ProHoster > Blog > Utongi > 1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

Mushure mekudhindwa zvinyorwa Anopfuura makore maviri apfuura, iwo 1400 akateedzana modhi ikozvino abviswa mukutengesa. Nguva yasvika yekuchinja uye hunyanzvi, basa CheckPoint yakaedza kuita muchikamu che1500. Muchinyorwa tichatarisa mamodheru ekuchengetedza mahofisi madiki kana matavi emakambani, isu tichapa hunyanzvi hunhu, maficha ekutumira (rezinesi, manejimendi uye manejimendi zvirongwa), uye kubata pamatekinoroji matsva uye sarudzo.

The lineup

Iwo matsva eSMB mhando ndeaya: 1530, 1550, 1570, 1570R. Unogona kuona zvigadzirwa pa peji CheckPoint portal. Zvinonzwisisika, tichavaparadzanisa mumapoka matatu: hofisi yekuchengetedza gedhi neWIFI tsigiro (1530, 1550), hofisi yekuchengetedza gedhi neWIFI + 4G/LTE rutsigiro (1570, 1550), gedhi rekuchengetedza indasitiri (1570R).

Series 1530, 1550

1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

Iwo mamodheru ane 5 network network yenzvimbo network uye 1 interface yekuwana iyo Internet, bandwidth yavo i1 GB. Zvakare iripo ndeye USB-C Console. Kana zviri zvehunyanzvi hunhu, saka DataSheet Aya mamodheru anopa huwandu hukuru hweakayerwa paramita, asi isu tichatarisa pane zvakanyanya kukosha (mumaonero edu).

Mamiriro

1530

1550

Nhamba yepamusoro yekubatanidza pasekondi

10 500

14 000

Nhamba yepamusoro yekubatanidza panguva imwe chete

500 000

500 000

Kupinza neFirewall + Kudzivirira Kudzivirira (Mbit/C)

340

450

Kupinza neFirewall + IPS (Mbit/C)

600

800

Firewall Bandwidth (Mbps)

1000

1000

* Kudzivirira Kutyisidzira kunoreva kune anotevera mashizha anomhanya: Firewall, Kudzora Kwekushandisa uye IPS.

Mienzaniso 1530, 1550 ine huwandu hwekushanda:

  • Gaia 80.20 Yakamisikidzwa rondedzero yesarudzo inoratidzwa mukati SK CheckPoint
  • Rezinesi reMobile Access ye100 yekubatanidza panguva imwe chete inosanganisirwa nekutenga chero mudziyo. Zvakakodzera kufunga kuti ichi chikamu cheSMB NGFW modhi renji chinokutendera iwe kuchengetedza pane yakaparadzana kutenga kweMobile Access marezinesi, ayo asina kubatanidzwa kana uchitenga mamwe CheckPoint modhi akateedzana.
  • Kugona kubata gedhi redziviriro uchishandisa Watch Tower mobile application (zvimwe zvakanyorwa mune yedu chinyorwa.)

Kune avo akatevedzana 1530, 1550: Mutsetse uyu wakakodzera mahofisi emapazi anokwana vanhu 100, unopa vanhu nhare dziri kure, uye nzira dzakasiyana-siyana dzokutarisira nadzo dziripo.

Series 1570, 1590

1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

Mhando dzekare mumutsara we1500 dzakatevedzana dzine 8 nzvimbo dzekubatanidza dzemunharaunda, 1 interface yeDMZ uye 1 interface yeInternet connection (bandwidth yezviteshi zvose i1 GB/s). Zvakare zviripo USB 3.0 Port uye USB-C Console. Models dzinouya nerutsigiro rwe4G/LTE modem. Tsigiro yeMicro-SD makadhi inosanganisirwa kuwedzera ndangariro yemukati yechishandiso.

Zvinyorwa zvinoratidzwa pasi apa:

Mamiriro

1570

1590

Nhamba yepamusoro yekubatanidza pasekondi

15 750

21 000

Nhamba yepamusoro yekubatanidza panguva imwe chete

500 000

500 000

Threat Prevention throughput (Mbps)

500

660

Kupinza neFirewall + IPS (Mbit/C)

970

1300

Firewall Bandwidth (Mbps)

2800

2800

Mienzaniso 1570, 1590 ine huwandu hwekushanda:

  • Gaia 80.20 Yakamisikidzwa rondedzero yesarudzo inoratidzwa mukati SK.
  • Mobile Access rezinesi kune mazana maviri ekubatanidza panguva imwe chete
    inouya nekutenga chero ipi zvayo michina. Zvakakodzera kufunga kuti ichi chikamu cheSMB NGFW modhi renji chinokutendera iwe kuchengetedza pane yakaparadzana kutenga kweMobile Access marezinesi, ayo asina kubatanidzwa kana uchitenga mamwe CheckPoint modhi akateedzana.
  • Kugona kubata gedhi redziviriro uchishandisa Watch Tower mobile application (zvimwe zvakanyorwa mune yedu chinyorwa).

Kune avo akatevedzana 1570, 1590: mutsara uyu wakakodzera mahofisi anosvika mazana maviri evanhu, unopa kubatanidza kure, uye une kushanda kwepamusoro pakati pemhuri yeSMB.

Pakuenzanisa zviratidzo mamodheru apfuura:

Mamiriro

1470

1490

Kupinza neThreat Prevention + Firewall (Mbit/C)

500

550

Kupinza neFirewall + IPS (Mbit/C)

625

800

1570R

Iyo NGFW 1570R CheckPoint inofanirwa kutariswa zvakanyanya. Yakagadziridzwa yakanangana neindasitiri yeindasitiri uye ichave yekufarira kumakambani anoshanda mumunda we: kutakurwa, kutorwa kwemaminerari zviwanikwa (mafuta, gasi, nezvimwewo), kugadzirwa kwezvinhu zvakasiyana.

1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

Iyo 1570R yakagadzirwa ichifunga nezve maficha uye mamiriro ekushandiswa kwayo:

  • network perimeter chengetedzo uye kutonga pamusoro pezvishandiso zvakangwara;
  • rutsigiro rweindasitiri ICS/SCADA protocol, GPS chinongedzo;
  • kukanganisa kushivirira kana uchishanda mumamiriro akanyanya (kupisa / kuderera kwekushisa, kunaya, kuwedzera vibration).

Hunhu hweNGFW

1570 Rugged

Nhamba yepamusoro yekubatanidza pasekondi

13 500

Nhamba yepamusoro yekubatanidza panguva imwe chete

500 000

Threat Prevention throughput (Mbps)

400

Kupinza neFirewall + IPS (Mbit/C)

700

Firewall Bandwidth (Mbps)

1900

Mamiriro ekushanda ekushandiswa

-40ΒΊC ~ 75ΒΊC (-40ΒΊF ~ +167ΒΊF)

Zvitupa zvekusimba

EN/IEC 60529, IEC 60068-2-27 kuvhunduka, IEC 60068-2-6 vibration

Mukuwedzera, isu tichaisa zvakasiyana siyana mashandiro eiyo 1570R:

  • Gaia 80.20 Yakamisikidzwa rondedzero yesarudzo inoratidzwa mukati SK.
  • Mobile Access rezinesi kune mazana maviri ekubatanidza panguva imwe chete
    yakapihwa nekutenga mudziyo. Zvakakodzera kufunga kuti iyi ficha yeiyo itsva SMB NGFW modhi renji inobvumidza iwe kuchengetedza pane yakaparadzana kutenga kweMobile Access rezinesi, iyo isingabatanidzwe kana uchitenga imwe CheckPoint modhi yakatevedzana.
  • Kugona kubata gedhi redziviriro uchishandisa Watch Tower mobile application (zvimwe zvakanyorwa mune yedu chinyorwa)
  • Kugadzira otomatiki kwemitemo / mitemo yeIoT zvishandiso panguva yavanenge vabatana netiweki yako yemuno. Mutemo unogadzirwa kune yega yega smart kifaa uye unongobvumira iwo maprotocol ayo aanoda kuti ashande nemazvo.

1500 series control

Tichifunga nezvehunyanzvi hunhu uye kugona kwemidziyo mitsva yemhuri yeSMB, zvakakosha kuti tizive kuti kune nzira dzakasiyana kune manejimendi uye manejimendi avo. Zvirongwa zvinotevera zvinowanzoitika:

  1. Kudzora kwenzvimbo.

    Inowanzo shandiswa mumabhizinesi madiki uko kune akati wandei mahofisi uye hapana centralized manejimendi yezvivakwa. Zvakanakira zvinosanganisira: kusvikika kuendesa uye kutonga kweNGFW, kugona kupindirana nemidziyo munharaunda. Izvo zvisingabatsiri zvinosanganisira zvisingakwanisi zvinosanganisira kugona kwaGaia: kushaikwa kwemitemo yekuparadzanisa nhanho, mashoma ekutarisa maturusi, kushaikwa kwepakati pekuchengetedza matanda.

    1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

  2. Centralized manejimendi kuburikidza neakazvitsaurira Management Server. Iyi nzira inoshandiswa muchiitiko apo maneja anogona kubata akati wandei maNGFWs; anogona kuwanikwa munzvimbo dzakasiyana. Kubatsira kweiyi nzira ndeyekuchinjika uye kutonga pamusoro pemamiriro ese ezvivakwa, uye mamwe Gaia 80.20 Embedded sarudzo dzinowanikwa chete nechirongwa ichi.

    1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

  3. Centralized management kuburikidza Smart-1 Cloud. Ichi chinyorwa chitsva che NGFW manejimendi kubva kuCheckPoint. Yako Management Server inoiswa munzvimbo yegore, manejimendi ese anoitika kuburikidza neWebhu Interface, zvichikubvumidza kuti urege kuvimba neOS yePC yako. Pamusoro pezvo, sevha yekutarisira inochengetedzwa neCheckPoint nyanzvi, kuita kwayo kunoenderana zvakananga nematanho akasarudzwa uye ari nyore scalable.

    1. NGFW yemabhizinesi madiki. Nyowani CheckPoint 1500 Security Gateway Line

  4. Centralized management kuburikidza SMP (Security Management Portal). Mhinduro iyi inosanganisira gore kana pa-nzvimbo kuendesa kweimwe yakagovaniswa webhu portal inokwanisa kubata anosvika zviuru gumi zveSMB zvishandiso panguva imwe chete.
  5. Kukwanisa kudzora pachishandiswa nharembozha yeWatch Tower kunowanikwa chete mushure mekushandisa sarudzo yakazara yekudzora (ona pfungwa 1-4). Verenga zvakawanda pamusoro pechinhu ichi mune yedu chinyorwa.

Ngatiratidzei zvakanyanya kukosha mumaonero edu:

  1. Kushaya kugona kuendesa Mobile Access Portal. Vashandisi vachakwanisa kushandisa Remote Access kuwana zviwanikwa zvemukati zvekambani, asi havazokwanise kubatana neiyo SSL portal nezvikumbiro zvako zvakaburitswa.
  2. Aya anotevera mablades kana sarudzo haatsigirwe: Content Awareness, DLP, Updatable Objects, SSL inspection pasina categorization, Threat Extraction, MTA ine Threat Emulation cheki, Antivirus yekuongorora zvakachengetwa, ClusterXL muLoad Kugovera mode.

Pakupera kwechinyorwa, ndinoda kuona kuti musoro weNGFW mhinduro dzeSMB dzaenda kune imwe nhanho yekutsigirwa nekudyidzana; nekuda kwekuburitswa kweshanduro 80.20 Yakamisikidzwa, chiyero chakawanikwa pakati pesarudzo dzeiyo yakazara vhezheni yeGaia uye iyo Hardware kugona kwemidziyo yemahofisi madiki. Isu tinoronga kuenderera mberi nekutsikisa nhevedzano yezvinyorwa zvekudzidzisa, kwatinozofunga nezvekutanga kumisikidzwa kweSMB mhinduro, kuita tuning uye sarudzo dzadzo itsva.

Yakakura kusarudzwa kwezvinhu paCheck Point kubva kuTS Solution. Ramba wakatarisa (teregiramu, Facebook, VK, TS Solution Blog, Yandex Zen).

Source: www.habr.com

Voeg