{"id":89739,"date":"2020-07-26T01:42:18","date_gmt":"2020-07-25T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka"},"modified":"2020-07-26T01:42:18","modified_gmt":"2020-07-25T23:42:18","slug":"2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","title":{"rendered":"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/b17e2b30240cfa92fa78ac24dbd126e2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Continu\u0103m seria de articole despre utilizarea noii game de SMB CheckPoint, reamintim c\u0103 \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">prima parte<\/a><\/noindex> am descris caracteristicile \u0219i capabilit\u0103\u021bile noilor modele, metodele de gestionare \u0219i administrare. Ast\u0103zi vom analiza scenariul de desf\u0103\u0219urare a modelului superior din serie: CheckPoint 1590 NGFW. Vom include un rezumat al acestei p\u0103r\u021bi:<\/p>\n<p><\/p>\n<ol>\n<li>Desfacerea echipamentului (descrierea componentelor, conectarea fizic\u0103 \u0219i re\u021bea).<\/li>\n<li>Ini\u021bializarea ini\u021bial\u0103 a dispozitivului.<\/li>\n<li>Configurarea ini\u021bial\u0103.<\/li>\n<li>Evaluarea func\u021bionalit\u0103\u021bii. <\/li>\n<\/ol>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Desfacerea echipamentului<\/h2>\n<p><\/p>\n<p>\u00cent\u00e2lnirea cu echipamentul \u00eencepe cu extragerea echipamentului din cutie, desfacerea componentelor \u0219i instalarea detaliilor, face\u021bi clic pe spoiler, unde este prezentat pe scurt procesul<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Livrarea NGFW 1590<\/b><br \/>\n                        <img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/868d20466d642d38d748058e9f33ae37.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> Pe scurt despre componente:<\/p>\n<p><\/p>\n<ul>\n<li>NGFW 1590;<\/li>\n<li>Adaptor de alimentare;<\/li>\n<li>2 antene Wifi (2.4 GHz \u0219i 5 GHz);<\/li>\n<li>2 antene LTE;<\/li>\n<li>Bro\u0219uri cu documenta\u021bie (ghid scurt pentru conectarea ini\u021bial\u0103, acord de licen\u021b\u0103 etc.)<\/li>\n<\/ul>\n<p>\n\u00cen ceea ce prive\u0219te porturile \u0219i interfe\u021bele de re\u021bea, exist\u0103 toate op\u021biunile moderne pentru transmisia de trafic \u0219i interac\u021biune, un port dedicat pentru zona DMZ, USB 3.0 pentru sincronizarea cu PC-ul. <\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/de1442162762a4c29dcff0d2badfcc3f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Versiunea 1590 a primit un design actualizat, op\u021biuni moderne pentru conexiuni wireless \u0219i extinderea memoriei: 2 sloturi pentru Micro\/Nano SIM \u00een modul LTE. (despre aceast\u0103 op\u021biune pl\u0103nuim s\u0103 scriem \u00een detaliu \u00eentr-unul dintre urm\u0103toarele noastre articole din serie, dedicat conexiunilor wireless); slot pentru card SD.\n<\/p>\n<p><\/p>\n<p>Despre capabilit\u0103\u021bile 1590 NGFW \u0219i despre celelalte noi modele se poate citi \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">partea 1<\/a><\/noindex> din seria de articole despre solu\u021biile SMB CheckPoint. Acum vom \u00eencepe ini\u021bializarea dispozitivului. \n<\/p>\n<p><\/p>\n<h2>Ini\u021bializarea ini\u021bial\u0103<\/h2>\n<p><\/p>\n<p>Cititorii no\u0219tri fideli ar trebui s\u0103 fie deja la curent c\u0103 \u00een gama 1500 a seriei SMB se folose\u0219te noul sistem de operare 80.20 Embedded, care include o interfa\u021b\u0103 actualizat\u0103 \u0219i func\u021bionalit\u0103\u021bi \u00eembun\u0103t\u0103\u021bite.\n<\/p>\n<p><\/p>\n<p>Pentru a \u00eencepe ini\u021bializarea dispozitivului, este necesar s\u0103:\n<\/p>\n<p><\/p>\n<ol>\n<li>Asigura\u021bi alimentarea pentru gateway. <\/li>\n<li>Conecta\u021bi cablul de re\u021bea de la PC-ul dumneavoastr\u0103 la LAN-1 de pe gateway.<\/li>\n<li>Op\u021bional, pute\u021bi asigura imediat dispozitivului acces la internet, conect\u00e2nd interfa\u021ba la portul WAN.<\/li>\n<li>Accesa\u021bi portalul Gaia Embedded: <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1:4434\/\">https:\/\/192.168.1.1:4434\/<\/a><\/noindex><\/li>\n<\/ol>\n<p><\/p>\n<p>Dac\u0103 pa\u0219ii enun\u021ba\u021bi anterior au fost \u00eendeplini\u021bi, dup\u0103 ce accesa\u021bi pagina portalului Gaia, va trebui s\u0103 confirma\u021bi deschiderea paginii cu un certificat nesigur, dup\u0103 care va \u00eencepe asistentul pentru set\u0103rile portalului:\n<\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/0f9c59f8aee0b0cb4e402ab6478ecb39.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ve\u021bi fi \u00eent\u00e2mpinat de o pagin\u0103 care indic\u0103 modelul dispozitivului dvs., trebuie s\u0103 accesa\u021bi sec\u021biunea urm\u0103toare:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/802a2d07d265f205ed7f4c289d7c83ac.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ni se va oferi posibilitatea de a crea un cont pentru autentificare, av\u00e2nd ocazia s\u0103 specific\u0103m cerin\u021be ridicate pentru parola administratorului, indic\u00e2nd \u021bara \u00een care vom utiliza gateway-ul.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/7a1c641cb3425b35a403e97b3aca2d9c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Fereastra urm\u0103toare se refer\u0103 la set\u0103rile de dat\u0103 \u0219i or\u0103, av\u00e2nd op\u021biunea de a le introduce manual sau de a utiliza serverul NTP al companiei.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/b1162711e3f1e73e4bb7090eccbfde84.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Urm\u0103torul pas presupune stabilirea unui nume pentru dispozitiv \u0219i indicarea domeniului companiei pentru func\u021bionarea corect\u0103 a serviciilor gateway-ului pe Internet.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/5bc4e62401fa71b6e2f42550f3c88965.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Urm\u0103torul pas se refer\u0103 la alegerea tipului de gestionare NGFW, aici trebuie s\u0103 men\u021bion\u0103m:<\/p>\n<p><\/p>\n<ol>\n<li>Gestionare Local\u0103. Aceast\u0103 op\u021biune disponibil\u0103 pentru gestionarea local\u0103 a gateway-ului prin intermediul paginii web Gaia Portal.<\/li>\n<li>Gestionare Centralizat\u0103. Acest tip de gestionare include sincronizarea cu un server de Management dedicat CheckPoint, sincronizarea cu Smart1-Cloud sau cu SMP (serviciu de management pentru SMB).<\/li>\n<\/ol>\n<p><\/p>\n<p>\u00cen cadrul acestui articol ne vom concentra asupra metodei de gestionare Local Management, pute\u021bi specifica metoda de care ave\u021bi nevoie. Pentru a v\u0103 familiariza cu procesul de sincronizare cu serverul de Management dedicat, este oferit\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=v5SugzYFBhE&amp;list=PLqio-3dnMW5_2cStMfIezwcAzzDCjX86C&amp;index=7\"> linkul<\/a><\/noindex> din ciclul de formare CheckPoint Getting Started, realizat de compania TS Solution. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/c39e8ede7b45aecc40adf83dc32f0bc6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>\u00cen continuare va fi prezentat\u0103 o fereastr\u0103 care define\u0219te modul de operare al interfe\u021belor pe gateway:\n<\/p>\n<p><\/p>\n<ul>\n<li>Modul Switch presupune disponibilitatea subre\u021belei de la o interfa\u021b\u0103 la subre\u021beaua altei interfe\u021be. <\/li>\n<li>Modul Disable Switch, respectiv dezactiveaz\u0103 modul Switch, fiecare port rut\u00e2nd traficul ca pentru un fragment de re\u021bea distinct.<\/li>\n<\/ul>\n<p><\/p>\n<p>De asemenea, se ofer\u0103 posibilitatea de a stabili un pool de adrese DHCP care vor fi utilizate \u00een timpul conect\u0103rii la interfe\u021bele locale ale gateway-ului.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/d0a03e50f8b138e0518af07d9f6671a2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Urm\u0103torul pas este configurarea func\u021bion\u0103rii gateway-ului \u00een modul wireless, inten\u021bion\u0103m s\u0103 analiz\u0103m acest aspect mai \u00een detaliu \u00eentr-unul dintre articolele ciclului, de aceea am am\u00e2nat configurarea set\u0103rilor. Totu\u0219i, pute\u021bi crea un nou punct de acces wireless, stabili o parol\u0103 pentru conectare \u0219i defini modul de func\u021bionare al canalului wireless (2.4 GHz sau 5 GHz).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/5039a036b3645b1d02d39835c6c107c4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Urm\u0103toarea etap\u0103 va propune configura\u021bia accesului la gateway pentru administratorii companiei. \u00cen mod implicit, drepturile de acces sunt permise dac\u0103 conexiunea provine de la:<\/p>\n<p><\/p>\n<ol>\n<li>Re\u021beaua intern\u0103 a companiei <\/li>\n<li>Re\u021beaua wireless de \u00eencredere <\/li>\n<li>Tunel VPN<\/li>\n<\/ol>\n<p><\/p>\n<p>Op\u021biunea de conectare la gateway prin Internet este dezactivat\u0103 prin default, aceasta comport\u0103 riscuri mari \u0219i ar trebui justificat\u0103 pentru a fi activat\u0103; \u00een caz contrar, se recomand\u0103 s\u0103 r\u0103m\u00e2n\u0103 ca \u00een exemplul nostru. De asemenea, exist\u0103 posibilitatea de a specifica ce adrese IP vor fi permise pentru conectarea la gateway.<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/b3bd7f25aeb71b75392595f7efad22b6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Fereastra urm\u0103toare se refer\u0103 la activarea licen\u021belor; la ini\u021bializarea ini\u021bial\u0103 a dispozitivului, vi se va oferi o perioad\u0103 de prob\u0103 de 30 de zile. Exist\u0103 dou\u0103 modalit\u0103\u021bi disponibile de activare: <\/p>\n<p><\/p>\n<ol>\n<li> Dac\u0103 exist\u0103 o conexiune la Internet, licen\u021ba se activeaz\u0103 automat.<\/li>\n<li> Dac\u0103 activa\u021bi licen\u021ba offline, trebuie s\u0103 face\u021bi urm\u0103toarele: desc\u0103rca\u021bi licen\u021ba din UserCenter, \u00eenregistra\u021bi dispozitivul dumneavoastr\u0103 pe un site special. <noindex><a rel=\"nofollow\" href=\"https:\/\/smbregistration.checkpoint.com\">portalului<\/a><\/noindex>. Apoi, pentru ambele cazuri, va trebui s\u0103 importa\u021bi manual licen\u021ba desc\u0103rcat\u0103.<\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/e0eb47e8dab7d4ece07e0e44a6e4bd35.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>\u00cen cele din urm\u0103, ultima fereastr\u0103 din asistentul de configurare v\u0103 ofer\u0103 op\u021biunea de a selecta blade-urile activate; men\u021bion\u0103m c\u0103 blade-ul QOS se activeaz\u0103 numai dup\u0103 ini\u021bializarea ini\u021bial\u0103. La sf\u00e2r\u0219it, ar trebui s\u0103 primi\u021bi o fereastr\u0103 de finalizare care rezum\u0103 set\u0103rile dumneavoastr\u0103.<\/p>\n<h2>Configurarea ini\u021bial\u0103<\/h2>\n<p><\/p>\n<p> \u00cen primul r\u00e2nd, recomand\u0103m verificarea st\u0103rii licen\u021belor, deoarece aceasta va influen\u021ba configurarea ulterioar\u0103. Accesa\u021bi fila \u201eHOME\u201d \u2192 \u201eLicense\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/ffafde17f0545d500176d8ba8a82ec65.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Dac\u0103 licen\u021bele sunt activate, se recomand\u0103 s\u0103 face\u021bi imediat actualizarea la cea mai recent\u0103 versiune de firmware; pentru aceasta, accesa\u021bi fila \u201eDEVICE\u201d \u2192 \u201eSystem Operations\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/ba7484d0e39800db7a122c3dda5db6b1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Actualiz\u0103rile sistemului se g\u0103sesc \u00een sec\u021biunea Firmware Upgrade. \u00cen cazul nostru, este instalat\u0103 cea mai actual\u0103 \u0219i ultima versiune de firmware.\n<\/p>\n<p><\/p>\n<p>\u00cen continuare, v\u0103 propun s\u0103 discut pe scurt despre posibilit\u0103\u021bile \u0219i set\u0103rile blade-urilor sistemului. Acestea pot fi \u00eemp\u0103r\u021bite logic \u00een politici de nivel Access (Firewall, Application Control, URL Filtering) \u0219i Threat Prevention (IPS, Antivirus, Anti-Bot, Threat Emulation).<\/p>\n<p><\/p>\n<p>S\u0103 trecem la fila Access Policy \u2192 Blade Control:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/381db11e773c4a61d30df502f6a0abb0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>\u00cen mod implicit, este utilizat modul STANDARD, care permite: traficul de ie\u0219ire c\u0103tre Internet, traficul din re\u021beaua local\u0103, dar blocheaz\u0103 traficul de intrare din Internet.\n<\/p>\n<p><\/p>\n<p>\u00cen ceea ce prive\u0219te blade-urile APPLICATIONS &amp; URL FILTERING, acestea sunt configurate implicit pentru a bloca site-urile cu un nivel ridicat de risc \u0219i aplica\u021biile de partajare (Torrent, File Storage etc.). De asemenea, se pot bloca manual categorii de site-uri suplimentar.<\/p>\n<p><\/p>\n<p>Men\u021bion\u0103m op\u021biunea pentru traficul utilizatorilor \u201eLimit bandwidth consuming applications\u201d care permite restric\u021bionarea vitezei de trafic ie\u0219it\/venit pentru grupurile de aplica\u021bii. \n<\/p>\n<p><\/p>\n<p>Apoi, s\u0103 deschidem subdiviziunea Policy, regulile sunt generate automat conform set\u0103rilor descrise anterior. \n<\/p>\n<p><\/p>\n<p>Subdiviziunea NAT func\u021bioneaz\u0103 implicit \u00een Global Hide Nat Automatic, adic\u0103 toate gazdele interne vor avea acces la Internet printr-o adres\u0103 IP public\u0103. Exist\u0103 op\u021biunea de a defini manual reguli NAT pentru publicarea aplica\u021biilor sau serviciilor web. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/3c7f69f0ac7c34358cc2f3561d0f31e3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Urm\u0103toarea sec\u021biune se refer\u0103 la autentificarea utilizatorilor \u00een re\u021bea, sunt oferite dou\u0103 op\u021biuni: Active Directory Queries (integrare cu AD-ul dvs.), Browser-Based Authentication (utilizatorul introduce acreditivele de domeniu pe portal).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/123734ef6cde261992e6e369271c797f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Merit\u0103 s\u0103 discut\u0103m despre inspec\u021bia SSL, propor\u021bia total\u0103 a traficului HTTPS \u00een re\u021beaua global\u0103 este \u00een continu\u0103 cre\u0219tere. S\u0103 vedem ce oportunit\u0103\u021bi ofer\u0103 CheckPoint pentru solu\u021biile SMB, pentru aceasta trebuie s\u0103 ne \u00eendrept\u0103m spre sec\u021biunea SSL-Inspection \u2192 Policy:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/a3da719f47a7aee7ca98e3f6e043282c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>\u00cen set\u0103ri exist\u0103 op\u021biunea de a inspecta traficul HTTPS, va fi necesar s\u0103 importa\u021bi certificatul \u0219i s\u0103-l instala\u021bi \u00een centrul certificatelor de \u00eencredere pe computerele utilizatorilor finali. \n<\/p>\n<p><\/p>\n<p>Consider\u0103m c\u0103 op\u021biunea de mod BYPASS pentru categoriile predefinite este convenabil\u0103, economisind astfel semnificativ timp \u00een activarea inspec\u021biei. \n<\/p>\n<p><\/p>\n<p>Dup\u0103 configurarea regulilor la nivel de Firewall \/ Application, trebuie s\u0103 trecem la optimizarea politicilor de securitate (Threat Prevention), pentru aceasta acces\u0103m sec\u021biunea corespunz\u0103toare:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/30b4cbd037f8517e81c2557dbdc5fd98.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pe pagina deschis\u0103 vedem blade-urile activate, st\u0103rile actualiz\u0103rilor pentru semn\u0103turi \u0219i baze. De asemenea, ni se ofer\u0103 s\u0103 select\u0103m un profil pentru protec\u021bia perimetrului re\u021belei, fiind afi\u0219ate set\u0103rile corespunz\u0103toare.\n<\/p>\n<p><\/p>\n<p>O sec\u021biune separat\u0103 'IPS Protections' permite configurarea ac\u021biunilor asupra unei anumite semn\u0103turi de securitate.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/9718b22b843742b6916dceb342e24a8d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Recent am scris pe blogul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511012\/\">despre o vulnerabilitate global\u0103<\/a><\/noindex> pentru Windows Server \u2014 SigRed. Vom verifica prezen\u021ba acesteia \u00een Gaia Embedded 80.20 introduc\u00e2nd interogarea \u201eCVE-2020-1350\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/7af359b881b41e382b98ddb7fda53403.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAceast\u0103 semn\u0103tur\u0103 a fost detectat\u0103 \u00eenregistrat\u0103, la care se poate aplica una dintre ac\u021biuni. (implicit, Previnde pentru nivelul de pericol \u2014 Critic). Astfel, av\u00e2nd o solu\u021bie SMB, nu ve\u021bi fi lipsi\u021bi de actualiz\u0103ri \u0219i suport, fiind o solu\u021bie complet\u0103 NGFW pentru birourile de filial\u0103 cu p\u00e2n\u0103 la 200 de persoane de la CheckPoint.<\/p>\n<h2>Evaluarea func\u021bionalit\u0103\u021bii<\/h2>\n<p>\n\u00cen \u00eencheierea articolului, a\u0219 dori s\u0103 subliniez existen\u021ba instrumentelor pentru solu\u021bionarea problemelor dup\u0103 ini\u021bializarea \u0219i configurarea ini\u021bial\u0103 a solu\u021biei SMB. Pute\u021bi accesa sec\u021biunea \u201eACAS\u0102\u201d \u2192 \u201eInstrumente\u201d. Op\u021biunile disponibile sunt:<\/p>\n<ul>\n<li>monitorizarea resurselor sistemului;<\/li>\n<li>tabel de rutare;<\/li>\n<li>verificarea disponibilit\u0103\u021bii serviciilor cloud CheckPoint;<\/li>\n<li>generarea CPinfo;<\/li>\n<\/ul>\n<p><\/p>\n<p>De asemenea, sunt disponibile comenzi de re\u021bea integrate: Ping, Traceroute, Captur\u0103 de trafic.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW pentru micile afaceri. Despachetare \u0219i configurare\" src=\"\/wp-content\/uploads\/2020\/07\/d3f2b1c24bd7f9f882ad78f8838ac8e0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Astfel, ast\u0103zi am examinat \u0219i studiat conectarea ini\u021bial\u0103 \u0219i configurarea NGFW 1590; ac\u021biuni similare le ve\u021bi efectua pentru \u00eentreaga serie 1500 SMB Checkpoint. Op\u021biunile disponibile ne-au ar\u0103tat o mare variabilitate \u00een configur\u0103ri, sus\u021bin\u00e2nd metodele moderne de protec\u021bie a traficului la perimetrul re\u021belei. <\/p>\n<p>\n\u00cen prezent, solu\u021biile CheckPoint pentru protec\u021bia birourilor mici \u0219i filialelor (p\u00e2n\u0103 la 200 de persoane) dispun de un set larg de instrumente \u0219i utilizeaz\u0103 cele mai recente tehnologii (managementul cloud, suport pentru cartele SIM, extinderea memoriei cu carduri SD etc.). R\u0103m\u00e2ne\u021bi la curent \u0219i citi\u021bi articolele de la TS Solution, planific\u0103m s\u0103 lans\u0103m \u00een continuare p\u0103r\u021bi despre NGFW CheckPoint din familia SMB, pe cur\u00e2nd!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">O selec\u021bie mare de materiale despre Check Point de la TS Solution<\/a><\/noindex>. Urm\u0103ri\u021bi actualiz\u0103rile (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511462\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0446\u0438\u043a\u043b \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043d\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u044f\u0434\u043e\u043c SMB CheckPoint, \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u0440\u0448\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u0435\u0440\u0438\u0438: CheckPoint 1590 NGFW. \u041f\u0440\u0438\u043b\u043e\u0436\u0438\u043c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438: \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0443\u044e\u0449\u0438\u0445, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435). \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89740,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89739","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. NGFW pentru micile afaceri. Despachetare \u0219i configurare | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T23:42:18+00:00","article:modified_time":"2020-07-25T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89739","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:05:27","updated":"2022-10-01 11:43:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/89739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=89739"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/89739\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/89740"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=89739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=89739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=89739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}