{"id":38235,"date":"2019-10-31T22:22:28","date_gmt":"2019-10-31T19:22:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/check-point-gaia-r80-40-chto-budet-novogo\/"},"modified":"2020-12-21T09:34:50","modified_gmt":"2020-12-21T07:34:50","slug":"check-point-gaia-r80-40-chto-budet-novogo","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","title":{"rendered":"Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re?\" src=\"\/wp-content\/uploads\/2019\/09\/6ab30b7a802e9b5cb255ca7dc7f9edcf.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Nj\u00eb tjet\u00ebr l\u00ebshim i sistemit operativ po afron <b>Gaia R80.40<\/b>. Disa jav\u00eb m\u00eb par\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/t5\/General-Topics\/R80-40-Early-Availability-Program-Check-Point-Update\/m-p\/61754\">filloi programi Early Access<\/a><\/noindex>, i cili ofron qasje p\u00ebr testimin e shp\u00ebrndarjes. Ne, si zakonisht, publikojm\u00eb informacionin mbi at\u00eb q\u00eb do t\u00eb jet\u00eb e re, si dhe do t\u00eb theksojm\u00eb momentet q\u00eb jan\u00eb m\u00eb interesante p\u00ebr ne. Duke shkuar p\u00ebrpara, mund t\u00eb them se novacionet jan\u00eb me t\u00eb v\u00ebrtet\u00eb t\u00eb r\u00ebnd\u00ebsishme. Prandaj, duhet t\u00eb p\u00ebrgatitemi p\u00ebr nj\u00eb procedur\u00eb t\u00eb shpejt\u00eb p\u00ebr azhurnim. M\u00eb par\u00eb, ne tashm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\">kemi publikuar nj\u00eb artikull<\/a><\/noindex> mbi at\u00eb se si ta b\u00ebni k\u00ebt\u00eb (p\u00ebr informacion shtes\u00eb, mund t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/obnovlenie\">kontaktoni k\u00ebtu<\/a><\/noindex>). \u041f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a \u0442\u0435\u043c\u0435&#8230;<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>What&#8217;s New<\/h3>\n<p>Do t\u00eb shqyrtojm\u00eb k\u00ebtu novacionet q\u00eb jan\u00eb deklaruar oficialisht. Informacioni \u00ebsht\u00eb marr\u00eb nga faqja <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/\">Check Mates<\/a><\/noindex> (komuniteti zyrtar i Check Point). Me lejen tuaj, nuk do ta p\u00ebrkthej k\u00ebt\u00eb tekst, duke qen\u00eb se audienca e habr\u00ebs e lejon k\u00ebt\u00eb. N\u00eb vend t\u00eb k\u00ebsaj, do t\u00eb l\u00eb komentet e mia n\u00eb kapitullin tjet\u00ebr.<\/p>\n<p><b class=\"spoiler_title\">1. Siguria e IoT. Funksione t\u00eb reja q\u00eb lidhen me Internetin e Gj\u00ebrave<\/b><\/p>\n<ul>\n<li>Mblidhni pajisjet dhe atributet e trafik info nga motor\u00ebt e zbulimit t\u00eb IoT t\u00eb certifikuara (aktualisht mb\u00ebshtet Medigate, CyberMDX, Cynerio, Claroty, Indegy, SAM dhe Armis).<\/li>\n<li>Konfiguroni nj\u00eb Politika t\u00eb re t\u00eb dedikuar p\u00ebr IoT n\u00eb menaxhimin e politikave.<\/li>\n<li>Configure and manage security rules that are based on the IoT devices&#8217; attributes.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">2. Inspektimi i TLS<\/b><b>HTTP\/2:<\/b><\/p>\n<ul>\n<li>HTTP\/2 \u00ebsht\u00eb nj\u00eb p\u00ebrmir\u00ebsim i protokollit HTTP. P\u00ebrmir\u00ebsimi ofron shpejt\u00ebsi, efikasitet dhe siguri m\u00eb t\u00eb mir\u00eb, duke rezultuar n\u00eb nj\u00eb p\u00ebrvoj\u00eb m\u00eb t\u00eb mir\u00eb p\u00ebr p\u00ebrdoruesin.<\/li>\n<li>Check Point&#8217;s Security Gateway now support HTTP\/2 and benefits better speed and efficiency while getting full security, with all Threat Prevention and Access Control blades, as well as new protections for the HTTP\/2 protocol.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr trafikun e qart\u00eb dhe t\u00eb koduar me SSL dhe \u00ebsht\u00eb plot\u00ebsisht e integruar me kapacitetet e Inspektimit HTTPS\/TLS.<\/li>\n<li>Shtresa e Inspektimit t\u00eb TLS<\/li>\n<\/ul>\n<p><b>. Novacionet n\u00eb lidhje me inspektimin HTTPS:<\/b>Nj\u00eb Shtres\u00eb e re Politike n\u00eb SmartConsole e dedikuar p\u00ebr Inspektimin e TLS.<\/p>\n<ul>\n<li>Shtresa t\u00eb ndryshme t\u00eb Inspektimit t\u00eb TLS mund t\u00eb p\u00ebrdoren n\u00eb paketa t\u00eb ndryshme politike.<\/li>\n<li>Ndara e nj\u00eb shtrese t\u00eb Inspektimit t\u00eb TLS n\u00ebp\u00ebr paketa t\u00eb shumta politike.<\/li>\n<li>API p\u00ebr operacionet TLS.<\/li>\n<li>3. Parandalimi i K\u00ebrc\u00ebnimeve<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">P\u00ebrmir\u00ebsim i p\u00ebrgjithsh\u00ebm i efikasitetit p\u00ebr proceset e Parandalimit t\u00eb K\u00ebrc\u00ebnimeve dhe p\u00ebrdit\u00ebsimeve.<\/b><\/p>\n<ul>\n<li>P\u00ebrdit\u00ebsime automatike p\u00ebr Motorin e Eksportimit t\u00eb K\u00ebrc\u00ebnimeve.<\/li>\n<li>Objektet Dinamike, Domain dhe t\u00eb Azhurnueshme tani mund t\u00eb p\u00ebrdoren n\u00eb politikat e Parandalimit t\u00eb K\u00ebrc\u00ebnimeve dhe Inspektimin e TLS. Objeketet e azhurnueshme jan\u00eb objekte rrjeti q\u00eb p\u00ebrfaq\u00ebsojn\u00eb nj\u00eb sh\u00ebrbim t\u00eb jasht\u00ebm ose nj\u00eb list\u00eb dinamike t\u00eb njohur t\u00eb adresave IP, p\u00ebr shembull \u2014 adresat IP t\u00eb Office365 \/ Google \/ Azure \/ AWS dhe objektet Geo.<\/li>\n<li>Antivirus tani p\u00ebrdor treguesit e k\u00ebrc\u00ebnimeve SHA-1 dhe SHA-256 p\u00ebr t\u00eb bllokuar skedar\u00ebt n\u00eb baz\u00eb t\u00eb hash-ave t\u00eb tyre. Importoni treguesit e rinj nga pamja e Treguesve t\u00eb K\u00ebrc\u00ebnimeve n\u00eb SmartConsole ose nga CLI e Mjeteve t\u00eb Inteligjenc\u00ebs t\u00eb Personalizuar.<\/li>\n<li>Antivirus dhe SandBlast Threat Emulation tani mb\u00ebshtesin inspektimin e trafik e-mail n\u00ebprotokollin POP3, si dhe inspektimin e p\u00ebrmir\u00ebsuar t\u00eb trafik e-mail n\u00eb protokollin IMAP.<\/li>\n<li>Antivirus dhe SandBlast Threat Emulation tani p\u00ebrdorin funksionin e ri t\u00eb inspektimit t\u00eb SSH p\u00ebr t\u00eb inspektuar skedar\u00ebt e transferuar n\u00ebp\u00ebrmjet protokolleve SCP dhe SFTP.<\/li>\n<li>Anti-Virus and SandBlast Threat Emulation now use the newly introduced SSH inspection feature to inspect files transferred over the SCP and SFTP protocols.<\/li>\n<li>Anti-Virus dhe SandBlast Threat Emulation tani ofrojn\u00eb mb\u00ebshtetje t\u00eb p\u00ebrmir\u00ebsuar p\u00ebr inspektimin e SMBv3 (3.0, 3.0.2, 3.1.1), i cili p\u00ebrfshin inspektimin e lidhjeve me shum\u00eb kanale. Check Point tani \u00ebsht\u00eb ofruesi i vet\u00ebm q\u00eb mb\u00ebshtet inspektimin e nj\u00eb transferimi skedari p\u00ebrmes shum\u00eb kanaleve (nj\u00eb ve feature e cila \u00ebsht\u00eb e aktivizuar automatikisht n\u00eb t\u00eb gjitha mjediset Windows). Kjo lejon klient\u00ebt t\u00eb q\u00ebndrojn\u00eb t\u00eb sigurt nd\u00ebrsa punojn\u00eb me k\u00ebt\u00eb ve feature q\u00eb p\u00ebrmir\u00ebson performanc\u00ebn.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">4. Nd\u00ebrgjegj\u00ebsimi i Identitetit<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr integrimin e Captive Portal me SAML 2.0 dhe Ofruesit e Identitetit t\u00eb pal\u00ebve t\u00eb treta.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr Identity Broker p\u00ebr ndarjen e shkall\u00ebzueshme dhe granulare t\u00eb informacionit t\u00eb identitetit midis PDP-ve, si dhe ndarjen nd\u00ebr-domen.<\/li>\n<li>P\u00ebrmir\u00ebsime n\u00eb Agjentin e Server\u00ebve Terminale p\u00ebr nj\u00eb shkall\u00ebzim dhe kompatibilitet m\u00eb t\u00eb mir\u00eb.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">5. IPsec VPN<\/b><\/p>\n<ul>\n<li>Konfiguroni domainet e ndryshme t\u00eb enkriptimit VPN n\u00eb nj\u00eb Gateway Sigurie q\u00eb \u00ebsht\u00eb an\u00ebtar i shum\u00eb komuniteteve VPN. Kjo ofron:<\/li>\n<li>Privat\u00ebsi t\u00eb p\u00ebrmir\u00ebsuar \u2014 Rrjetet e brendshme nuk zbulohet n\u00eb negociatat e protokollit IKE.<\/li>\n<li>Siguri dhe granularitet t\u00eb p\u00ebrmir\u00ebsuar \u2014 Specifikoni cilat rrjete jan\u00eb t\u00eb aksesueshme n\u00eb nj\u00eb komunitet VPN t\u00eb caktuar.<\/li>\n<li>Nd\u00ebrveprueshm\u00ebri e p\u00ebrmir\u00ebsuar \u2014 Definita m\u00eb t\u00eb thjeshta t\u00eb VPN bazuar n\u00eb rrug\u00eb (t\u00eb rekomanduara kur punoni me nj\u00eb domain t\u00eb zbraz\u00ebt VPN).<\/li>\n<li>Krijoni dhe punoni pa probleme me nj\u00eb mjedis VPN t\u00eb Shkall\u00ebzuar t\u00eb Madh (LSV) me ndihm\u00ebn e profileve LSV.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">6. Filtrimi i URL-ve<\/b><\/p>\n<ul>\n<li>Shkall\u00ebzueshm\u00ebri dhe q\u00ebndrueshm\u00ebri t\u00eb p\u00ebrmir\u00ebsuar.<\/li>\n<li>Kapacitet t\u00eb zgjeruar p\u00ebr trajtimin e problemeve.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">7. NAT<\/b><\/p>\n<ul>\n<li>Mekanizmi i p\u00ebrmir\u00ebsuar i alokimit t\u00eb porteve NAT \u2014 n\u00eb Gateway Sigurie me 6 ose m\u00eb shum\u00eb instance t\u00eb CoreXL Firewall, t\u00eb gjitha instance p\u00ebrdorin t\u00eb nj\u00ebjtin rezervuar t\u00eb porteve NAT, i cili optimizon shfryt\u00ebzimin dhe rip\u00ebrdorimin e porteve.<\/li>\n<li>Monitorimi i shfryt\u00ebzimit t\u00eb porteve NAT n\u00eb CPView dhe me SNMP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">8. Z\u00ebri mbi IP (VoIP)<\/b>Shum\u00eb instance t\u00eb CoreXL Firewall trajtojn\u00eb protokollin SIP p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar performanc\u00ebn.<\/p>\n<p><b class=\"spoiler_title\">9. VPN e Qasjes s\u00eb Larg\u00ebt<\/b>P\u00ebrdorni certifikat\u00ebn e makin\u00ebs p\u00ebr t\u00eb ve\u00e7uar asetet korporative dhe ato jo-korporative dhe p\u00ebr t\u00eb vendosur nj\u00eb politik\u00eb q\u00eb forc\u00ebrisht mb\u00ebshtet p\u00ebrdorimin e asignimeve korporative vet\u00ebm. Forcimi mund t\u00eb jet\u00eb para-logon (vet\u00ebm autentifikimi i pajisjes) ose pas-logon (autentifikimi i pajisjes dhe p\u00ebrdoruesit).<\/p>\n<p><b class=\"spoiler_title\">10. Agjenti i Portalit t\u00eb Qasjes Mobile<\/b>Siguria e Pika e Siguris\u00eb e p\u00ebrmir\u00ebsuar sipas k\u00ebrkes\u00ebs brenda Agjentit t\u00eb Portalit t\u00eb Qasjes Mobile p\u00ebr t\u00eb mb\u00ebshtetur t\u00eb gjitha shfletuesit e njohur. P\u00ebr m\u00eb shum\u00eb informacion, shihni sk113410.<\/p>\n<p><b class=\"spoiler_title\">11. CoreXL dhe Multi-Queue<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr alokimin automatik t\u00eb CoreXL SND-ve dhe instanceve t\u00eb Firewall q\u00eb nuk k\u00ebrkon ri-ngarkimin e nj\u00eb Gateway Sigurie.<\/li>\n<li>P\u00ebrvoj\u00eb e p\u00ebrmir\u00ebsuar nga kutia \u2014 Gateway Sigurie ndryshon automatikisht numrin e CoreXL SND-ve dhe instanceve t\u00eb Firewall dhe konfigurimin e Multi-Queue n\u00eb baz\u00eb t\u00eb ngarkes\u00ebs aktuale t\u00eb trafikut.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">12. Klasterizimi<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr Protokollin e Kontrolit t\u00eb Klasterit n\u00eb modin Unicast q\u00eb eliminon nevoj\u00ebn p\u00ebr CCP.<\/li>\n<\/ul>\n<p>Modet e Broadcasting ose Multicast:<\/p>\n<ul>\n<li>Enkriptimi i Protokollit t\u00eb Kontrolit t\u00eb Klasterit tani \u00ebsht\u00eb aktivizuar automatikisht.<\/li>\n<li>M\u00ebnyra e re ClusterXL -Aktiv\/aktiv, e cila mb\u00ebshtet An\u00ebtar\u00ebt e Klasterit n\u00eb vendndodhje t\u00eb ndryshme gjeografike q\u00eb ndodhen n\u00eb subnet t\u00eb ndryshme dhe kan\u00eb adresa IP t\u00eb ndryshme.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr An\u00ebtar\u00ebt e Klasterit ClusterXL q\u00eb ekzekutojn\u00eb versione t\u00eb ndryshme t\u00eb softuerit.<\/li>\n<li>Eliminimi i nevoj\u00ebs p\u00ebr konfigurimin e MAC Magic kur disa klastere jan\u00eb t\u00eb lidhura n\u00eb t\u00eb nj\u00ebjtin subnet.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">13. VSX<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr azhurnimin e VSX me CPUSE n\u00eb Gaia Portal.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr modin Aktiv t\u00eb VSLS.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr raportet statistikore t\u00eb CPView p\u00ebr \u00e7do Sistemi Virtual.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">14. Zero Touch<\/b>Nj\u00eb proces i thjesht\u00eb Plug &amp; Play p\u00ebr instalimin e nj\u00eb pajisjeje \u2014 duke eliminuar nevoj\u00ebn p\u00ebr ekspertiz\u00eb teknike dhe p\u00ebr t\u00eb u lidhur me pajisjen p\u00ebr konfigurimin fillestar.<\/p>\n<p><b class=\"spoiler_title\">15. Gaia REST API<\/b>Gaia REST API ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb lexuar dhe d\u00ebrguar informacion n\u00eb serverat q\u00eb ekzekutojn\u00eb Sistemin Operativ Gaia. Shihni sk143612.<\/p>\n<p><b class=\"spoiler_title\">16. Ruterimi i Avancuar<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsime n\u00eb OSPF dhe BGP lejojn\u00eb t\u00eb rivendosen dhe rifillohen fqinj\u00ebsia OSPF p\u00ebr secil\u00ebn instance t\u00eb CoreXL Firewall pa pasur nevoj\u00eb t\u00eb rivendosen daemon-in e ruterit.<\/li>\n<li>P\u00ebrmir\u00ebsimi i rifreskimit t\u00eb rrug\u00ebve p\u00ebr trajtimin m\u00eb t\u00eb mir\u00eb t\u00eb mosvler\u00ebsimeve t\u00eb rrug\u00ebve t\u00eb BGP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">17. Kapacitetet e reja t\u00eb kernelit<\/b><\/p>\n<ul>\n<li>Kernel Linux i p\u00ebrmir\u00ebsuar<\/li>\n<li>Sistem i ri i ndarjes (gpt):<\/li>\n<li>Mb\u00ebshtet mbi 2TB drives fizik\u00eb\/logjik\u00eb<\/li>\n<li>Sistem m\u00eb i shpejt\u00eb skedar\u00ebsh (xfs)<\/li>\n<li>Mb\u00ebshtetje p\u00ebr ruajtje m\u00eb t\u00eb madhe t\u00eb sistemit (deri n\u00eb 48TB t\u00eb testuar)<\/li>\n<li>P\u00ebrmir\u00ebsime t\u00eb performanc\u00ebs t\u00eb lidhura me I\/O<\/li>\n<li>Multi-Queue:<\/li>\n<li>Mb\u00ebshtetje e plot\u00eb e Clish t\u00eb Gaia p\u00ebr komandat Multi-Queue<\/li>\n<li>Konfigurim automatik \u00abaktiv nga default\u00bb<\/li>\n<li>Mb\u00ebshtetje e montimit SMB v2\/3 n\u00eb pllak\u00ebn e Qasjes me Mobil<\/li>\n<li>Shtuar mb\u00ebshtetje p\u00ebr NFSv4 (klient) (NFS v4.2 \u00ebsht\u00eb versioni i default i NFS t\u00eb p\u00ebrdorur)<\/li>\n<li>Mb\u00ebshtetje p\u00ebr mjete t\u00eb reja p\u00ebr debugging, monitorim dhe konfigurimin e sistemit<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">18. CloudGuard Controller<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsime t\u00eb performanc\u00ebs p\u00ebr lidhjet me Qendrat e Dh\u00ebnave t\u00eb jashtme.<\/li>\n<li>Integrim me VMware NSX-T.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr komanda shtes\u00eb t\u00eb API p\u00ebr t\u00eb krijuar dhe edituar objekte t\u00eb Serverit t\u00eb Qendr\u00ebs s\u00eb Dh\u00ebnave.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">19. Multi-Domain Server<\/b><\/p>\n<ul>\n<li>B\u00ebni kopje rezerv\u00eb dhe riktheni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domainit individual n\u00eb nj\u00eb Server Multi-Domain.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domainit n\u00eb nj\u00eb Server Multi-Domain n\u00eb nj\u00eb Menaxhim t\u00eb Siguris\u00eb t\u00eb ndrysh\u00ebm.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb p\u00ebr t'u b\u00ebr\u00eb nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domainit n\u00eb nj\u00eb Server Multi-Domain.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domainit p\u00ebr t'u b\u00ebr\u00eb nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb.<\/li>\n<li>Riktheni nj\u00eb Domain n\u00eb nj\u00eb Server Multi-Domain, ose nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb n\u00eb nj\u00eb revision t\u00eb m\u00ebparsh\u00ebm p\u00ebr redaktim t\u00eb m\u00ebtejsh\u00ebm.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">20. SmartTasks dhe API<\/b><\/p>\n<ul>\n<li>Metod\u00eb e re autentikimi p\u00ebr API p\u00ebr Menaxhim q\u00eb p\u00ebrdor nj\u00eb \u00c7el\u00ebs API t\u00eb gjeneruar automatikisht.<\/li>\n<li>Komanda t\u00eb reja p\u00ebr API Menaxhimi p\u00ebr t\u00eb krijuar objekte klasteri.<\/li>\n<li>Dispozitimi Qendror i Akumulatorit Jumbo Hotfix dhe Hotfixeve nga SmartConsole ose me API lejon instalimin ose p\u00ebrdit\u00ebsimin e disa Portave t\u00eb Siguris\u00eb dhe Klastereve n\u00eb paralel.<\/li>\n<li>SmartTasks \u2014 Konfiguroni skripte automatike ose k\u00ebrkesa HTTPS t\u00eb nxitura nga detyrat e administratorit, si publikimi i nj\u00eb seance ose instalimi i nj\u00eb politike.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">21. N\u00ebshtrimi<\/b>Dispozitimi Qendror i Akumulatorit Jumbo Hotfix dhe Hotfixeve nga SmartConsole ose me API lejon instalimin ose p\u00ebrdit\u00ebsimin e disa Portave t\u00eb Siguris\u00eb dhe Klastereve n\u00eb paralel.<\/p>\n<p><b class=\"spoiler_title\">22. SmartEvent<\/b>Ndani pamjet dhe raportet SmartView me administratoret e tjera.<\/p>\n<p><b class=\"spoiler_title\">23. Eksportuesi i Log\u00ebve<\/b>Eksportoni log\u00ebt e filtruar sipas vlerave t\u00eb fushave.<\/p>\n<p><b class=\"spoiler_title\">24. Siguria e Pik\u00ebs Fundore<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr enkriptimin BitLocker p\u00ebr Enkriptimin e Diskut t\u00eb Plot\u00eb.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr certifikatat e Autoritetit t\u00eb Certifikimit t\u00eb jashtme p\u00ebr klientin e Siguris\u00eb s\u00eb Pik\u00ebs Fundore<\/li>\n<li>autentikimin dhe komunikimin me Serverin e Menaxhimit t\u00eb Siguris\u00eb s\u00eb Pik\u00ebs Fundore.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr madh\u00ebsin\u00eb dinamike t\u00eb paketave t\u00eb Klientit t\u00eb Siguris\u00eb s\u00eb Pik\u00ebs Fundore bazuar n\u00eb<\/li>\n<li>tiparet p\u00ebr n\u00ebshtrim.<\/li>\n<li>Politika tani mund t\u00eb kontrolloj\u00eb nivelin e njoftimeve p\u00ebr p\u00ebrdoruesit e fundit.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr ambientin VDI t\u00eb P\u00ebrhersh\u00ebm n\u00eb Menaxhimin e Politikave t\u00eb Pik\u00ebs Fundore.<\/li>\n<\/ul>\n<h3>\u00c7far\u00eb na ka p\u00eblqyer m\u00eb shum\u00eb (bazuar n\u00eb detyrat e klient\u00ebve)<\/h3>\n<p>Si\u00e7 e shihni, ka shum\u00eb novitete. Por p\u00ebr ne, si <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\">integrues sistemesh<\/a><\/noindex>, ka disa \u00e7\u00ebshtje shum\u00eb interesante (t\u00eb cilat jan\u00eb gjithashtu interesante p\u00ebr klient\u00ebt tan\u00eb). Top-10 e jon\u00eb:<\/p>\n<ol>\n<li>M\u00eb n\u00eb fund ka mb\u00ebshtetje t\u00eb plot\u00eb p\u00ebr pajisjet IoT. Tani \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb gjesh nj\u00eb kompani q\u00eb nuk ka nj\u00eb nga k\u00ebto pajisje.<\/li>\n<li>Inspektimi TLS tani \u00ebsht\u00eb zhvendosur n\u00eb nj\u00eb nivel t\u00eb ve\u00e7ant\u00eb (Layer). Kjo \u00ebsht\u00eb shum\u00eb m\u00eb e p\u00ebrshtatshme se tani (n\u00eb 80.30). Nuk \u00ebsht\u00eb m\u00eb e nevojshme t\u00eb aktivizoni panelin e vjet\u00ebr Legacy. Plus, tani n\u00eb politik\u00ebn e inspektimit HTTPS mund t\u00eb p\u00ebrdoren objekte Updatable, si sh\u00ebrbimet Office365, Google, Azure, AWS etj. Kjo \u00ebsht\u00eb shum\u00eb e p\u00ebrshtatshme kur duhet t\u00eb konfirmoni p\u00ebrjashtime. Megjithat\u00eb, akoma nuk ka mb\u00ebshtetje p\u00ebr TLS 1.3. Duket se \u201edo ta arrijn\u00eb\u201d me hotfix-in e ardhsh\u00ebm.<\/li>\n<li>Ndryshime t\u00eb r\u00ebnd\u00ebsishme p\u00ebr Anti-Virus dhe SandBlast. Tani \u00ebsht\u00eb e mundur t\u00eb kontrolloj\u00eb protokolle t\u00eb tilla si SCP, SFTP dhe SMBv3 (duke k\u00ebrkuar secili protokoll \u00ebsht\u00eb i nd\u00ebrlikuar, askush nuk di ta b\u00ebj\u00eb).<\/li>\n<li>Shum\u00eb p\u00ebrmir\u00ebsime n\u00eb lidhje me Site-to-Site VPN. Tani \u00ebsht\u00eb e mundur t\u00eb konfiguroni disa VPN domain n\u00eb nj\u00eb gateway q\u00eb p\u00ebrfshin disa VPN community. Kjo \u00ebsht\u00eb shum\u00eb e dobishme dhe m\u00eb e sigurt. P\u00ebr m\u00eb tep\u00ebr, Check Point p\u00ebrfundimisht u kujtua p\u00ebr Route Based VPN dhe pak p\u00ebrmir\u00ebsoi stabilitetin dhe p\u00ebrputhshm\u00ebrin\u00eb e tij.<\/li>\n<li>Kjo funksion ka qen\u00eb shum\u00eb i k\u00ebrkuar p\u00ebr p\u00ebrdoruesit e larg\u00ebt. Tani \u00ebsht\u00eb e mundur t\u00eb autentifikoni jo vet\u00ebm p\u00ebrdoruesin, por edhe pajisjen nga e cila po lidhet. P\u00ebr shembull, ne duam t\u00eb lejojm\u00eb lidhjen p\u00ebrmes VPN vet\u00ebm nga pajisjet korporative. Kjo b\u00ebhet natyrisht me ndihm\u00ebn e certifikatave. Po ashtu, tani \u00ebsht\u00eb e mundur t\u00eb montoni automatikisht (SMB v2\/3) ndarjet e skedar\u00ebve p\u00ebr p\u00ebrdoruesit e larg\u00ebt me klientin VPN.<\/li>\n<li>Ka shum\u00eb ndryshime n\u00eb funksionimin e klasterit. Por ndoshta nj\u00eb nga m\u00eb interesante \u00ebsht\u00eb mund\u00ebsia e funksionimit t\u00eb klasterit ku gateway-t kan\u00eb versione t\u00eb ndryshme Gaia. Kjo \u00ebsht\u00eb e dobishme gjat\u00eb nj\u00eb p\u00ebrdit\u00ebsimi t\u00eb planifikuar.<\/li>\n<li>Jan\u00eb p\u00ebrmir\u00ebsuar mund\u00ebsit\u00eb e Zero Touch. Nj\u00eb gj\u00eb shum\u00eb e dobishme p\u00ebr ata q\u00eb shpesh instalojn\u00eb \"gateway\" t\u00eb vogla (p\u00ebr shembull p\u00ebr ATM).<\/li>\n<li>P\u00ebr log-et tani mb\u00ebshtetet nj\u00eb ruajtje deri n\u00eb 48TB.<\/li>\n<li>Tani mund t\u00eb \"ndani\" dashboard-et tuaja SmartEvent me administratoret e tjer\u00eb.<\/li>\n<li>Log Exporter tani lejon filtrimin paraprak t\u00eb mesazheve q\u00eb d\u00ebrgohen, sipas fushave t\u00eb nevojshme. Nj\u00eb p\u00ebrmbledhje e mir\u00eb p\u00ebr sistemet tuaja SIEM do t\u00eb kalojn\u00eb vet\u00ebm log-et dhe ngjarjet e nevojshme.<\/li>\n<\/ol>\n<h3>P\u00ebrdit\u00ebsim<\/h3>\n<p>Ndoshta shum\u00eb prej jush po mendojn\u00eb p\u00ebr nj\u00eb p\u00ebrdit\u00ebsim. Nuk duhet t\u00eb nguteni. Fillimisht, versioni 80.40 duhet t\u00eb kaloj\u00eb n\u00eb Disponibilitetin e P\u00ebrgjithsh\u00ebm. Por edhe pas k\u00ebsaj, nuk duhet t\u00eb p\u00ebrdit\u00ebsoheni menj\u00ebher\u00eb. \u00cbsht\u00eb m\u00eb mir\u00eb t\u00eb prisni t\u00eb pakt\u00ebn p\u00ebr nj\u00eb patch t\u00eb par\u00eb.<br \/>\nNdoshta shum\u00eb \"sillen\" dhe n\u00eb versione m\u00eb t\u00eb vjetra. Mund t\u00eb them se t\u00eb pakt\u00ebn tani \u00ebsht\u00eb e mundur (dhe madje e nevojshme) t\u00eb p\u00ebrdit\u00ebsoheni n\u00eb 80.30. Kjo \u00ebsht\u00eb nj\u00eb sistem tashm\u00eb i q\u00ebndruesh\u00ebm dhe i verifikuar!<\/p>\n<p>Po ashtu mund t\u00eb abonoheni n\u00eb publikimet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>), ku mund t\u00eb ndiqni shfaqjen e materialeve t\u00eb reja n\u00eb lidhje me Check Point dhe produkte t\u00eb tjera t\u00eb siguris\u00eb.<\/p>\n<p class=\"for_users_only_msg\">Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">Hyni<\/a><\/noindex>, ju lutem.<\/p>\n<h2 class=\"default-block__polling-title\">Cilin version t\u00eb Gaia po p\u00ebrdorni?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">                    R77.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R77.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.20<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    Tjet\u00ebr<\/li>\n<\/ul>\n<p>Kan\u00eb votuar 13 p\u00ebrdorues. Jan\u00eb p\u00ebrmbajtur 6 p\u00ebrdorues.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gaia R80.40. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Early Access, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430. \u041c\u044b, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u043c\u043e\u043c\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u0441 \u043d\u0430\u0448\u0435\u0439 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f. \u0417\u0430\u0431\u0435\u0433\u0430\u044f \u0432\u043f\u0435\u0440\u0435\u0434, \u043c\u043e\u0433\u0443 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0442\u043e\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28701,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38235","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:22:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re? | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:28+00:00","article:modified_time":"2020-12-21T07:34:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38235","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 21:04:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:13:22","updated":"2026-01-23 21:04:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38235"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38235\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}