{"id":92931,"date":"2020-09-01T13:43:08","date_gmt":"2020-09-01T11:43:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings"},"modified":"2020-09-01T13:43:08","modified_gmt":"2020-09-01T11:43:08","slug":"4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","title":{"rendered":"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/a0d4603cacecf98f5312fe32383bf08c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVitajte pri \u0161tvrtej \u010dasti cyklu o rie\u0161en\u00ed Check Point SandBlast Agent Management Platform. V predch\u00e1dzaj\u00facich \u010dl\u00e1nkoch (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511768\/\">prv\u00fd<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">druh\u00e1<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/513254\/\">tretia<\/a><\/noindex>) sme podrobne op\u00edsali rozhranie a mo\u017enosti webovej konzoly pre spr\u00e1vu, ako aj presk\u00famali politiku prevencie hrozieb a testovali jej schopnosti proti r\u00f4znym hrozb\u00e1m. Tento \u010dl\u00e1nok je venovan\u00fd druh\u00e9mu komponentu zabezpe\u010denia \u2014 politike ochrany \u00fadajov, ktor\u00e1 zodpoved\u00e1 za ochranu d\u00e1t ulo\u017een\u00fdch na pou\u017e\u00edvate\u013eskom zariaden\u00ed. V r\u00e1mci tohto \u010dl\u00e1nku si tie\u017e prejdeme sekcie nasadenia a glob\u00e1lnych nastaven\u00ed politiky.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Politika ochrany \u00fadajov<\/h2>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/xg\/gn\/p9\/xggnp9rvyyf5ovui9vdxv0dpmuy.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/d3f6f895f6633034ca466ca9f54da3e3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Politika ochrany \u00fadajov umo\u017e\u0148uje nastavi\u0165 pr\u00edstup k dat\u00e1m ulo\u017een\u00fdm na pracovnom zariaden\u00ed iba autorizovan\u00fdm pou\u017e\u00edvate\u013eom, pri\u010dom vyu\u017e\u00edva funkcie \u00fapln\u00e9ho \u0161ifrovania disku (Full Disk Encryption) a ochrany procesu spustenia (Boot Protection). V s\u00fa\u010dasnosti s\u00fa podporovan\u00e9 nasleduj\u00face mo\u017enosti nastavenia \u0161ifrovania disku: pre Windows \u2014 Check Point Encryption alebo BitLocker Encryption, pre MacOS \u2014 File Vault. Pozrime sa podrobnej\u0161ie na mo\u017enosti a nastavenia ka\u017ed\u00e9ho z t\u00fdchto variantov.<\/p>\n<h4>Check Point Encryption<\/h4>\n<p>\nCheck Point Encryption je \u0161tandardn\u00e1 met\u00f3da \u0161ifrovania disku v politike ochrany \u00fadajov a zabezpe\u010duje \u0161ifrovanie v\u0161etk\u00fdch syst\u00e9mov\u00fdch s\u00faborov (do\u010dasn\u00fdch, syst\u00e9mov\u00fdch, odstr\u00e1nen\u00fdch) na pozad\u00ed bez ovplyvnenia funk\u010dnosti pou\u017e\u00edvate\u013esk\u00e9ho zariadenia. Po za\u0161ifrovan\u00ed je disk nedostupn\u00fd pre neautorizovan\u00fdch pou\u017e\u00edvate\u013eov.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hv\/lr\/du\/hvlrdum9mu88ub0clodrkc3ny5i.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/8176a8f0ca55c05ac6dadff33534008b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Hlavn\u00fdm nastaven\u00edm pre Check Point Encryption je \"Enable Pre-boot\", ktor\u00e9 vy\u017eaduje autentifik\u00e1ciu pou\u017e\u00edvate\u013eov pred zaveden\u00edm opera\u010dn\u00e9ho syst\u00e9mu. T\u00e1to mo\u017enos\u0165 sa odpor\u00fa\u010da pou\u017e\u00edva\u0165, preto\u017ee zabra\u0148uje mo\u017en\u00e9mu obch\u00e1dzaniu autentifik\u00e1cie na \u00farovni opera\u010dn\u00e9ho syst\u00e9mu. Taktie\u017e je tu mo\u017enos\u0165 nastavi\u0165 parametre do\u010dasn\u00e9ho obch\u00e1dzania pre funkciu Pre-boot:<\/p>\n<ul>\n<li><i>Allow OS login after temporary bypass<\/i> \u2014 vypnutie funkcie Pre-boot a prechod k autentifik\u00e1cii v opera\u010dnom syst\u00e9me;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow pre-boot bypass (Wake On LAN \u2013 WOL)<\/i> \u2014 vypnutie funkcie pre-boot na po\u010d\u00edta\u010doch, ktor\u00e9 s\u00fa pripojen\u00e9 k spr\u00e1vcovsk\u00e9mu serveru cez Ethernet; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow bypass script<\/i> \u2014 umo\u017e\u0148uje nastavi\u0165 obch\u00e1dzanie funkcie Pre-boot s uveden\u00edm \u010dasu a d\u00e1tumu za\u010datia \u010dinnosti skriptu a parametrov ukon\u010denia obch\u00e1dzania Pre-boot; <\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Allow LAN bypass<\/i> \u2014 vypnutie funkcie pre-boot pri pripojen\u00ed k lok\u00e1lnej sieti.<\/li>\n<\/ul>\n<p>\nVy\u0161\u0161ie uveden\u00e9 mo\u017enosti do\u010dasn\u00e9ho obch\u00e1dzania funkcie Pre-boot sa neodpor\u00fa\u010daj\u00fa pou\u017e\u00edva\u0165 bez jasn\u00fdch d\u00f4vodov (napr\u00edklad technick\u00e9 pr\u00e1ce alebo diagnostika probl\u00e9mov) a najlep\u0161\u00edm rie\u0161en\u00edm z h\u013eadiska bezpe\u010dnosti je zapnutie funkcie Pre-boot bez udania do\u010dasn\u00fdch pravidiel obch\u00e1dzania. V pr\u00edpade potreby obch\u00e1dza\u0165 Pre-boot sa odpor\u00fa\u010da nastavi\u0165 minim\u00e1lne potrebn\u00e9 \u010dasov\u00e9 r\u00e1mce v parametroch do\u010dasn\u00e9ho obch\u00e1dzania, aby nedo\u0161lo k zn\u00ed\u017eeniu \u00farovne ochrany na dlh\u00fd \u010das.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/js\/1i\/dh\/js1idhttoiq0eikit7afjtegxiy.gif\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/689919312946d768721d4638140aa337.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Tie\u017e pri pou\u017e\u00edvan\u00ed Check Point Encryption existuje mo\u017enos\u0165 nastavova\u0165 roz\u0161\u00edren\u00e9 nastavenia politiky Data Protection, napr\u00edklad flexibilnej\u0161ie konfigurova\u0165 parametre \u0161ifrovania, nastavova\u0165 r\u00f4zne aspekty funkcie Pre-boot a autentifik\u00e1cie Windows.<\/p>\n<h4>BitLocker Encryption<\/h4>\n<p>\nBitLocker je s\u00fa\u010das\u0165ou opera\u010dn\u00e9ho syst\u00e9mu Windows a umo\u017e\u0148uje \u0161ifrova\u0165 pevn\u00e9 disky a prenosn\u00e9 m\u00e9di\u00e1. Check Point BitLocker Management je komponent slu\u017eieb Windows, ktor\u00fd sa automaticky sp\u00fa\u0161\u0165a spolu s klientom SandBlast Agent a vyu\u017e\u00edva API na spr\u00e1vu technol\u00f3gie BitLocker.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ij\/1u\/od\/ij1uodbdmmfbjmgantnxjrogvlo.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/c8f328978ba8f8906a112765fd7e4571.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pri v\u00fdbere BitLocker Encryption ako met\u00f3dy \u0161ifrovania disku v politike Data Protection je mo\u017en\u00e9 nastavi\u0165 nasleduj\u00face parametre:<\/p>\n<ul>\n<li><i>Initial Encryption<\/i> \u2014 nastavenia po\u010diato\u010dn\u00e9ho \u0161ifrovania umo\u017e\u0148uj\u00fa za\u0161ifrova\u0165 cel\u00fd disk (Encrypt entire drive), \u010do sa odpor\u00fa\u010da pre stroje s u\u017e existuj\u00facimi pou\u017e\u00edvate\u013esk\u00fdmi \u00fadajmi (s\u00fabory, dokumenty a podobne), alebo za\u0161ifrova\u0165 iba d\u00e1ta (Encrypt used disk space only), \u010do sa odpor\u00fa\u010da pre nov\u00e9 in\u0161tal\u00e1cie Windows;<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Drives to encrypt<\/i> \u2014 v\u00fdber diskov\/part\u00edci\u00ed na \u0161ifrovanie umo\u017e\u0148uje za\u0161ifrova\u0165 v\u0161etky disky (All drives) alebo iba part\u00edciu s opera\u010dn\u00fdm syst\u00e9mom (OS drive only);<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li><i>Encryption algorithm<\/i> \u2014 v\u00fdber algoritmu \u0161ifrovania, odpor\u00fa\u010danou vo\u013ebou je varianta Windows Default, taktie\u017e je mo\u017en\u00e9 uvies\u0165 XTS-AES-128 alebo XTS-AES-256.<\/li>\n<\/ul>\n<p><\/p>\n<h4>File Vault<\/h4>\n<p>\nFile Vault je \u0161tandardn\u00fdm n\u00e1strojom na \u0161ifrovanie od spolo\u010dnosti Apple a zabezpe\u010duje pr\u00edstup k d\u00e1tam pou\u017e\u00edvate\u013esk\u00e9ho po\u010d\u00edta\u010da iba autorizovan\u00fdm pou\u017e\u00edvate\u013eom. Pri nain\u0161talovanom File Vault mus\u00ed pou\u017e\u00edvate\u013e zada\u0165 heslo na spustenie syst\u00e9mu a z\u00edskanie pr\u00edstupu k za\u0161ifrovan\u00fdm s\u00faborom. Pou\u017e\u00edvanie File Vault je jedin\u00fdm sp\u00f4sobom zabezpe\u010denia ochrany uchov\u00e1van\u00fdch d\u00e1t v politike Data Protection pre pou\u017e\u00edvate\u013eov opera\u010dn\u00e9ho syst\u00e9mu MacOS.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/sy\/e9\/y4\/sye9y49s_dd2ur0e44bh5dg16uc.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/4446e97032af97f69490314ec0ab346d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pre File Vault je dostupn\u00e1 mo\u017enos\u0165 \u201ePovoli\u0165 automatick\u00e9 z\u00edskanie pou\u017e\u00edvate\u013ea\u201c, ktor\u00e1 si vy\u017eaduje autoriz\u00e1ciu pou\u017e\u00edvate\u013ea pred za\u010diatkom procesu \u0161ifrovania disku. Ak je t\u00e1to funkcia povolen\u00e1, je mo\u017en\u00e9 ur\u010di\u0165 po\u010det pou\u017e\u00edvate\u013eov, ktor\u00ed musia by\u0165 autorizovan\u00ed, ne\u017e SandBlast Agent pou\u017eije funkciu Pre-boot, alebo ur\u010di\u0165 po\u010det dn\u00ed, po uplynut\u00ed ktor\u00fdch bude funkcia Pre-boot automaticky implementovan\u00e1 pre v\u0161etk\u00fdch autorizovan\u00fdch pou\u017e\u00edvate\u013eov, ak sa v tomto obdob\u00ed aspo\u0148 jeden pou\u017e\u00edvate\u013e autorizoval do syst\u00e9mu.<\/p>\n<h3>Obnova d\u00e1t<\/h3>\n<p>\nV pr\u00edpade probl\u00e9mov so spusten\u00edm syst\u00e9mu je mo\u017en\u00e9 vyu\u017ei\u0165 r\u00f4zne met\u00f3dy na obnovenie \u00fadajov. Administr\u00e1tor m\u00f4\u017ee spusti\u0165 proces obnovy za\u0161ifrovan\u00fdch \u00fadajov z \u010dasti Spr\u00e1va po\u010d\u00edta\u010da \u2192 Akcie \u00fapln\u00e9ho \u0161ifrovania disku. Pri pou\u017e\u00edvan\u00ed Check Point Encryption je mo\u017en\u00e9 de\u0161ifrova\u0165 predt\u00fdm za\u0161ifrovan\u00fd disk a z\u00edska\u0165 pr\u00edstup ku v\u0161etk\u00fdm ulo\u017een\u00fdm s\u00faborom. Po tomto postupe je potrebn\u00e9 znovu spusti\u0165 proces \u0161ifrovania disku na aktiv\u00e1ciu politiky Ochrany \u00fadajov.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/jj\/ox\/ui\/jjoxuiqkkamq99bj90kflpureco.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/5e2c5fda53a0be8fda406aa267f991d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pri v\u00fdbere BitLocker ako met\u00f3dy \u0161ifrovania disku na obnovenie \u00fadajov je potrebn\u00e9 zada\u0165 ID Recovery Key probl\u00e9mov\u00e9ho po\u010d\u00edta\u010da na vygenerovanie Recovery Key, ktor\u00fd mus\u00ed by\u0165 zadan\u00fd pou\u017e\u00edvate\u013eom, aby z\u00edskal pr\u00edstup k za\u0161ifrovan\u00e9mu disku.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/wf\/ba\/ma\/wfbamafl41wqwzp7anrpp1tdfbo.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/b9acf560cef0b3f44d751ac03fdfc8a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pre pou\u017e\u00edvate\u013eov MacOS, ktor\u00ed vyu\u017e\u00edvaj\u00fa File Vault na ochranu uchov\u00e1van\u00fdch inform\u00e1ci\u00ed, spo\u010d\u00edva proces obnovy v generovan\u00ed Recovery Key administr\u00e1torom na z\u00e1klade s\u00e9riov\u00e9ho \u010d\u00edsla probl\u00e9mov\u00e9ho zariadenia a zadan\u00ed tohto k\u013e\u00fa\u010da s n\u00e1sledn\u00fdm resetovan\u00edm hesla.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/dq\/56\/dx\/dq56dxec6pgpevw7if69jhipnzc.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/7682e2be9541e5f606a85c0880353397.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Politika nasadenia<\/h2>\n<p>\nOd vydania <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/512614\/\">druhej \u010dasti<\/a><\/noindex>, v ktorej bol sk\u00faman\u00fd rozhranie webovej konzoly spr\u00e1vy, Check Point stihli vykona\u0165 niektor\u00e9 \u00fapravy v \u010dasti Nasadenie \u2014 teraz obsahuje pododdelenie <i>Nasadenie softv\u00e9ru<\/i>, v ktorom sa nastavuje konfigur\u00e1cia (povolenie\/vypnutie bBlade-ov) pre u\u017e nain\u0161talovan\u00fdch agentov, a pododdelenie <i>Exportn\u00fd bal\u00edk<\/i>, v ktorom je mo\u017en\u00e9 vytv\u00e1ra\u0165 bal\u00edky s predin\u0161talovan\u00fdmi bBlade-ov na \u010fal\u0161iu in\u0161tal\u00e1ciu na pou\u017e\u00edvate\u013esk\u00e9 zariadenia, napr\u00edklad pomocou skupinov\u00fdch polit\u00edk Active Directory. Pozrime sa na pododdelenie Nasadenie softv\u00e9ru, v ktorom sa aktivuj\u00fa v\u0161etky bBlade-y SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/0q\/9e\/ae\/0q9eaeuyltbg5lewff7riijdvkg.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/1a9dd697ba8422e8d511f07b9cc916b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pripom\u00ednam, \u017ee v \u0161tandardnej politike nasadenia s\u00fa zahrnut\u00e9 iba bledy kateg\u00f3rie Prevencia hrozieb. S oh\u013eadom na predt\u00fdm prejednan\u00fa politiku Ochrana \u00fadajov je teraz mo\u017en\u00e9 zahrn\u00fa\u0165 t\u00fato kateg\u00f3riu na in\u0161tal\u00e1ciu a pr\u00e1cu na klientskom po\u010d\u00edta\u010di so SandBlast Agent. M\u00e1 zmysel zahrn\u00fa\u0165 funkciu Remote Access VPN, ktor\u00e1 umo\u017en\u00ed pou\u017e\u00edvate\u013eovi pripoji\u0165 sa, napr\u00edklad, k firemnej sieti organiz\u00e1cie, ako aj kateg\u00f3riu Pr\u00edstup a s\u00falad, do ktorej patr\u00ed funkcie Firewall &amp; Aplika\u010dn\u00e1 kontrola a kontrola pou\u017e\u00edvate\u013esk\u00e9ho po\u010d\u00edta\u010da na dodr\u017eiavanie politiky S\u00falad.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/r9\/a6\/lh\/r9a6lhui24xkbzuprmhz1eeuhvu.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/2f79464dbae43bafb8e631106b40efa6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>                        <b class=\"spoiler_title\">Exportn\u00fd bal\u00edk<\/b><br \/>\n                        <noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/43\/fs\/cf\/43fscffpzgaw7jfd8w2lhsfohwo.gif\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/34fa39766267a87adde5a701e8d2ab4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Pododdiel Export Packages je ve\u013emi jednoduch\u00fd na pou\u017eitie: na vytvorenie bal\u00edka konfigur\u00e1cie je potrebn\u00e9 zada\u0165 jeho n\u00e1zov, vybra\u0165 opera\u010dn\u00fd syst\u00e9m (pre Windows tie\u017e uvies\u0165 architekt\u00faru) a verziu agenta, po \u010dom vybra\u0165 vnoren\u00e9 politiky zabezpe\u010denia. Dodato\u010dne je mo\u017en\u00e9 uvies\u0165 virtu\u00e1lnu skupinu, do ktorej bud\u00fa patri\u0165 po\u010d\u00edta\u010de s nain\u0161talovan\u00fdm bal\u00edkom, ako aj vybra\u0165 VPN Site s prednastavenou adresou pripojenia a autentifika\u010dn\u00fdmi parametrami (VPN Site sa konfiguruj\u00fa v sekcii Export Packages \u2192 Manage VPN Sites). Posledn\u00e1 \u010das\u0165 je obzvl\u00e1\u0161\u0165 u\u017eito\u010dn\u00e1, preto\u017ee odstra\u0148uje pravdepodobnos\u0165 chyby pou\u017e\u00edvate\u013ea pri konfigur\u00e1cii parametrov pripojenia cez VPN.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/yy\/f7\/fm\/yyf7fmc0iggigkmg3in9ck1fwxg.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/9c1e08ea73bb98879df13dc3db930c08.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Nastavenia glob\u00e1lnej politiky<\/h2>\n<p>\nV nastaveniach Global Policy Settings sa nastavuje jeden z najd\u00f4le\u017eitej\u0161\u00edch parametrov \u2014 heslo na odstr\u00e1nenie SandBlast Agent z pou\u017e\u00edvate\u013esk\u00e9ho zariadenia. Po in\u0161tal\u00e1cii agenta nebude ma\u0165 pou\u017e\u00edvate\u013e mo\u017enos\u0165 ho odstr\u00e1ni\u0165 bez zadania hesla, ktor\u00fdm je predvolene slovo<b>secret<\/b>(bez \u00favodzoviek). Av\u0161ak toto \u0161tandardn\u00e9 heslo je \u013eahko n\u00e1js\u0165 v otvoren\u00fdch zdrojoch, a pri implement\u00e1cii rie\u0161enia SandBlast Agent sa odpor\u00fa\u010da zmeni\u0165 \u0161tandardn\u00e9 heslo na odstr\u00e1nenie agenta. V Management Platform je mo\u017en\u00e9 pri \u0161tandardnom hesle nastavi\u0165 politiku iba 5-kr\u00e1t, tak\u017ee zmena hesla na odstr\u00e1nenie je nevyhnutn\u00e1.<br \/>\nOkrem toho sa v nastaveniach glob\u00e1lnej politiky nastavuj\u00fa parametre \u00fadajov, ktor\u00e9 m\u00f4\u017eu by\u0165 odoslan\u00e9 do Check Point na anal\u00fdzu a zlep\u0161enie fungovania slu\u017eby ThreatCloud.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/2s\/af\/ye\/2safyeunswbcpdlwblgve5seem0.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/71170c628acb9b9506208949693c841a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Z nastaven\u00ed glob\u00e1lnej politiky sa tie\u017e nastavuj\u00fa niektor\u00e9 parametre politiky \u0161ifrovania disku, a to konkr\u00e9tne po\u017eiadavky na heslo: n\u00e1ro\u010dnos\u0165, d\u013a\u017eka pou\u017e\u00edvania, mo\u017enos\u0165 pou\u017ei\u0165 predt\u00fdm platn\u00e9 heslo a podobne. V tejto sekcii je mo\u017en\u00e9 nahra\u0165 vlastn\u00e9 obr\u00e1zky namiesto \u0161tandardn\u00fdch pre Pre-boot alebo OneCheck.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/na\/u6\/sv\/nau6sv-ig4wkruxkbiqycjdzn7y.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/f4f8c110b7151c34b763bd99badddb98.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h2>Nastavenie politiky<\/h2>\n<p>\nPo obozn\u00e1men\u00ed sa s mo\u017enos\u0165ami politiky ochrany \u00fadajov a nastaven\u00ed pr\u00edslu\u0161n\u00fdch parametrov v sekcii Deployment sa m\u00f4\u017eete pusti\u0165 do in\u0161tal\u00e1cie novej politiky, ktor\u00e1 zah\u0155\u0148a \u0161ifrovanie disku pomocou technol\u00f3gie Check Point Encryption a \u010fal\u0161\u00edch bledn\u00edch modulov SandBlast Agent. Po in\u0161tal\u00e1cii politiky v Management Platform z\u00e1kazn\u00edk obdr\u017e\u00ed upozornenie na potrebu nain\u0161talova\u0165 nov\u00fa verziu politiky teraz alebo presun\u00fa\u0165 in\u0161tal\u00e1ciu na in\u00fd \u010das (maxim\u00e1lne 2 dni).<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/d4\/3x\/g1\/d43xg1y8yhgirqzk4lbk5q06hey.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/01c3e7d69cd0297504f190c697fe5a1f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Po dokon\u010den\u00ed s\u0165ahovania a in\u0161tal\u00e1cie novej politiky SandBlast Agent pou\u017e\u00edvate\u013eovi navrhne re\u0161tartova\u0165 po\u010d\u00edta\u010d, aby sa aktivovala ochrana Full Disk Encryption.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ld\/rk\/ik\/ldrkikt7ac3gvxpd1x5ikigr13k.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/1f1ae7557786ef5bc709def906379a47.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Po re\u0161tarte bude potrebn\u00e9, aby pou\u017e\u00edvate\u013e zadal svoje prihlasovacie \u00fadaje v okne autentifik\u00e1cie Check Point Endpoint Security \u2014 toto okno sa bude zobrazova\u0165 zaka\u017ed\u00fdm pred spusten\u00edm opera\u010dn\u00e9ho syst\u00e9mu (Pre-boot). Existuje mo\u017enos\u0165 vybra\u0165 mo\u017enos\u0165 Single Sign-On (SSO) na automatick\u00e9 pou\u017eitie prihlasovac\u00edch \u00fadajov pri autentifik\u00e1cii vo Windows.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/gj\/in\/dv\/gjindvx57lyzglftzai0ejwv0cg.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/69b820deb9d9b3466b9f6d57c2ee4e26.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>V pr\u00edpade \u00faspe\u0161nej autentifik\u00e1cie pou\u017e\u00edvate\u013e z\u00edska pr\u00edstup k svojmu syst\u00e9mu a \u201ev pozad\u00ed\u201c sa za\u010d\u00edna proces \u0161ifrovania disku. T\u00e1to oper\u00e1cia nijako neovplyv\u0148uje funk\u010dnos\u0165 stroja, hoci m\u00f4\u017ee trva\u0165 dlh\u0161\u00ed \u010das (v z\u00e1vislosti od objemu diskov\u00e9ho priestoru). Po dokon\u010den\u00ed procesu \u0161ifrovania sa m\u00f4\u017eeme presved\u010di\u0165, \u017ee v\u0161etky bledne s\u00fa zapnut\u00e9 a funguj\u00fa, disk je \u0161ifrovan\u00fd a pou\u017e\u00edvate\u013esk\u00fd po\u010d\u00edta\u010d je chr\u00e1nen\u00fd. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/pc\/x-\/m0\/pcx-m0z1exs-2g3-0paws5hq7jk.png\"><img decoding=\"async\" alt=\"4. Platforma spr\u00e1vy Check Point SandBlast Agent. Politika ochrany d\u00e1t. Nasadenie a glob\u00e1lne nastavenia politiky\" src=\"\/wp-content\/uploads\/2020\/09\/5cd266eb1731cbc74fdb0ce6458e3ce7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h3>Z\u00e1ver<\/h3>\n<p>\nZhr\u0148me si: v tomto \u010dl\u00e1nku sme presk\u00famali mo\u017enosti SandBlast Agent na ochranu inform\u00e1ci\u00ed ulo\u017een\u00fdch na pou\u017e\u00edvate\u013eskom po\u010d\u00edta\u010di pomocou \u0161ifrovania disku v politike ochrany \u00fadajov, presk\u00famali nastavenia distrib\u00facie polit\u00edk a agentov prostredn\u00edctvom sekcie Deployment a nain\u0161talovali nov\u00fa politiku s pravidlami \u0161ifrovania disku a \u010fal\u0161\u00edmi bledn\u00fdmi modulmi na po\u010d\u00edta\u010d pou\u017e\u00edvate\u013ea. V nasleduj\u00facom \u010dl\u00e1nku cyklu si podrobne preberieme mo\u017enosti logovania a reportovania v Management Platform a klientovi SandBlast Agent.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Ve\u013ek\u00e1 zbierka materi\u00e1lov o Check Point od TS Solution<\/a><\/noindex>. Aby ste nepreme\u0161kali \u010fal\u0161ie publik\u00e1cie na t\u00e9mu SandBlast Agent Management Platform \u2014 sledujte aktualiz\u00e1cie v na\u0161ich soci\u00e1lnych sie\u0165ach (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blog TS Solution<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/515172\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 (\u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f) \u043c\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Threat Prevention \u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0451 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0443\u0433\u0440\u043e\u0437\u0430\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435 Data Protection, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92932,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92931","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-01T11:43:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. Politika ochrany \u00fadajov. Deployment a glob\u00e1lne nastavenia politiky | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd474. Check Point SandBlast Agent Management Platform. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 Data Protection. Deployment \u0438 Global Policy Settings | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/4-check-point-sandblast-agent-management-platform-politika-data-protection-deployment-i-global-policy-settings","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T11:43:08+00:00","article:modified_time":"2020-09-01T11:43:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92931","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:58:24","updated":"2022-10-04 10:52:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=92931"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92931\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/92932"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=92931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=92931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=92931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}