{"id":33222,"date":"2019-10-31T21:51:25","date_gmt":"2019-10-31T18:51:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-check-point-getting-started-r80-20-identity-awareness\/"},"modified":"2019-10-31T21:51:25","modified_gmt":"2019-10-31T18:51:25","slug":"10-check-point-getting-started-r80-20-identity-awareness","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","title":{"rendered":"10. Check Point Ghid de \u00cencepere R80.20. Con\u0219tientizarea Identit\u0103\u021bii","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"10. Check Point Ghid de \u00cencepere R80.20. Con\u0219tientizarea Identit\u0103\u021bii\" src=\"\/wp-content\/uploads\/2019\/05\/d02cb12971142bfe4ca1cb67c6466a95.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBun venit la aniversarea - cea de-a 10-a lec\u021bie. Ast\u0103zi vom discuta despre un alt blade Check Point - <b>Con\u0219tientizarea Identit\u0103\u021bii<\/b>. \u00cenc\u0103 de la \u00eenceput, c\u00e2nd am descris NGFW, am stabilit c\u0103 este esen\u021bial s\u0103 existe posibilitatea de a reglementa accesul pe baza conturilor de utilizator, nu a adreselor IP. Acest lucru este legat \u00een principal de mobilitatea crescut\u0103 a utilizatorilor \u0219i de r\u0103sp\u00e2ndirea modelului BYOD - adu-\u021bi propriul dispozitiv. \u00cen companie pot fi mul\u021bi oameni care se conecteaz\u0103 prin WiFi, primesc un IP dinamic \u0219i provin din segmente de re\u021bea diferite. \u00cencerca\u021bi s\u0103 crea\u021bi liste de acces bazate pe adrese IP. Aici, identificarea utilizatorilor devine esen\u021bial\u0103. \u0218i tocmai blade-ul Con\u0219tientiz\u0103rii Identit\u0103\u021bii ne va ajuta \u00een acest sens.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dar, \u00eenainte de toate, s\u0103 \u00een\u021belegem, pentru ce este folosit\u0103 cel mai adesea identificarea utilizatorilor?<\/p>\n<ol>\n<li>Pentru a restric\u021biona accesul la re\u021bea pe baza conturilor de utilizator, nu a adreselor IP. Accesul poate fi reglementat at\u00e2t pentru simpla utilizare a internetului, c\u00e2t \u0219i pentru alte segmente de re\u021bea, de exemplu, DMZ.<\/li>\n<li>Accesul pe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"34\">VPN<\/a>. Este mai convenabil pentru utilizator s\u0103 foloseasc\u0103 contul s\u0103u de domeniu pentru autentificare dec\u00e2t s\u0103 inventeze o alt\u0103 parol\u0103.<\/li>\n<li>Pentru gestionarea Check Point-ului este, de asemenea, necesar un cont, care poate avea diferite drepturi.<\/li>\n<li>\u0218i cea mai pl\u0103cut\u0103 parte - Raportarea. Este mult mai pl\u0103cut s\u0103 vezi \u00een rapoarte utilizatori specifici, nu adresele lor IP.<\/li>\n<\/ol>\n<p>\n\u00cen acest context, Check Point accept\u0103 dou\u0103 tipuri de conturi:<\/p>\n<ul>\n<li><b>Utilizatori Interne Locali<\/b>. Utilizatorul este creat \u00een baza local\u0103 a serverului de management.<\/li>\n<li><b>Utilizatori Externi<\/b>. Ca baz\u0103 extern\u0103 de utilizatori poate fi Microsoft Active Directory sau orice alt server LDAP.<\/li>\n<\/ul>\n<p>\nAst\u0103zi vom discuta despre accesul la re\u021bea. Pentru gestionarea accesului la re\u021bea, av\u00e2nd Active Directory, ca obiect (surs\u0103 sau destina\u021bie) se folose\u0219te a\u0219a-numita <b>Rol de Acces<\/b>, care permite utilizarea a trei parametrii de utilizator:<\/p>\n<ol>\n<li><b>Re\u021bea<\/b> \u2014 adic\u0103, re\u021beaua din care utilizatorul \u00eencearc\u0103 s\u0103 se conecteze<\/li>\n<li><b>Utilizator AD sau Grup de Utilizatori<\/b> \u2014 aceste date sunt extrase direct de pe serverul AD<\/li>\n<li><b>Ma\u0219in\u0103<\/b> \u2014 sta\u021bia de lucru.<\/li>\n<\/ol>\n<p>\n\u00cen acest sens, identificarea utilizatorilor poate fi realizat\u0103 \u00een mai multe moduri:<\/p>\n<ul>\n<li><b>Interogare AD<\/b>. Check Point cite\u0219te jurnalele serverului AD pentru utilizatori autentifica\u021bi \u0219i adresele lor IP. Calculatoarele din domeniul AD sunt identificate automat.<\/li>\n<li><b>Autentificare bazat\u0103 pe browser<\/b>. Identificarea prin intermediul browserului utilizatorului (Captive Portal sau Transparent Kerberos). Cel mai frecvent folosit pentru dispozitive care nu se afl\u0103 \u00een domeniu.<\/li>\n<li><b>Servere Terminal<\/b>. \u00cen acest caz, identificarea se realizeaz\u0103 prin intermediul unui agent terminal special (instalat pe serverul terminal).<\/li>\n<\/ul>\n<p>\nAcestea sunt cele mai frecvente trei variante, dar mai sunt \u00eenc\u0103 trei:<\/p>\n<ul>\n<li><b>Agen\u021bi de Identitate<\/b>. Pe calculatoarele utilizatorilor este instalat un agent special.<\/li>\n<li><b>Colector de Identitate<\/b>. O utilitate separat\u0103, care se instaleaz\u0103 pe Windows Server \u0219i colecteaz\u0103 jurnalele de autentificare \u00een locul gateway-ului. Practic, este o variant\u0103 obligatorie \u00een cazul unui num\u0103r mare de utilizatori.<\/li>\n<li><b>RADIUS Accounting<\/b>. \u0218i unde am ajunge f\u0103r\u0103 vechiul \u0219i bunul RADIUS.<\/li>\n<\/ul>\n<p>\n\u00cen aceast\u0103 lec\u021bie voi demonstra a doua variant\u0103 \u2014 Autentificare bazat\u0103 pe browser. Cred c\u0103 am avut suficient\u0103 teorie, s\u0103 trecem la practic\u0103.<\/p>\n<h3>Videoul lec\u021biei<\/h3>\n<p>\n<center><div class=\"youtube-placeholder\" data-id=\"Ud0i8rHEoJ0\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/Ud0i8rHEoJ0\/hqdefault.jpg\" alt=\"Reda\u021bi video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>R\u0103m\u00e2ne\u021bi conecta\u021bi pentru mai multe \u0219i al\u0103tura\u021bi-v\u0103 canalului nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/450526\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u044e\u0431\u0438\u043b\u0435\u0439\u043d\u044b\u0439 \u2014 10-\u0439 \u0443\u0440\u043e\u043a. \u0418 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0431\u043b\u0435\u0439\u0434\u0435 Check Point \u2014 Identity Awareness. \u0415\u0449\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043f\u0440\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 NGFW, \u043c\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u043d\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u043e \u044d\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33222","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710. Check Point Getting Started R80.20. Con\u0219tientizarea Identit\u0103\u021bii | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:25+00:00","article:modified_time":"2019-10-31T18:51:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33222","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:49:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:44:42","updated":"2026-02-04 14:49:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=33222"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33222\/revisions"}],"predecessor-version":[{"id":156663,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33222\/revisions\/156663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/24959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=33222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=33222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=33222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}