{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Getting Started R80.20. Licensing","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nSalut, prieteni! \u0218i \u00een sf\u00e2r\u0219it am ajuns la ultimul, lec\u021bia final\u0103 Check Point Getting Started<\/b>. Ast\u0103zi vom discuta despre un subiect foarte important \u2014 Licen\u021biere<\/b>. Trebuie s\u0103 v\u0103 avertizez c\u0103 aceast\u0103 lec\u021bie nu este un ghid complet pentru alegerea echipamentului sau licen\u021belor. Este doar un rezumat al punctelor cheie pe care orice administrator Check Point ar trebui s\u0103 le cunoasc\u0103. Dac\u0103 realmente sunte\u021bi \u00eengrijora\u021bi cu privire la alegerea licen\u021bei sau a dispozitivului, cel mai bine ar fi s\u0103 apela\u021bi la profesioni\u0219ti, adic\u0103 la noi :). Exist\u0103 multe capcane greu de explicat \u00een cadrul cursului, iar s\u0103 le memora\u021bi deodat\u0103 nu va fi u\u0219or.
\nLec\u021bia noastr\u0103 va fi complet teoretic\u0103, a\u0219a c\u0103 pute\u021bi s\u0103 v\u0103 opri\u021bi serverele de testare \u0219i s\u0103 v\u0103 relaxa\u021bi. La sf\u00e2r\u0219itul articolului ve\u021bi g\u0103si un videoclip unde explic \u00een detaliu<\/a><\/noindex><\/p>\n

Licen\u021bierea gateway-ului<\/h3>\n

\nS\u0103 \u00eencepem cu descrierea caracteristicilor de licen\u021biere la gateway-urile de securitate. Acest lucru se aplic\u0103 at\u00e2t echipamentelor hardware, c\u00e2t \u0219i virtualiz\u0103rilor. S\u0103 presupunem c\u0103 a\u021bi decis s\u0103 cump\u0103ra\u021bi un gateway. Nu po\u021bi cump\u0103ra doar un hardware sau o virtualizare f\u0103r\u0103 \u201eabonamente\u201d \u2014 imposibil! Totu\u0219i, exist\u0103 trei tipuri de abonamente:<\/p>\n

\"13.
\n
\n\u0218i acum prima caracteristic\u0103 interesant\u0103! Pute\u021bi cump\u0103ra un dispozitiv sau o virtualizare doar cu abonamentele NGTP sau NGTX. Dar c\u00e2nd ve\u021bi re\u00eennoi abonamentul, ve\u021bi putea alege pachetul NGFW, \u00een cazul \u00een care nu ave\u021bi nevoie de blade-urile AV, AB, URL, AS, TE \u0219i TX. Acesta este un aspect. Abonamentele pot fi cump\u0103rate pe o perioad\u0103 de un an, doi sau trei ani.<\/p>\n

\u00cemi permit s\u0103 anticipez prima dumneavoastr\u0103 \u00eentrebare! \u201cCe se \u00eent\u00e2mpl\u0103 dac\u0103 nu re\u00eennoiesc abonamentul?<\/b>\u201d. Am eviden\u021biat cu verde blade-urile care vor func\u021biona \u00ceNTOTDEAUNA, \u0219i F\u0102R\u0102 re\u00eennoiri. A\u0219a-numitele blade-uri perpetue. Celelalte blade-uri, care necesit\u0103 actualiz\u0103ri constante, pur \u0219i simplu vor \u00eenceta s\u0103 func\u021bioneze. Poate doar la IPS vor r\u0103m\u00e2ne s\u0103 func\u021bioneze c\u00e2teva semn\u0103turi cheie (dar sunt foarte pu\u021bine). Acest lucru este valabil at\u00e2t pentru hardware, c\u00e2t \u0219i pentru virtualiz\u0103ri, adic\u0103 vSec.<\/p>\n

Separat, am eviden\u021biat trei blade-uri care nu sunt incluse \u00een niciun pachet, acestea sunt: DLP, MAB \u0219i Capsule.<\/p>\n

De asemenea, re\u021bine\u021bi c\u0103 dac\u0103 cump\u0103ra\u021bi o solu\u021bie cluster, alege\u021bi un model cu sufixul HA (adic\u0103 High Availability) ca al doilea dispozitiv. \u00cen imagine este un exemplu pentru gateway-ul 5400. Asta a fost pentru gateway-uri. Acum, serverul de management.<\/p>\n

Licen\u021bierea serverului de management<\/h3>\n

\nA\u0219a cum am men\u021bionat \u00eenc\u0103 din primele lec\u021bii, exist\u0103 dou\u0103 scenarii pentru implementarea Check Point: Standalone (c\u00e2nd at\u00e2t gateway-ul, c\u00e2t \u0219i managementul sunt pe acela\u0219i dispozitiv) \u0219i Distributed (c\u00e2nd serverul de management este mutat pe un dispozitiv separat). Totu\u0219i, op\u021biunile nu se opresc aici. S\u0103 analiz\u0103m trei scenarii tipice de desf\u0103\u0219urare a serverului de management:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. Achizi\u021bionarea unui NGSM dedicat<\/b>. Cea mai popular\u0103 op\u021biune. Alege\u021bi fie un dispozitiv Smart-1, fie o virtualizare. Alege\u021bi, desigur, \u00een func\u021bie de c\u00e2te gateway-uri ve\u021bi administra, 5, 10, 25 etc. Ajung\u00e2nd la acest dispozitiv, pute\u021bi utiliza cele 4 blade principale ale serverului de management: NPM (adic\u0103 gestionarea politicilor), Logging and Status (adic\u0103 logare), Smart Event (SIEM de la Check Point, care ne ofer\u0103 toate rapoartele) \u0219i Compliance (aceasta este evaluarea calit\u0103\u021bii set\u0103rilor, fie \u00een conformitate cu anumite reglement\u0103ri, cum ar fi PCI DSS, fie doar cele mai bune practici). Aici este evident c\u0103 blade-urile NPM \u0219i LS sunt blade-uri permanente, adic\u0103 vor func\u021biona \u0219i f\u0103r\u0103 prelungirea abonamentelor, iar blade-urile Smart Event \u0219i Compliance sunt incluse doar \u00een primul an! Ulterior, acestea trebuie prelungite contra cost. Acesta este un aspect important, nu uita\u021bi. \u0218i dac\u0103 f\u0103r\u0103 blade-ul Compliance mai po\u021bi tr\u0103i, blade-ul Smart Event este cu siguran\u021b\u0103 necesar pentru toat\u0103 lumea.<\/li>\n
  2. Achizi\u021bionarea unui server dedicat de Event Management<\/b> \u00ceN PLUS fa\u021b\u0103 de managementul NGSM existent. server<\/a> De ce este necesar? Ceea ce trebuie \u00een\u021beles este c\u0103 func\u021bionalitatea de logare \u0219i, \u00een special, Smart Event \u201econsum\u0103\u201d resurse sistemice considerabile. \u0218i dac\u0103 sunt multe loguri, acest lucru poate duce la \u201e\u00eencetiniri\u201d \u00een server<\/a> management. Din acest motiv, se practic\u0103 adesea mutarea acestei func\u021bionalit\u0103\u021bi pe un dispozitiv separat, fie un Smart-1 sau din nou o virtualizare. Integra\u021biile mari cu un num\u0103r mare de loguri necesit\u0103 aproape \u00eentotdeauna un server dedicat pentru Smart Event. Acesta poate, de asemenea, accepta loguri. Astfel, serverul dumneavoastr\u0103 de management va \u00eendeplini doar func\u021biile de gestionare. Acest lucru cre\u0219te semnificativ stabilitatea \u0219i timpul de r\u0103spuns al sistemului. A\u0219a cum se poate observa, la achizi\u021bionarea unui server Smart Event dedicat, ob\u021bine\u021bi aceste dou\u0103 blade-uri \u00een mod permanent, chiar \u0219i f\u0103r\u0103 prelungire. \u00cen orizontul de 3-4 ani, aceasta va fi chiar mai rentabil dec\u00e2t achizi\u021bionarea prelungirilor pentru Smart Event pentru serverul NGSM obi\u0219nuit \u00een fiecare an.<\/li>\n
  3. Server dedicat de log management<\/b>, care vine ca un complement la serverele NGSM \u0219i Smart Event. Cred c\u0103 ideea este clar\u0103. La un num\u0103r FOARTE mare de jurnale, putem externaliza func\u021bia de logare pe un server dedicat. Serverul Log dedicat de asemenea are o licen\u021b\u0103 permanent\u0103 \u0219i nu necesit\u0103 re\u00eennoire.<\/li>\n<\/ol>\n

    <\/p>\n

    Videoul lec\u021biei<\/h3>\n

    \nAici ve\u021bi g\u0103si informa\u021bii suplimentare despre gestionarea licen\u021belor \u0219i despre suportul tehnic Check Point:
    \n

    \r\n \"Reda\u021bi\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Sursa:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point \u00centroducere R80.20. Licen\u021biere | ProHoster","description":"Salut, prieteni!","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}