{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 sada EA. Prvi pogled","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nNova razli\u010dica Gaia R81 je bila objavljena v zgodnjem dostopu (EA). Prej smo se lahko seznanili s na\u010drtovanimi novostmi<\/a><\/noindex> v bele\u017ekah o izdaji. Zdaj pa imamo prilo\u017enost, da to vidimo v resni\u010dnem svetu. Za to je bila zbrana standardna shema s specializiranim upravljanjem stre\u017enika in prehodom. Seveda nismo uspeli izvesti vseh celovitih testov, a smo pripravljeni deliti tisto, kar takoj pade v o\u010di pri spoznavanju novega sistema. Pod katom so glavni trenutki, ki smo jih izpostavili ob prvem sre\u010danju s sistemom (veliko slik).
\n<\/a><\/noindex><\/p>\n

Upravljanje<\/h3>\n

\nOb inicializaciji prehoda imate takoj mo\u017enost povezovanja s obla\u010dnim upravlja\u0161kim stre\u017enikom \u2014 Smart 1 Cloud<\/b> (t.i. MaaS):<\/p>\n

\"Check
\nTo je razmeroma nova mo\u017enost (na voljo je tudi v zadnjih razli\u010dicah 80.40) in o tej storitvi bomo podrobneje spregovorili kmalu v najkraj\u0161em mo\u017enem \u010dasu<\/a><\/noindex>. Tukaj je glavni plus (po na\u0161em mnenju) \u2014 dolgo pri\u010dakovana mo\u017enost upravljanja preko brskalnika \ud83d\ude42<\/p>\n

VxLAN in GRE<\/h3>\n

\nPrvo, kar smo preverili, je podpora za VxLAN in GRE. Bele\u017eke o izdaji nas niso prevarale, vse je na svojem mestu:<\/p>\n

\"Check
\n
\nO nujnosti teh funkcij na NGFW se lahko polemizira, a bolje je, ko ima uporabnik to izbiro.<\/p>\n

Infinity Threat Prevention<\/h3>\n

\nVerjetno je to prvo, kar pade v o\u010di, ko za\u010dnete prilagajati varnostno politiko. Dodana je nova mo\u017enost aktivacije Threat Prevention blade \u2014 Infinity. T.j. ni potrebno izbirati, katere blade vklju\u010diti, Check Point je vse odlo\u010dil nam (ne vem, kako dobro je to):<\/p>\n

\"Check
\nImate pa seveda \u0161e vedno mo\u017enost obi\u010dajne samostojne nastavitve blade.<\/p>\n

Infinity Threat Prevention Policy<\/h3>\n

\nKer smo se \u017ee dotaknili Threat Prevention, si poglejmo takoj tudi politiko. Verjetno je to ena najve\u010djih sprememb:<\/p>\n

\"Check
\n
\nKot lahko vidite, se je pojavilo mnogo ve\u010d prednastavljenih politik. Detajlno lahko vidite, v \u010dem so razlike med njimi s klikom na Help me decide<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nTo je dinami\u010dna politika in se posodablja brez va\u0161ega posredovanja.<\/p>\n

Change Report<\/h3>\n

\nKon\u010dno lahko v priro\u010dni obliki vidimo, kaj natan\u010dno se je spremenilo med popravkom konfiguracije:<\/p>\n

\"Check
\n
\nNa voljo je splo\u0161no poro\u010dilo:<\/p>\n

\"Check
\n
\nNa voljo pa so tudi popolnoma konkretni razdelki:<\/p>\n

\"Check
\n\"Check
\n
\nZelo priro\u010dno je spremljati spremembe.<\/p>\n

Web Management za Endpoint<\/h3>\n

\nKot ste morda \u017ee opazili, lahko na upravljalnem stre\u017eniku omogo\u010dite upravljanje kon\u010dnih to\u010dk in upravljate z agenti SandBlast. V R81 so dodali zanimivo mo\u017enost \u2014 upravljanje preko brskalnika. To se omogo\u010di na precej zanimiv na\u010din. Treba je v CLI preiti v na\u010din expert<\/b> in vnesti ukaz \u201cweb_mgmt_start\u201d<\/b>, nato pa pojdite na naslov \u2014 https:\/\/:4434\/sba\/. Pred vami se bo odprla spletna konzola:<\/p>\n

\"Check
\n
\n\u041c\u044b \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 "Check Point SandBlast Agent Management Platform<\/a><\/noindex>" \u043e\u0442 \u0410\u043b\u0435\u043a\u0441\u0435\u044f \u041c\u0430\u043b\u044c\u043a\u043e. \u041f\u0440\u0430\u0432\u0434\u0430 \u0442\u0430\u043c \u0442\u0430\u043a\u0430\u044f \u043a\u043e\u043d\u0441\u043e\u043b\u044c \u0431\u044b\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043e\u0431\u043b\u0430\u043a\u0435, \u0442\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.<\/p>\n

Smart Update<\/h3>\n

\nKo posku\u0161ate dodati licence preko starega dobrega Smart Update, vas konzola prijazno opozori, da je zdaj to mogo\u010de narediti brez odhoda iz \u017ee znane Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nZelo pri\u010dakovana funkcionalnost. Sedaj je v pravilih NAT mogo\u010de uporabljati Access Roles<\/b>, Security Zones<\/b> ili Updatable Objects<\/b>. Obstajajo primeri, ko je to zelo koristno in potrebno.<\/p>\n

Zaklju\u010dek<\/h3>\n

\nTo je zaenkrat vse. \u0160e vedno je veliko novih funkcionalnosti, ki potrebujejo preizkus (IoT, Azure AD, Upgrade, Logs API itd.). Kot sem \u017ee omenil, bomo v kratkem objavili pregled nove obla\u010dne upravljalne sistema \u2014 Smart-1 Cloud<\/a><\/noindex><\/b>. Spodaj spremljajte novosti na na\u0161ih kanalih (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>)!<\/p>\n

Ne pozabite tudi na na\u0161o obse\u017eno zbirko gradiv o Check Point<\/a><\/noindex>.
\n
Izvor: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 zdaj EA. Prvi pogled | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}