7. Cheka Pokutangira R80.20. Access Control

Tikugashirei kuChidzidzo 7, kwatichatanga kushanda nekuchengetedza mitemo. Nhasi tichaisa mutemo pasuwo redu kekutanga, i.e. Pakupedzisira tichaita "kuisa mutemo". Mushure meizvi, traffic ichakwanisa kupfuura nepagedhi!
Kazhinji, mitemo, kubva pakuona kweCheck Point, ipfungwa yakafaranuka. Chengetedzo Policies inogona kukamurwa kuita 3 mhando:

1. Access Control. Izvi zvinosanganisira mashizha akadai se: Firewall, Application Control, URL Sefa, Content Awareness, Mobile Access, VPN. Avo. zvese zvine chekuita nekubvumira kana kudzora traffic.
2. Kudzivirira Kutyisidzira. Mablades anoshandiswa pano: IPS, Anti-Virus, Anti-Bot, Threat Emulation, Threat Extraction. Avo. mabasa anotarisa zvirimo mutraffic kana zvirimo zvakatopfuura neAccess Control.
3. Desktop Security. Aya atove marongero ekugadzirisa Endpoint vamiririri (kureva kuchengetedza nzvimbo dzekushandira). Muchidimbu, isu hatisi kuzobata pane iyi nyaya mukosi.

Muchidzidzo chino tichatanga kutaura nezve Access Control policy.

Kuumbwa kweAccess Control

Access Control ndiyo yekutanga mutemo inofanirwa kuiswa pagedhi. Pasina iyi mutemo, vamwe (Kutyisidzira Kudzivirira, Desktop Chengetedzo) haingoiswe. Sezvambotaurwa, Access Control mitemo inosanganisira akati wandei mablades kamwechete:

• Firewall;
• Application & URL Sefa;
• Content Awareness;
• Mobile Access;
• NAT

Kutanga, isu tichatarisa imwe chete - Firewall.

Matanho mana ekugadzirisa Firewall

Kuisa mutemo pane gedhi, TINOFANIRA kupedzisa nhanho dzinotevera:

1. Rondedzera magedhi kuti aenderane nezvakakodzera security zone (ngave Yemukati, Yekunze, DMZ, nezvimwewo)
2. mutoo Anti-Spoofing;
3. Gadzira network zvinhu (Networks, Hosts, Servers etc.) Izvi zvakakosha! Sezvandambotaura, Check Point inoshanda chete nezvinhu. Iwe haugone kungoisa kero yeIP mune yekuwana runyorwa;
4. Gadzira Access-List-s (inenge imwe).

Pasina aya marongero, marongero acho haangoiswa!

Vhidhiyo chidzidzo

Semazuva ese, tiri kubatanidza vhidhiyo tutori kwatichaita iyo yekutanga kuseta maitiro eAccess-Control uye kugadzira yakakurudzirwa kuwana zvinyorwa.

Ramba wakatarisa zvimwe uye ubatane nesu YouTube mugero 🙂

Source: www.habr.com