pe\u0142noprawnych test\u00f3w, ale jeste\u015bmy gotowi podzieli\u0107 si\u0119 tym, co od razu zwraca uwag\u0119 podczas zapoznawania si\u0119 z nowym systemem. Poni\u017cej przedstawiamy g\u0142\u00f3wne punkty, kt\u00f3re wyr\u00f3\u017cnili\u015bmy podczas pierwszego kontaktu z systemem (du\u017co zdj\u0119\u0107).
\n<\/a><\/noindex><\/p>\n

Zarz\u0105dzanie<\/h3>\n

\nPodczas inicjalizacji bramy masz mo\u017cliwo\u015b\u0107 natychmiastowego po\u0142\u0105czenia si\u0119 z chmurowym serwerem zarz\u0105dzania \u2014 Smart 1 Cloud<\/b> (tzw. MaaS):<\/p>\n

\"Check
\nTo stosunkowo nowa funkcjonalno\u015b\u0107 (dost\u0119pna tak\u017ce w ostatnich wersjach 80.40) i opowiemy o tym serwisie nieco dok\u0142adniej w najbli\u017cszym czasie. Najwa\u017cniejsz\u0105 zalet\u0105 (wed\u0142ug nas) jest d\u0142ugo oczekiwana mo\u017cliwo\u015b\u0107 zarz\u0105dzania przez przegl\u0105dark\u0119 \ud83d\ude42<\/a><\/noindex>VxLAN i GRE<\/p>\n

Pierwsz\u0105 rzecz\u0105, kt\u00f3r\u0105 zacz\u0119li\u015bmy sprawdza\u0107, by\u0142a obs\u0142uga VxLAN i GRE. Notatki dotycz\u0105ce wersji nas nie oszuka\u0142y, wszystko jest na miejscu:<\/h3>\n

\nMo\u017cna dyskutowa\u0107 o potrzebie tych funkcji na NGFW, ale lepiej, gdy u\u017cytkownik ma taki wyb\u00f3r.<\/p>\n

\"Check
\n
\nInfinity Threat Prevention<\/p>\n

To mo\u017ce by\u0107 pierwsza rzecz, kt\u00f3ra rzuca si\u0119 w oczy, gdy zaczynasz edytowa\u0107 polityk\u0119 bezpiecze\u0144stwa. Dodano now\u0105 opcj\u0119 aktywacji blok\u00f3w Threat Prevention \u2014 Infinity. Tzn. nie trzeba wybiera\u0107, kt\u00f3re bloki w\u0142\u0105czy\u0107, Check Point zdecydowa\u0142 za nas (nie wiem, jak bardzo to dobre):<\/h3>\n

\nMimo to, oczywi\u015bcie, masz nadal mo\u017cliwo\u015b\u0107 tradycyjnej samodzielnej konfiguracji blok\u00f3w.<\/p>\n

\"Check
\nInfinity Threat Prevention Policy<\/p>\n

Skoro ju\u017c m\u00f3wimy o Threat Prevention, przyjrzyjmy si\u0119 od razu Polityce. To prawdopodobnie jedna z najwa\u017cniejszych zmian:<\/h3>\n

\nJak wida\u0107, pojawi\u0142o si\u0119 znacznie wi\u0119cej wst\u0119pnie skonfigurowanych polityk. Mo\u017cna szczeg\u00f3\u0142owo zobaczy\u0107, na czym polegaj\u0105 r\u00f3\u017cnice mi\u0119dzy nimi, klikaj\u0105c na<\/p>\n

\"Check
\n
\nHelp me decide To polityka dynamiczna i aktualizuje si\u0119 bez Twojego udzia\u0142u.<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nChange Report<\/p>\n

W ko\u0144cu mo\u017cna w wygodnej formie zobaczy\u0107, co dok\u0142adnie zmieni\u0142o si\u0119 podczas edytowania konfiguracji:<\/h3>\n

\nIstnieje og\u00f3lny raport:<\/p>\n

\"Check
\n
\nA jest r\u00f3wnie\u017c zupe\u0142nie konkretny podzia\u0142:<\/p>\n

\"Check
\n
\nBardzo wygodnie \u015bledzi\u0107 zmiany.<\/p>\n

\"Check
\n\"Check
\n
\nZarz\u0105dzanie w sieci dla ko\u0144c\u00f3wki<\/p>\n

Web Management dla Endpoint<\/h3>\n

\nJak zapewne wiecie, na serwerze zarz\u0105dzania mo\u017cna w\u0142\u0105czy\u0107 Endpoint Management i zarz\u0105dza\u0107 agentami SandBlast. W R81 dodano ciekawe mo\u017cliwo\u015bci \u2014 zarz\u0105dzanie przez przegl\u0105dark\u0119. W\u0142\u0105cza si\u0119 to w do\u015b\u0107 intryguj\u0105cy spos\u00f3b. Nale\u017cy wej\u015b\u0107 w CLI w tryb expert<\/b> i wpisa\u0107 polecenie \u201cweb_mgmt_start\u201d<\/b>, a nast\u0119pnie przej\u015b\u0107 pod adres \u2014 https:\/\/:4434\/sba\/. Przed wami otworzy si\u0119 konsola webowa:<\/p>\n

\"Check
\n
\nCz\u0119\u015bciowo przedstawili\u015bmy t\u0119 platform\u0119 w ramach artyku\u0142\u00f3w \"Platforma Zarz\u0105dzania Agentem Check Point SandBlast<\/a><\/noindex>\" od Aleksieja Mal'ko. Prawda jest taka, \u017ce ta konsola by\u0142a dost\u0119pna tylko w chmurze, ale teraz dzia\u0142a r\u00f3wnie\u017c na lokalnych serwerach zarz\u0105dzaj\u0105cych.<\/p>\n

Smart Update<\/h3>\n

\nPrzy pr\u00f3bie dodania licencji przez stary dobry Smart Update, konsola uprzejmie ostrze\u017ce, \u017ce teraz mo\u017cna to zrobi\u0107 nie wychodz\u0105c z ju\u017c znanej Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nBardzo oczekiwana funkcjonalno\u015b\u0107. Teraz w regu\u0142ach NAT mo\u017cna u\u017cywa\u0107 Access Roles<\/b>, Security Zones<\/b> lub Updatable Objects<\/b>. Zdarzaj\u0105 si\u0119 sytuacje, kiedy jest to bardzo przydatne i potrzebne.<\/p>\n

Podsumowanie<\/h3>\n

\nNa tym na razie ko\u0144czymy. Jest jeszcze wiele nowo\u015bci, kt\u00f3re wymagaj\u0105 test\u00f3w (IoT, Azure AD, Updgrade, Logs API itd.). Jak ju\u017c wcze\u015bniej pisali\u015bmy, wkr\u00f3tce opublikujemy przegl\u0105d nowego systemu zarz\u0105dzania w chmurze \u2014 Smart-1 Cloud<\/a><\/noindex><\/b>. \u015aled\u017acie nasze aktualizacje na naszych kana\u0142ach (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, Blog TS Solution<\/a><\/noindex>)!<\/p>\n

Nie zapominajcie r\u00f3wnie\u017c o naszym du\u017cym zestawieniu materia\u0142\u00f3w dotycz\u0105cych Check Point<\/a><\/noindex>.
\n
\u0179r\u00f3d\u0142o: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 teraz EA. Pierwsze wra\u017cenia | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}