{"id":34042,"date":"2019-10-31T21:56:07","date_gmt":"2019-10-31T18:56:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/13-check-point-getting-started-r80-20-licensing\/"},"modified":"2019-10-31T21:56:07","modified_gmt":"2019-10-31T18:56:07","slug":"13-check-point-getting-started-r80-20-licensing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","title":{"rendered":"13. Check Point Uvod v R80.20. Licenciranje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"13.
\n
\nPozdravljam vas, prijatelji! Napokon smo stigli do posljednje zaklju\u010dne lekcije Check Point Uvod<\/b>. Danas \u0107emo razgovarati o veoma va\u017enoj temi \u2014 Licenciranje<\/b>. Moram vas upozoriti da ova lekcija nije iscrpan vodi\u010d za odabir opreme ili licenci. Ovo je samo kratak sa\u017eetak klju\u010dnih ta\u010daka koje bi svaki administrator Check Point trebao znati. Ako se zaista mu\u010dite s odabirom licence ili ure\u0111aja, najbolje je obratiti se profesionalcima, tj. nama :). Ima mnogo skrivenih zamki koje je veoma te\u0161ko obuhvatiti u okviru kursa, a ni zapamtiti to odmah nije lako.
\nNa\u0161a lekcija \u0107e biti potpuno teoretska, mo\u017eete isklju\u010diti svoje testne servere i opustiti se. Na kraju \u010dlanka na\u0107i \u0107ete video lekciju u kojoj detaljnije obja\u0161njavam sve<\/a><\/noindex><\/p>\n

Licenciranje ure\u0111aja<\/h3>\n

\nPo\u010dnimo s opisom licencnih karakteristika sigurnosnih ure\u0111aja. Ovo se odnosi i na fizi\u010dke ure\u0111aje i na virtuelne instance. Recimo da ste odlu\u010dili kupiti ure\u0111aj. Kupovina obi\u010dnog ure\u0111aja ili virtuelne instance bez \u201epretplata\u201c \u2014 nije mogu\u0107a! Postoje tri opcije pretplata:<\/p>\n

\"13.
\n
\nI sada prva zanimljiva karakteristika! Ure\u0111aj ili virtuelnu instancu mo\u017eete kupiti samo s pretplatama NGTP ili NGTX. No, kada budete obnavljali svoju pretplatu, tada \u0107ete mo\u0107i izabrati paket NGFW, u slu\u010daju da vam ne trebaju AV, AB, URL, AS, TE i TX moduli. Ovo je bitno. Samo pretplate mo\u017eete kupiti na godinu, dvije ili tri godine.<\/p>\n

Mogu pretpostaviti va\u0161e prvo pitanje! \"\u0160ta \u0107e se desiti ako ne obnovim pretplatu?<\/b>\" Posebno sam istakao zelenom bojom one module koji \u0107e raditi UVEK, i BEZ obnove. Takozvani perpetual moduli. Ostatak modula koji zahtijevaju stalne nadogradnje jednostavno prestaju raditi. Osim mo\u017eda za IPS, klju\u010dne potpisne informacije \u0107e ostati aktivne (ali ih je vrlo malo). Ovo va\u017ei i za fizi\u010dke ure\u0111aje i za virtuelne instance, tj. vSec.<\/p>\n

Kao poseban deo, istakao sam tri modula koja nisu uklju\u010dena u nijedan paket, to su: DLP, MAB i Capsule.<\/p>\n

Tako\u0111er, imajte na umu da ako kupujete klaster rje\u0161enje, kao drugo ure\u0111aj odaberite model sa sufiksom HA (tj. High Availability). Na slici je dat primjer za ure\u0111aj 5400. To se odnosi na ure\u0111aje. Sada o serveru za upravljanje.<\/p>\n

Licenciranje servera za upravljanje<\/h3>\n

\nKot smo \u017ee omenili v prvih lekcijah, obstajata dva scenarija uvajanja Check Point: Samostojni (kadar sta tako prehod kot upravljanje na eni napravi) in Distribuirani (kadar se upravljalni stre\u017enik premakne na lo\u010deno napravo). Vendar mo\u017enosti na tem ne kon\u010dajo. Oglejmo si tri tipi\u010dne scenarije uvajanja upravljalnega stre\u017enika:<\/p>\n

\"13.
\n<\/p>\n

    \n
  1. Nakup namenskega NGSM<\/b>. Najbolj priljubljena mo\u017enost. Izberete bodisi napravo Smart-1 bodisi virtualno razli\u010dico. Seveda izberete glede na \u0161tevilo prehodov, ki jih boste upravljali, 5, 10, 25 itd. Po postavitvi te naprave lahko uporabljate \u0161tiri klju\u010dne blade upravljalnega stre\u017enika: NPM (tj. upravljanje s politikami), Logging and Status (tj. bele\u017eenje), Smart Event (SIEM od Check Point, ki nam nudi vse poro\u010danje) in Compliance (to je ocena kakovosti nastavitev, bodisi v skladu z regulativnimi zahtevami, kot je PCI DSS, ali preprosto z najbolj\u0161imi praksami). O\u010ditno je, da sta blade NPM in LS stalni bladi, kar pomeni, da bosta delovala tudi brez podalj\u0161evanja naro\u010dnin, medtem ko sta blade Smart Event in Compliance vklju\u010deni le v prvem letu! Kasneje jih je treba podalj\u0161ati za dodatno pla\u010dilo. To je pomembna to\u010dka, ne pozabite. In \u010de lahko \u0161e nekako \u017eivite brez blade Compliance, pa Smart Event potrebujete prav vsi.<\/li>\n
  2. Nakup namenskega stre\u017enika za upravljanje dogodkov<\/b> V DODATKU k obstoje\u010demu stre\u017eniku<\/a> upravljanju NGSM. Zakaj je to potrebno? Dejstvo je, da funkcionalnost bele\u017eenja in \u0161e posebej Smart Event porabi precej\u0161nje sistemske vire. In \u010de je dnevnikov precej, to lahko vodi do \u201cupadov\u201d na stre\u017enikom<\/a> upravljanju. Zato je pogosto praksa premakniti to funkcionalnost na lo\u010deno napravo, bodisi napravo Smart-1 bodisi virtualno razli\u010dico. Velike integracije z velikim \u0161tevilom dnevnikov skoraj vedno zahtevajo namenski stre\u017enik za Smart Event. Ta lahko sprejema dnevnike. Tako bo va\u0161 upravljalni stre\u017enik opravljal le funkcije upravljanja. To znatno pove\u010duje stabilnost in odzivnost sistema. Kot lahko opazite, ob nakupu namenskega stre\u017enika za Smart Event dobite ti dve bladi za stalno uporabo, tudi brez podalj\u0161anja. V obdobju 3-4 let bo to celo gospodarsko bolj ugodno kot pa vsako leto kupovati podalj\u0161anja Smart Event za obi\u010dajni NGSM stre\u017enik.<\/li>\n
  3. Namenski stre\u017enik za upravljanje dnevnikov<\/b>, ki se dopolnjuje z NGSM in Smart Event stre\u017eniki. Smisel mislim, da je jasen. Pri ZELENEM velikem \u0161tevilu logov lahko funkcijo bele\u017eenja prestavimo na lo\u010den stre\u017enik. Dodeljen Log stre\u017enik ima prav tako stalno licenco in ne zahteva podalj\u0161anja.<\/li>\n<\/ol>\n

    <\/p>\n

    Video lekcija<\/h3>\n

    \nTukaj boste na\u0161li dodatne informacije o upravljanju licenc in o tehni\u010dni podpori Check Point:
    \n

    \r\n \"Predvajaj\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Izvor:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u043c\u044b \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u043a\u0430 Check Point Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 \u2014 \u041b\u0438\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043f\u0435\u0448\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u043a \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u0432\u044b\u0431\u043e\u0440\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439. \u042d\u0442\u043e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Check Point. \u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u0430\u0434\u0430\u0447\u0435\u043d\u044b \u0432\u044b\u0431\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4713. Check Point Pri\u010detek dela R80.20. Licenciranje | ProHoster","description":"Pozdravljeni, prijatelji!","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4713. Check Point Getting Started R80.20. Licensing | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0434\u0440\u0443\u0437\u044c\u044f!","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/13-check-point-getting-started-r80-20-licensing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:07+00:00","article:modified_time":"2019-10-31T18:56:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:29:43","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/34042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=34042"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/34042\/revisions"}],"predecessor-version":[{"id":160130,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/34042\/revisions\/160130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/25698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=34042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=34042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=34042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}