{"id":93144,"date":"2020-09-03T13:42:06","date_gmt":"2020-09-03T11:42:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/6-ngfw-dlya-malogo-biznesa-smart-1-cloud"},"modified":"2020-09-03T13:42:06","modified_gmt":"2020-09-03T11:42:06","slug":"6-ngfw-dlya-malogo-biznesa-smart-1-cloud","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/6-ngfw-dlya-malogo-biznesa-smart-1-cloud","title":{"rendered":"6. NGFW pre mal\u00e9 firmy. Smart-1 Cloud","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"6.
\n<\/p>\n

V\u00edtam v\u0161etk\u00fdch, ktor\u00ed pokra\u010duj\u00fa v \u010d\u00edtan\u00ed cyklu o novej gener\u00e1cii NGFW Check Point rodiny SMB (s\u00e9ria 1500). V \u010cas\u0165 5 <\/a><\/noindex> sme u\u017e presk\u00famali rie\u0161enie SMP (port\u00e1l spr\u00e1vy pre SMB br\u00e1ny). Dnes by som r\u00e1d porozpr\u00e1val o port\u00e1li Smart-1 Cloud, ktor\u00fd sa prezentuje ako rie\u0161enie zalo\u017een\u00e9 na SaaS Check Point a pln\u00ed \u00falohu Management Servera v cloude, \u010do ho rob\u00ed aktu\u00e1lnym pre ak\u00e9ko\u013evek NGFW Check Point. Pre t\u00fdch, ktor\u00ed sa k n\u00e1m pr\u00e1ve pridali, pripom\u00ednam predt\u00fdm presk\u00faman\u00e9 t\u00e9my: inicializ\u00e1cia a nastavenie <\/a><\/noindex>, organiz\u00e1cia bezdr\u00f4tov\u00e9ho prenosu d\u00e1t ( WiFi a LTE) <\/a><\/noindex>, VPN<\/a><\/noindex>.<\/p>\n

Vyzdvihneme hlavn\u00e9 mo\u017enosti Smart-1 Cloud:\n<\/p>\n

<\/p>\n

    \n
  1. Jedno centralizovan\u00e9 rie\u0161enie na spr\u00e1vu celej va\u0161ej infra\u0161trukt\u00fary Check Point (virtu\u00e1lne a fyzick\u00e9 br\u00e1ny r\u00f4znych \u00farovn\u00ed).<\/li>\n
  2. S\u00fabor polit\u00edk pre v\u0161etky Blades umo\u017e\u0148uje zjednodu\u0161i\u0165 procesy spr\u00e1vy (vytv\u00e1ranie\/editovanie pravidiel pre r\u00f4zne \u00falohy).<\/li>\n
  3. Podpora profilov\u00e9ho pr\u00edstupu pri pr\u00e1ci s nastaveniami br\u00e1n. Zodpoved\u00e1 za rozdelenie pr\u00edstupov\u00fdch pr\u00e1v pri pr\u00e1ci na port\u00e1li, kde m\u00f4\u017eu s\u00fa\u010dasne vykon\u00e1va\u0165 r\u00f4zne \u00falohy administr\u00e1tori siete, aud\u00edtori at\u010f.<\/li>\n
  4. Monitorovanie hrozieb, ktor\u00e9 zabezpe\u010duje z\u00edskavanie logov a preh\u013ead udalost\u00ed na jednom mieste.<\/li>\n
  5. Podpora interakcie cez API. Pou\u017e\u00edvate\u013e m\u00f4\u017ee zav\u00e1dza\u0165 automatiza\u010dn\u00e9 procesy, \u010d\u00edm zjednodu\u0161uje rutinn\u00e9 ka\u017edodenn\u00e9 \u00falohy.<\/li>\n
  6. Pr\u00edstup cez Web. Odstra\u0148uje obmedzenia t\u00fdkaj\u00face sa podpory jednotliv\u00fdch OS, intuit\u00edvna pou\u017eite\u013enos\u0165.<\/li>\n<\/ol>\n

    <\/a><\/noindex><\/p>\n

    T\u00ed, ktor\u00ed s\u00fa u\u017e obozn\u00e1men\u00ed s rie\u0161eniami od Check Point, si m\u00f4\u017eu v\u0161imn\u00fa\u0165, \u017ee hlavn\u00e9 predpokladan\u00e9 mo\u017enosti sa nel\u00ed\u0161ia od lok\u00e1lneho dedikovan\u00e9ho Management Servera vo va\u0161ej infra\u0161trukt\u00fare. \u010ciastkovo bud\u00fa ma\u0165 pravdu, ale v pr\u00edpade Smart-1 Cloud je spr\u00e1va servera zabezpe\u010dovan\u00e1 odborn\u00edkmi Check Point. To zah\u0155\u0148a: vytv\u00e1ranie z\u00e1loh, monitorovanie vo\u013en\u00e9ho miesta na nosi\u010doch, opravu ch\u00fdb, in\u0161tal\u00e1ciu posledn\u00fdch verzi\u00ed softv\u00e9ru. Takisto sa zjednodu\u0161uje proces migr\u00e1cie (presunu) nastaven\u00ed.\n<\/p>\n

    <\/p>\n

    Licencovanie<\/h3>\n

    <\/p>\n

    Predt\u00fdm, ne\u017e sa obozn\u00e1mime s funk\u010dnos\u0165ou cloudov\u00e9ho rie\u0161enia spr\u00e1vy, presk\u00famajme ot\u00e1zky licencovania z ofici\u00e1lneho DataSheet<\/a><\/noindex>.\n<\/p>\n

    Spr\u00e1va jednou br\u00e1nou:\n<\/p>\n

    \n\"6.
    \n<\/p>\n

    Predplatn\u00e9 z\u00e1vis\u00ed od vybran\u00fdch b\u013eady spr\u00e1vy, celkovo s\u00fa predpokladan\u00e9 3 smery:\n<\/p>\n

    <\/p>\n

      \n
    1. Management. \u00dalo\u017eisko 50 GB, denne pre logy 1 GB.<\/li>\n
    2. Management + SmartEvent. \u00dalo\u017eisko 100 GB, denne pre logy 3 GB, generovanie spr\u00e1v.<\/li>\n
    3. Spr\u00e1va + Dodr\u017eiavanie + SmartEvent. \u00dalo\u017eisko s kapacitou 100 GB, denn\u00e9 logy do 3 GB, generovanie spr\u00e1v, odpor\u00fa\u010dania na nastavenia z osved\u010den\u00fdch prakt\u00edk informa\u010dnej bezpe\u010dnosti. <\/li>\n<\/ol>\n

      <\/p>\n

      *V\u00fdber z\u00e1vis\u00ed od mnoh\u00fdch faktorov: typ logov, po\u010det pou\u017e\u00edvate\u013eov, objem prev\u00e1dzky.<\/i>\n<\/p>\n

      <\/p>\n

      Taktie\u017e je k dispoz\u00edcii predplatn\u00e9 na spr\u00e1vu 5 br\u00e1n. Na tomto sa nebudeme podrobne zameriava\u0165 \u2014 v\u017edy m\u00f4\u017eete z\u00edska\u0165 inform\u00e1cie z DataSheet<\/a><\/noindex>. \n<\/p>\n

      <\/p>\n

      Spustenie Smart-1 Cloud<\/h3>\n

      <\/p>\n

      Ka\u017ed\u00fd si m\u00f4\u017ee vysk\u00fa\u0161a\u0165 rie\u0161enie, na to sa treba zaregistrova\u0165 v Infinity Portal \u2014 cloudovej slu\u017ebe od Check Point, kde m\u00f4\u017eete z\u00edska\u0165 trial pr\u00edstup k nasleduj\u00facim oblastiam:\n<\/p>\n

      <\/p>\n