{"id":92931,"date":"2020-09-01T13:43:08","date_gmt":"2020-09-01T11:43:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings"},"modified":"2020-09-01T13:43:08","modified_gmt":"2020-09-01T11:43:08","slug":"4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","title":{"rendered":"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/a0d4603cacecf98f5312fe32383bf08c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBem-vindo ao quarto artigo da s\u00e9rie sobre a Plataforma de Gest\u00e3o Check Point SandBlast Agent. Nos artigos anteriores (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511768\/\">primeiro<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">segundo<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/513254\/\">terceiro<\/a><\/noindex>) detalhamos a interface e as funcionalidades do console de gest\u00e3o web, al\u00e9m de revisar a pol\u00edtica de Preven\u00e7\u00e3o de Amea\u00e7as e test\u00e1-la contra v\u00e1rias amea\u00e7as. Este artigo \u00e9 dedicado ao segundo componente de seguran\u00e7a \u2014 a pol\u00edtica de Prote\u00e7\u00e3o de Dados, que \u00e9 respons\u00e1vel pela prote\u00e7\u00e3o dos dados armazenados na m\u00e1quina do usu\u00e1rio. Tamb\u00e9m neste artigo, abordaremos as se\u00e7\u00f5es de Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Pol\u00edtica de Prote\u00e7\u00e3o de Dados<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xg\/gn\/p9\/xggnp9rvyyf5ovui9vdxv0dpmuy.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/d3f6f895f6633034ca466ca9f54da3e3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>A Pol\u00edtica de Prote\u00e7\u00e3o de Dados permite configurar o acesso aos dados armazenados na m\u00e1quina de trabalho apenas para usu\u00e1rios autorizados, utilizando recursos de criptografia total do disco (Full Disk Encryption) e prote\u00e7\u00e3o do processo de inicializa\u00e7\u00e3o (Boot Protection). At\u00e9 o momento, suportamos as seguintes op\u00e7\u00f5es de configura\u00e7\u00e3o de criptografia de disco: para Windows \u2014 Check Point Encryption ou BitLocker Encryption, para MacOS \u2014 File Vault. Vamos detalhar as funcionalidades e configura\u00e7\u00f5es de cada uma dessas op\u00e7\u00f5es.<\/p>\n<h4>Check Point Encryption<\/h4>\n<p>\nCheck Point Encryption \u00e9 o m\u00e9todo padr\u00e3o de criptografia de disco na pol\u00edtica de Prote\u00e7\u00e3o de Dados e garante a criptografia de todos os arquivos do sistema (tempor\u00e1rios, de sistema, exclu\u00eddos) em segundo plano, sem afetar o funcionamento da m\u00e1quina do usu\u00e1rio. Ap\u00f3s a criptografia, o disco torna-se inacess\u00edvel para usu\u00e1rios n\u00e3o autorizados.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hv\/lr\/du\/hvlrdum9mu88ub0clodrkc3ny5i.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/8176a8f0ca55c05ac6dadff33534008b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>A configura\u00e7\u00e3o principal para o Check Point Encryption \u00e9 \"Habilitar Pr\u00e9-inicializa\u00e7\u00e3o (Enable Pre-boot)\", que exige a autentica\u00e7\u00e3o dos usu\u00e1rios antes da inicializa\u00e7\u00e3o do sistema operacional. Esta op\u00e7\u00e3o \u00e9 recomendada, pois evita a possibilidade de aplica\u00e7\u00e3o de m\u00e9todos de contorno de autentica\u00e7\u00e3o no n\u00edvel do sistema operacional. Tamb\u00e9m \u00e9 poss\u00edvel configurar os par\u00e2metros de contorno tempor\u00e1rio para a fun\u00e7\u00e3o Pr\u00e9-inicializa\u00e7\u00e3o:<\/p>\n<ul>\n<li><i>Permitir login no SO ap\u00f3s contorno tempor\u00e1rio<\/i> \u2014 desativa\u00e7\u00e3o da fun\u00e7\u00e3o Pr\u00e9-inicializa\u00e7\u00e3o e transi\u00e7\u00e3o para autentica\u00e7\u00e3o no sistema operacional;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permitir contorno pr\u00e9-inicializa\u00e7\u00e3o (Wake On LAN \u2013 WOL)<\/i> \u2014 desativa\u00e7\u00e3o da fun\u00e7\u00e3o pr\u00e9-inicializa\u00e7\u00e3o em computadores conectados ao servidor de gest\u00e3o via Ethernet; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permitir script de contorno<\/i> \u2014 permite configurar o contorno da fun\u00e7\u00e3o Pr\u00e9-inicializa\u00e7\u00e3o indicando o hor\u00e1rio e a data de in\u00edcio do funcionamento do script e os par\u00e2metros de t\u00e9rmino do contorno Pr\u00e9-inicializa\u00e7\u00e3o; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permitir contorno LAN<\/i> \u2014 desativa\u00e7\u00e3o da fun\u00e7\u00e3o pr\u00e9-inicializa\u00e7\u00e3o ao conectar-se \u00e0 rede local.<\/li>\n<\/ul>\n<p>\nAs op\u00e7\u00f5es de bypass tempor\u00e1rio da fun\u00e7\u00e3o Pre-boot mencionadas acima n\u00e3o s\u00e3o recomendadas sem raz\u00f5es expl\u00edcitas (por exemplo, manuten\u00e7\u00e3o t\u00e9cnica ou solu\u00e7\u00e3o de problemas), e a melhor solu\u00e7\u00e3o em termos de seguran\u00e7a \u00e9 ativar a fun\u00e7\u00e3o Pre-boot sem especificar regras de bypass tempor\u00e1rias. Se houver necessidade de contornar o Pre-boot, recomenda-se estabelecer os prazos m\u00ednimos necess\u00e1rios nas configura\u00e7\u00f5es de bypass tempor\u00e1rio para n\u00e3o reduzir o n\u00edvel de prote\u00e7\u00e3o por um longo per\u00edodo.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/js\/1i\/dh\/js1idhttoiq0eikit7afjtegxiy.gif\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/689919312946d768721d4638140aa337.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Al\u00e9m disso, ao usar a Criptografia Check Point, \u00e9 poss\u00edvel configurar op\u00e7\u00f5es avan\u00e7adas na pol\u00edtica de Prote\u00e7\u00e3o de Dados, como configurar de forma mais flex\u00edvel os par\u00e2metros de criptografia, ajustar diversos aspectos da fun\u00e7\u00e3o Pre-boot e da autentica\u00e7\u00e3o do Windows.<\/p>\n<h4>Criptografia BitLocker<\/h4>\n<p>\nO BitLocker \u00e9 parte do sistema operacional Windows e permite criptografar discos r\u00edgidos e m\u00eddias remov\u00edveis. A Gest\u00e3o BitLocker da Check Point \u00e9 um componente dos servi\u00e7os do Windows, que inicia automaticamente junto com o cliente SandBlast Agent e utiliza a API para gerenciar a tecnologia BitLocker.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ij\/1u\/od\/ij1uodbdmmfbjmgantnxjrogvlo.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/c8f328978ba8f8906a112765fd7e4571.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ao escolher a Criptografia BitLocker como m\u00e9todo de criptografia do disco na pol\u00edtica de Prote\u00e7\u00e3o de Dados, \u00e9 poss\u00edvel configurar os seguintes par\u00e2metros:<\/p>\n<ul>\n<li><i>Criptografia Inicial<\/i> \u2014 as configura\u00e7\u00f5es de criptografia inicial permitem criptografar todo o disco (Criptografar todo o disco), o que \u00e9 recomendado para m\u00e1quinas com dados de usu\u00e1rios j\u00e1 existentes (arquivos, documentos, etc.), ou criptografar apenas os dados (Criptografar apenas o espa\u00e7o usado do disco), o que \u00e9 recomendado para novas instala\u00e7\u00f5es do Windows;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Discos a serem criptografados<\/i> \u2014 a sele\u00e7\u00e3o de discos\/se\u00e7\u00f5es para criptografia permite criptografar todos os discos (Todos os discos) ou apenas a parti\u00e7\u00e3o com o sistema operacional (Apenas a parti\u00e7\u00e3o do sistema operacional);<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Algoritmo de criptografia<\/i> \u2014 a escolha do algoritmo de criptografia, sendo a op\u00e7\u00e3o recomendada o Padr\u00e3o do Windows, tamb\u00e9m h\u00e1 a possibilidade de escolher XTS-AES-128 ou XTS-AES-256.<\/li>\n<\/ul>\n<p><\/p>\n<h4>File Vault<\/h4>\n<p>\nO File Vault \u00e9 a ferramenta de criptografia padr\u00e3o da Apple, que garante acesso aos dados do computador do usu\u00e1rio apenas a usu\u00e1rios autorizados. Com o File Vault ativado, o usu\u00e1rio precisa inserir uma senha para iniciar o sistema e acessar os arquivos criptografados. O uso do File Vault \u00e9 a \u00fanica maneira de garantir a prote\u00e7\u00e3o dos dados armazenados na pol\u00edtica de Prote\u00e7\u00e3o de Dados para usu\u00e1rios do sistema operacional MacOS.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/sy\/e9\/y4\/sye9y49s_dd2ur0e44bh5dg16uc.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/4446e97032af97f69490314ec0ab346d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Para o File Vault, a configura\u00e7\u00e3o \"Habilitar aquisi\u00e7\u00e3o autom\u00e1tica de usu\u00e1rios\" exige a autoriza\u00e7\u00e3o do usu\u00e1rio antes do in\u00edcio do processo de criptografia do disco. Se essa fun\u00e7\u00e3o estiver ativada, \u00e9 poss\u00edvel indicar o n\u00famero de usu\u00e1rios que devem se autorizar antes que o SandBlast Agent aplique a fun\u00e7\u00e3o Pre-boot, ou especificar o n\u00famero de dias ap\u00f3s os quais a fun\u00e7\u00e3o Pre-boot ser\u00e1 implementada automaticamente para todos os usu\u00e1rios autorizados, caso neste per\u00edodo pelo menos um usu\u00e1rio tenha se autorizado no sistema.<\/p>\n<h3>Recupera\u00e7\u00e3o de dados<\/h3>\n<p>\nSe houver problemas com a inicializa\u00e7\u00e3o do sistema, \u00e9 poss\u00edvel utilizar v\u00e1rios m\u00e9todos de recupera\u00e7\u00e3o de dados. O administrador pode iniciar o processo de recupera\u00e7\u00e3o de dados criptografados na se\u00e7\u00e3o Gerenciamento de Computador \u2192 A\u00e7\u00f5es de Criptografia de Disco Completo. No caso de usar a Criptografia Check Point, \u00e9 poss\u00edvel descriptografar o disco anteriormente criptografado e acessar todos os arquivos armazenados. Ap\u00f3s este procedimento, \u00e9 necess\u00e1rio reiniciar o processo de criptografia do disco para aplicar a pol\u00edtica de Prote\u00e7\u00e3o de Dados.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jj\/ox\/ui\/jjoxuiqkkamq99bj90kflpureco.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/5e2c5fda53a0be8fda406aa267f991d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ao selecionar o BitLocker como o m\u00e9todo de criptografia do disco para recupera\u00e7\u00e3o de dados, \u00e9 necess\u00e1rio inserir o ID da Chave de Recupera\u00e7\u00e3o do computador problem\u00e1tico para gerar a Chave de Recupera\u00e7\u00e3o, que deve ser inserida pelo usu\u00e1rio para acessar o disco criptografado.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/wf\/ba\/ma\/wfbamafl41wqwzp7anrpp1tdfbo.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/b9acf560cef0b3f44d751ac03fdfc8a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Para usu\u00e1rios do MacOS que utilizam o File Vault para proteger informa\u00e7\u00f5es armazenadas, o processo de recupera\u00e7\u00e3o consiste na gera\u00e7\u00e3o, pelo administrador, da Chave de Recupera\u00e7\u00e3o com base no N\u00famero de S\u00e9rie da m\u00e1quina problem\u00e1ticas, e na inser\u00e7\u00e3o dessa chave, seguido do reset da senha.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/dq\/56\/dx\/dq56dxec6pgpevw7if69jhipnzc.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/7682e2be9541e5f606a85c0880353397.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Pol\u00edtica de Implanta\u00e7\u00e3o<\/h2>\n<p>\nDesde o lan\u00e7amento <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">do segundo artigo<\/a><\/noindex>, que analisava a interface da console web de gerenciamento, a Check Point conseguiu fazer algumas mudan\u00e7as na se\u00e7\u00e3o de Implanta\u00e7\u00e3o \u2014 agora ela conta com a sub-se\u00e7\u00e3o <i>Implanta\u00e7\u00e3o de Software<\/i>, na qual \u00e9 configurada a configura\u00e7\u00e3o (ativa\u00e7\u00e3o\/desativa\u00e7\u00e3o de blades) para os agentes j\u00e1 instalados, e a sub-se\u00e7\u00e3o <i>Pacote de Exporta\u00e7\u00e3o<\/i>, onde \u00e9 poss\u00edvel criar pacotes com blades pr\u00e9-instalados para instala\u00e7\u00e3o posterior em m\u00e1quinas de usu\u00e1rios, por exemplo, usando pol\u00edticas de grupo do Active Directory. Vamos examinar a sub-se\u00e7\u00e3o Implanta\u00e7\u00e3o de Software, onde todas as blades do SandBlast Agent s\u00e3o ativadas.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/0q\/9e\/ae\/0q9eaeuyltbg5lewff7riijdvkg.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/1a9dd697ba8422e8d511f07b9cc916b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Lembro que na pol\u00edtica padr\u00e3o de Deployment est\u00e3o inclu\u00eddos apenas blades da categoria Threat Prevention. Considerando a pol\u00edtica de Data Protection discutida anteriormente, agora \u00e9 poss\u00edvel incluir essa categoria para instala\u00e7\u00e3o e opera\u00e7\u00e3o na m\u00e1quina do cliente com o SandBlast Agent. Faz sentido ativar a fun\u00e7\u00e3o Remote Access VPN, que permitir\u00e1 ao usu\u00e1rio conectar-se, por exemplo, \u00e0 rede corporativa da organiza\u00e7\u00e3o, al\u00e9m da categoria Access and Compliance, que inclui as fun\u00e7\u00f5es Firewall &amp; Application Control e a verifica\u00e7\u00e3o da m\u00e1quina do usu\u00e1rio quanto \u00e0 conformidade com a pol\u00edtica de Compliance.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/r9\/a6\/lh\/r9a6lhui24xkbzuprmhz1eeuhvu.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/2f79464dbae43bafb8e631106b40efa6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>                        <b class=\"spoiler_title\">Pacote de Exporta\u00e7\u00e3o<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/43\/fs\/cf\/43fscffpzgaw7jfd8w2lhsfohwo.gif\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/34fa39766267a87adde5a701e8d2ab4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>A se\u00e7\u00e3o Export Packages \u00e9 extremamente simples de usar: para criar um pacote de configura\u00e7\u00e3o, \u00e9 necess\u00e1rio informar seu nome, escolher o sistema operacional (para Windows, tamb\u00e9m indicar a arquitetura) e a vers\u00e3o do agente, ap\u00f3s o que se escolhem as pol\u00edticas de seguran\u00e7a integradas ao pacote. Al\u00e9m disso, pode-se indicar um grupo virtual que incluir\u00e1 os computadores com o pacote instalado, bem como selecionar um VPN Site com o endere\u00e7o de conex\u00e3o e as configura\u00e7\u00f5es de autentica\u00e7\u00e3o pr\u00e9-instaladas (VPN Sites s\u00e3o configurados na se\u00e7\u00e3o Export Packages \u2192 Manage VPN Sites). Este \u00faltimo item \u00e9 especialmente conveniente, pois elimina a chance de erro do usu\u00e1rio ao configurar os par\u00e2metros de conex\u00e3o via VPN.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yy\/f7\/fm\/yyf7fmc0iggigkmg3in9ck1fwxg.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/9c1e08ea73bb98879df13dc3db930c08.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Configura\u00e7\u00f5es da Pol\u00edtica Global<\/h2>\n<p>\nNas configura\u00e7\u00f5es de Global Policy Settings, \u00e9 poss\u00edvel definir um dos par\u00e2metros mais importantes \u2014 a senha para remover o SandBlast Agent do computador do usu\u00e1rio. Ap\u00f3s a instala\u00e7\u00e3o do agente, o usu\u00e1rio n\u00e3o conseguir\u00e1 remov\u00ea-lo sem inserir a senha, que por padr\u00e3o \u00e9 a palavra \"<b>secret<\/b>\" (sem aspas). No entanto, essa senha padr\u00e3o pode ser facilmente encontrada em fontes abertas, e ao implementar a solu\u00e7\u00e3o SandBlast Agent, recomenda-se trocar a senha padr\u00e3o para remo\u00e7\u00e3o do agente. Na Management Platform, com a senha padr\u00e3o, a pol\u00edtica pode ser definida apenas 5 vezes, portanto a mudan\u00e7a de senha para remo\u00e7\u00e3o \u00e9 inevit\u00e1vel.<br \/>\nAl\u00e9m disso, nas Configura\u00e7\u00f5es da Pol\u00edtica Global, s\u00e3o definidas as op\u00e7\u00f5es de dados que podem ser enviadas ao Check Point para an\u00e1lise e melhoria do servi\u00e7o ThreatCloud.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/2s\/af\/ye\/2safyeunswbcpdlwblgve5seem0.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/71170c628acb9b9506208949693c841a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Nas Configura\u00e7\u00f5es da Pol\u00edtica Global, tamb\u00e9m s\u00e3o configurados alguns par\u00e2metros da pol\u00edtica de criptografia de disco, ou seja, requisitos para a senha: complexidade, dura\u00e7\u00e3o de uso, possibilidade de usar uma senha anteriormente v\u00e1lida e outros. Nesta se\u00e7\u00e3o, \u00e9 poss\u00edvel carregar suas pr\u00f3prias imagens em vez das padr\u00e3o para Pre-boot ou OneCheck.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/na\/u6\/sv\/nau6sv-ig4wkruxkbiqycjdzn7y.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/f4f8c110b7151c34b763bd99badddb98.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Instala\u00e7\u00e3o da pol\u00edtica<\/h2>\n<p>\nAp\u00f3s familiarizar-se com as capacidades da pol\u00edtica de Prote\u00e7\u00e3o de Dados e configurar os par\u00e2metros apropriados na se\u00e7\u00e3o de Implanta\u00e7\u00e3o, voc\u00ea pode prosseguir com a instala\u00e7\u00e3o de uma nova pol\u00edtica, que inclui a criptografia do disco usando o Check Point Encryption e outros blades do SandBlast Agent. Ap\u00f3s a instala\u00e7\u00e3o da pol\u00edtica na Management Platform, o cliente receber\u00e1 uma notifica\u00e7\u00e3o sobre a necessidade de instalar a nova vers\u00e3o da pol\u00edtica agora ou adiar a instala\u00e7\u00e3o para outro momento (m\u00e1ximo de 2 dias).<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/d4\/3x\/g1\/d43xg1y8yhgirqzk4lbk5q06hey.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/01c3e7d69cd0297504f190c697fe5a1f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ap\u00f3s o download e a instala\u00e7\u00e3o da nova pol\u00edtica, o SandBlast Agent sugerir\u00e1 ao usu\u00e1rio reiniciar o computador para ativar a prote\u00e7\u00e3o de Criptografia de Disco Completo.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ld\/rk\/ik\/ldrkikt7ac3gvxpd1x5ikigr13k.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/1f1ae7557786ef5bc709def906379a47.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ap\u00f3s a reinicializa\u00e7\u00e3o, o usu\u00e1rio precisar\u00e1 inserir suas credenciais na janela de autentica\u00e7\u00e3o do Check Point Endpoint Security \u2014 esta janela aparecer\u00e1 sempre antes do in\u00edcio do sistema operacional (Pre-boot). H\u00e1 a op\u00e7\u00e3o de escolher o recurso de Single Sign-On (SSO) para uso autom\u00e1tico das credenciais durante a autentica\u00e7\u00e3o no Windows.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/gj\/in\/dv\/gjindvx57lyzglftzai0ejwv0cg.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/69b820deb9d9b3466b9f6d57c2ee4e26.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Em caso de autentica\u00e7\u00e3o bem-sucedida, o usu\u00e1rio tem acesso ao seu sistema, enquanto um processo de criptografia do disco come\u00e7a em segundo plano. Esta opera\u00e7\u00e3o n\u00e3o afeta a funcionalidade da m\u00e1quina, embora possa durar um tempo consider\u00e1vel (dependendo do espa\u00e7o em disco). Ap\u00f3s a conclus\u00e3o do processo de criptografia, podemos verificar se todos os blades est\u00e3o ativados e funcionando, se o disco est\u00e1 criptografado e se a m\u00e1quina do usu\u00e1rio est\u00e1 protegida. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/pc\/x-\/m0\/pcx-m0z1exs-2g3-0paws5hq7jk.png\"><img decoding=\"async\" alt=\"4. Plataforma de Gest\u00e3o Check Point SandBlast Agent. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Implanta\u00e7\u00e3o e Configura\u00e7\u00f5es da Pol\u00edtica Global\" src=\"\/wp-content\/uploads\/2020\/09\/5cd266eb1731cbc74fdb0ce6458e3ce7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>Conclus\u00e3o<\/h3>\n<p>\nEm resumo: neste artigo, analisamos as capacidades do SandBlast Agent para proteger as informa\u00e7\u00f5es armazenadas na m\u00e1quina do usu\u00e1rio por meio da criptografia do disco na pol\u00edtica de Prote\u00e7\u00e3o de Dados, examinamos as configura\u00e7\u00f5es de distribui\u00e7\u00e3o de pol\u00edticas e agentes na se\u00e7\u00e3o de Implanta\u00e7\u00e3o e instalamos uma nova pol\u00edtica com regras de criptografia de disco e blades adicionais na m\u00e1quina do usu\u00e1rio. No pr\u00f3ximo artigo da s\u00e9rie, vamos explorar detalhadamente as capacidades de registro e relat\u00f3rios na Management Platform e no cliente SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Uma grande sele\u00e7\u00e3o de materiais sobre Check Point da TS Solution<\/a><\/noindex>. Para n\u00e3o perder as pr\u00f3ximas publica\u00e7\u00f5es sobre o tema SandBlast Agent Management Platform \u2014 acompanhe as atualiza\u00e7\u00f5es em nossas redes sociais (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blog da TS Solution<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/515172\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 (\u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f) \u043c\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Threat Prevention \u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0451 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0443\u0433\u0440\u043e\u0437\u0430\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435 Data Protection, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92932,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92931","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. Pol\u00edtica de Prote\u00e7\u00e3o de Dados. Configura\u00e7\u00f5es de Implanta\u00e7\u00e3o e Pol\u00edtica Global | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster","og:url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T11:43:08+00:00","article:modified_time":"2020-09-01T11:43:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92931","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:58:24","updated":"2022-10-04 10:52:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/92931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=92931"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/92931\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/92932"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=92931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=92931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=92931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}