{"id":92931,"date":"2020-09-01T13:43:08","date_gmt":"2020-09-01T11:43:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings"},"modified":"2020-09-01T13:43:08","modified_gmt":"2020-09-01T11:43:08","slug":"4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","title":{"rendered":"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/a0d4603cacecf98f5312fe32383bf08c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBine a\u021bi venit la al patrulea articol din ciclul despre solu\u021bia Check Point SandBlast Agent Management Platform. \u00cen articolele anterioare (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511768\/\">prima<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">a doua<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/513254\/\">treilea<\/a><\/noindex>) am detaliat interfa\u021ba \u0219i capabilit\u0103\u021bile consolei web de gestionare, am examinat politica de prevenire a amenin\u021b\u0103rilor \u0219i am testat-o pentru a contracara diverse amenin\u021b\u0103ri. Acest articol este dedicat celui de-al doilea component de securitate \u2014 politica de protec\u021bie a datelor, care se ocup\u0103 cu protec\u021bia datelor stocate pe ma\u0219ina utilizatorului. De asemenea, \u00een cadrul acestui articol, vom analiza sec\u021biunile Implementare \u0219i Set\u0103ri Politic\u0103 Global\u0103.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Politica de Protec\u021bie a Datelor<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xg\/gn\/p9\/xggnp9rvyyf5ovui9vdxv0dpmuy.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/d3f6f895f6633034ca466ca9f54da3e3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Politica de Protec\u021bie a Datelor permite configurarea accesului la datele stocate pe ma\u0219ina de lucru doar pentru utilizatorii autoriza\u021bi, folosind func\u021biile de criptare complet\u0103 a discului (Full Disk Encryption) \u0219i protec\u021bia procesului de \u00eenc\u0103rcare (Boot Protection). \u00cen prezent, sunt acceptate urm\u0103toarele op\u021biuni pentru configurarea cript\u0103rii discului: pentru Windows \u2014 Check Point Encryption sau BitLocker Encryption, pentru MacOS \u2014 File Vault. S\u0103 analiz\u0103m mai \u00een detaliu capabilit\u0103\u021bile \u0219i set\u0103rile fiec\u0103rei variante.<\/p>\n<h4>Check Point Encryption<\/h4>\n<p>\nCheck Point Encryption este metoda standard de criptare a discului \u00een politica de Protec\u021bie a Datelor \u0219i asigur\u0103 criptarea tuturor fi\u0219ierelor sistemului (temporare, de sistem, \u0219terse) \u00een fundal f\u0103r\u0103 a afecta func\u021bionarea ma\u0219inii utilizatorului. Dup\u0103 criptare, discul devine inaccesibil utilizatorilor neautoriza\u021bi.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hv\/lr\/du\/hvlrdum9mu88ub0clodrkc3ny5i.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/8176a8f0ca55c05ac6dadff33534008b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Principala setare pentru Check Point Encryption este \u201eActivare Pre-boot\u201d, care include necesitatea autentific\u0103rii utilizatorilor \u00eenainte de \u00eenc\u0103rcarea sistemului de operare. Aceast\u0103 op\u021biune este recomandat\u0103, deoarece previne utilizarea mijloacelor de ocolire a autentific\u0103rii la nivel de sistem de operare. De asemenea, exist\u0103 posibilitatea de a configura parametrii de ocolire temporar\u0103 pentru func\u021bia Pre-boot:<\/p>\n<ul>\n<li><i>Permite autentificarea OS dup\u0103 ocolire temporar\u0103<\/i> \u2014 dezactivarea func\u021biei Pre-boot \u0219i trecerea la autentificarea \u00een sistemul de operare;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permite ocolirea pre-boot (Wake On LAN \u2013 WOL)<\/i> \u2014 dezactivarea func\u021biei pre-boot pe computerele conectate la serverul de gestionare prin Ethernet; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permite scriptul de ocolire<\/i> \u2014 permite configurarea ocolirii func\u021biei Pre-boot, indic\u00e2nd ora \u0219i data de \u00eenceput a func\u021bion\u0103rii scriptului \u0219i parametrii de finalizare a ocolirii Pre-boot; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Permite ocolirea LAN<\/i> \u2014 dezactivarea func\u021biei pre-boot la conectarea la re\u021beaua local\u0103.<\/li>\n<\/ul>\n<p>\nOp\u021biunile enumerate mai sus pentru ocolirea temporar\u0103 a func\u021biei Pre-boot nu sunt recomandate a fi utilizate f\u0103r\u0103 motive evidente (de exemplu, lucr\u0103ri tehnice sau depanare) \u0219i cea mai bun\u0103 solu\u021bie din punct de vedere al securit\u0103\u021bii este activarea func\u021biei Pre-boot f\u0103r\u0103 a specifica reguli temporare de ocolire. \u00cen caz de necesitate de a ocoli Pre-boot, se recomand\u0103 stabilirea intervalelor temporare minime \u00een parametrii de ocolire temporar\u0103, pentru a nu reduce nivelul de protec\u021bie pentru o perioad\u0103 lung\u0103 de timp.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/js\/1i\/dh\/js1idhttoiq0eikit7afjtegxiy.gif\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/689919312946d768721d4638140aa337.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>De asemenea, \u00een utilizarea Check Point Encryption exist\u0103 posibilitatea de a configura set\u0103ri avansate ale politicii de Protec\u021bie a Datelor, de exemplu, de a configura mai flexibil parametrii de criptare, de a ajusta diferitele aspecte ale func\u021biei Pre-boot \u0219i autentific\u0103rii Windows.<\/p>\n<h4>BitLocker Encryption<\/h4>\n<p>\nBitLocker face parte din sistemul de operare Windows \u0219i permite criptarea hard disk-urilor \u0219i a suporturilor de stocare externe. Check Point BitLocker Management este un component al serviciilor Windows, care se porne\u0219te automat \u00eempreun\u0103 cu clientul SandBlast Agent \u0219i folose\u0219te API-ul pentru a gestiona tehnologia BitLocker.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ij\/1u\/od\/ij1uodbdmmfbjmgantnxjrogvlo.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/c8f328978ba8f8906a112765fd7e4571.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Atunci c\u00e2nd se alege BitLocker Encryption ca metod\u0103 de criptare a discului \u00een politica de Protec\u021bie a Datelor, se pot configura urm\u0103toarele set\u0103ri:<\/p>\n<ul>\n<li><i>Criptare ini\u021bial\u0103<\/i> \u2014 set\u0103rile de criptare ini\u021bial\u0103 permit criptarea \u00eentregului disc (Criptare \u00eentregului disc), ceea ce este recomandat pentru ma\u0219inile cu date utilizator deja existente (fi\u0219iere, documente \u0219i altele), sau criptarea doar a datelor (Criptare doar a spa\u021biului utilizat pe disc), ceea ce este recomandat pentru noile instala\u021bii Windows;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Discuri de criptat<\/i> \u2014 selectarea discurilor\/parti\u021biilor pentru criptare, permite criptarea tuturor discurilor (Toate discurile) sau doar a parti\u021biei cu sistemul de operare (Numai discul OS);<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Algoritm de criptare<\/i> \u2014 selectarea algoritmului de criptare, op\u021biunea recomandat\u0103 fiind Windows Default, de asemenea exist\u0103 posibilitatea de a specifica XTS-AES-128 sau XTS-AES-256.<\/li>\n<\/ul>\n<p><\/p>\n<h4>File Vault<\/h4>\n<p>\nFile Vault este un instrument standard de criptare de la Apple \u0219i asigur\u0103 accesul la datele computerului utilizatorului doar utilizatorilor autoriza\u021bi. Cu File Vault activat, utilizatorul trebuie s\u0103 introduc\u0103 o parol\u0103 pentru a porni sistemul \u0219i pentru a ob\u021bine acces la fi\u0219ierele criptate. Utilizarea File Vault este singura modalitate de a asigura protec\u021bia datelor stocate \u00een politica de Protec\u021bie a Datelor pentru utilizatorii sistemului de operare MacOS.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/sy\/e9\/y4\/sye9y49s_dd2ur0e44bh5dg16uc.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/4446e97032af97f69490314ec0ab346d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pentru File Vault, este disponibil\u0103 op\u021biunea \u201eActivare achizi\u021bion\u0103rii automate a utilizatorului\u201d, care necesit\u0103 autorizarea utilizatorului \u00eenainte de a \u00eencepe procesul de criptare a discului. Dac\u0103 aceast\u0103 func\u021bie este activat\u0103, este posibil s\u0103 se specifice num\u0103rul de utilizatori care trebuie s\u0103 se autorizeze \u00eenainte ca SandBlast Agent s\u0103 aplice func\u021bia Pre-boot sau s\u0103 se specifice num\u0103rul de zile dup\u0103 care func\u021bia Pre-boot va fi implementat\u0103 automat pentru to\u021bi utilizatorii autoriza\u021bi, dac\u0103 \u00een aceast\u0103 perioad\u0103 cel pu\u021bin un utilizator s-a autorizat \u00een sistem.<\/p>\n<h3>Recuperarea datelor<\/h3>\n<p>\n\u00cen cazul \u00een care apar probleme cu \u00eenc\u0103rcarea sistemului, se pot utiliza diferite metode de recuperare a datelor. Administratorul poate ini\u021bia procesul de recuperare a datelor criptate din sec\u021biunea Computer Management \u2192 Full Disk Encryption Actions. \u00cen cazul utiliz\u0103rii Check Point Encryption, se poate decripta discul anterior criptat \u0219i se poate ob\u021bine acces la toate fi\u0219ierele stocate. Dup\u0103 aceast\u0103 procedur\u0103, este necesar s\u0103 se reporneasc\u0103 procesul de criptare a discului pentru a aplica politica Data Protection.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jj\/ox\/ui\/jjoxuiqkkamq99bj90kflpureco.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/5e2c5fda53a0be8fda406aa267f991d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Atunci c\u00e2nd se alege BitLocker ca metod\u0103 de criptare a discului, pentru recuperarea datelor este necesar s\u0103 se introduc\u0103 Recovery Key ID al computerului problematic pentru a genera Recovery Key, care trebuie introdus de utilizator pentru a ob\u021bine acces la discul criptat.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/wf\/ba\/ma\/wfbamafl41wqwzp7anrpp1tdfbo.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/b9acf560cef0b3f44d751ac03fdfc8a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pentru utilizatorii MacOS care folosesc File Vault pentru protejarea informa\u021biilor stocate, procesul de recuperare const\u0103 \u00een generarea de c\u0103tre administrator a Recovery Key pe baza Serial Number al ma\u0219inii problematice \u0219i introducerea acestei chei cu resetarea ulterioar\u0103 a parolei.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/dq\/56\/dx\/dq56dxec6pgpevw7if69jhipnzc.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/7682e2be9541e5f606a85c0880353397.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Politica de Deployment<\/h2>\n<p>\nDe la lansarea <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">celui de-al doilea articol<\/a><\/noindex>, \u00een care a fost discutat interfa\u021ba consolei web de management, Check Point a reu\u0219it s\u0103 fac\u0103 unele modific\u0103ri \u00een sec\u021biunea Deployment \u2014 acum aceasta include subsec\u021biunea <i>Software Deployment<\/i>, \u00een care se configureaz\u0103 set\u0103rile (activarea\/dezactivarea blade-urilor) pentru agen\u021bii deja instala\u021bi, \u0219i subsec\u021biunea <i>Export Package<\/i>, \u00een care se pot crea pachete cu blade-uri preinstalate pentru instalarea ulterioar\u0103 pe ma\u0219inile utilizatorilor, de exemplu, prin intermediul politicilor de grup Active Directory. S\u0103 examin\u0103m subsec\u021biunea Software Deployment, \u00een care sunt activate toate blade-urile SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/0q\/9e\/ae\/0q9eaeuyltbg5lewff7riijdvkg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/1a9dd697ba8422e8d511f07b9cc916b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Reamintesc c\u0103 \u00een politica standard de implementare sunt incluse doar blade-urile din categoria Prevenire a Amenin\u021b\u0103rilor. Av\u00e2nd \u00een vedere politica de Protec\u021bie a Datelor discutat\u0103 anterior, acum este posibil s\u0103 incluzi aceast\u0103 categorie pentru instalarea \u0219i func\u021bionarea pe computerul clientului cu agentul SandBlast. Are sens s\u0103 activezi func\u021bia VPN de Acces de la Distan\u021b\u0103, care va permite utilizatorului s\u0103 se conecteze, de exemplu, la re\u021beaua corporativ\u0103 a organiza\u021biei, precum \u0219i categoria Acces \u0219i Conformitate, din care fac parte func\u021biile Firewall &amp; Controlul Aplica\u021biilor \u0219i verificarea computerului utilizatorului pentru a respecta politica de Conformitate.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/r9\/a6\/lh\/r9a6lhui24xkbzuprmhz1eeuhvu.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/2f79464dbae43bafb8e631106b40efa6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>                        <b class=\"spoiler_title\">Export Package<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/43\/fs\/cf\/43fscffpzgaw7jfd8w2lhsfohwo.gif\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/34fa39766267a87adde5a701e8d2ab4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Subsec\u021biunea Pachete de Export este extrem de simpl\u0103 de utilizat: pentru a crea un pachet de configurare, trebuie s\u0103 specifici numele acestuia, s\u0103 alegi sistemul de operare (pentru Windows, este necesar s\u0103 indici \u0219i arhitectura) \u0219i versiunea agentului, dup\u0103 care s\u0103 selectezi politicile de securitate integrate \u00een pachet. Po\u021bi, de asemenea, s\u0103 specifici un grup virtual, din care vor face parte computerele cu pachetul instalat, precum \u0219i s\u0103 alegi un Site VPN cu adresa de conectare \u0219i parametrii de autentificare preconfigura\u021bi (Site-urile VPN sunt configurate \u00een sec\u021biunea Pachete de Export \u2192 Gestiona\u021bi Site-urile VPN). Ultimul punct este foarte convenabil, deoarece elimin\u0103 probabilitatea erorii utilizatorului \u00een configurarea parametrilor de conectare prin VPN.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yy\/f7\/fm\/yyf7fmc0iggigkmg3in9ck1fwxg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/9c1e08ea73bb98879df13dc3db930c08.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Set\u0103rile Politicii Globale<\/h2>\n<p>\n\u00cen set\u0103rile Global Policy Settings se configureaz\u0103 unul dintre cei mai importan\u021bi parametri \u2014 parola pentru eliminarea SandBlast Agent de pe computerul utilizatorului. Dup\u0103 instalarea agentului, utilizatorul nu va putea s\u0103-l elimine f\u0103r\u0103 introducerea parolei, care \u00een mod implicit este cuv\u00e2ntul \"<b>secret<\/b>\" (f\u0103r\u0103 ghilimele). Cu toate acestea, aceast\u0103 parol\u0103 standard este u\u0219or de g\u0103sit \u00een surse publice, iar atunci c\u00e2nd se implementeaz\u0103 solu\u021bia SandBlast Agent, se recomand\u0103 schimbarea parolei standard pentru eliminarea agentului. \u00cen Management Platform, cu parola standard, politica poate fi stabilit\u0103 doar de 5 ori, astfel c\u0103 schimbarea parolei pentru eliminare este inevitabil\u0103.<br \/>\n\u00cen plus, \u00een set\u0103rile Politicii Globale se configureaz\u0103 parametrii datelor care pot fi trimise c\u0103tre Check Point pentru analiz\u0103 \u0219i \u00eembun\u0103t\u0103\u021birea func\u021bion\u0103rii serviciului ThreatCloud.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/2s\/af\/ye\/2safyeunswbcpdlwblgve5seem0.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/71170c628acb9b9506208949693c841a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Din set\u0103rile Politicii Globale se configureaz\u0103, de asemenea, unele parametri ai politicii de criptare a discului, respectiv cerin\u021bele pentru parol\u0103: complexitate, durat\u0103 de utilizare, posibilitatea de a utiliza o parol\u0103 anterioar\u0103 \u0219i altele. \u00cen aceast\u0103 sec\u021biune, po\u021bi \u00eenc\u0103rca propriile imagini \u00een locul celor standard pentru Pre-boot sau OneCheck.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/na\/u6\/sv\/nau6sv-ig4wkruxkbiqycjdzn7y.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/f4f8c110b7151c34b763bd99badddb98.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Configurarea politicii<\/h2>\n<p>\nDup\u0103 ce s-au familiarizat cu op\u021biunile politicii de Protec\u021bie a Datelor \u0219i au configurat set\u0103rile corespunz\u0103toare \u00een sec\u021biunea Deployment, se poate trece la instalarea unei noi politici, care include criptarea discului cu ajutorul Check Point Encryption \u0219i celelalte blade-uri SandBlast Agent. Dup\u0103 instalarea politicii \u00een Management Platform, clientul va primi un mesaj cu privire la necesitatea instal\u0103rii unei noi versiuni a politicii acum sau am\u00e2narea instal\u0103rii pentru o alt\u0103 dat\u0103 (maxim 2 zile).<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/d4\/3x\/g1\/d43xg1y8yhgirqzk4lbk5q06hey.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/01c3e7d69cd0297504f190c697fe5a1f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Dup\u0103 finalizarea desc\u0103rc\u0103rii \u0219i instal\u0103rii noii politici, SandBlast Agent va propune utilizatorului s\u0103 reporneasc\u0103 computerul pentru a activa protec\u021bia Full Disk Encryption.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ld\/rk\/ik\/ldrkikt7ac3gvxpd1x5ikigr13k.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/1f1ae7557786ef5bc709def906379a47.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Dup\u0103 repornire, utilizatorul va trebui s\u0103 \u00ee\u0219i introduc\u0103 datele de autentificare \u00een fereastra de autentificare Check Point Endpoint Security \u2014 aceasta va ap\u0103rea de fiecare dat\u0103 \u00eenainte de pornirea sistemului de operare (Pre-boot). Exist\u0103 op\u021biunea de a selecta Single Sign-On (SSO) pentru utilizarea automat\u0103 a datelor de autentificare la autentificarea \u00een Windows.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/gj\/in\/dv\/gjindvx57lyzglftzai0ejwv0cg.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/69b820deb9d9b3466b9f6d57c2ee4e26.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>\u00cen cazul unei autentific\u0103ri de succes, utilizatorul ob\u021bine acces la sistemul s\u0103u, iar \u201e\u00een fundal\u201d \u00eencepe procesul de criptare a discului. Aceast\u0103 opera\u021biune nu afecteaz\u0103 func\u021bionalitatea ma\u0219inii, de\u0219i poate dura o perioad\u0103 \u00eendelungat\u0103 (\u00een func\u021bie de volumul de spa\u021biu pe disc). La finalizarea procesului de criptare, putem verifica c\u0103 toate blade-urile sunt activate \u0219i func\u021bioneaz\u0103, discul este criptat, iar ma\u0219ina utilizatorului este protejat\u0103. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/pc\/x-\/m0\/pcx-m0z1exs-2g3-0paws5hq7jk.png\"><img decoding=\"async\" alt=\"4. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Implementare \u0219i Politica Global\u0103\" src=\"\/wp-content\/uploads\/2020\/09\/5cd266eb1731cbc74fdb0ce6458e3ce7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>Concluzie<\/h3>\n<p>\n\u00cen concluzie: \u00een acest articol am discutat despre func\u021bionalit\u0103\u021bile SandBlast Agent pentru protec\u021bia informa\u021biilor stocate pe ma\u0219ina utilizatorului prin criptarea discului \u00een politica de Protec\u021bie a Datelor, am studiat set\u0103rile de distribuire a politicilor \u0219i agen\u021bilor prin sec\u021biunea Deployment \u0219i am instalat o nou\u0103 politic\u0103 cu reguli de criptare a discului \u0219i blade-uri suplimentare pe ma\u0219ina utilizatorului. \u00cen articolul urm\u0103tor al ciclului, vom analiza \u00een detaliu func\u021bionalit\u0103\u021bile de jurnalizare \u0219i raportare din Management Platform \u0219i clientul SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">O selec\u021bie mare de materiale despre Check Point de la TS Solution<\/a><\/noindex>. Pentru a nu pierde urm\u0103toarele publica\u021bii pe tema SandBlast Agent Management Platform \u2014 urm\u0103ri\u021bi actualiz\u0103rile pe re\u021belele noastre sociale (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/515172\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 (\u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f) \u043c\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Threat Prevention \u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0451 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0443\u0433\u0440\u043e\u0437\u0430\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435 Data Protection, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92932,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92931","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. Politica de Protec\u021bie a Datelor. Set\u0103ri de Deployment \u0219i Politic\u0103 Global\u0103 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T11:43:08+00:00","article:modified_time":"2020-09-01T11:43:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92931","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:58:24","updated":"2022-10-04 10:52:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=92931"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92931\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/92932"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=92931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=92931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=92931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}