{"id":38235,"date":"2019-10-31T22:22:28","date_gmt":"2019-10-31T19:22:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/check-point-gaia-r80-40-chto-budet-novogo\/"},"modified":"2020-12-21T09:34:50","modified_gmt":"2020-12-21T07:34:50","slug":"check-point-gaia-r80-40-chto-budet-novogo","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","title":{"rendered":"Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re?\" src=\"\/wp-content\/uploads\/2019\/09\/6ab30b7a802e9b5cb255ca7dc7f9edcf.png\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Nj\u00eb tjet\u00ebr version i sistemit operativ po afrohet <b>Gaia R80.40<\/b>. Disa jav\u00eb m\u00eb par\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/t5\/General-Topics\/R80-40-Early-Availability-Program-Check-Point-Update\/m-p\/61754\">filloi programi Early Access<\/a><\/noindex>, p\u00ebr t\u00eb cilin mund t\u00eb aksesoni p\u00ebr testimin e shp\u00ebrndarjes. Ne, si zakonisht, publikojm\u00eb informacione p\u00ebr at\u00eb q\u00eb do t\u00eb jet\u00eb e re, dhe gjithashtu do t\u00eb nxjerrim n\u00eb pah momentet q\u00eb jan\u00eb m\u00eb interesante nga pik\u00ebpamja jon\u00eb. P\u00ebr t\u00eb qen\u00eb t\u00eb sinqert\u00eb, mund t\u00eb them se risit\u00eb jan\u00eb v\u00ebrtet t\u00eb r\u00ebnd\u00ebsishme. Prandaj, duhet t\u00eb p\u00ebrgatiteni p\u00ebr procedur\u00ebn e shpejt\u00eb t\u00eb p\u00ebrdit\u00ebsimit. M\u00eb par\u00eb ne tashm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/353470\/\">publikuam nj\u00eb artikull<\/a><\/noindex> n\u00eb lidhje me se si ta b\u00ebni k\u00ebt\u00eb (p\u00ebr informacion t\u00eb m\u00ebtejsh\u00ebm, mund <noindex><a rel=\"nofollow\" href=\"https:\/\/cpsupport.ru\/obnovlenie\">t\u00eb kontaktoni k\u00ebtu<\/a><\/noindex>). T\u00eb kalojm\u00eb te tema&#8230;<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb e re<\/h3>\n<p>Le t\u00eb shqyrtojm\u00eb k\u00ebtu risit\u00eb e shpallura zyrtarisht. Informata \u00ebsht\u00eb marr\u00eb nga faqja <noindex><a rel=\"nofollow\" href=\"https:\/\/community.checkpoint.com\/\">Check Mates<\/a><\/noindex> (komuniteti zyrtar Check Point). Me lejen tuaj, nuk do ta p\u00ebrkthej k\u00ebt\u00eb tekst, pasi audienca e Habr\u00ebs e lejon k\u00ebt\u00eb. Ndaj, do t\u00eb l\u00eb komentet e mia n\u00eb kapitullin pasues.<\/p>\n<p><b class=\"spoiler_title\">1. Siguria e IoT. Funksionet e reja q\u00eb lidhen me internetin e things<\/b><\/p>\n<ul>\n<li>Mblidhni pajisjet IoT dhe atributet e trafikut nga motor\u00ebt e certifikuar t\u00eb zbulimit t\u00eb IoT (aktualisht mb\u00ebshtet Medigate, CyberMDX, Cynerio, Claroty, Indegy, SAM dhe Armis).<\/li>\n<li>Konfiguroni nj\u00eb Shtres\u00eb t\u00eb Re t\u00eb Politikave t\u00eb IoT n\u00eb menaxhimin e politikave.<\/li>\n<li>Konfiguroni dhe menaxhoni rregullat e siguris\u00eb q\u00eb bazohen n\u00eb atributet e pajisjeve IoT.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">2. Inspektimi i TLS<\/b><b>HTTP\/2:<\/b><\/p>\n<ul>\n<li>HTTP\/2 \u00ebsht\u00eb nj\u00eb p\u00ebrdit\u00ebsim i protokollit HTTP. Ky p\u00ebrdit\u00ebsim ofron p\u00ebrmir\u00ebsime n\u00eb shpejt\u00ebsi, efikasitet dhe siguri dhe rezulton n\u00eb nj\u00eb p\u00ebrvoj\u00eb m\u00eb t\u00eb mir\u00eb p\u00ebr p\u00ebrdoruesit.<\/li>\n<li>Porta e Siguris\u00eb s\u00eb Check Point tani mb\u00ebshtet HTTP\/2 dhe ofron m\u00eb shum\u00eb shpejt\u00ebsi dhe efikasitet nd\u00ebrsa siguron mbrojtje t\u00eb plot\u00eb, me t\u00eb gjitha blloqet e Parandalimit t\u00eb K\u00ebrc\u00ebnimeve dhe Kontrollit t\u00eb Aksesit, si dhe mbrojtje t\u00eb reja p\u00ebr protokollin HTTP\/2.<\/li>\n<li>Mb\u00ebshtetje \u00ebsht\u00eb p\u00ebr trafik t\u00eb qart\u00eb dhe t\u00eb enkriptuar SSL dhe \u00ebsht\u00eb plot\u00ebsisht i integruar me HTTPS\/TLS.<\/li>\n<li>Kapacitetet e inspektimit.<\/li>\n<\/ul>\n<p><b>Shtresa e Inspektimit TLS<\/b>. Ndryshime t\u00eb reja n\u00eb lidhje me inspektimin HTTPS:<\/p>\n<ul>\n<li>Nj\u00eb Shtres\u00eb e Re Politike n\u00eb SmartConsole e dedikuar p\u00ebr Inspektimin TLS.<\/li>\n<li>Shtresa t\u00eb ndryshme t\u00eb Inspektimit TLS mund t\u00eb p\u00ebrdoren n\u00eb paketa t\u00eb ndryshme politike.<\/li>\n<li>Nd\u00ebrk\u00ebmbimi i nj\u00eb shtrese Inspektimi TLS n\u00ebp\u00ebr disa paketa politike.<\/li>\n<li>API p\u00ebr operacionet TLS.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">3. Parandalimi i K\u00ebrc\u00ebnimeve<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsimi i p\u00ebrgjithsh\u00ebm i efikasitetit p\u00ebr proceset e Parandalimit t\u00eb K\u00ebrc\u00ebnimeve dhe p\u00ebrdit\u00ebsimeve.<\/li>\n<li>P\u00ebrdit\u00ebsime automatike p\u00ebr Motorin e Ekstraktimit t\u00eb K\u00ebrc\u00ebnimeve.<\/li>\n<li>Objektet Dinamike, t\u00eb Domenit dhe t\u00eb P\u00ebrdit\u00ebsueshme tani mund t\u00eb p\u00ebrdoren n\u00eb politikat e Parandalimit t\u00eb K\u00ebrc\u00ebnimeve dhe Inspektimin TLS. Objektet e p\u00ebrdit\u00ebsueshme jan\u00eb objekte rrjeti q\u00eb p\u00ebrfaq\u00ebsojn\u00eb nj\u00eb sh\u00ebrbim t\u00eb jasht\u00ebm ose nj\u00eb list\u00eb t\u00eb njohur dinamik\u00ebsh t\u00eb adresave IP, p\u00ebr shembull \u2014 adresat IP t\u00eb Office365 \/ Google \/ Azure \/ AWS dhe objektet Geo.<\/li>\n<li>Anti-Virusi tani p\u00ebrdor indikacione k\u00ebrc\u00ebnimi SHA-1 dhe SHA-256 p\u00ebr t\u00eb bllokuar skedar\u00ebt sipas hash-it t\u00eb tyre. Importoni indikator\u00ebt e rinj nga pamja e Indikator\u00ebve t\u00eb K\u00ebrc\u00ebnimeve n\u00eb SmartConsole ose nga CLI i Fodri t\u00eb Inteligjenc\u00ebs s\u00eb Personalizuar.<\/li>\n<li>Anti-Virusi dhe SandBlast Threat Emulation tani mb\u00ebshtesin inspektimin e trafikut t\u00eb e-mailit mbi protokollin POP3, si dhe inspektimin e p\u00ebrmir\u00ebsuar t\u00eb trafikut t\u00eb e-mailit mbi protokollin IMAP.<\/li>\n<li>Anti-Virusi dhe SandBlast Threat Emulation tani p\u00ebrdorin funksionin e ri t\u00eb inspektimit SSH p\u00ebr t\u00eb inspektuar skedar\u00ebt e transferuar mbi protokollet SCP dhe SFTP.<\/li>\n<li>Anti-Virus dhe SandBlast Threat Emulation tani ofrojn\u00eb nj\u00eb mb\u00ebshtetje t\u00eb p\u00ebrmir\u00ebsuar p\u00ebr inspektimin SMBv3 (3.0, 3.0.2, 3.1.1), e cila p\u00ebrfshin inspektimin e lidhjeve me kanale t\u00eb shumta. Check Point tani \u00ebsht\u00eb ofruesi i vet\u00ebm q\u00eb mb\u00ebshtet inspektimin e nj\u00eb transferimi filesh n\u00ebp\u00ebrmjet kanaleve t\u00eb shumta (nj\u00eb ve\u00e7ori q\u00eb \u00ebsht\u00eb aktivizuar nga parazgjedhja n\u00eb t\u00eb gjitha ambientet Windows). Kjo lejon klient\u00ebt t\u00eb q\u00ebndrojn\u00eb t\u00eb sigurt nd\u00ebrsa punojn\u00eb me k\u00ebt\u00eb ve\u00e7ori q\u00eb p\u00ebrmir\u00ebson performanc\u00ebn.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">4. Nd\u00ebrgjegj\u00ebsia e Identitetit<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr integrimin e Captive Portal me SAML 2.0 dhe Ofrues t\u00eb Tjer\u00eb t\u00eb Identitetit.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr Identity Broker p\u00ebr nj\u00eb ndarjen t\u00eb shkall\u00ebzuar dhe granular t\u00eb informacionit t\u00eb identitetit midis PDP-ve, si dhe ndarjen nd\u00ebr-domain.<\/li>\n<li>P\u00ebrmir\u00ebsime p\u00ebr Agjentin e Terminal Servers p\u00ebr p\u00ebrmir\u00ebsimin e shkall\u00ebzimit dhe p\u00ebrputhshm\u00ebris\u00eb.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">5. IPsec VPN<\/b><\/p>\n<ul>\n<li>Konfiguro domenet e ndryshme t\u00eb enkriptimit VPN n\u00eb nj\u00eb Gateway Sigurie q\u00eb \u00ebsht\u00eb an\u00ebtar i disa komuniteteve VPN. Kjo ofron:<\/li>\n<li>Privat\u00ebsin\u00eb e p\u00ebrmir\u00ebsuar \u2014 Rrjetet e brendshme nuk zbulohet n\u00eb negociatat e protokollit IKE.<\/li>\n<li>Siguri dhe granularitet t\u00eb p\u00ebrmir\u00ebsuar \u2014 Specifikoni cilat rrjete jan\u00eb t\u00eb arritshme n\u00eb nj\u00eb komunitet t\u00eb specifikuar VPN.<\/li>\n<li>Interoperabilitet t\u00eb p\u00ebrmir\u00ebsuar \u2014 Definicionet e thjeshta t\u00eb VPN me baz\u00eb rruge (t\u00eb rekomanduara kur punoni me nj\u00eb domen enkriptimi VPN t\u00eb zbraz\u00ebt).<\/li>\n<li>Krijoni dhe punoni pa nd\u00ebrprerje me nj\u00eb ambient VPS t\u00eb Shkall\u00ebs t\u00eb Madhe (LSV) me ndihm\u00ebn e profileve LSV.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">6. Filtrimi i URL-ve<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsim i shkall\u00ebzimit dhe q\u00ebndrueshm\u00ebris\u00eb.<\/li>\n<li>Zgjerim i aft\u00ebsive t\u00eb zgjidhjes s\u00eb problemeve.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">7. NAT<\/b><\/p>\n<ul>\n<li>Mekanizmi i p\u00ebrmir\u00ebsuar i alokimit t\u00eb portit NAT \u2014 n\u00eb Gateway-t e Siguris\u00eb me 6 ose m\u00eb shum\u00eb instance t\u00eb CoreXL Firewall, t\u00eb gjitha instancat p\u00ebrdorin t\u00eb nj\u00ebjtin pool t\u00eb porteve NAT, q\u00eb optimizon shfryt\u00ebzimin dhe rip\u00ebrdorimin e porteve.<\/li>\n<li>Monitorimi i shfryt\u00ebzimit t\u00eb porteve NAT n\u00eb CPView dhe me SNMP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">8. Z\u00ebri mbi IP (VoIP)<\/b>Shum\u00eb instance t\u00eb CoreXL Firewall trajtojn\u00eb protokollin SIP p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar performanc\u00ebn.<\/p>\n<p><b class=\"spoiler_title\">9. VPN p\u00ebr Qasjen e Larg\u00ebt<\/b>P\u00ebrdorni certifikat\u00ebn e makin\u00ebs p\u00ebr t\u00eb ndar\u00eb asetet korporative nga ato jo-korporative dhe p\u00ebr t\u00eb vendosur nj\u00eb politik\u00eb q\u00eb p\u00ebrcakton p\u00ebrdorimin vet\u00ebm t\u00eb aseteve korporative. Zbatimi mund t\u00eb jet\u00eb para logon (autentifikimi i pajisjes vet\u00ebm) ose pas logon (autentifikimi i pajisjes dhe p\u00ebrdoruesit).<\/p>\n<p><b class=\"spoiler_title\">10. Agjenti i Portalit t\u00eb Aksesit Mobil<\/b>Siguri e P\u00ebrmir\u00ebsuar e Pik\u00ebs Fundore n\u00eb K\u00ebrkes\u00eb brenda Agjentit t\u00eb Portalit t\u00eb Aksesit Mobil p\u00ebr t\u00eb mb\u00ebshtetur t\u00eb gjitha shfletuesit kryesor\u00eb. P\u00ebr m\u00eb shum\u00eb informacion, shihni sk113410.<\/p>\n<p><b class=\"spoiler_title\">11. CoreXL dhe Multi-Queue<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr alokimin automatik t\u00eb SND-ve CoreXL dhe rasteve t\u00eb Firewall-it q\u00eb nuk k\u00ebrkojn\u00eb nj\u00eb rindezje t\u00eb Kalimtarit t\u00eb Siguris\u00eb.<\/li>\n<li>P\u00ebrvoj\u00eb m\u00eb e mir\u00eb nga kutia \u2014 Kalimtari i Siguris\u00eb ndryshon automatikisht numrin e SND-ve CoreXL dhe rasteve t\u00eb Firewall-it dhe konfigurimi Multi-Queue n\u00eb baz\u00eb t\u00eb ngarkes\u00ebs aktuale t\u00eb trafik.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">12. Klusteringu<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr Protokollin e Kontrollit t\u00eb Klusterit n\u00eb modin Unicast q\u00eb eliminon nevoj\u00ebn p\u00ebr CCP.<\/li>\n<\/ul>\n<p>Modet e Shp\u00ebrndarjes ose Multicast:<\/p>\n<ul>\n<li>Enkriptimi i Protokollit t\u00eb Kontrollit t\u00eb Klusterit tani \u00ebsht\u00eb aktivizuar si parazgjedhje.<\/li>\n<li>Moda e re ClusterXL - Aktiv\/Aktiv, q\u00eb mb\u00ebshtet An\u00ebtar\u00ebt e Klusterit n\u00eb vendndodhje t\u00eb ndryshme gjeografike q\u00eb ndodhen n\u00eb subnet t\u00eb ndryshme dhe kan\u00eb adresa IP t\u00eb ndryshme.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr An\u00ebtar\u00ebt e Klusterit ClusterXL q\u00eb drejtojn\u00eb versione t\u00eb ndryshme t\u00eb softuerit.<\/li>\n<li>Eliminimi i nevoj\u00ebs p\u00ebr konfigurimin MAC Magic kur disa klustre jan\u00eb t\u00eb lidhura me t\u00eb nj\u00ebjtin subnet.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">13. VSX<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr upgrade-n e VSX me CPUSE n\u00eb Gaia Portal.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr modalitetin Aktiv n\u00eb VSLS.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr raportet statistike CPView p\u00ebr \u00e7do Sistem Virtual.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">14. Zero Touch<\/b>Nj\u00eb proces i thjesht\u00eb instalimi Plug &amp; Play p\u00ebr instalimin e nj\u00eb pajisjeje \u2014 duke eliminuar nevoj\u00ebn p\u00ebr ekspertiz\u00eb teknike dhe duke u lidhur me pajisjen p\u00ebr konfigurimin fillestar.<\/p>\n<p><b class=\"spoiler_title\">15. Gaia REST API<\/b>Gaia REST API ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb lexuar dhe d\u00ebrguar informacion n\u00eb serverat q\u00eb drejtojn\u00eb Sistemin Operativ Gaia. Shihni sk143612.<\/p>\n<p><b class=\"spoiler_title\">16. Ruterim i Avancuar<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsimet n\u00eb OSPF dhe BGP lejojn\u00eb rresetimin dhe rinisjen e fqinj\u00ebve OSPF p\u00ebr secil\u00ebn instanc\u00eb CoreXL Firewall pa nevoj\u00ebn p\u00ebr t\u00eb rinisur daemon-in e rrug\u00ebs.<\/li>\n<li>P\u00ebrmir\u00ebsimi i rifreskimit t\u00eb rrug\u00ebve p\u00ebr menaxhimin m\u00eb t\u00eb mir\u00eb t\u00eb inconsistencave t\u00eb BGP.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">17. Aft\u00ebsi t\u00eb reja t\u00eb kernel-it<\/b><\/p>\n<ul>\n<li>Kernel i p\u00ebrmir\u00ebsuar Linux<\/li>\n<li>Sistem i ri t\u00eb ndarjeve (gpt):<\/li>\n<li>Mb\u00ebshtet m\u00eb shum\u00eb se 2TB disqe fizike\/logjike<\/li>\n<li>Sistem skedari m\u00eb i shpejt\u00eb (xfs)<\/li>\n<li>Mb\u00ebshtetje p\u00ebr ruajtjen e sistemit m\u00eb t\u00eb madhe (deri n\u00eb 48TB t\u00eb testuara)<\/li>\n<li>P\u00ebrmir\u00ebsime t\u00eb performanc\u00ebs t\u00eb lidhura me I\/O<\/li>\n<li>Multi-Queue:<\/li>\n<li>Mb\u00ebshtetje e plot\u00eb p\u00ebr komandat Multi-Queue n\u00eb Gaia Clish<\/li>\n<li>Konfigurim automatik \u00abn\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar\u00bb<\/li>\n<li>Mb\u00ebshtetje p\u00ebr montimin e SMB v2\/3 n\u00eb blade-in e Qasjes Mobile<\/li>\n<li>Shtuar mb\u00ebshtetje p\u00ebr NFSv4 (klient) (NFS v4.2 \u00ebsht\u00eb versioni standard i NFS t\u00eb p\u00ebrdorur)<\/li>\n<li>Mb\u00ebshtetje p\u00ebr mjete t\u00eb reja sistemore p\u00ebr debug-imin, monitorimin dhe konfigurimin e sistemit<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">18. CloudGuard Controller<\/b><\/p>\n<ul>\n<li>P\u00ebrmir\u00ebsime t\u00eb performanc\u00ebs p\u00ebr lidhjet me Qendrat e Dh\u00ebnave t\u00eb jashtme.<\/li>\n<li>Integrim me VMware NSX-T.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr komanda shtes\u00eb t\u00eb API p\u00ebr t\u00eb krijuar dhe redaktuar objekte Server t\u00eb Qendr\u00ebs s\u00eb Dh\u00ebnave.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">19. Multi-Domain Server<\/b><\/p>\n<ul>\n<li>Kopjoni dhe riktheni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domain-it t\u00eb ve\u00e7ant\u00eb n\u00eb nj\u00eb Server Multi-Domain.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domain-it n\u00eb nj\u00eb Server Multi-Domain n\u00eb nj\u00eb Menaxhim t\u00eb Siguris\u00eb t\u00eb ndrysh\u00ebm.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb p\u00ebr t'u b\u00ebr\u00eb nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domain-it n\u00eb nj\u00eb Server Multi-Domain.<\/li>\n<li>Migroni nj\u00eb Server t\u00eb Menaxhimit t\u00eb Domain-it p\u00ebr t'u b\u00ebr\u00eb nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb.<\/li>\n<li>Riktheni nj\u00eb Domain n\u00eb nj\u00eb Server Multi-Domain, ose nj\u00eb Server t\u00eb Menaxhimit t\u00eb Siguris\u00eb n\u00eb nj\u00eb revizion t\u00eb m\u00ebparsh\u00ebm p\u00ebr redaktim t\u00eb m\u00ebtejsh\u00ebm.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">20. SmartTasks dhe API<\/b><\/p>\n<ul>\n<li>Metod\u00eb e re e autentifikimit t\u00eb API t\u00eb Menaxhimit q\u00eb p\u00ebrdor nj\u00eb \u00c7el\u00ebs API t\u00eb krijuar automatikisht.<\/li>\n<li>Komanda t\u00eb reja t\u00eb API t\u00eb Menaxhimit p\u00ebr t\u00eb krijuar objekte klasteri.<\/li>\n<li>Instalimi Qendror i Jumbo Hotfix Accumulator dhe Hotfix-\u00ebve nga SmartConsole ose me nj\u00eb API lejon instalimin ose p\u00ebrmir\u00ebsimin e shum\u00eb Gateways t\u00eb Siguris\u00eb dhe Klastereve n\u00eb paralel.<\/li>\n<li>SmartTasks \u2014 Konfiguroni skriptet automatike ose k\u00ebrkesat HTTPS t\u00eb aktivizuara nga detyrat e administratorit, si publikimi i nj\u00eb sesioni ose instalimi i nj\u00eb politike.<\/li>\n<\/ul>\n<p><b class=\"spoiler_title\">21. Zbatimi<\/b>Instalimi Qendror i Jumbo Hotfix Accumulator dhe Hotfix-\u00ebve nga SmartConsole ose me nj\u00eb API lejon instalimin ose p\u00ebrmir\u00ebsimin e shum\u00eb Gateways t\u00eb Siguris\u00eb dhe Klastereve n\u00eb paralel.<\/p>\n<p><b class=\"spoiler_title\">22. SmartEvent<\/b>Ndani nga ndarjet e tjera, ndani pamjet dhe raportet e SmartView me administrator\u00ebt e tjer\u00eb.<\/p>\n<p><b class=\"spoiler_title\">23. Eksportuesi i Log\u00ebve<\/b>Eksportoni log\u00ebt t\u00eb filtruar sipas vlerave t\u00eb fushave.<\/p>\n<p><b class=\"spoiler_title\">24. Siguria e Endpoint<\/b><\/p>\n<ul>\n<li>Mb\u00ebshtetje p\u00ebr enkriptimin BitLocker p\u00ebr Enkriptimin e Diskut t\u00eb Plot\u00eb.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr certifikatat e Autoriteteve t\u00eb Certifikimit t\u00eb jashtme p\u00ebr klientin e Siguris\u00eb s\u00eb Endpoint<\/li>\n<li>autentikimin dhe komunikimin me Serverin e Menaxhimit t\u00eb Siguris\u00eb s\u00eb Endpoint.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr madh\u00ebsi dinamike t\u00eb paketave t\u00eb Klientit t\u00eb Siguris\u00eb s\u00eb Endpoint n\u00eb p\u00ebrputhje me<\/li>\n<li>ve\u00e7orit\u00eb p\u00ebr zbatim.<\/li>\n<li>Politika tani mund t\u00eb kontrolloj\u00eb nivelin e njoftimeve p\u00ebr p\u00ebrdoruesit e fundit.<\/li>\n<li>Mb\u00ebshtetje p\u00ebr mjedisin e q\u00ebndruesh\u00ebm VDI n\u00eb Menaxhimin e Politikave t\u00eb Endpoint.<\/li>\n<\/ul>\n<h3>\u00c7far\u00eb na p\u00eblqeu m\u00eb shum\u00eb (bazuar n\u00eb detyrat e klient\u00ebve)<\/h3>\n<p>Si\u00e7 e shihni, ka shum\u00eb novitete. Por p\u00ebr ne, si <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/\">integrues sistemesh,<\/a><\/noindex>ka disa momente shum\u00eb interesante (t\u00eb cilat jan\u00eb gjithashtu interesante p\u00ebr klient\u00ebt tan\u00eb). Topi yn\u00eb 10:<\/p>\n<ol>\n<li>M\u00eb n\u00eb fund, mb\u00ebshtetje e plot\u00eb p\u00ebr pajisjet IoT ka ardhur. Tani \u00ebsht\u00eb mjaft e v\u00ebshtir\u00eb t\u00eb takosh nj\u00eb kompani q\u00eb nuk ka k\u00ebto pajisje.<\/li>\n<li>Inspektimi i TLS tani \u00ebsht\u00eb kaluar n\u00eb nj\u00eb shtres\u00eb t\u00eb ve\u00e7ant\u00eb. Kjo \u00ebsht\u00eb shum\u00eb m\u00eb e p\u00ebrshtatshme se tani (n\u00eb 80.30). Nuk \u00ebsht\u00eb m\u00eb e nevojshme t\u00eb nisni Panele e vjetra t\u00eb Legasy. P\u00ebr m\u00eb tep\u00ebr, tani n\u00eb politik\u00ebn e inspektimit HTTPS mund t\u00eb p\u00ebrdoren objekte t\u00eb Ndryshueshme, si sh\u00ebrbimet Office365, Google, Azure, AWS etj. Kjo \u00ebsht\u00eb shum\u00eb praktike kur duhet t\u00eb konfiguroni p\u00ebrjashtime. Megjithat\u00eb, ende nuk ka mb\u00ebshtetje p\u00ebr tls 1.3. Duket se do ta arrijn\u00eb me hotfix-in e ardhsh\u00ebm.<\/li>\n<li>Ndryshime t\u00eb r\u00ebnd\u00ebsishme p\u00ebr Anti-Virus dhe SandBlast. Tani \u00ebsht\u00eb e mundur t\u00eb kontrolloni protokollet si SCP, SFTP dhe SMBv3 (n\u00eb fakt, ky protokoll multi-kanal nuk kontrollohet nga askush tjet\u00ebr).<\/li>\n<li>Ka shum\u00eb p\u00ebrmir\u00ebsime q\u00eb lidhen me Site-to-Site VPN. Tani mund t\u00eb konfiguroni disa VPN domain n\u00eb port\u00ebn q\u00eb \u00ebsht\u00eb pjes\u00eb e disa VPN community. Kjo \u00ebsht\u00eb shum\u00eb e p\u00ebrshtatshme dhe shum\u00eb m\u00eb e sigurt. P\u00ebr m\u00eb tep\u00ebr, Check Point p\u00ebrfundimisht e kujtoi VPN-n\u00eb e Bazuar n\u00eb Rruga dhe e p\u00ebrmir\u00ebsoi disi stabilitetin\/kompatibilitetin e saj.<\/li>\n<li>Ka nj\u00eb funksion t\u00eb k\u00ebrkuar shum\u00eb p\u00ebr p\u00ebrdoruesit e larg\u00ebt. Tani \u00ebsht\u00eb e mundur t\u00eb autentifikoni jo vet\u00ebm p\u00ebrdoruesin, por edhe pajisjen nga e cila ai lidhet. P\u00ebr shembull, ne duam t\u00eb lejojm\u00eb lidhjen p\u00ebrmes VPN vet\u00ebm nga pajisjet korporative. Kjo b\u00ebhet sigurisht p\u00ebrmes certifikatave. Po ashtu \u00ebsht\u00eb b\u00ebr\u00eb e mundur t\u00eb montoni automatikisht (SMB v2\/3) ndarjet e skedar\u00ebve p\u00ebr p\u00ebrdoruesit e larg\u00ebt me klientin VPN.<\/li>\n<li>Ka shum\u00eb ndryshime n\u00eb funksionimin e klasterit. Por ndoshta nj\u00eb nga m\u00eb t\u00ebrheq\u00ebsit \u00ebsht\u00eb mund\u00ebsia e veprimit t\u00eb klasterit, ku portat kan\u00eb versione t\u00eb ndryshme Gaia. Kjo \u00ebsht\u00eb e p\u00ebrshtatshme, ve\u00e7an\u00ebrisht gjat\u00eb p\u00ebrdit\u00ebsimeve t\u00eb planifikuara.<\/li>\n<li>Funkcionalitetet Zero Touch jan\u00eb p\u00ebrmir\u00ebsuar. Nj\u00eb gj\u00eb e dobishme p\u00ebr ata q\u00eb shpesh instalojn\u00eb \u201eportat e vogla\u201c (p.sh. p\u00ebr bankomatet).<\/li>\n<li>Tani p\u00ebr log-et mb\u00ebshtetet nj\u00eb ruajtje deri n\u00eb 48 TB.<\/li>\n<li>Mund t\u00eb \u201endahen\u201c dashboard-et tuaj SmartEvent me administratori t\u00eb tjer\u00eb.<\/li>\n<li>Log Exporter tani lejon parafiltrimin e mesazheve t\u00eb d\u00ebrguara, sipas fushave t\u00eb nevojshme. Dometh\u00ebn\u00eb, n\u00eb sistemet tuaja SIEM do t\u00eb kalojn\u00eb vet\u00ebm log-et dhe ngjarjet e nevojshme.<\/li>\n<\/ol>\n<h3>P\u00ebrdit\u00ebsimi<\/h3>\n<p>Mund t\u00eb mendojn\u00eb shum\u00eb p\u00ebr nj\u00eb p\u00ebrdit\u00ebsim. Nuk duhet t\u00eb nxitohemi. Fillimisht versioni 80.40 duhet t\u00eb kaloj\u00eb n\u00eb Disponueshm\u00ebri t\u00eb P\u00ebrgjithshme. Por edhe pas k\u00ebsaj nuk duhet t\u00eb p\u00ebrdit\u00ebsoheni menj\u00ebher\u00eb. M\u00eb mir\u00eb t\u00eb pritni t\u00eb pakt\u00ebn patch-in e par\u00eb.<br \/>\nMund t\u00eb them se disa ndoshta \u201ekan\u00eb ngecur\u201c n\u00eb versionet m\u00eb t\u00eb vjetra. Mund t\u00eb them se s\u00eb paku tashm\u00eb \u00ebsht\u00eb e mundur (dhe madje e nevojshme) t\u00eb p\u00ebrdit\u00ebsohen n\u00eb 80.30. Kjo \u00ebsht\u00eb nj\u00eb sistem stabil dhe i provuar!<\/p>\n<p>Mund t\u00eb regjistroheni gjithashtu n\u00eb publikimet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>), ku mund t\u00eb ndiqni shfaqjen e materialeve t\u00eb reja p\u00ebr Check Point dhe produkte t\u00eb tjera sigurie.<\/p>\n<p class=\"for_users_only_msg\">Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">Hyni<\/a><\/noindex>, ju lutemi.<\/p>\n<h2 class=\"default-block__polling-title\">Cilin version t\u00eb Gaia po p\u00ebrdorni?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">                    R77.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R77.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.10<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.20<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    R80.30<\/li>\n<li class=\"content-list__item content-list__item_polling\">                    Tjet\u00ebr<\/li>\n<\/ul>\n<p>Kan\u00eb votuar 13 p\u00ebrdorues. Jan\u00eb abstenuar 6 p\u00ebrdorues.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/467723\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gaia R80.40. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Early Access, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430. \u041c\u044b, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u043c\u043e\u043c\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u0441 \u043d\u0430\u0448\u0435\u0439 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f. \u0417\u0430\u0431\u0435\u0433\u0430\u044f \u0432\u043f\u0435\u0440\u0435\u0434, \u043c\u043e\u0433\u0443 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0442\u043e\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28701,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38235","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:22:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-12-21T07:34:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R80.40. \u00c7far\u00eb do t\u00eb jet\u00eb e re? | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R80.40. \u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u043e\u0432\u043e\u0433\u043e? | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/check-point-gaia-r80-40-chto-budet-novogo","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:28+00:00","article:modified_time":"2020-12-21T07:34:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38235","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 21:04:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:13:22","updated":"2026-01-23 21:04:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38235"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38235\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}