{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Za\u010dnite s R80.20. Licencovanie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nPozdravujem v\u00e1s, priatelia! A kone\u010dne sme sa dostali k poslednej, z\u00e1vere\u010dnej lekcii Check Point Getting Started<\/b>. Dnes sa budeme rozpr\u00e1va\u0165 o ve\u013emi d\u00f4le\u017eitej t\u00e9me \u2014 Licencovanie<\/b>. Mus\u00edm v\u00e1s upozorni\u0165, \u017ee t\u00e1to lekcia nie je vy\u010derp\u00e1vaj\u00facim sprievodcom v\u00fdberom hardv\u00e9ru alebo licenci\u00ed. Toto je len stru\u010dn\u00e9 zhrnutie k\u013e\u00fa\u010dov\u00fdch bodov, ktor\u00e9 by mal pozna\u0165 ka\u017ed\u00fd administr\u00e1tor Check Point. Ak sa naozaj zam\u00fd\u0161\u013eate nad v\u00fdberom licencie alebo zariadenia, lep\u0161ie je oslovi\u0165 profesion\u00e1lov, t.j. n\u00e1s :). Existuje ve\u013ea \u00faskalia, o ktor\u00fdch je ve\u013emi \u0165a\u017ek\u00e9 hovori\u0165 v r\u00e1mci kurzu, a aj zapam\u00e4ta\u0165 si to v\u0161etko naraz nie je jednoduch\u00e9.
\nNa\u0161a lekcia bude \u00faplne teoretick\u00e1, tak\u017ee si m\u00f4\u017eete vypn\u00fa\u0165 svoje testovacie servery a relaxova\u0165. Na konci \u010dl\u00e1nku n\u00e1jdete video lekciu, kde podrobnej\u0161ie vysvet\u013eujem v\u0161etko<\/a><\/noindex><\/p>\n

Licencovanie br\u00e1ny<\/h3>\n

\nZa\u010dneme popisom licen\u010dn\u00fdch \u0161pecifik\u00e1ci\u00ed pre bezpe\u010dnostn\u00e9 br\u00e1ny. T\u00fdka sa to ako hardv\u00e9rnych zariaden\u00ed, tak aj virtu\u00e1lnych strojov. Predpokladajme, \u017ee ste sa rozhodli zak\u00fapi\u0165 br\u00e1nu. K\u00fapi\u0165 len hardv\u00e9r alebo virtu\u00e1l bez \u201epredplatn\u00e9ho\u201c \u2014 je nemo\u017en\u00e9! Existuj\u00fa tri mo\u017enosti predplatn\u00e9ho:<\/p>\n

\"13.
\n
\nA teraz prv\u00e1 zauj\u00edmav\u00e1 vlastnos\u0165! M\u00f4\u017eete zak\u00fapi\u0165 zariadenie alebo virtu\u00e1l len s predplaten\u00edm NGTP alebo NGTX. Ale ke\u010f sa rozhodnete pred\u013a\u017ei\u0165 svoje predplatn\u00e9, u\u017e si m\u00f4\u017eete vybra\u0165 bal\u00edk NGFW, ak nepotrebujete blade AV, AB, URL, AS, TE a TX. To je len tak\u00fd detail. Samotn\u00e9 predplatn\u00e9 si m\u00f4\u017eete zak\u00fapi\u0165 na jeden, dva alebo tri roky.<\/p>\n

M\u00f4\u017eem predpoklada\u0165 va\u0161u prv\u00fa ot\u00e1zku! \u201c\u010co sa stane, ak predplatn\u00e9 nepred\u013a\u017eite?<\/b>\u201d. \u0160peci\u00e1lne som vyzna\u010dil zelenou farbou tie blade, ktor\u00e9 bud\u00fa fungova\u0165 V\u017dDY a BEZ pred\u013a\u017een\u00ed. Takzvan\u00e9 perpetu\u00e1lne blade. Ostatn\u00e9 blade, ktor\u00e9 vy\u017eaduj\u00fa neust\u00e1lu aktualiz\u00e1ciu, jednoducho prestan\u00fa fungova\u0165. No, na IPS ostan\u00fa fungova\u0165 k\u013e\u00fa\u010dov\u00e9 signat\u00fary (ale je ich ve\u013emi m\u00e1lo). Toto plat\u00ed ako pre hardv\u00e9r, tak pre virtu\u00e1lne stroje, t.j. vSec.<\/p>\n

Osobitne som vy\u010dlenil tri blade, ktor\u00e9 nie s\u00fa s\u00fa\u010das\u0165ou \u017eiadneho bal\u00edka, a to: DLP, MAB a Capsule.<\/p>\n

Taktie\u017e si pam\u00e4tajte, \u017ee ak kupujete klastrov\u00e9 rie\u0161enie, ako druh\u00e9 zariadenie si vyberte model so suffixom HA (t.j. vysok\u00e1 dostupnos\u0165). Na obr\u00e1zku je pr\u00edklad pre br\u00e1nu 5400. To bolo o br\u00e1nach. Teraz k serveru spr\u00e1vy.<\/p>\n

Licencovanie servera spr\u00e1vy<\/h3>\n

\nAko sme u\u017e spom\u00ednali v prv\u00fdch lekci\u00e1ch, existuj\u00fa dva scen\u00e1re implement\u00e1cie Check Point: Samostatn\u00fd (ke\u010f je br\u00e1na a mana\u017ement na jednom zariaden\u00ed) a Distribuovan\u00fd (ke\u010f je mana\u017e\u00e9rsky server presunut\u00fd na samostatn\u00e9 zariadenie). Mo\u017enosti sa v\u0161ak t\u00fdmto nekon\u010dia. Po\u010fme si predstavi\u0165 tri typick\u00e9 scen\u00e1re nasadenia mana\u017e\u00e9rskeho servera:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. K\u00fapa vyhraden\u00e9ho NGSM<\/b>. Najpopul\u00e1rnej\u0161ia mo\u017enos\u0165. Vyber\u00e1te bu\u010f hardv\u00e9r Smart-1, alebo virtualiz\u00e1ciu. Samozrejme, \u017ee vyber\u00e1te na z\u00e1klade toho, ko\u013eko br\u00e1n pl\u00e1nujete spravova\u0165, 5, 10, 25 at\u010f. Nasaden\u00edm tohto zariadenia m\u00f4\u017eete vyu\u017e\u00edva\u0165 4 k\u013e\u00fa\u010dov\u00e9 bledy spr\u00e1vy servera: NPM (t.j. spr\u00e1va polit\u00edk), Logging and Status (t.j. logovanie), Smart Event (SIEM od Check Point, ktor\u00fd n\u00e1m poskytuje v\u0161etky reporty) a Compliance (toto je hodnotenie kvality nastaven\u00ed, bu\u010f z h\u013eadiska s\u00faladu s nejak\u00fdmi regul\u00e1tormi, ako je PCI DSS, alebo len najlep\u0161ie praxie). U\u017e tu vid\u00edme, \u017ee bledy NPM a LS s\u00fa trval\u00e9 bledy, t.j. bud\u00fa fungova\u0165 aj bez pred\u013a\u017eenia predplatn\u00e9ho, ale bledy Smart Event a Compliance s\u00fa v bal\u00edku len na prv\u00fd rok! N\u00e1sledne ich je potrebn\u00e9 pred\u013a\u017ei\u0165 za osobitn\u00e9 poplatky. Toto je d\u00f4le\u017eit\u00fd bod, nezab\u00fadajte na to. A ak bez bledy Compliance sa e\u0161te d\u00e1 \u017ei\u0165, bledy Smart Event s\u00fa ur\u010dite potrebn\u00e9 pre ka\u017ed\u00e9ho.<\/li>\n
  2. K\u00fapa vyhraden\u00e9ho Event Management servera<\/b> V R\u00c1MCI u\u017e existuj\u00faceho serveru<\/a> mana\u017ementu NGSM. Pre\u010do je to potrebn\u00e9? Faktom je, \u017ee funkcia logovania a najm\u00e4 Smart Event \u201eberie\u201d pomerne zna\u010dn\u00e9 syst\u00e9mov\u00e9 zdroje. A ak je logov dos\u0165 ve\u013ea, m\u00f4\u017ee to vies\u0165 k \u201ezadr\u017eiavaniu\u201d na serveri<\/a> \u0159\u00edzen\u00ed. Preto sa \u010dasto praktizuje presunutie tejto funkcie na samostatn\u00e9 zariadenie, hardv\u00e9r Smart-1 alebo op\u00e4\u0165 virtualiz\u00e1ciu. Ve\u013ek\u00e9 integr\u00e1cie s ve\u013ek\u00fdm mno\u017estvom logov takmer v\u017edy vy\u017eaduj\u00fa vyhraden\u00fd server pre Smart Event. M\u00f4\u017ee tie\u017e prij\u00edma\u0165 logy. T\u00fdmto sp\u00f4sobom v\u00e1\u0161 mana\u017e\u00e9rsky server bude plni\u0165 iba funkcie mana\u017ementu. To v\u00fdrazne zvy\u0161uje stabilitu a reak\u010dn\u00fd \u010das syst\u00e9mu. Ako si m\u00f4\u017eete v\u0161imn\u00fa\u0165, pri k\u00fape vyhraden\u00e9ho Smart Event servera dost\u00e1vate tieto dva bledy na trval\u00e9 pou\u017e\u00edvanie, aj bez pred\u013a\u017eenia. Po horizonte 3-4 rokov to bude dokonca ekonomicky v\u00fdhodnej\u0161ie, ako ka\u017ed\u00fd rok kupova\u0165 pred\u013a\u017eenia Smart Event pre be\u017en\u00fd NGSM server.<\/li>\n
  3. Vyhraden\u00fd Log management server<\/b>, ktor\u00fd ide v doplnku k NGSM a Smart Event serverom. Mysl\u00edm, \u017ee zmysel je jasn\u00fd. Pri VE\u013dMI ve\u013ekom mno\u017estve logov m\u00f4\u017eeme presun\u00fa\u0165 funkciu logovania na samostatn\u00fd server. Vyhraden\u00fd Log server m\u00e1 tie\u017e trval\u00fa licenciu a nevy\u017eaduje obnovenie.<\/li>\n<\/ol>\n

    <\/p>\n

    Video lekcia<\/h3>\n

    \nTu n\u00e1jdete \u010fal\u0161ie inform\u00e1cie o spr\u00e1ve licenci\u00ed a technickej podpore Check Point:
    \n

    \r\n \"Prehrajte\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Zdroj:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Za\u010d\u00edname R80.20. Licencovanie | ProHoster","description":"Ahojte, priatelia!","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}