5. NGFW yemabhizimisi maduku. Cloud SMP Management

Ini ndinogamuchira vaverengi kune yedu yakatevedzana yezvinyorwa, iyo yakatsaurirwa kuSMB Check Point, inova iyo 1500 yakatevedzana modhi renji. IN kutanga chikamu yakataura kugona kubata yako SMB yakatevedzana NGFWs uchishandisa iyo Security Management Portal (SMP) gore sevhisi. Chekupedzisira, yave nguva yekutaura nezvayo zvakadzama, tichiratidza sarudzo dziripo uye maturusi ekutonga. Kune avo vachangobatana nesu, regai ndikuyeuchidzei nyaya dzakambotaurwa: kutanga uye kugadzirisa , sangano rekufambiswa kwewireless traffic (WiFi uye LTE) , VPN

SMP inzvimbo yepakati yekutarisira yako SMB zvishandiso, kusanganisira yewebhu interface uye maturusi ekushandisa anosvika zviuru zvishanu zvishandiso. Aya anotevera Check Point modhi akateedzana anotsigirwa: 5, 000, 600, 700, 910R, 1100, 1200.

Kutanga, ngatitsanangure zvakanakira mhinduro iyi:

1. Centralized infrastructure kugadzirisa. Kutenda kune gore portal, unogona kuendesa marongero, kushandisa marongero, zviitiko zvekudzidza - zvisinei nenzvimbo yako uye nhamba yeNGFWs musangano rako.
2. Scalability uye kunyatsoshanda. Nekutenga mhinduro yeSMP, unotora kunyorera kunoshanda nerutsigiro rwekusvika ku5000 NGFW, izvi zvinokutendera kuti uwedzere nyore node nyowani kune zvivakwa, zvichibvumira kutaurirana kune simba pakati pavo nekuda kweVPN.

Iwe unogona kudzidza zvakawanda nezve marezinesi sarudzo kubva kuSMP zvinyorwa; pane maviri sarudzo:

• Cloud host SMP. Iyo manejimendi server inotambirwa muCheck Point gore uye inotsigira anosvika makumi mashanu magedhi.
• On-Premise SMP. Iyo manejimendi server inotambirwa muvatengi's Cloud solution, rutsigiro rweanosvika zviuru zvishanu magedhi aripo.

Ngatiwedzerei chinhu chakakosha, mumaonero edu: kana tichitenga chero modhi kubva ku1500 akatevedzana, imwe SMP rezinesi inosanganisirwa mupakeji. Saka, nekutenga chizvarwa chitsva cheSMB, iwe uchave uine mukana wekutonga kwegore pasina imwe mari.

Kushandisa kunoshanda

Mushure mekutaura kupfupi, isu tichaenda kune inoshanda yekuzivana nemhinduro; parizvino, vhezheni yedemo yeiyo portal inowanikwa pakukumbira kuhofisi yako yenzvimbo yeCheck Point. Pakutanga, iwe uchakwaziswa nehwindo remvumo kwauchazoda kutsanangura: domain, username, password.

Kero yeiyo yakatumirwa SMP portal inoratidzwa zvakananga sedomasi; kana iwe ukaitenga kuburikidza ne "Cloud Hosted SMP" kunyoreswa, wozoendesa imwe nyowani, unofanirwa kutumira chikumbiro nekudzvanya pane "New Domain Chikumbiro" bhatani ( nguva yekudzokorora kusvika kumazuva matatu).

Tevere, iyo hombe portal peji inoratidzwa nenhamba nezve inochengetedzwa magedhi uye anowanikwa sarudzo kubva kumenyu.

Ngatitarisei tebhu yega yega zvakasiyana, tichitsanangura muchidimbu kugona kwayo.

mepu

Chikamu chinokutendera kuti utarise nzvimbo yeNGFW yako, kuona mamiriro ayo, kana kuenda kune yayo yakananga marongero.

Masuwo

Iyo tafura, iyo inosanganisira yakachengetedzwa SMB magedhi kubva kune yako masikirwo, ine ruzivo: gedhi zita, modhi, OS vhezheni, mutemo wepolicy.

map

Chikamu chacho chine runyorwa rwemaprofile anoratidza chimiro cheakaiswa maBlades pavari, pazvinogoneka kusarudza kodzero dzekuwana kuti uite shanduko kugadziriso (mapurani ega ega anogona kungogadziriswa munharaunda).

Kana iwe ukapinda muzvirongwa zveimwe chimiro, unogona kuwana iyo yakazara kumisikidzwa yeNGFW yako.

The Chengetedzo Software Blades chikamu chakatsaurirwa kugadzirisa yega yega NGFW blades, kunyanya:
Firewall, Applications uye URLs, IPS, Anti-Virus, Anti-Spam, QoS, Remote Access, Site-to-Site VPN, Kuziva Kwemushandisi, Anti-Bot, Kutyisidzira Emulation, Kudzivirira Kutyisidzira, SSL Inspection.

Ziva kugona kugadzirisa CLI zvinyorwa zvinozoiswa otomatiki kumasuwo anotsanangurwa muZvirongwa-> Nhoroondo. Nerubatsiro rwavo, unogona kuseta akaparadzana akafanana marongero (zuva/nguva, mapassword ekupinda, shanda neSNMP yekutarisa mapuroteni, nezvimwewo)

Hatisi kuzogara pane yakatarwa marongero zvakadzama, izvi zvakafukidzwa kare, kune zvakare kosi Tarisa Nzvimbo Yekutanga.

Logs

Imwe yemabhenefiti ekushandisa SMP ichave yepakati maonero ematanda eSMB magedhi ako, ayo anogona kuwanikwa nekuenda kuLogs → Gateway Logs.

Mune sefa, unogona kutsanangura imwe gedhi, tsanangura kwainobva kana kero yekuenda, nezvimwe. Kazhinji, kushanda nematanda kwakafanana nekuona muSmart Console; kuchinjika uye zvemukati zveruzivo zvinochengetwa.

Cyber ​​​​Maonero

Icho chikamu chine nhamba muchimiro chemishumo pane zvichangoburwa zvekuchengetedza zviitiko; ivo vanokutendera iwe kukurumidza kuronga matanda uye kuratidza inobatsira infographics:

Zvose kugumisa

Saka, SMP inzvimbo yemazuva ano inosanganisa intuitive interface uye nehunyanzvi hwakadzama maererano nekutonga yako NGFW mhinduro dzemhuri yeSMB. Ngationei zvakare mabhenefiti ayo makuru:

1. Kugona kwekutonga kure kusvika ku5000 NGFW.
2. Kugadziriswa kweiyo portal neCheck Point nyanzvi (munyaya yeiyo Cloud Yakagadzirirwa SMP kunyoreswa).
3. Inodzidzisa uye yakarongeka data nezve zvivakwa zvako mune chimwe chishandiso.

Yakakura kusarudzwa kwezvinhu paCheck Point kubva kuTS Solution. Ramba wakatarisa (teregiramu, Facebook, VK, TS Solution Blog, Yandex Zen).

Source: www.habr.com