Tikugashirei kune nyowani nyowani yezvinyorwa zvakatsaurirwa kuchengetedza nzvimbo dzebasa uchishandisa mhinduro uye itsva cloud management system - . SandBlast Agent yakaongororwa nesu mune zvinyorwa nezve ΠΈ , uye isu takavimbisa kare kuburitsa kosi yakazara yezvinyorwa pamusoro pekutumira uye kutonga vamiririri. Uye iyo gore-yakavakirwa mumiriri manejimendi system Management Platform yakaunzwa neCheck Point mukati meInfinity Portal ndiyo yakanyatsokodzera izvi - kubva panguva yekunyoreswa pane portal kusvika pakatanga kupenengura nzvimbo yekushandira nemumiririri uye kuona chiitiko chakaipa, zvinotora. maminetsi mashoma chete.
Sei SandBlast Agent?
Zvinoenderana nebvunzo yazvino Tarisa Point SandBlast Agent yakatemerwa AA uye Inokurudzirwa neinotevera bvunzo mhinduro:
- WEB traffic blocking rate ndeye 100%;
- Kuvhara chiyero muemail ndeye 100%;
- Offline kutyisidzira kuvharidzira mwero - 100%;
- Bypass kuedza kuvharidzira mwero ndeye 100%;
- Yese block rate: 99,12%;
- Kukosha kwezvinhu zvenhema Nhema-positive ndeye 0,8%.
SandBlast Agent inopa yakakwira mwero wekuchengetedza kwevashandisi nzvimbo dzekushandira kuburikidza nekubatana kwezvikamu zvakati wandei, zvinonzi "blades" muCheck Point terminology. Tsanangudzo pfupi yemablades anoshandiswa muSandBlast Agent:
- Kutyisidzira Emulation -Sandbox tekinoroji, inopokana kune akasiyana nzira dzekunzvenga, uye kubvumira kudzivirira zero-zuva kurwiswa;
- Threat Extraction - pane-iyo-inobhururuka faira yekuchenesa tekinoroji, ichibvumira mushandisi kuwana gwaro rakacheneswa kubva kune anoshanda zvikamu pamberi pemutongo wekutevedzera kwakazara;
- Anti-Exploit - Kudzivirirwa kwezvishandiso zvakashandiswa zvakanyanya (Microsoft Office, Adobe PDF Reader, browsers, nezvimwewo) kubva pakurwiswa uchishandisa zviito;
- anti bot - tekinoroji yekuchengetedza makomputa emunhu kubva pakujoinha botnet network, inobvumidza iwe kuona hutachiona, kumisa kushanda kwesoftware yakaipa uye "kuchenesa" michina ine hutachiona;
- Zero-Phishing - module yekudzivirira inovhara nzvimbo dzehunyengeri uye inozivisa mushandisi nezve kushandiswa kwepassword inoshanda pane yechitatu-bato zviwanikwa;
- Behavioral Guard - tekinoroji yakanangana nekudzivirira kurwiswa kunoshandisa matekinoroji kunzvenga nekunzvenga kuonekwa;
- Anti-Ransomware - module yekudzivirira inoona uye inovharira zviito zve ransomware, uye zvakare inobvumidza iwe kudzoreredza mafaera akavharidzirwa uchishandisa Snapshots;
- Forensics - chengetedzo module inorekodha uye inoongorora zviitiko zvese pamushini, uye semhedzisiro inopa mushumo wepamusoro-soro pakurwiswa kuri kuongororwa.
Pamusoro pezvinyorwa zvakanyorwa, SandBlast Agent inobvumira kuzara kwe disk encryption, pamwe nekuvharidzirwa kwezvinobviswa midhiya uye kuchengetedzwa kwemakomputa ports, ine yakavakirwa-mukati VPN mutengi, siginecha uye heuristic modules yekudzivirira kubva kune malware. Iko kugona kwese SandBlast Agent zvikamu zvichakurukurwa zvakadzama mune zvinotevera zvinyorwa, asi ikozvino yave nguva yekujairana neinoshingairira kusimudzira chikuva - Tarisa Point Infinity.
Tarisa Point Infinity: Generation V Kutyisidzira Kudzivirirwa
Kubva 2017, Check Point yanga ichigadzira uye ichisimudzira imwechete yakabatanidzwa yekuchengetedza dhizaini. , iyo inokubvumira kuti ubudirire kuchengetedza zvikamu zvose zvemazuva ano IT zvivakwa: network uye cloud infrastructure, workstations, mobile devices. Pfungwa huru ndeye kugona kubata maturusi ekuchengetedza emhando dzakasiyana kubva kune imwechete browser-based management console.
Parizvino, iyo Check Point Infinity architecture inokutendera kuti upe mhinduro dzekudzivirira kwegore - CloudGuard SaaS, network kuchengetedza mhinduro - CloudGuard Connect, Smart-1 Cloud, Infinity SOC, pamwe nekudzivirira zvishandiso zvevashandisi uchishandisa SandBlast Agent Management Platform, SandBlast Agent Cloud. Management uye SandBlast Web Dashboard.
Iyi nhevedzano yezvinyorwa ichapihwa kuSandBlast Agent Management Platform mhinduro (ikozvino Beta vhezheni), iyo inobvumidza iwe kuendesa sevha yekutonga kwegore mune imwe nyaya yemaminetsi, gadzira mutemo wekuchengetedza uye kugovera vamiririri kumakomputa evashandisi.
Infinity Portal & SandBlast Agent Management Platform: kutanga
Iyo SandBlast Agent deployment process uchishandisa iyo Management Platform ine 5 matanho:
- Kunyoresa paCheck Point Infinity Portal;
- Kunyoresa SandBlast Agent Management Platform application;
- Kugadzira itsva Endpoint Management Service kubata vamiririri;
- Kugadzira uye kugadzirisa mutemo kune vamiririri;
- Kutumira vamiririri pamakomputa evashandisi.
Chinyorwa ichi chinobata nhanho nhatu dzekutanga, uye mune dzinotevera tinozonyatso tarisisa kune maviri asara, kusanganisira kuongorora manejimendi papuratifomu interface, kugovera maajenti kumakomputa evatengi, kugadzirisa mutemo, uye kuyedza kugona kwemumiririri kubata iyo inonyanya kufarirwa. kutyisidzira kwekuchengetedza.
1. Kunyoresa paInfinity Portal
Chokutanga pane zvose, unofanira kuenda kunzvimbo uye zadza fomu rekunyoresa, richiratidza zita rekambani, ruzivo rwekusangana uye kubvumirana nemitemo yekushandiswa kwesevhisi uye mutemo wekuvanzika weiyo portal, uye zvakare zadzisa iyo reCAPTCHA. Izvo zvakakosha kuti uzive kuti kana uchinyoresa, unogona kusarudza nyika mune iyo data data data inounganidzwa neiyo portal ichachengetwa zvinoenderana nemitemo yekushandisa sevhisi uye zvakavanzika mutemo. Pane nzira mbiri chete: Ireland neUSA. Kuti uite izvi, unofanirwa kutarisa bhokisi rekutarisa "Shandisa chaiyo data residency" uye sarudza nyika.
Pakunyoreswa kwakabudirira pane portal, tsamba inotumirwa kune yako email kero inosimbisa kuwana kwako kune Infinity Portal uye ichikukoka iwe kuti upinde mukati meiyo portal. Izvo zvakakosha kuti uzive kuti kana uchipinda mune portal kekutanga, unogona kudiwa kuti usarudze password reset sarudzo kuti uwedzere huchokwadi hunobudirira.
2. Nyora iyo SandBlast Agent Management Platform application
Mushure mekuita chokwadi pane portal uye nekudzvanya iyo "Menu" icon (nhanho 1 pamufananidzo pazasi), iwe unozokumbirwa kunyoresa application kubva pane rondedzero inowanikwa pasi peanotevera mapoka: Cloud Dziviriro, Network Dziviriro uye Endpoint Dziviriro. Chikumbiro chega chega chinokodzera nzira yayo yezvinyorwa zvekutanga, saka isu hatizogara pazviri zvakadzama uye sarudza iyo SandBlast Agent Management Platform application muchikamu cheEndpoint Protection (danho 2 pamufananidzo uri pazasi).
Kana wasarudza application, iwe unofanirwa kubvumirana nemitemo yekushandiswa kwesevhisi uye mutemo wekuvanzika weiyo portal, uye mushure mekudzvanya bhatani re "EDZA ZVINO", kupinda kune iyo interface yekugadzira Endpoint Management masevhisi inovhura.
3. Gadzira itsva Endpoint Management Service
Nhanho yekupedzisira ndeyekugadzira sevhisi nyowani yeEndpoint Management, inova yewebhu interface yekutarisira vamiririri. Maitiro acho, sepakutanga, ari nyore kwazvo: sarudza iyo "New Endpoint Management Service" sarudzo (sezvakaratidzwa pamufananidzo pazasi), zadza ruzivo rwesevhisi yako nyowani (ID, nzvimbo yekutambira uye password) uye tinya iyo "CREATE" bhatani.
Mushure mekupedza maitiro ekugadzira sevhisi, iwe unogashira email ine ma paramita aunogona kushandisa kubatanidza kune gore manejimendi server uchishandisa yakajairwa Check Point console yeagent administration - SmartEndpoint version R80.40. Isu hatisi kuzofunga manejimendi tichishandisa yakajairwa koni, sezvo iyi nhevedzano yezvinyorwa ine chinangwa chekuratidza kugona kweSandBlast gore mumiriri manejimendi system.
Panguva ino, maitiro ekunyoresa gore sevhisi yekutarisira iyo SandBlast Agent yekudzivirira komputa yemunhu inogona kutariswa yakapera. Isu tinoona iyo webhu interface yeajenti manejimendi chikuva, icho chichakurukurwa zvakadzama muchinyorwa chedu chinotevera kubva ku "Tarisa Point SandBlast Agent Management Platform" nhevedzano.
mhedziso
Yasvika nguva yekupfupisa basa rakaitwa: takabudirira kunyoresa paInfinity Portal, takanyoresa SandBlast Agent Management Platform application pane portal uye takagadzira itsva cloud management service, Endpoint Management Service.
Muchinyorwa chedu chinotevera munhevedzano, isu tichatarisa zvakadzama nezve agent manejimendi interface - hapana kana tabhu imwe chete ichasiiwa isina kutarisirwa, izvo zvinotitendera kugadzira zviri nyore mutemo wekuchengetedza mune ramangwana uye kutarisa mamiriro emushandisi wemashini uchishandisa. matanda nemishumo.
. Kuti urege kupotsa zvinyorwa zvinotevera pamusoro weSandBlast Agent Management Platform, tevera zvigadziriso pasocial network (, , , , ).
Source: www.habr.com