{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 este acum \u00een EA. Prima privire","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nNoua versiune Gaia R81 a fost publicat\u0103 pentru acces anticipat (EA). Anterior, era posibil s\u0103 ne familiariz\u0103m cu inova\u021biile planificate<\/a><\/noindex> din notele de lansare. Acum avem ocazia s\u0103 le vedem \u00een via\u021ba real\u0103. Pentru aceasta, a fost configurat\u0103 o schem\u0103 standard cu un server dedicat de management \u0219i un gateway. Bine\u00een\u021beles, nu am reu\u0219it s\u0103 efectu\u0103m teste complete, dar suntem preg\u0103ti\u021bi s\u0103 \u00eemp\u0103rt\u0103\u0219im ceea ce ne-a s\u0103rit imediat \u00een ochi la prima \u00eent\u00e2lnire cu noul sistem. Aici sunt principalele puncte pe care le-am observat la prima interac\u021biune cu sistemul (multe imagini).
\n<\/a><\/noindex><\/p>\n

Gestionare<\/h3>\n

\nLa ini\u021bializarea gateway-ului, ave\u021bi oportunitatea de a v\u0103 conecta imediat la serverul de management \u00een cloud \u2014 Smart 1 Cloud<\/b> (cunoscut sub numele de MaaS):<\/p>\n

\"Check
\nAceasta este o oportunitate relativ nou\u0103 (existent\u0103 \u0219i \u00een ultimele versiuni 80.40) \u0219i v\u0103 vom povesti despre acest serviciu \u00eentr-un timp c\u00e2t mai scurt<\/a><\/noindex>. Principalul avantaj (din punctul nostru de vedere) este a\u0219teptata posibilitate de a gestiona prin browser \ud83d\ude42<\/p>\n

VxLAN \u0219i GRE<\/h3>\n

\nPrimul lucru pe care l-am verificat a fost suportul pentru VxLAN \u0219i GRE. Noti\u021bele de lansare nu ne-au \u00een\u0219elat, totul este la locul lui:<\/p>\n

\"Check
\n
\nSe poate discuta despre necesitatea acestor func\u021bii pe NGFW, dar e mai bine c\u00e2nd utilizatorul are aceast\u0103 op\u021biune.<\/p>\n

Infinity Threat Prevention<\/h3>\n

\nProbabil c\u0103 acesta este primul lucru care sare \u00een ochi c\u00e2nd \u00eencepi s\u0103 modifici politica de securitate. A fost ad\u0103ugat un nou mod de activare a blade-urilor Threat Prevention \u2014 Infinity. Adic\u0103 nu trebuie s\u0103 alegi ce blade-uri s\u0103 activezi, Check Point a decis pentru noi (nu \u0219tiu c\u00e2t de bine este asta):<\/p>\n

\"Check
\n\u00cen acela\u0219i timp, ave\u021bi, desigur, posibilitatea de a ajusta blade-urile dup\u0103 cum dori\u021bi.<\/p>\n

Infinity Threat Prevention Policy<\/h3>\n

\nDeoarece am men\u021bionat Threat Prevention, s\u0103 ne uit\u0103m rapid \u0219i la politica acesteia. Probabil, aceasta este una dintre cele mai semnificative schimb\u0103ri:<\/p>\n

\"Check
\n
\nDup\u0103 cum se poate observa, au ap\u0103rut mult mai multe politici presetate. Pute\u021bi examina detaliat \u00een ce const\u0103 diferen\u021ba dintre ele ap\u0103s\u00e2nd pe Help me decide<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nAceasta este o politic\u0103 dinamic\u0103 \u0219i se actualizeaz\u0103 f\u0103r\u0103 interven\u021bia dumneavoastr\u0103.<\/p>\n

Change Report<\/h3>\n

\n\u00cen sf\u00e2r\u0219it, se poate vizualiza \u00eentr-o form\u0103 convenabil\u0103 ce anume a fost modificat \u00een timpul ajust\u0103rii configura\u021biei:<\/p>\n

\"Check
\n
\nExist\u0103 un raport general:<\/p>\n

\"Check
\n
\n\u0218i exist\u0103 sec\u021biuni complet specifice:<\/p>\n

\"Check
\n\"Check
\n
\nEste foarte util s\u0103 urm\u0103re\u0219ti modific\u0103rile.<\/p>\n

Web Management pentru Endpoint<\/h3>\n

\nDup\u0103 cum \u0219ti\u021bi, pe serverul de management se poate activa Endpoint Management \u0219i gestiona agen\u021bii SandBlast. \u00cen R81 a fost ad\u0103ugat\u0103 o func\u021bionalitate interesant\u0103 - gestionarea prin browser. Aceasta se activeaz\u0103 \u00eentr-un mod destul de interesant. Trebuie s\u0103 accesa\u021bi CLI \u00een modul expert<\/b> \u0219i s\u0103 introduce\u021bi comanda \u201cweb_mgmt_start\u201d<\/b>, apoi s\u0103 merge\u021bi la adresa - https:\/\/:4434\/sba\/. \u0218i ve\u021bi avea consola web \u00een fa\u021ba dvs.:<\/p>\n

\"Check
\n
\nAm men\u021bionat par\u021bial despre aceast\u0103 platform\u0103 \u00een cadrul articolelor \"Check Point SandBlast Agent Management Platform<\/a><\/noindex>\" scrise de Alexei Malko. Adev\u0103rul este c\u0103 acea consol\u0103 era disponibil\u0103 doar \u00een cloud, dar acum func\u021bioneaz\u0103 \u0219i pe serverele locale de management.<\/p>\n

Smart Update<\/h3>\n

\nC\u00e2nd \u00eencerca\u021bi s\u0103 ad\u0103uga\u021bi licen\u021be prin vechiul Smart Update, consola v\u0103 va avertiza c\u0103 acum se poate face f\u0103r\u0103 a p\u0103r\u0103si deja familiarul Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nFunc\u021bionalitate foarte a\u0219teptat\u0103 de noi. Acum, \u00een regulile NAT se pot folosi Access Roles<\/b>, Security Zones<\/b> sau Updatable Objects<\/b>. Exist\u0103 cazuri \u00een care acest lucru este foarte util \u0219i necesar.<\/p>\n

Concluzie<\/h3>\n

\nCam at\u00e2t deocamdat\u0103. Exist\u0103 multe alte nout\u0103\u021bi care necesit\u0103 testare (IoT, Azure AD, Upgrade, Logs API etc.). A\u0219a cum am men\u021bionat anterior, \u00een perioada urm\u0103toare vom publica un rezumat al noii sisteme de management \u00een cloud - Smart-1 Cloud<\/a><\/noindex><\/b>. Urm\u0103ri\u021bi actualiz\u0103rile pe canalele noastre (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, Blogul TS Solution<\/a><\/noindex>)!<\/p>\n

De asemenea, nu uita\u021bi de selec\u021bia noastr\u0103 ampl\u0103 de materiale despre Check Point<\/a><\/noindex>.
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 acum EA. Prima privire | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}