{"id":33222,"date":"2019-10-31T21:51:25","date_gmt":"2019-10-31T18:51:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-check-point-getting-started-r80-20-identity-awareness\/"},"modified":"2019-10-31T21:51:25","modified_gmt":"2019-10-31T18:51:25","slug":"10-check-point-getting-started-r80-20-identity-awareness","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","title":{"rendered":"10. Fillimi me Check Point R80.20. Nd\u00ebrgjegj\u00ebsimi i Identitetit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"10. Fillimi me Check Point R80.20. Nd\u00ebrgjegj\u00ebsimi i Identitetit\" src=\"\/wp-content\/uploads\/2019\/05\/d02cb12971142bfe4ca1cb67c6466a95.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMir\u00eb se erdh\u00ebt n\u00eb m\u00ebsimin e dhjet\u00eb \u2014 nj\u00eb p\u00ebrvjetor. Sot do t\u00eb flasim p\u00ebr nj\u00eb tjet\u00ebr bleyd Check Point \u2014 <b>Identity Awareness<\/b>. Q\u00eb n\u00eb fillim, kur p\u00ebrshkruam NGFW, e p\u00ebrcaktuam se \u00ebsht\u00eb e domosdoshme q\u00eb t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr rregullimin e aksesit n\u00eb baz\u00eb t\u00eb llogarive, e jo t\u00eb IP-adresave. Kjo lidhet kryesisht me mobilitetin e rritur t\u00eb p\u00ebrdoruesve dhe p\u00ebrhapjen e gjer\u00eb t\u00eb modelit BYOD \u2014 merrni pajisjen tuaj. N\u00eb nj\u00eb kompani mund t\u00eb ket\u00eb shum\u00eb njer\u00ebz q\u00eb lidhen n\u00ebp\u00ebrmjet WiFi, marrin IP dinamik dhe madje nga segmente t\u00eb ndryshme t\u00eb rrjetit. Provojeni t\u00eb krijoni lista t\u00eb aksesit n\u00eb baz\u00eb t\u00eb IP-\u00ebve. K\u00ebtu nuk mund t\u00eb kalojm\u00eb pa identifikimin e p\u00ebrdoruesve. Dhe pik\u00ebrisht bleydi Identity Awareness do t\u00eb na ndihmoj\u00eb n\u00eb k\u00ebt\u00eb \u00e7\u00ebshtje.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Por fillimisht le t\u00eb shqyrtojm\u00eb, p\u00ebr \u00e7far\u00eb p\u00ebrdoret m\u00eb s\u00eb shpeshti identifikimi i p\u00ebrdoruesve?<\/p>\n<ol>\n<li>P\u00ebr t\u00eb kufizuar aksesin n\u00eb rrjet sipas llogarive t\u00eb p\u00ebrdoruesve dhe jo sipas IP-adresave. Aksesi mund t\u00eb rregullohet si thjesht n\u00eb internet, ashtu edhe n\u00eb \u00e7do segment tjet\u00ebr t\u00eb rrjetit, p\u00ebr shembull DMZ.<\/li>\n<li>Aksesi sipas <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"34\">VPN<\/a>. Pranohet se \u00ebsht\u00eb shum\u00eb m\u00eb e leht\u00eb p\u00ebr p\u00ebrdoruesin t\u00eb p\u00ebrdor\u00eb llogarin\u00eb e tij t\u00eb domain-it p\u00ebr autorizim, sesa nj\u00eb fjal\u00ebkalim tjet\u00ebr t\u00eb p\u00ebrpunuar.<\/li>\n<li>P\u00ebr t\u00eb menaxhuar Check Point-in gjithashtu nevojitet nj\u00eb llogari, e cila mund t\u00eb ket\u00eb t\u00eb drejta t\u00eb ndryshme.<\/li>\n<li>Dhe pjesa m\u00eb e k\u00ebndshme \u2014 Raportimi. \u00cbsht\u00eb shum\u00eb m\u00eb e k\u00ebndshme t\u00eb shoh\u00ebsh n\u00eb raporte p\u00ebrdorues konkret\u00eb, e jo IP-adresat e tyre.<\/li>\n<\/ol>\n<p>\nN\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, Check Point mb\u00ebshtet dy lloje llogarish:<\/p>\n<ul>\n<li><b>P\u00ebrdoruesit Lokal\u00eb t\u00eb Brendsh\u00ebm<\/b>. P\u00ebrdoruesi krijohet n\u00eb baz\u00ebn lokale t\u00eb serverit t\u00eb menaxhimit.<\/li>\n<li><b>P\u00ebrdoruesit e Jasht\u00ebm<\/b>. Nj\u00eb baz\u00eb e jashtme p\u00ebrdoruesish mund t\u00eb jet\u00eb Microsoft Active Directory ose \u00e7do server tjet\u00ebr LDAP.<\/li>\n<\/ul>\n<p>\nSot do t\u00eb flasim p\u00ebr aksesin n\u00eb rrjet. P\u00ebr t\u00eb menaxhuar aksesin n\u00eb rrjet, n\u00eb prani t\u00eb Active Directory, si objekt (source ose destination) p\u00ebrdoret ajo q\u00eb quhet <b>Access Role<\/b>, e cila lejon p\u00ebrdorimin e tre parametrave t\u00eb p\u00ebrdoruesit:<\/p>\n<ol>\n<li><b>Network\nglobal\n   log \/dev\/log local0\n   log \/dev\/log local1 notice\n   chroot \/var\/lib\/haproxy\n   stats timeout 30s\n   user haproxy\n   group haproxy\n   daemon\n\ndefaults\n   log global\n   mode http\n   option httplog\n   option dontlognull\n   timeout connect 5000\n   timeout client 50000\n   timeout server 50000\n\nfrontend http_front\n   bind *:80\n   stats uri \/haproxy?stats\n   default_backend http_back\n\nbackend http_back\n   balance roundrobin\n   server server_name1 private_ip1:80 check\n   server server_name2 private_ip2:80 check<\/b> \u2014 pra, rrjeti nga i cili p\u00ebrdoruesi p\u00ebrpiqet t\u00eb lidhet<\/li>\n<li><b>AD User ose Grupi i P\u00ebrdoruesve<\/b> \u2014 k\u00ebto t\u00eb dh\u00ebna nxirren direkt nga serveri AD<\/li>\n<li><b>Makin\u00eb<\/b> \u2014 stacioni i pun\u00ebs.<\/li>\n<\/ol>\n<p>\nN\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, identifikimi i p\u00ebrdoruesve mund t\u00eb realizohet n\u00eb disa m\u00ebnyra:<\/p>\n<ul>\n<li><b>AD Query<\/b>Check Point lexhon logarit\u00eb e serverit AD p\u00ebr p\u00ebrdoruesit e autentifikuar dhe adresat e tyre IP. Kompjutera q\u00eb ndodhen n\u00eb domenin AD identifikohen automatikisht.<\/li>\n<li><b>Autentifikimi i Bazuar n\u00eb Shfletues<\/b>Identifikimi p\u00ebrmes shfletuesit t\u00eb p\u00ebrdoruesit (Captive Portal ose Transparent Kerberos). P\u00ebrdoret shpesh p\u00ebr pajisjet q\u00eb nuk jan\u00eb n\u00eb domen.<\/li>\n<li><b>Serverat e Terminaleve<\/b>N\u00eb k\u00ebt\u00eb rast, identifikimi realizohet p\u00ebrmes nj\u00eb agjenti t\u00eb ve\u00e7ant\u00eb terminal (instalohet n\u00eb serverin terminal).<\/li>\n<\/ul>\n<p>\nk\u00ebto jan\u00eb tri opsione nga m\u00eb t\u00eb zakonshmet, por ka edhe tri t\u00eb tjera:<\/p>\n<ul>\n<li><b>Agjent\u00ebt e Identitetit<\/b>Nj\u00eb agjent i ve\u00e7ant\u00eb vendoset n\u00eb kompjuter\u00ebt e p\u00ebrdoruesve.<\/li>\n<li><b>Kolektori i Identitetit<\/b>Nj\u00eb utilitar i ve\u00e7ant\u00eb, i cili instalohet n\u00eb Windows Server dhe mbledh logarit\u00eb e autentifikimit n\u00eb vend t\u00eb port\u00ebs. N\u00eb fakt, nj\u00eb opsion i domosdosh\u00ebm kur ka shum\u00eb p\u00ebrdorues.<\/li>\n<li><b>Llogaritja RADIUS<\/b>Dhe ku do t\u00eb ishim pa t\u00eb vjetrin dhe t\u00eb mir\u00ebn RADIUS.<\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb m\u00ebsim, do t\u00eb demonstroj opsionin e dyt\u00eb \u2014 Autentifikimi i Bazuar n\u00eb Shfletues. Mendoj se teori mjaft, le t\u00eb kalojm\u00eb n\u00eb praktik\u00eb.<\/p>\n<h3>Video m\u00ebsim<\/h3>\n<p>\n<center><div class=\"youtube-placeholder\" data-id=\"Ud0i8rHEoJ0\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/Ud0i8rHEoJ0\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Q\u00ebndroni t\u00eb lidhur p\u00ebr m\u00eb shum\u00eb dhe bashkohuni me kanalin ton\u00eb t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCKOESE8nBWQPuQmi994_YMA\">YouTube<\/a><\/noindex> \ud83d\ude42<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/450526\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u044e\u0431\u0438\u043b\u0435\u0439\u043d\u044b\u0439 \u2014 10-\u0439 \u0443\u0440\u043e\u043a. \u0418 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0431\u043b\u0435\u0439\u0434\u0435 Check Point \u2014 Identity Awareness. \u0415\u0449\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043f\u0440\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 NGFW, \u043c\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u043d\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u043e \u044d\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33222","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:51:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710. Check Point Fillimi R80.20. Vet\u00ebdija e Identitetit | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710. Check Point Getting Started R80.20. Identity Awareness | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/10-check-point-getting-started-r80-20-identity-awareness","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:25+00:00","article:modified_time":"2019-10-31T18:51:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33222","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:49:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:44:42","updated":"2026-02-04 14:49:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=33222"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33222\/revisions"}],"predecessor-version":[{"id":156663,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33222\/revisions\/156663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/24959"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=33222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=33222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=33222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}