Kwaziso kune wese anoenderera mberi nekuverenga akateedzana nezve chizvarwa chitsva cheNGFW Check Point yemhuri yeSMB (1500 series). IN takatarisa mhinduro yeSMP (management portal yeSMB magedhi). Nhasi ndinoda kutaura nezve Smart-1 Cloud portal, inozviisa pachayo semhinduro yakavakirwa paSaaS Check Point, inoshanda seSevha Yekutarisira mugore, saka ichave yakakosha kune chero NGFW Check Point. Kune avo vachangobatana nesu, regai ndikuyeuchidzei nyaya dzakambotaurwa: , , .
Ngatiratidzei maficha makuru eSmart-1 Cloud:
- Imwe chete yepakati mhinduro yekugadzirisa yako yese Check Point zvivakwa (chaiyo uye emuviri magedhi pamatanho akasiyana).
- Iyo yakajairwa seti yemitemo kune ese maBlades inokutendera iwe kurerutsa maitiro ekutonga (kugadzira / kugadzirisa mitemo yeakasiyana mabasa).
- Tsigiro yemaitiro eprofile paunenge uchishanda nemagedhi marongero. Inotarisira kupatsanurwa kwekodzero dzekuwana kana uchishanda mune portal, uko vatariri venetiweki, nyanzvi dzekuongorora, nezvimwewo vanogona kuita mabasa akasiyana siyana panguva imwe chete.
- Kutyisidzirwa kwekutarisa, iyo inopa matanda uye kuona chiitiko munzvimbo imwechete.
- Tsigiro yekudyidzana kuburikidza neAPI. Mushandisi anogona kuita otomatiki maitiro, kurerutsa maitiro ezuva nezuva mabasa.
- Web access. Inobvisa zvirambidzo zvine chekuita nerutsigiro rwemaOS ega uye inonzwisisika.
Kune avo vanotojairana neCheck Point mhinduro, iwo epakati masimba akaunzwa haana kusiyana nekuve neakazvitsaurira Management Server pane-zvivakwa muzvivako zvako. Vachave vari muchidimbu, asi mune iyo Smart-1 Cloud, kuchengetedza kwesevha yekutarisira kunopihwa neCheck Point nyanzvi. Zvinosanganisira: kugadzira mabhapu, kutarisa nzvimbo yemahara pane midhiya, kugadzirisa zvikanganiso, kuisa yazvino software shanduro. Iyo nzira yekutama (kuendesa) marongero zvakare zvakareruka.
Rezinesi
Tisati tajairana nekushanda kweiyo cloud management solution, ngatidzidzei nyaya dzerezinesi kubva kumukuru. .
Kutarisira imwe gedhi:
Iko kunyoreswa kunoenderana neakasarudzwa ekudzora mablades; kune 3 mafambiro akazara:
- Management. 50 GB yekuchengetedza, 1 GB zuva nezuva kune matanda.
- Management + SmartEvent. 100 GB yekuchengetedza, 3 GB matanda ezuva nezuva, rondedzero yechizvarwa.
- Management + Kutevedzera + SmartEvent. 100 GB chengetedzo, 3 GB matanda ezuva nezuva, chizvarwa cheshumo, kurudziro pane zvigadziriso kubva kune general ruzivo kuchengetedza maitiro.
* Sarudzo inoenderana nezvakawanda zvinhu: mhando yematanda, nhamba yevashandisi, traffic volumes.
Kune zvakare kunyoreswa kubata 5 magedhi. Hatisi kuzogara pane izvi zvakadzama - iwe unogona kugara uchiwana ruzivo kubva .
Kuvhurwa kweSmart-1 Cloud
Chero ani zvake anogona kuyedza mhinduro; kuti uite izvi, unofanirwa kunyoresa muInfinity Portal - gore sevhisi kubva kuCheck Point, kwaunogona kuwana mukana wekuedza kunzvimbo dzinotevera:
- Cloud Protection (CloudGuard SaaS, CloudGuard Native);
- Network Kudzivirirwa (CloudGuard Connect, Smart-1 Cloud, Infinity SOC);
- Endpoint Protection (, SandBlast Agent Cloud Management, Sandblast Mobile).
Isu tichapinda muhurongwa newe (kunyoresa kunodiwa kune vashandisi vatsva) uye enda kuSmart-1 Cloud mhinduro:
Iwe unozoudzwa muchidimbu nezvezvakanakira mhinduro iyi (Infrastructure management, hapana kuisirwa kunodiwa, inogadziridza otomatiki).
Mushure mekuzadza minda, iwe uchafanirwa kumirira kusvika account yako yagadzirirwa kupinda mu portal:
Kana kuvhiya kwakabudirira, iwe unogashira ruzivo rwekunyoresa neemail (inotsanangurwa kana uchipinda muInfinity Portal), uye iwe zvakare unozoendeswa kune iyo Smart-1 Cloud peji repamba.
Anowanikwa portal tabs:
- Tanga SmartConsole. Uchishandisa iyo yakaiswa paPC yako, kana kushandisa iyo webhu interface.
- Kuwiriranisa nechinhu chegedhi.
- Kushanda nematanda.
- Zvirongwa.
Kuwiriranisa negedhi
Ngatitangei nekuwiriranisa Chengetedzo Gedhi; kuti uite izvi, unofanirwa kuiwedzera sechinhu. Enda kune tab "Connect Gateway"
Iwe unofanirwa kuisa yakasarudzika zita regedhi; unogona kuwedzera mhinduro kune chinhu. Wobva wadzvanya "Nyoresa".
Chinhu chegedhi chinozoonekwa chinozoda kuwiriraniswa neManagement Server nekuita iyo CLI mirairo yesuwo:
- Ita shuwa kuti yazvino JHF (Jumbo Hotfix) yakaiswa pagedhi.
- Seta chiratidzo chekubatanidza: set security-gedhi maas pane auth-token
- Tarisa mamiriro eiyo synchronization tunnel:
MaaS Status: Yakagoneswa
MaaS Tunnel State: Up
MaaS domain-zita:
Service-Identifier.maas.checkpoint.com
Gateway IP yeMaaS Kukurukurirana: 100.64.0.1
Kana masevhisi eMisa Tunnel asimudzwa, iwe unofanirwa kuenderera mberi nekumisikidza kubatana kweSIC pakati pegedhi neSmart-1 Cloud muSmartconsole. Kana kuvhiya kwacho kwakabudirira, iyo gedhi topology ichawanikwa, ngatiisei muenzaniso:
Saka, kana uchishandisa Smart-1 Cloud, gedhi rakabatana ne "grey" network 10.64.0.1.
Rega ndiwedzere kuti mukurongeka kwedu gedhi pacharo rinopinda paInternet uchishandisa NAT, saka, hapana yeruzhinji IP kero pane yayo interface, zvisinei, isu tinogona kuibata kubva kunze. Ichi chimwe chinhu chinonakidza cheSmart-1 Cloud, nekuda kweiyo yakaparadzana manejimendi subnet inogadzirwa ine dziva rayo reIP kero.
mhedziso
Kana iwe uchinge wanyatso wedzera gedhi rekutungamira kuburikidza neSmart-1 Cloud, iwe une mukana wakazara, senge muSmart Console. Pane yedu dhizaini, isu takatangisa iyo webhu vhezheni; kutaura zvazviri, iyo yakasimudzwa chaiyo muchina une inomhanya manejimendi mutengi.
Iwe unogona kugara uchidzidza zvakawanda nezve kugona kweSmart Console uye iyo Check Point yekuvakisa mune yedu munyori .
Ndizvo zvega nhasi, takamirira chinyorwa chekupedzisira cheiyi nhevedzano, umo isu tichabata pamusoro pekuita tuning kugona kweSMB 1500 yakatevedzana mhuri ine Gaia 80.20 Embedded yakaiswa.
. Ramba wakatarisa (, , , , )
Source: www.habr.com