{"id":93433,"date":"2020-09-07T07:42:37","date_gmt":"2020-09-07T05:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40"},"modified":"2020-09-07T07:42:37","modified_gmt":"2020-09-07T05:42:37","slug":"proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","title":{"rendered":"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/7acecf42ffba8732d9006924b54aa490.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bol<em>e<\/em>Cu doi ani \u00een urm\u0103, am discutat despre faptul c\u0103, mai devreme sau mai t\u00e2rziu, fiecare administrator Check Point se confrunt\u0103 cu \u00eentrebarea actualiz\u0103rii la o nou\u0103 versiune. \u00cen acest <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\"><u>pe care l-a\u021bi citit<\/u><\/a><\/noindex> s-a descris actualizarea de la versiunea R77.30 la R80.10. De men\u021bionat c\u0103, \u00een ianuarie 2020, R77.30 a devenit versiunea certificat\u0103 a FSTEC. Cu toate acestea, \u00een cei doi ani, multe s-au schimbat \u00een Check Point. \u00cen articolul \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\"><u>Check Point Gaia R80.40. Ce va fi nou?<\/u><\/a><\/noindex>sunt descrise toate nout\u0103\u021bile, care sunt numeroase. \u00cen acest articol, procedura de actualizare va fi descris\u0103 c\u00e2t mai detaliat.&nbsp;<\/p>\n<p>Dup\u0103 cum se \u0219tie, exist\u0103 dou\u0103 variante de implementare a Check Point: Standalone \u0219i Distributed, adic\u0103 f\u0103r\u0103 un server de management dedicat \u0219i cu unul dedicat. Varianta Distributed este extrem de recomandat\u0103 din mai multe motive:<\/p>\n<ul>\n<li>\n<p>se minimizeaz\u0103 \u00eenc\u0103rc\u0103tura pe resursele gateway-ului;<\/p>\n<\/li>\n<li>\n<p>nu este nevoie s\u0103 se planifice o fereastr\u0103 de mentenan\u021b\u0103 pentru a efectua lucr\u0103ri pe serverul de management;<\/p>\n<\/li>\n<li>\n<p>func\u021bionarea adecvat\u0103 a SmartEvent, deoarece \u00een varianta Standalone este pu\u021bin probabil s\u0103 func\u021bioneze;<\/p>\n<\/li>\n<li>\n<p>construirea unui cluster de gateway-uri este extrem de recomandat\u0103 \u00een configura\u021bia Distributed.<\/p>\n<\/li>\n<\/ul>\n<p>Av\u00e2nd \u00een vedere toate avantajele configura\u021biei Distributed, vom examina actualizarea serverului de management \u0219i a gateway-ului de securitate separat.<\/p>\n<h3>Actualizarea Serverului de Management de Securitate (SMS)<\/h3>\n<p>Exist\u0103 dou\u0103 modalit\u0103\u021bi de a actualiza SMS-ul:<\/p>\n<ul>\n<li>\n<p>prin CPUSE (prin Gaia Portal)<\/p>\n<\/li>\n<li>\n<p>cu ajutorul Migration Tools (este necesar\u0103 o instalare curat\u0103 &#8212; <strong>fresh install<\/strong>)<\/p>\n<\/li>\n<\/ul>\n<p>Actualizarea prin CPUSE nu este recomandat\u0103 de colegii de la Check Point, deoarece nu ve\u021bi actualiza versiunea sistemului de fi\u0219iere \u0219i nucleul. Totu\u0219i, aceast\u0103 metod\u0103 nu necesit\u0103 migrarea politicilor \u0219i este mult mai rapid\u0103 \u0219i mai simpl\u0103 dec\u00e2t a doua metod\u0103.<\/p>\n<p>O instalare curat\u0103 \u0219i migrarea politicilor cu ajutorul Migration Tools &#8212; acesta este metoda recomandat\u0103. Pe l\u00e2ng\u0103 noul sistem de fi\u0219iere \u0219i kernelul OS, este frecvent ca baza de date SMS s\u0103 fie \"aglomrat\u0103\", iar o instalare curat\u0103 \u00een acest sens &#8212; este o solu\u021bie excelent\u0103 pentru a \u00eembun\u0103t\u0103\u021bi viteza de operare a serverului.<\/p>\n<p>1) Primul pas \u00een orice actualizare este crearea de backup-uri \u0219i snapshot-uri. Dac\u0103 ave\u021bi un server de management fizic, backup-ul trebuie realizat din interfa\u021ba web Gaia Portal. Accesa\u021bi tab-ul <em>Maintenance &gt; System Backup &gt; Backup<\/em>. Apoi indica\u021bi locul de salvare a backup-ului. Acesta poate fi un server SCP, FTP, TFTP sau local pe dispozitiv, totu\u0219i va trebui ulterior s\u0103 transfera\u021bi acest backup pe server sau computer.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/d365a22846bdc716bcf0adf90cd5c851.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 1. Crearea unui backup \u00een Gaia Portal<\/p>\n<p>2) Apoi, trebuie s\u0103 face\u021bi un snapshot \u00een tab-ul <em>Maintenance \u2192 Snapshot Management \u2192 New. <\/em>Diferen\u021bele dintre backup-uri \u0219i snapshot-uri constau \u00een faptul c\u0103 snapshot-urile con\u021bin mai multe informa\u021bii, inclusiv toate hotfix-urile instalate. Cu toate acestea, este mai bine s\u0103 faci at\u00e2t unul, c\u00e2t \u0219i cel\u0103lalt.<\/p>\n<p>Dac\u0103 serverul de management este instalat ca o ma\u0219in\u0103 virtual\u0103, se recomand\u0103 s\u0103 faci un backup al ma\u0219inii virtuale folosind instrumentele integrate ale hypervisor-ului. Este pur \u0219i simplu mai rapid \u0219i mai fiabil.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/c2bd3da4f9eddcf8524f7006f8e8e37d.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 2. Crearea unui snapshot \u00een Gaia Portal<\/p>\n<p>3) Salva\u021bi configura\u021bia dispozitivului din Gaia Portal. Pute\u021bi s\u0103 face\u021bi un screenshot al tuturor tab-urilor de set\u0103ri disponibile \u00een Gaia Portal sau, din Clish, s\u0103 introduce\u021bi comanda <strong>save configuration<\/strong>. Apoi, urma\u021bi fi\u0219ierul \u0219i desc\u0103rca\u021bi-l pe PC folosind WinSCP sau alt client.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/bcdf28ffb804edd3ece43f3cd0b11ee6.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 3. Salvarea configura\u021biei \u00eentr-un fi\u0219ier text)<\/p>\n<p><strong>Not\u0103<\/strong><em><strong>: <\/strong><\/em>dac\u0103 WinSCP nu se conecteaz\u0103, schimba\u021bi shell-ul utilizatorului \u00een \/bin\/bash fie \u00een interfa\u021ba web la tab-ul Users, fie introduc\u00e2nd comanda<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash<\/strong>.<\/p>\n<p>Actualizarea prin CPUSE<\/p>\n<p>4) Primele 3 pa\u0219i sunt obligatorii pentru orice variant\u0103 de actualizare. Dac\u0103 a\u021bi decis s\u0103 urma\u021bi un drum mai simplu de actualizare, accesa\u021bi tab-ul din interfa\u021ba web <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Major Versions &gt; Check Point R80.40 Gaia Fresh Install and Upgrade. <\/em>Face\u021bi clic dreapta pe aceast\u0103 actualizare \u0219i selecta\u021bi <em>Verifier. <\/em>Procesul de verificare se va desf\u0103\u0219ura timp de c\u00e2teva minute, dup\u0103 care ve\u021bi vedea un mesaj c\u0103 dispozitivul poate fi actualizat. Dac\u0103 vede\u021bi erori, acestea trebuie corectate.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/a02b7b395d395c6eb36e90f8824e516b.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 4. Actualizarea prin CPUSE<\/p>\n<p>5) Actualiza\u021bi la cea mai recent\u0103 versiune a CDT (Central Deployment Tool) &#8212; o utilitate care ruleaz\u0103 pe serverul de management \u0219i permite instalarea actualiz\u0103rilor, pachetelor de actualizare, gestionarea backup-urilor, snapshot-urilor, scripturilor \u0219i multe altele. O versiune \u00eenvechit\u0103 a CDT poate cauza probleme \u00een actualizare. Pute\u021bi desc\u0103rca CDT de la <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal\/role\/supportcenterUser\/page\/default.psml\/media-type\/html?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=104450\"><u>linkul<\/u><\/a><\/noindex>.<\/p>\n<p>6) Dup\u0103 ce a\u021bi plasat arhiva desc\u0103rcat\u0103 pe SMS \u00een orice director prin WinSCP, conecta\u021bi-v\u0103 prin SSH la SMS \u0219i intra\u021bi \u00een modul expert. Reamintesc c\u0103 utilizatorul WinSCP trebuie s\u0103 aib\u0103 shell <strong>\/bin\/bash<\/strong>!<\/p>\n<p>7) Introduce\u021bi comenzile:<strong>&nbsp;<\/strong><\/p>\n<p><em>cd \/somepathtoCDT\/<\/em><\/p>\n<p><em>tar -zxvf .tgz<\/em><\/p>\n<p><em>rpm -Uhv &#8212;force CPcdt-00-00.i386.rpm<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/6c1f64e57f24d9fb6d117fa3a7a09461.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 5. Instalarea Central Deployment Tool (CDT)<\/p>\n<p>8) Pasul urm\u0103tor este instalarea imaginii R80.40. Face\u021bi clic dreapta pe actualizare <em>Download, <\/em>apoi <em>Install.<\/em> Re\u021bine\u021bi c\u0103 actualizarea dureaz\u0103 aproximativ 20-30 de minute, iar serverul de gestionare nu va fi disponibil pentru o anumit\u0103 perioad\u0103. Prin urmare, are sens s\u0103 conveni\u021bi asupra unei feronii de \u00eentre\u021binere.<\/p>\n<p>9) Toate licen\u021bele \u0219i politicile de securitate sunt p\u0103strate, a\u0219a c\u0103 ar trebui s\u0103 desc\u0103rca\u021bi noul <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex>.<\/p>\n<p>10) Conecta\u021bi-v\u0103 la SMS-ul noului SmartConsole \u0219i stabili\u021bi politicile de securitate. Butonul <em>Instalare Politic\u0103<\/em> \u00een col\u021bul din st\u00e2nga sus.<\/p>\n<p>11) SMS-ul dvs. este actualizat, urmeaz\u0103 s\u0103 instala\u021bi cele mai recente hotfix-uri. \u00cen tab-ul <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Hotfixes <\/em>da\u021bi clic dreapta <em>Verifier<\/em>, apoi <em>Instalare Actualizare<\/em>. Dispozitivul se va reporni automat dup\u0103 instalarea actualiz\u0103rii.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/bced9cc3fce6f65835ffdff00a1ccdfb.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 6. Instalarea ultimului hotfix prin CPUSE<\/p>\n<p>Actualizare folosind Migration Tools<\/p>\n<p>4) De asemenea, trebuie s\u0103 actualiza\u021bi la cea mai recent\u0103 versiune a CDT &#8212; punctele 5, 6, 7 din sec\u021biunea <em>\u201eActualizare folosind CPUSE\u201d.<\/em><\/p>\n<p>5) Instala\u021bi pachetul Migration Tools necesar pentru migrarea politicilor de pe serverul de gestionare. Pute\u021bi g\u0103si Migration Tools pentru versiunile: R80.20, R80.20 M1, R80.20 M2, R80.30, R80.40. Desc\u0103rca\u021bi Migration Tools pentru versiunea la care dori\u021bi s\u0103 actualiza\u021bi, <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk135172\"><u>linkul<\/u><\/a><\/noindex> , nu cea pe care o ave\u021bi acum! \u00cen cazul nostru, aceasta este R80.40. <strong>6) Apoi, \u00een interfa\u021ba web a SMS-ului, mergem la tab-ul<\/strong>Upgrades (CPUSE) &gt; Status and Actions &gt; Import Package &gt; Browse &gt; Selecta\u021bi fi\u0219ierul desc\u0103rcat &gt; Importa\u021bi<\/p>\n<p>Figura 7. Importul Migration Tools <em>7) Din modul expert al SMS-ului, verifica\u021bi dac\u0103 pachetul Migration Tools este instalat folosind comanda (output-ul comenzii trebuie s\u0103 corespund\u0103 cu num\u0103rul din numele arhivei Migration Tools):<\/em>.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/b1b1164018a9750bfb952b1b650ea341.png\" style=\"display:block;margin: 0 auto;\" \/>cpprod_util CPPROD_GetValue CPupgrade-tools-R80.40 BuildNumber 1<\/p>\n<p>Figura 8. Verificarea instal\u0103rii Migration Tools<\/p>\n<p><em><strong>8) Accesa\u021bi folderul $FWDIR\/scripts pe serverul de gestionare:<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/1a0e032ec53ee5a05f979637217a9562.png\" style=\"display:block;margin: 0 auto;\" \/>cd $FWDIR\/scripts<\/p>\n<p>9) Rula\u021bi verifier-ul pre-upgrade (script de verificare) folosind comanda (dac\u0103 exist\u0103 erori, corecta\u021bi-le \u00eenainte de pa\u0219ii urm\u0103tori):<\/p>\n<p><em><strong>.\/migrate_server verify -v R80.40<\/strong><\/em><\/p>\n<p>: dac\u0103 vede\u021bi eroarea<\/p>\n<p><em><strong>\u201eFailed to retrieve Upgrade Tools package\u201d<\/strong><\/em><\/p>\n<p><strong>Not\u0103<\/strong>, dar a\u021bi verificat c\u0103 arhiva a fost importat\u0103 cu succes (vezi punctul 4), utiliza\u021bi comanda: <em>.\/migrate_server verify -v R80.40 -skip_upgrade_tools_check<\/em>Figura 9. Rularea scriptului de verificare<\/p>\n<p><em><strong>10) Exporta\u021bi politicile de securitate folosind comanda:<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/a6b29e5fb7b3c183ec3c9fc92c32db6c.png\" style=\"display:block;margin: 0 auto;\" \/>.\/migrate_server export -v R80.40 \/\/.tgz<\/p>\n<p>Figura 10. Exportul politicii de securitate<\/p>\n<p><em><strong>, dar a\u021bi verificat c\u0103 arhiva a fost importat\u0103 cu succes (punctul 7), utiliza\u021bi comanda:<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/1bd0c4604bdcc5640280f1cbed4837b1.png\" style=\"display:block;margin: 0 auto;\" \/>.\/migrate_server export -skip_upgrade_tools_check -v R80.40 \/\/.tgz<\/p>\n<p><strong>Not\u0103<\/strong>, dar a\u021bi verificat c\u0103 arhiva a fost importat\u0103 cu succes (vezi punctul 4), utiliza\u021bi comanda: <em>.\/migrate_server verify -v R80.40 -skip_upgrade_tools_check<\/em>dar a\u021bi verificat c\u0103 arhiva a fost importat\u0103 cu succes (punctul 7), utiliza\u021bi comanda:<\/p>\n<p><em><strong>.\/migrate_server export -skip_upgrade_tools_check -v R80.40 \/\/.tgz<\/strong><\/em><\/p>\n<p>11) Calcula\u021bi suma hash MD5 \u0219i salva\u021bi ie\u0219irea comenzii:<\/p>\n<p><em><strong>md5sum \/\/.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/f0c2e03613eba64d1047011a135db217.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 11. Calcularea sumei hash MD5<\/p>\n<p>12) Folosind WinSCP, muta\u021bi acest fi\u0219ier pe computerul dvs.<\/p>\n<p>13) Introduce\u021bi comanda <strong>df -h <\/strong>\u0219i salva\u021bi propor\u021bia procentual\u0103 a directoarelor, \u00een func\u021bie de spa\u021biul ocupat.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/09d8134e5f5813530b389d36a4f2001c.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 12. Propor\u021bia procentual\u0103 a directoarelor pe SMS<\/p>\n<p>14.1)  <strong>\u00cen cazul \u00een care ave\u021bi un SMS real<\/strong><\/p>\n<p>14.1.1) Folosind <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> se creeaz\u0103 un stick USB de bootare cu imaginea <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>.&nbsp;<\/p>\n<p>14.1.2) Recomand s\u0103 preg\u0103ti\u021bi cel pu\u021bin 2 stick-uri de bootare, deoarece uneori stick-ul nu este citit.&nbsp;<\/p>\n<p>14.1.3) Din contul de administrator al computerului, rula\u021bi<em> ISOmorphic.exe. <\/em>La punctul 1, alege\u021bi imaginea desc\u0103rcat\u0103 Gaia R80.40, iar la punctul 4 stick-ul. Punctele 2 \u0219i 3 nu trebuie modificate. <strong>Figura 13. Crearea unui stick USB de bootare<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/8718bfa85d3a4f0d3aa371b3adcdc064.png\" style=\"display:block;margin: 0 auto;\" \/>14.1.4) Alege\u021bi op\u021biunea<\/p>\n<p>\u201cInstalare automat\u0103 f\u0103r\u0103 confirmare\u201d <em>\u0219i este important s\u0103 specifica\u021bi modelul serverului dvs. de gestionare. \u00cen cazul SMS, ar trebui s\u0103 alege\u021bi linia 3 sau 4. <\/em>Figura 14. Alegerea modelului de dispozitiv pentru crearea stick-ului USB de bootare<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/56f0106357b3d39edd8b7bafa5bb1f80.png\" style=\"display:block;margin: 0 auto;\" \/>14.1.5) Apoi, opri\u021bi appliance-ul, introduce\u021bi stick-ul \u00een portul USB, conecta\u021bi-v\u0103 cu un cablu de consol\u0103 prin portul COM la dispozitiv \u0219i porni\u021bi SMS. Procesul de instalare se desf\u0103\u0219oar\u0103 de la sine. Adresa IP implicit\u0103 este<\/p>\n<p>14.1.5) Apoi opri\u021bi appliance-ul, introduce\u021bi stick-ul USB \u00een portul USB, conecta\u021bi-v\u0103 cu un cablu de consol\u0103 prin portul COM la dispozitiv \u0219i porni\u021bi SMS. Procesul de instalare se desf\u0103\u0219oar\u0103 automat. Adresa IP implicit\u0103 &#8212; <strong>192.168.1.1\/24<\/strong>admin \/ admin <strong>14.1.6) Pasul urm\u0103tor este conectarea la interfa\u021ba web de pe Gaia Portal (adresa implicit\u0103<\/strong>.<\/p>\n<p>), unde urma\u021bi procedura de ini\u021bializare a dispozitivului. \u00cen timpul ini\u021bializ\u0103rii, \u00een principal, ap\u0103sa\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><strong><u>https:\/\/192.168.1.1<\/u><\/strong><\/a><\/noindex>Next, <em>deoarece aproape toate set\u0103rile pot fi modificate ulterior. Totu\u0219i, pute\u021bi schimba imediat adresa IP, set\u0103rile DNS \u0219i hostname-ul. <\/em>\u00cen cazul \u00een care ave\u021bi un SMS virtual<\/p>\n<p>14.2) <strong>14.2.1) \u00cen niciun caz nu trebuie s\u0103 \u0219terge\u021bi vechiul SMS, crea\u021bi o ma\u0219in\u0103 virtual\u0103 nou\u0103 cu acelea\u0219i resurse (CPU, RAM, HDD) cu aceea\u0219i adres\u0103 IP. Apropo, RAM \u0219i HDD pot fi ad\u0103ugate, deoarece versiunea R80.40 este pu\u021bin mai exigent\u0103. Pentru a evita conflictele de adrese IP, opri\u021bi vechiul SMS \u0219i \u00eencepe\u021bi instalarea celui nou.<\/strong><\/p>\n<p>14.2.2) \u00cen timpul instal\u0103rii Gaia, configura\u021bi adresa IP actual\u0103 \u0219i aloca\u021bi pentru director<\/p>\n<p>o cantitate adecvat\u0103 de spa\u021biu. Propor\u021bia procentual\u0103 a directoarelor ar trebui s\u0103 r\u0103m\u00e2n\u0103 aproximativ <strong>\/root<\/strong> salvat\u0103 <strong>, folosi\u021bi ie\u0219irea<\/strong>15) La alegerea tipului de instalare <strong>df -h<\/strong>.<\/p>\n<p>\u201cInstallation Type\u201d <em>\u201eTip de instalare\u201d <\/em>Alege\u021bi prima op\u021biune, deoarece cel mai probabil nu ave\u021bi MDS (Multi-Domain Server). Dac\u0103 ave\u021bi MDS, \u00eenseamn\u0103 c\u0103 a\u021bi gestionat mai multe domenii sub diferite entit\u0103\u021bi SMS simultan. \u00cen acest caz, ar trebui s\u0103 selecta\u021bi a doua op\u021biune.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/4f04ee96ab5b888f5187de677255af90.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 15. Alegerea tipului de instalare Gaia<\/p>\n<p>16) Cel mai important aspect, care nu poate fi corectat f\u0103r\u0103 reinstalare &#8212; alegerea entit\u0103\u021bii. Trebuie s\u0103 selecta\u021bi <em><strong>Managementul Securit\u0103\u021bii<\/strong><\/em> \u0219i ap\u0103sa\u021bi <em>Urm\u0103torul. <\/em>Apoi, totul r\u0103m\u00e2ne implicit.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/8a9f13889696bf7c95d50a6580c62722.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 16. Alegerea tipului de entitate \u00een timpul instal\u0103rii Gaia<\/p>\n<p>17) Odat\u0103 ce dispozitivul a fost repornit, conecta\u021bi-v\u0103 la interfa\u021ba web la <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\"><u>https:\/\/192.168.1.1<\/u><\/a><\/noindex> sau la o alt\u0103 adres\u0103 IP, dac\u0103 a\u021bi schimbat-o.<\/p>\n<p>18)&nbsp;Transfera\u021bi set\u0103rile din capturile de ecran \u00een toate tab-urile Gaia Portal, \u00een care a fost efectuat\u0103 vreo configurare sau rula\u021bi comanda din clish <strong>load configuration .txt<\/strong>. Acest fi\u0219ier de configurare trebuie s\u0103 fie mai \u00eent\u00e2i \u00eenc\u0103rcat pe SMS.<\/p>\n<p><strong>Not\u0103<\/strong><em><strong>: <\/strong><\/em>av\u00e2nd \u00een vedere c\u0103 sistemul de operare este nou, WinSCP nu va permite conectarea ca admin, schimba\u021bi shell-ul utilizatorului la \/bin\/bash fie \u00een interfa\u021ba web la tab-ul Users, fie introduc\u00e2nd comanda<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>sau crea\u021bi un utilizator nou.<\/p>\n<p>19) Transfera\u021bi \u00een orice director fi\u0219ierul cu politicile exportate de pe serverul de management vechi. Apoi, accesa\u021bi consola \u00een modul expert \u0219i verifica\u021bi dac\u0103 suma hash MD5 se potrive\u0219te cu cea anterioar\u0103. \u00cen caz contrar, exportul trebuie realizat din nou:<\/p>\n<p><em><strong>md5sum<\/strong> <strong>\/&lt;Full Path&gt;\/&lt;Name of Exported File&gt;.tgz<\/strong><\/em><\/p>\n<p>20) Repeta\u021bi punctul 6 \u0219i instala\u021bi Upgrade Tools pe noul SMS \u00een Gaia Portal la tab-ul <em>Upgrades (CPUSE) &gt; Status and Actions.<\/em><\/p>\n<p>21) Introduce\u021bi comanda \u00een modul expert:<\/p>\n<p><em><strong>.\/migrate_server import -v R80.40 -skip_upgrade_tools_check \/\/.tgz<\/strong><\/em><\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/9eab781ee0bd7f589859ff7360da35e7.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 17. Importul politicii de securitate pe noul SMS<\/p>\n<p>22) Activa\u021bi serviciile cu comanda <strong>cpstart<\/strong>.<\/p>\n<p>23) Desc\u0103rca\u021bi noul <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> \u0219i conecta\u021bi-v\u0103 la serverul de management. Accesa\u021bi <em>Menu &gt; Manage Licenses and Packages (SmartUpdate)<\/em> \u0219i verifica\u021bi dac\u0103 v-a r\u0103mas licen\u021ba. <\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/ab3a9b5ea4a778f7430861ac99de2ead.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 18. Verificarea licen\u021belor instalate<\/p>\n<p>24) Stabili\u021bi politica de securitate pe gateway sau cluster &#8212; <em>Instalare Politic\u0103<\/em>.<\/p>\n<h2>Actualizarea Security Gateway (SG)<\/h2>\n<p>Gateway-ul de securitate poate fi actualizat prin CPUSE, la fel ca \u0219i serverul de management, sau reinstalat &#8212; <strong>fresh install<\/strong>. Din experien\u021ba mea, \u00een 99% din cazuri, toat\u0103 lumea reinstaleaz\u0103 Security Gateway deoarece dureaz\u0103 practic aceea\u0219i perioad\u0103 de timp ca \u0219i actualizarea prin CPUSE, dar ob\u021bine\u021bi un sistem de operare actualizat, curat, f\u0103r\u0103 erori.<\/p>\n<p>\u00cen mod similar cu SMS, mai \u00eent\u00e2i trebuie s\u0103 crea\u021bi un backup \u0219i un snapshot \u0219i s\u0103 salva\u021bi set\u0103rile din Gaia Portal. Consulta\u021bi punctele 1, 2 \u0219i 3 din sec\u021biune. <em>&#171;Actualizare Security Management Server&#187;<\/em>.<\/p>\n<p>Actualizarea prin CPUSE<\/p>\n<p>Actualizarea Gateway-ului de Securitate prin CPUSE se face exact la fel ca \u0219i actualizarea Serverului de Management al Securit\u0103\u021bii, a\u0219a c\u0103 v\u0103 rug\u0103m s\u0103 v\u0103 \u00eentoarce\u021bi la \u00eenceputul articolului.<\/p>\n<p>Un aspect important: actualizarea SG necesit\u0103 <strong>repornire<\/strong>! De aceea, efectua\u021bi actualizarea \u00eentr-o fereastr\u0103 de \u00eentre\u021binere. Dac\u0103 ave\u021bi un cluster, actualiza\u021bi mai \u00eent\u00e2i nodul pasiv, apoi schimba\u021bi rolurile \u0219i actualiza\u021bi cel\u0103lalt nod. \u00cen cazul unui cluster, feron\u021bele de \u00eentre\u021binere pot fi evitate.<\/p>\n<p>Instalarea unei noi versiuni a sistemului de operare pe Gateway-ul de Securitate<\/p>\n<p><strong>1.1) \u00cen cazul \u00een care ave\u021bi un SG real<\/strong><\/p>\n<p>1.1.1) Folosind <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/DSv8P5CVxipSrw\"><u>Isomorphic Tool<\/u><\/a><\/noindex> se creeaz\u0103 un stick USB de bootare cu imaginea <noindex><a rel=\"nofollow\" href=\"https:\/\/yadi.sk\/d\/f2B0zsgTLJi4Yw\"><u>Gaia R80.40<\/u><\/a><\/noindex>. Imaginea este aceea\u0219i ca pe SMS, dar procedura de creare a unei unit\u0103\u021bi bootabile arat\u0103 un pic diferit.<\/p>\n<p>1.1.2) V\u0103 recomand s\u0103 preg\u0103ti\u021bi minimum 2 unit\u0103\u021bi bootabile, deoarece uneori unitatea nu este citit\u0103.&nbsp;<\/p>\n<p>1.1.3) Din partea administratorului, rula\u021bi<em> ISOmorphic.exe. <\/em>La punctul 1, alege\u021bi imaginea desc\u0103rcat\u0103 Gaia R80.40, iar la punctul 4 stick-ul. Punctele 2 \u0219i 3 nu trebuie modificate. <strong>Figura 13. Crearea unui stick USB de bootare<\/strong>!<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/526c027ff55a2b9e47b53940583d9e81.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 19. Crearea unei unit\u0103\u021bi bootabile<\/p>\n<p>1.1.4) Alege\u021bi op\u021biunea <em>\u201eInstala\u021bi automat f\u0103r\u0103 confirmare\u201c, <\/em>\u0219i este important s\u0103 specifica\u021bi modelul gateway-ului de securitate &#8212; linia 2 sau 3. Dac\u0103 este un sandbox fizic (SandBlast Appliance), atunci alegem linia 5.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/2f3a348bf2875a82cb47183527fd0fe2.png\" style=\"display:block;margin: 0 auto;\" \/>Figura 20. Selectarea modelului dispozitivului pentru crearea unit\u0103\u021bii bootabile<\/p>\n<p>1.1.5) Apoi opri\u021bi appliance-ul, introduce\u021bi stick-ul USB \u00een portul USB, conecta\u021bi-v\u0103 cu un cablu de consol\u0103 prin portul COM la dispozitiv \u0219i porni\u021bi gateway-ul. Procesul de instalare se desf\u0103\u0219oar\u0103 automat. Adresa IP implicit\u0103 &#8212; <strong>192.168.1.1\/24<\/strong>admin \/ admin <strong>14.1.6) Pasul urm\u0103tor este conectarea la interfa\u021ba web de pe Gaia Portal (adresa implicit\u0103<\/strong>. \u00cen primul r\u00e2nd, trebuie s\u0103 actualiza\u021bi <strong>nodul pasiv<\/strong>, apoi s\u0103 aplica\u021bi politica pe acesta, schimba\u021bi rolurile \u0219i apoi s\u0103 actualiza\u021bi cel\u0103lalt nod. Este posibil s\u0103 fie necesar un interval de \u00eentre\u021binere.<\/p>\n<p>1.1.6) Urm\u0103torul pas este conectarea la interfa\u021ba web de pe Gaia Portal, unde va trebui s\u0103 trece\u021bi prin prima ini\u021bializare a dispozitivului. \u00cen timpul ini\u021bializ\u0103rii, trebuie s\u0103 ap\u0103sa\u021bi \u00een principal <em>deoarece aproape toate set\u0103rile pot fi modificate ulterior. Totu\u0219i, pute\u021bi schimba imediat adresa IP, set\u0103rile DNS \u0219i hostname-ul. <\/em>\u00cen cazul \u00een care ave\u021bi un SMS virtual<\/p>\n<p><strong>1.2) \u00cen cazul \u00een care ave\u021bi un SG virtual<\/strong><\/p>\n<p>1.2.1) Crea\u021bi o nou\u0103 ma\u0219in\u0103 virtual\u0103 cu acelea\u0219i resurse (CPU, RAM, HDD) sau mai multe, deoarece versiunea R80.40 este pu\u021bin mai exigent\u0103. Pentru a evita conflictele de adrese IP, dezactiva\u021bi vechiul gateway \u0219i \u00eencepe\u021bi instalarea noului cu aceea\u0219i adres\u0103 IP. Vechiul SG poate fi \u0219ters f\u0103r\u0103 probleme, deoarece nu con\u021bine nimic valoros, \u00eentruc\u00e2t tot ceea ce este esen\u021bial \u2014 politica de securitate \u2014 se afl\u0103 pe serverul de management.<\/p>\n<p>1.2.2) \u00cen timpul instal\u0103rii sistemului de operare, configura\u021bi adresa IP actual\u0103 \u0219i aloca\u021bi pentru director <strong>\/root<\/strong> o cantitate adecvat\u0103 de spa\u021biu.<\/p>\n<p>3) Conecta\u021bi-v\u0103 prin portul HTTPS la gateway \u0219i \u00eencepe\u021bi procesul de ini\u021bializare. La momentul alegerii tipului de instalare <em>\u201eTip de instalare\u201d <\/em>selecta\u021bi prima op\u021biune \u2014 Security Gateway \u0219i\/sau Security Management.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/d775729e7a6890e97621d2d56e993ce7.png\" style=\"display:block;margin: 0 auto;\" \/>Figur\u0103 21. Alegerea tipului de instalare Gaia<\/p>\n<p>4) Cel mai important aspect \u2014 alegerea entit\u0103\u021bii (Produse). Trebuie s\u0103 selecta\u021bi <em><strong>Security Gateway<\/strong><\/em> \u0219i, dac\u0103 ave\u021bi un cluster, bifa\u021bi <em><strong>\u201eUnit is a part of a cluster, type: ClusterXL\u201d<\/strong><\/em>. Dac\u0103 ave\u021bi un cluster VRRP, selecta\u021bi acest tip, dar este pu\u021bin probabil.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/822897faf0380d1bcb5b6c1412aae51a.png\" style=\"display:block;margin: 0 auto;\" \/>Figur\u0103 22. Alegerea tipului de entitate la instalarea Gaia<\/p>\n<p>5) \u00cen pasul urm\u0103tor, seta\u021bi o parol\u0103 unic\u0103 SIC pentru a stabili \u00eencrederea cu serverul de management. Cu ajutorul acestei parole se genereaz\u0103 un certificat, \u0219i printr-un canal criptat serverul de management va comunica cu gateway-ul. Bifa\u021bi <em>\u201eConnect to your Management as a Service\u201d <\/em>dac\u0103 serverul de management este \u00een cloud. Recent, am scris despre acest lucru <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517370\/\"><u>articol<\/u><\/a><\/noindex> \u0219i despre c\u00e2t de convenabil \u0219i simplu este managementul serverului \u00een cloud.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/eccc5423cafd0356eb1dafbd560eb150.png\" style=\"display:block;margin: 0 auto;\" \/>Figur\u0103 23. Crearea SIC <\/p>\n<p>6) \u00cencepe\u021bi procesul de ini\u021bializare \u00een urm\u0103torul tab. Odat\u0103 ce dispozitivul se reporne\u0219te, conecta\u021bi-v\u0103 la interfa\u021ba web \u0219i transfera\u021bi set\u0103rile din capturile de ecran \u00een toate tab-urile Gaia Portal, \u00een care s-a configurat ceva sau din clish executa\u021bi comanda <strong>load configuration .txt<\/strong>. Acest fi\u0219ier de configurare trebuie s\u0103 fie mai \u00eent\u00e2i \u00eenc\u0103rcat pe gateway-ul de securitate.<\/p>\n<p><strong>Not\u0103<\/strong><em><strong>: <\/strong><\/em>av\u00e2nd \u00een vedere c\u0103 sistemul de operare este nou, WinSCP nu va permite conectarea ca admin, schimba\u021bi shell-ul utilizatorului la \/bin\/bash fie \u00een interfa\u021ba web la tab-ul Users, fie introduc\u00e2nd comanda<em><strong> <\/strong><\/em><strong>chsh \u2013s \/bin\/bash <\/strong>sau crea\u021bi un nou utilizator cu acest shell.<\/p>\n<p>7) Deschide\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=108335\"><u>SmartConsole R80.40<\/u><\/a><\/noindex> \u0219i accesa\u021bi obiectul gateway-ului de securitate pe care tocmai l-a\u021bi reinstalat. Accesa\u021bi tab-ul<em> General Properties &gt; Communication &gt; Reset SIC <\/em>\u0219i introduce\u021bi parola setat\u0103 la punctul 5.<\/p>\n<p><img decoding=\"async\" alt=\"Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40\" src=\"\/wp-content\/uploads\/2020\/09\/f0b755e9e09bb07478cd52ce26afbd8f.png\" style=\"display:block;margin: 0 auto;\" \/>Figur\u0103 24. Stabilirea \u00eencrederii cu noul gateway de securitate<\/p>\n<p>8) Versiunea Gaia a obiectului ar trebui s\u0103 se schimbe, dac\u0103 nu se schimb\u0103, schimba\u021bi-o manual. Apoi, aplica\u021bi o politic\u0103 pe gateway.<\/p>\n<p>9) \u00cen Gaia Portal accesa\u021bi tab-ul <em>Upgrades (CPUSE) &gt; Status and Actions &gt; Hotfixes <\/em>\u0219i instala\u021bi cel mai recent hotfix. Dispozitivul va trece la <strong>repornire <\/strong>\u00een timpul instal\u0103rii!<\/p>\n<p>10) \u00cen cazul unui cluster, schimba\u021bi rolurile nodurilor \u0219i urma\u021bi aceia\u0219i pa\u0219i pentru cel\u0103lalt nod.<\/p>\n<h2>Concluzie<\/h2>\n<p>Am \u00eencercat s\u0103 ofer un ghid c\u00e2t mai clar \u0219i cuprinz\u0103tor pentru actualizarea de la versiunea R80.20\/R80.30 la actuala R80.40, deoarece multe s-au schimbat. Versiunea <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517378\/\"><u>Gaia R81<\/u><\/a><\/noindex> a fost deja lansat\u0103 \u00een modul demo, totu\u0219i procedura de actualizare r\u0103m\u00e2ne mai mult sau mai pu\u021bin identic\u0103. Urm\u00e2nd ghidul oficial <noindex><a rel=\"nofollow\" href=\"https:\/\/sc1.checkpoint.com\/documents\/R80.40\/WebAdminGuides\/EN\/CP_R80.40_Installation_and_Upgrade_Guide\/Content\/Topics-IUG\/Upgrading-Management-Servers-and-Log-Servers.htm?tocpath=Upgrade%20of%20Security%20Management%20Servers%20and%20Log%20Servers%7C_____0\"><u>ve\u021bi reu\u0219i s\u0103 \u00een\u021belege\u021bi toate detaliile.<\/u><\/a><\/noindex> de la Check Point.<\/p>\n<p>Pentru orice \u00eentreb\u0103ri, ne pute\u021bi contacta. Suntem bucuro\u0219i s\u0103 ajut\u0103m cu cele mai complicate actualiz\u0103ri \u0219i cazuri \u00een cadrul asisten\u021bei noastre tehnice. <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>CPSupport<\/u><\/a><\/noindex>. De asemenea, pe site-ul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\"><u>site<\/u><\/a><\/noindex> exist\u0103 posibilitatea de a comanda un audit al set\u0103rilor Check Point sau de a solicita o evaluare gratuit\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/\"><u>o aplica\u021bie<\/u><\/a><\/noindex> pentru un caz tehnic.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\"><strong><u>O selec\u021bie mare de materiale despre Check Point de la TS Solution<\/u><\/strong><\/a><\/noindex>. Urm\u0103ri\u021bi actualiz\u0103rile (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/517716\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c Check Point \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0441\u0442\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 R77.30 \u0434\u043e R80.10. \u041a \u0441\u043b\u043e\u0432\u0443, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2020-\u0433\u043e R77.30 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0424\u0421\u0422\u042d\u041a. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u0430 2 \u0433\u043e\u0434\u0430 \u0432 Check Point \u043c\u043d\u043e\u0433\u043e\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e\u0441\u044c. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93434,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-07T05:42:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Procedura de actualizare Check Point de la R80.20\/R80.30 la R80.40 | ProHoster","description":"Cu mai bine de doi ani \u00een urm\u0103, am.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Check Point \u0441 R80.20\/R80.30 \u0434\u043e R80.40 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/proczedura-obnovleniya-check-point-s-r80-20-r80-30-do-r80-40","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-07T05:42:37+00:00","article:modified_time":"2020-09-07T05:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93433","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:47:32","updated":"2022-10-02 09:45:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=93433"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93433\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/93434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=93433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=93433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=93433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}