{"id":31130,"date":"2019-10-31T21:39:37","date_gmt":"2019-10-31T18:39:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-check-point-getting-started-r80-20-access-control\/"},"modified":"2019-10-31T21:39:37","modified_gmt":"2019-10-31T18:39:37","slug":"7-check-point-getting-started-r80-20-access-control","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","title":{"rendered":"7. Check Point Getting Started R80.20. Controlul Accesului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7. Check Point Getting Started R80.20. Controlul Accesului\" src=\"\/wp-content\/uploads\/2019\/04\/0ab2e6565c08db47bcb9fbbc2733c3dc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBun venit la a 7-a lec\u021bie, unde vom \u00eencepe s\u0103 lucr\u0103m cu politicile de securitate. Ast\u0103zi vom stabili pentru prima dat\u0103 o politic\u0103 pe gateway-ul nostru, adic\u0103 \u00een sf\u00e2r\u0219it vom face \u201einstall policy\u201d. Dup\u0103 aceasta, traficul va putea circula prin gateway! <br \/>\n\u00cen general, politicile, din punctul de vedere al Check Point, reprezint\u0103 un concept destul de extins. Politicile de securitate pot fi \u00eemp\u0103r\u021bite \u00een 3 tipuri:<\/p>\n<ol>\n<li><b>Controlul accesului<\/b>. Acestea includ blade precum: Firewall, Controlul aplica\u021biilor, Filtrarea URL-urilor, Con\u0219tientizarea con\u021binutului, Accesul mobil, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"21\">VPN<\/a>. Adic\u0103 tot ceea ce se refer\u0103 la autorizarea sau limitarea traficului.<\/li>\n<li><b>Prevenirea amenin\u021b\u0103rilor<\/b>. Aici sunt utilizate blade-uri: IPS, Anti-Virus, Anti-Bot, Emularea amenin\u021b\u0103rilor, Extrac\u021bia amenin\u021b\u0103rilor. Adic\u0103 func\u021biile care verific\u0103 con\u021binutul traficului sau al con\u021binutului care a trecut deja prin Controlul accesului. <\/li>\n<li><b>Securitatea desktop-ului<\/b>. Acestea sunt politicile de gestionare a agen\u021bilor Endpoint (adic\u0103 protec\u021bia sta\u021biilor de lucru). Aceast\u0103 tem\u0103 nu o vom aborda \u00een cadrul cursului.<\/li>\n<\/ol>\n<p>\n\u00cen aceast\u0103 lec\u021bie, vom \u00eencepe s\u0103 discut\u0103m despre politicile de Control al accesului.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Componenta Controlului accesului<\/h3>\n<p>\nControlul accesului este prima politic\u0103 care trebuie stabilit\u0103 pe gateway. F\u0103r\u0103 aceast\u0103 politic\u0103, celelalte (Prevenirea amenin\u021b\u0103rilor, Securitatea desktop-ului) pur \u0219i simplu nu vor fi stabilite. A\u0219a cum s-a men\u021bionat anterior, politicile de Control al accesului includ mai multe blade-uri:<\/p>\n<ul>\n<li>Firewall;<\/li>\n<li>Filtrarea aplica\u021biilor \u0219i URL-urilor;<\/li>\n<li>Con\u0219tientizarea con\u021binutului;<\/li>\n<li>Accesul mobil;<\/li>\n<li>NAT.<\/li>\n<\/ul>\n<p>\nPentru \u00eenceput, vom analiza doar unul \u2013 Firewall.<\/p>\n<h3>Cele patru etape pentru configurarea Firewall-ului<\/h3>\n<p>\nPentru a stabili o politic\u0103 pe gateway, trebuie s\u0103 \u00eendeplinim OBLIGATORIU urm\u0103torii pa\u0219i:<\/p>\n<ol>\n<li>Definirea interfe\u021belor gateway-ului \u00een zonele de securitate corespunz\u0103toare <b>(indiferent dac\u0103 este vorba despre Internal, External, DMZ etc.)<\/b> Configurarea<\/li>\n<li>Anti-Spoofing <b>Crearea obiectelor de re\u021bea (<\/b>;<\/li>\n<li>Network, Hosts, Servers<b>etc.) Acest lucru este important! A\u0219a cum am spus, Check Point lucreaz\u0103 doar cu obiecte. Nu putem introduce pur \u0219i simplu o adres\u0103 IP \u00een lista de acces;<\/b> Listele de acces<\/li>\n<li>Creare <b>- (cel pu\u021bin una).<\/b>F\u0103r\u0103 aceste configura\u021bii, politicile pur \u0219i simplu nu vor fi stabilite!<\/li>\n<\/ol>\n<p>\nCa de obicei, ata\u0219\u0103m un videoclip care va ilustra procedura de configurare de baz\u0103 a Controlului accesului \u0219i vom forma listele de acces recomandate.<\/p>\n<h3>Videoul lec\u021biei<\/h3>\n<p>\n\ud83e\udd477. Check Point Getting Started R80.20. Controlul accesului | ProHoster<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"dxp7_Dr_-lA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/dxp7_Dr_-lA\/hqdefault.jpg\" alt=\"Reda\u021bi video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>R\u0103m\u00e2ne\u021bi conecta\u021bi pentru mai multe \u0219i al\u0103tura\u021bi-v\u0103 canalului nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/447196\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 7-\u0439 \u0443\u0440\u043e\u043a, \u0433\u0434\u0435 \u043c\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u043d\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0430 \u043d\u0430\u0448 \u0448\u043b\u044e\u0437, \u0442.\u0435. \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u00abinstall policy\u00bb. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437 \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a! \u0412\u043e\u043e\u0431\u0449\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f Check Point, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0435 \u043f\u043e\u043d\u044f\u0442\u0438\u0435. Security Policies \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 3 \u0442\u0438\u043f\u0430: Access Control. \u0421\u044e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477. Punct de Control Ghid de Ini\u021biere R80.20. Controlul Accesului | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477. Check Point Getting Started R80.20. Access Control | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/7-check-point-getting-started-r80-20-access-control","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:37+00:00","article:modified_time":"2019-10-31T18:39:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31130","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:48:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:22:34","updated":"2026-02-04 14:48:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31130"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31130\/revisions"}],"predecessor-version":[{"id":156650,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31130\/revisions\/156650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}