{"id":89739,"date":"2020-07-26T01:42:18","date_gmt":"2020-07-25T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka"},"modified":"2020-07-26T01:42:18","modified_gmt":"2020-07-25T23:42:18","slug":"2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","title":{"rendered":"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/b17e2b30240cfa92fa78ac24dbd126e2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Vazhdojm\u00eb ciklin e artikujve mbi pun\u00ebn me serin\u00eb e re t\u00eb SMB CheckPoint, kujtojm\u00eb se n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">pjes\u00ebn e par\u00eb<\/a><\/noindex> p\u00ebrshkruam karakteristikat dhe mund\u00ebsit\u00eb e modeleve t\u00eb reja, m\u00ebnyrat e menaxhimit dhe administrat\u00ebs. Sot do t\u00eb shqyrtojm\u00eb skenarin e vendosjes s\u00eb modelit m\u00eb t\u00eb avancuar t\u00eb seris\u00eb: CheckPoint 1590 NGFW. Do t\u00eb shtojm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb k\u00ebsaj pjes\u00eb:<\/p>\n<p><\/p>\n<ol>\n<li>Zhvillimi i pajisjeve (p\u00ebrshkrimi i komponent\u00ebve, lidhja fizike dhe rrjeti).<\/li>\n<li>Inicimi fillestar i pajisjes.<\/li>\n<li>Konfigurimi fillestar.<\/li>\n<li>Vler\u00ebsimi i funksionimit. <\/li>\n<\/ol>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Zhvillimi i pajisjeve<\/h2>\n<p><\/p>\n<p>Njoftimi me pajisjet fillon me nxjerrjen e pajisjeve nga kutia, zhbllokimin e komponent\u00ebve dhe montimin e detajeve, klikoni n\u00eb spoiler, ku procesi paraqitet n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrmbledhur.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">D\u00ebrgesa NGFW 1590<\/b><br \/>\n                        <img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/868d20466d642d38d748058e9f33ae37.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> P\u00ebrmbledhje e komponent\u00ebve:<\/p>\n<p><\/p>\n<ul>\n<li>NGFW 1590;<\/li>\n<li>Adaptori i energjis\u00eb;<\/li>\n<li>2 Antena Wifi (2.4 GHz dhe 5 GHz);<\/li>\n<li>2 antena LTE;<\/li>\n<li>Broshura me dokumentacion (udh\u00ebzuesi i shkurt\u00ebr p\u00ebr lidhjen fillestare, marr\u00ebveshja e licenc\u00ebs etj.)<\/li>\n<\/ul>\n<p>\nSa i p\u00ebrket porteve dhe nd\u00ebrfaqeve rrjet\u00ebsore, k\u00ebtu ka t\u00eb gjitha mund\u00ebsit\u00eb moderne p\u00ebr transmetimin e trafikut dhe nd\u00ebrveprimin, \u00ebsht\u00eb e ve\u00e7ant\u00eb nj\u00eb port p\u00ebr zon\u00ebn DMZ, USB 3.0 p\u00ebr sinkronizimin me PC. <\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/de1442162762a4c29dcff0d2badfcc3f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Versioni 1590 ka marr\u00eb nj\u00eb dizajn t\u00eb rinovuar, opsione moderne p\u00ebr lidhjen pa tel dhe zgjerimin e memories: 2 vende p\u00ebr pun\u00eb me Micro\/Nano SIM n\u00eb modin LTE. (p\u00ebr k\u00ebt\u00eb opsion planifikojm\u00eb t\u00eb shkruajm\u00eb n\u00eb detaje n\u00eb nj\u00eb nga artikujt tan\u00eb t\u00eb ardhsh\u00ebm t\u00eb ciklit, t\u00eb dedikuar lidhjeve pa tel); slot p\u00ebr SD kart\u00eb.\n<\/p>\n<p><\/p>\n<p>P\u00ebr m\u00eb shum\u00eb n\u00eb lidhje me mund\u00ebsit\u00eb e 1590 NGFW dhe modelet e tjera t\u00eb reja mund t\u00eb lexoni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/510342\/\">pjes\u00ebn 1<\/a><\/noindex> ciklin e artikujve mbi zgjidhjet SMB CheckPoint. Tani ne do t\u00eb kalojm\u00eb n\u00eb inicimin fillestar t\u00eb pajisjes. \n<\/p>\n<p><\/p>\n<h2>Inicimi fillestar<\/h2>\n<p><\/p>\n<p>Lexuesit tan\u00eb t\u00eb rregullt duhet t\u00eb jen\u00eb tashm\u00eb n\u00eb dijeni se n\u00eb linj\u00ebn e seris\u00eb 1500 SMB p\u00ebrdoret nj\u00eb OS e re 80.20 Embedded, e cila p\u00ebrfshin nj\u00eb nd\u00ebrfaqe t\u00eb rinovuar dhe mund\u00ebsi t\u00eb p\u00ebrmir\u00ebsuara.\n<\/p>\n<p><\/p>\n<p>P\u00ebr t\u00eb filluar inicimin e pajisjes duhet:\n<\/p>\n<p><\/p>\n<ol>\n<li>T\u00eb sigurohet energjia p\u00ebr gateway. <\/li>\n<li>T\u00eb lidhet kablli rrjet\u00ebsor nga kompjuteri juaj n\u00eb LAN -1 n\u00eb gateway.<\/li>\n<li>Opsionalisht, mund t\u00eb sigurohet menj\u00ebher\u00eb akses n\u00eb internet p\u00ebr pajisjen duke e lidhur nd\u00ebrfaqen n\u00eb portin WAN.<\/li>\n<li>Shkoni n\u00eb portalin Gaia Embedded: <noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1:4434\/\">https:\/\/192.168.1.1:4434\/<\/a><\/noindex><\/li>\n<\/ol>\n<p><\/p>\n<p>N\u00ebse jan\u00eb p\u00ebrmbushur hapat e m\u00ebposht\u00ebm, pas kalimit n\u00eb faqen e portalit Gaia, do t'ju k\u00ebrkohet t\u00eb konfirmoni hapjen e faqes me nj\u00eb certifikat\u00eb t\u00eb pasigurt, pas s\u00eb cil\u00ebs do t\u00eb nis\u00eb asistenti p\u00ebr konfigurimin e portalit:\n<\/p>\n<p>\n<img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/0f9c59f8aee0b0cb4e402ab6478ecb39.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Do t'ju mir\u00ebpres\u00eb nj\u00eb faqe q\u00eb tregon modelin e pajisjes suaj, duhet t\u00eb kaloni n\u00eb seksionin e ardhsh\u00ebm:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/802a2d07d265f205ed7f4c289d7c83ac.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ne do t\u00eb ofrohemi t\u00eb krijojm\u00eb nj\u00eb llogari p\u00ebr autorizim, ka mund\u00ebsin\u00eb t\u00eb specifikoni k\u00ebrkesa t\u00eb larta p\u00ebr fjal\u00ebkalimin e administratorit, Duke treguar vendin ku do ta p\u00ebrdorni gateway-in.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/7a1c641cb3425b35a403e97b3aca2d9c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Dritarja e ardhshme ka t\u00eb b\u00ebj\u00eb me konfigurimin e dat\u00ebs dhe or\u00ebs, ka mund\u00ebsin\u00eb t\u00eb caktoni manualisht ose t\u00eb p\u00ebrdorni serverin NTP t\u00eb kompanis\u00eb.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/b1162711e3f1e73e4bb7090eccbfde84.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Hapi tjet\u00ebr p\u00ebrfshin caktimin e emrit p\u00ebr pajisjen dhe tregimin e domain-it t\u00eb kompanis\u00eb p\u00ebr funksionimin e duhur t\u00eb sh\u00ebrbimeve t\u00eb gateway-it n\u00eb internet.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/5bc4e62401fa71b6e2f42550f3c88965.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Hapi tjet\u00ebr ka t\u00eb b\u00ebj\u00eb me zgjedhjen e m\u00ebnyr\u00ebs s\u00eb menaxhimit NGFW, k\u00ebtu duhet t\u00eb theksohet:<\/p>\n<p><\/p>\n<ol>\n<li>Menaxhimi Vendor. Kjo \u00ebsht\u00eb nj\u00eb mund\u00ebsi e disponueshme p\u00ebr menaxhim lokal t\u00eb gateway-it p\u00ebrmes faqeve t\u00eb internetit t\u00eb Gaia Portal.<\/li>\n<li>Menaxhimi Qendror. Ky lloj menaxhimi p\u00ebrfshin sinkronizimin me nj\u00eb server t\u00eb menaxhimit t\u00eb dedikuar CheckPoint, sinkronizimin me Smart1-Cloud ose me SMP (sh\u00ebrbimin e menaxhimit p\u00ebr SMB).<\/li>\n<\/ol>\n<p><\/p>\n<p>Ne n\u00eb kuad\u00ebr t\u00eb k\u00ebtij artikulli do t\u00eb ndalemi n\u00eb m\u00ebnyr\u00ebn e menaxhimit Menaxhim Vendor, ju mund t\u00eb specifikoni m\u00ebnyr\u00ebn q\u00eb ju nevojitet. P\u00ebr t\u00eb njohur procesin e sinkronizimit me nj\u00eb server t\u00eb menaxhimit t\u00eb dedikuar, ofrohet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=v5SugzYFBhE&amp;list=PLqio-3dnMW5_2cStMfIezwcAzzDCjX86C&amp;index=7\"> link<\/a><\/noindex> nga cikli edukativ CheckPoint Getting Started, i p\u00ebrgatitur nga kompania TS Solution. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/c39e8ede7b45aecc40adf83dc32f0bc6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>M\u00eb pas do t\u00eb paraqitet nj\u00eb dritare q\u00eb p\u00ebrcakton modin e pun\u00ebs s\u00eb nd\u00ebrfaqeve n\u00eb gateway:\n<\/p>\n<p><\/p>\n<ul>\n<li>Mediu Switch n\u00ebnkupton disponueshm\u00ebrin\u00eb e subnetit nga nj\u00eb nd\u00ebrfaqe n\u00eb subnetin e nj\u00eb nd\u00ebrfaqe tjet\u00ebr. <\/li>\n<li>Mediu Disable Switch p\u00ebrkat\u00ebsisht \u00e7aktivizon modin Switch, \u00e7do port ruterizon trafikun si p\u00ebr nj\u00eb pjes\u00eb t\u00eb ve\u00e7ant\u00eb t\u00eb rrjetit.<\/li>\n<\/ul>\n<p><\/p>\n<p>Gjithashtu ofrohet t\u00eb caktoni nj\u00eb pool DHCP adresash, t\u00eb cilat do t\u00eb p\u00ebrdoren gjat\u00eb lidhjes me nd\u00ebrfaqet lokale t\u00eb gateway-it.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/d0a03e50f8b138e0518af07d9f6671a2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Hapi tjet\u00ebr \u00ebsht\u00eb konfigurimi i pun\u00ebs s\u00eb gateway-it n\u00eb modalitetin pa kab\u00ebll, ne planifikojm\u00eb ta trajtojm\u00eb k\u00ebt\u00eb aspekt m\u00eb n\u00eb detaje n\u00eb nj\u00eb nga artikujt e ciklit, prandaj e kemi shtyr\u00eb konfigurimin e parametrave. Ju mund t\u00eb krijoni nj\u00eb pik\u00eb t\u00eb re qasjeje pa kab\u00ebll, t\u00eb caktoni nj\u00eb fjal\u00ebkalim p\u00ebr t'u lidhur me t\u00eb dhe t\u00eb p\u00ebrcaktoni modalitetin e pun\u00ebs s\u00eb kanaleve pa kab\u00ebll (2.4 GHz ose 5 GHz).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/5039a036b3645b1d02d39835c6c107c4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>M\u00eb von\u00eb do t\u00eb ofrohet nj\u00eb hap p\u00ebr konfigurimin e qasjes n\u00eb portal p\u00ebr administrator\u00ebt e kompanis\u00eb. Sipas t\u00eb dh\u00ebnave t\u00eb paracaktuara, t\u00eb drejtat e qasjes jan\u00eb t\u00eb lejuara n\u00ebse lidhja b\u00ebhet nga:<\/p>\n<p><\/p>\n<ol>\n<li>Rrjeti i brendsh\u00ebm i kompanis\u00eb <\/li>\n<li>Rrjeti i besuesh\u00ebm pa tel <\/li>\n<li>Tuneli VPN<\/li>\n<\/ol>\n<p><\/p>\n<p>Opsioni p\u00ebr t'u lidhur me portalin p\u00ebrmes internetit, sipas t\u00eb dh\u00ebnave t\u00eb paracaktuara, \u00ebsht\u00eb i \u00e7aktivizuar, dhe kjo sjell rreziqe t\u00eb m\u00ebdha dhe duhet t\u00eb argumentohet p\u00ebr aktivizim, p\u00ebrndryshe rekomandohet t\u00eb mbetet si n\u00eb shembullin ton\u00eb. Gjithashtu ka mund\u00ebsin\u00eb t\u00eb specifikohen cilat adresa IP do t\u00eb lejohen p\u00ebr t'u lidhur me portalin.<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/b3bd7f25aeb71b75392595f7efad22b6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Dritarja e ardhshme ka t\u00eb b\u00ebj\u00eb me aktivizimin e licencave, gjat\u00eb inicializimit t\u00eb par\u00eb t\u00eb pajisjes do t'ju prezantohet nj\u00eb periudh\u00eb provuese prej 30 dit\u00ebsh. Ekzistojn\u00eb dy m\u00ebnyra t\u00eb disponueshme p\u00ebr aktivizim: <\/p>\n<p><\/p>\n<ol>\n<li> N\u00ebse ka lidhje me internetin, licenca aktivizohet automatikisht.<\/li>\n<li> N\u00ebse e aktivizoni licenc\u00ebn offline, duhet t\u00eb b\u00ebni si m\u00eb posht\u00eb: shkarkoni licenc\u00ebn nga UserCenter, regjistroni pajisjen tuaj n\u00eb nj\u00eb t\u00eb ve\u00e7ant\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/smbregistration.checkpoint.com\">portal<\/a><\/noindex>. M\u00eb pas p\u00ebr t\u00eb dy rastet, do t'ju nevojitet t\u00eb importoni manualisht licenc\u00ebn e shkarkuar.<\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/e0eb47e8dab7d4ece07e0e44a6e4bd35.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>N\u00eb fund, dritarja e fundit n\u00eb magjistrin e konfigurimit ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb zgjedhur bllokime q\u00eb do t\u00eb aktivizohen. Duhet t\u00eb theksohet se blloku i QOS aktivizohet vet\u00ebm pas inicializimit t\u00eb par\u00eb. Si rezultat, duhet t\u00eb merrni nj\u00eb dritare p\u00ebrfundimi q\u00eb p\u00ebrmbledh konfigurimet tuaja.<\/p>\n<h2>Konfigurimi fillestar<\/h2>\n<p><\/p>\n<p> S\u00eb pari, rekomandojm\u00eb t\u00eb kontrolloni gjendjen e licencave, pasi kjo do t\u00eb ndihmoj\u00eb n\u00eb konfigurimin e m\u00ebtejsh\u00ebm. Shkoni te skeda \u201cHOME\u201d \u2192 \u201cLicense\u201d :<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/ffafde17f0545d500176d8ba8a82ec65.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>N\u00ebse licencat jan\u00eb aktivizuar, rekomandojm\u00eb ta p\u00ebrdit\u00ebsoni menj\u00ebher\u00eb n\u00eb versionin m\u00eb t\u00eb fundit t\u00eb disponuesh\u00ebm, p\u00ebr k\u00ebt\u00eb, shkoni te skeda \u201cDEVICE\u201d \u2192 \u201cSystem Operations\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/ba7484d0e39800db7a122c3dda5db6b1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>P\u00ebrdit\u00ebsimet e sistemit ndodhen n\u00eb pik\u00ebn Firmware Upgrade. N\u00eb rastin ton\u00eb, \u00ebsht\u00eb instaluar versioni m\u00eb i fundit dhe aktual i firmware.\n<\/p>\n<p><\/p>\n<p>M\u00eb pas, do t\u00eb ofroj nj\u00eb p\u00ebrmbledhje t\u00eb mund\u00ebsive dhe konfigurimeve t\u00eb bllokimeve t\u00eb sistemit. Mund t\u00eb ndahet logjikisht n\u00eb politika t\u00eb nivelit Access (Firewall, Kontrolli i Aplikacioneve, Filtrimi i URL-ve) dhe Parandalimin e K\u00ebrc\u00ebnimeve (IPS, Antivirus, Anti-Bot, Emulimi i K\u00ebrc\u00ebnimeve).<\/p>\n<p><\/p>\n<p>Shkoni te skeda Access Policy \u2192 Blade Control:<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/381db11e773c4a61d30df502f6a0abb0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Sipas t\u00eb dh\u00ebnave t\u00eb paracaktuara, p\u00ebrdoret m\u00ebnyra STANDARD, e cila lejon: trafikun e daljes n\u00eb internet, trafikun brenda rrjetit lokal, por bllokon trafikun e ardhjes nga interneti.\n<\/p>\n<p><\/p>\n<p>Sa i bleydeve APPLICATIONS &amp; URL FILTERING, bllokimi i faqeve me nivel t\u00eb lart\u00eb rreziku \u00ebsht\u00eb aktivizuar si parazgjedhje, duke bllokuar aplikacionet e ndarjes (Torrent, File Storage, etj.). Gjithashtu, \u00ebsht\u00eb e mundur t\u00eb bllokoni manualisht kategorit\u00eb e faqeve.<\/p>\n<p><\/p>\n<p>Vlen t\u00eb p\u00ebrmendet opsioni p\u00ebr trafikun e p\u00ebrdoruesve \u201cLimit bandwidth consuming applications\u201d me mund\u00ebsin\u00eb p\u00ebr t\u00eb kufizuar shpejt\u00ebsin\u00eb e trafikut n\u00eb dalje\/ardhje p\u00ebr grupe aplikacionesh. \n<\/p>\n<p><\/p>\n<p>Dhe tani do t\u00eb hapim n\u00ebnsektorin Policy, ku rregullat jan\u00eb gjeneruar automatikisht sipas konfigurimeve t\u00eb p\u00ebrmendura m\u00eb her\u00ebt. \n<\/p>\n<p><\/p>\n<p>N\u00ebnsektori NAT punon si parazgjedhje n\u00eb Global Hide Nat Automatic, pra t\u00eb gjitha hostet e brendshme do t\u00eb ken\u00eb qasje n\u00eb Internet p\u00ebrmes nj\u00eb IP publike. Ka mund\u00ebsi t\u00eb vendosni rregulla NAT manualisht p\u00ebr publikimin e aplikacioneve ose sh\u00ebrbimeve tuaja web. \n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/3c7f69f0ac7c34358cc2f3561d0f31e3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pas k\u00ebsaj, \u00ebsht\u00eb seksi q\u00eb lidhet me autentifikimin e p\u00ebrdoruesve n\u00eb rrjet, ku ofrohen dy mund\u00ebsi: Active Directory Queries (integrimi me AD tuaj), Browser-Based Authentication (p\u00ebrdoruesi fut kredencialet domain n\u00eb portal).\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/123734ef6cde261992e6e369271c797f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Duhet t\u00eb theksojm\u00eb inspektimin e SSL, pjesa e p\u00ebrgjithshme e trafikut HTTPS n\u00eb rrjetin global po rritet me shpejt\u00ebsi. Le t\u00eb shikojm\u00eb se \u00e7far\u00eb mund\u00ebsish ofron CheckPoint p\u00ebr zgjidhjet SMB, p\u00ebr k\u00ebt\u00eb duhet t\u00eb kaloni n\u00eb n\u00ebnseksionin SSL-Inspection \u2192 Policy:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/a3da719f47a7aee7ca98e3f6e043282c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>N\u00eb konfigurime ka mund\u00ebsin\u00eb p\u00ebr t\u00eb inspektuar trafikun HTTPS, do t\u00eb duhet t\u00eb importoni nj\u00eb certifikat dhe ta instaloni at\u00eb n\u00eb qendr\u00ebn e certifikatave t\u00eb besuara n\u00eb pajisjet p\u00ebrfundimtare t\u00eb p\u00ebrdoruesve. \n<\/p>\n<p><\/p>\n<p>Nj\u00eb opsion i favorsh\u00ebm \u00ebsht\u00eb gjithashtu moda BYPASS p\u00ebr kategorit\u00eb e paracaktuara, e cila kursen shum\u00eb koh\u00eb gjat\u00eb aktivizimit t\u00eb inspektimit. \n<\/p>\n<p><\/p>\n<p>Pasi t\u00eb keni vendosur rregullat n\u00eb nivelin e Firewall \/ Application, duhet t\u00eb kaloni n\u00eb optimizimin e politikave t\u00eb siguris\u00eb (Threat Prevention), p\u00ebr k\u00ebt\u00eb hyjm\u00eb n\u00eb seksionin p\u00ebrkat\u00ebs:\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/30b4cbd037f8517e81c2557dbdc5fd98.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>N\u00eb faqen e hapur ne shohim bleyde t\u00eb aktivizuara, statuset e azhurnimeve t\u00eb n\u00ebnshkrimeve dhe bazave. Gjithashtu na ofrohet t\u00eb zgjedhim nj\u00eb profil p\u00ebr mbrojtjen e perimetrave t\u00eb rrjetit, ku shfaqen p\u00ebrkat\u00ebsisht cil\u00ebsimet.\n<\/p>\n<p><\/p>\n<p>Nj\u00eb seksion i ve\u00e7ant\u00eb \u201cIPS Protections\u201d lejon konfigurimin e veprimit ndaj nj\u00eb n\u00ebnshkrimi sigurie t\u00eb caktuar.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/9718b22b843742b6916dceb342e24a8d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Para disa koh\u00ebsh, ne shkruam n\u00eb blogun ton\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511012\/\">rreth nj\u00eb vulnerabiliteti global<\/a><\/noindex> p\u00ebr Windows Server \u2014 SigRed. Do ta verifikojm\u00eb pranin\u00eb e saj n\u00eb Gaia Embedded 80.20, duke futur k\u00ebrkes\u00ebn \u201cCVE-2020-1350\u201d<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/7af359b881b41e382b98ddb7fda53403.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKy k\u00ebsaj n\u00ebnshkrimi i \u00ebsht\u00eb gjetur nj\u00eb entry, i cili mund t\u00eb aplikon nj\u00eb nga veprimet. (p\u00ebr default Parandalimi p\u00ebr nivelin e rrezikshm\u00ebris\u00eb \u2014 Kritike). Prandaj, me nj\u00eb zgjidhje SMB, nuk do t\u00eb jeni t\u00eb privuar nga p\u00ebrdit\u00ebsimet dhe mb\u00ebshtetja, kjo \u00ebsht\u00eb nj\u00eb zgjidhje plot\u00ebsisht NGFW p\u00ebr zyrat filiale deri n\u00eb 200 persona nga CheckPoint.<\/p>\n<h2>Vler\u00ebsimi i funksionalitetit<\/h2>\n<p>\nDuke p\u00ebrfunduar artikullin, do t\u00eb doja t\u00eb theksoja se ekzistojn\u00eb mjete p\u00ebr trajtimin e problemeve pas inicializimit dhe konfigurimit fillestar t\u00eb zgjidhjes SMB. Mund t\u00eb kaloni n\u00eb seksionin \u201cKRYE\u201d \u2192 \u201cMjete\u201d. Opsionet e mundshme:<\/p>\n<ul>\n<li>monitorimi i burimeve sistemore;<\/li>\n<li>tabela e route-ve;<\/li>\n<li>kontrolli i disponueshm\u00ebris\u00eb s\u00eb sh\u00ebrbimeve n\u00eb re t\u00eb CheckPoint;<\/li>\n<li>generimi i CPinfo;<\/li>\n<\/ul>\n<p><\/p>\n<p>Gjithashtu jan\u00eb t\u00eb disponueshme komandat e reteve t\u00eb integruara: Ping, Traceroute, Kapja e Trafikut.\n<\/p>\n<p><img decoding=\"async\" alt=\"2. NGFW p\u00ebr biznese t\u00eb vogla. Zb\u00ebrthimi dhe konfigurimi\" src=\"\/wp-content\/uploads\/2020\/07\/d3f2b1c24bd7f9f882ad78f8838ac8e0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>K\u00ebshtu, sot ne shqyrtuam dhe studiuam lidhjen fillestare dhe konfigurimin e NGFW 1590, veprime t\u00eb ngjashme q\u00eb do t\u00eb b\u00ebni p\u00ebr t\u00eb gjith\u00eb serin\u00eb 1500 SMB t\u00eb Checkpoint. Opsionet e disponueshme na treguan variabilitet t\u00eb lart\u00eb p\u00ebr konfigurimet, mb\u00ebshtetje p\u00ebr metodat moderne t\u00eb mbrojtjes s\u00eb trafikut n\u00eb kufirin e rrjetit. <\/p>\n<p>\nSot zgjidhjet e CheckPoint p\u00ebr mbrojtjen e zyrave t\u00eb vogla dhe filial\u00ebve (deri n\u00eb 200 persona) kan\u00eb nj\u00eb gam\u00eb t\u00eb gjer\u00eb mjetesh dhe p\u00ebrdorin teknologjit\u00eb m\u00eb t\u00eb fundit (menaxhimi n\u00eb re, mb\u00ebshtetje p\u00ebr kartat SIM, zgjerimi i memories me karta SD etj). Vazhdoni t\u00eb q\u00ebndroni t\u00eb informuar dhe lexoni artikujt nga TS Solution, ne planifikojm\u00eb t\u00eb publikojm\u00eb pjes\u00eb t\u00eb tjera rreth NGFW t\u00eb familjes CheckPoint SMB, deri n\u00eb takimin e radh\u00ebs!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/358508\/\">Nj\u00eb koleksion i madh materialesh n\u00eb lidhje me Check Point nga TS Solution<\/a><\/noindex>. Ndiqni p\u00ebrdit\u00ebsimet (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\">Yandex.Zen<\/a><\/noindex>).<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/511462\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0446\u0438\u043a\u043b \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043d\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u044f\u0434\u043e\u043c SMB CheckPoint, \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u0440\u0448\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u0435\u0440\u0438\u0438: CheckPoint 1590 NGFW. \u041f\u0440\u0438\u043b\u043e\u0436\u0438\u043c \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438: \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0443\u044e\u0449\u0438\u0445, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435). \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89740,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89739","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T23:42:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. NGFW p\u00ebr Biznesin e Vog\u00ebl. Shk\u00ebputja dhe Konfigurimi | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. NGFW \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430. \u0420\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-ngfw-dlya-malogo-biznesa-raspakovka-i-nastrojka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T23:42:18+00:00","article:modified_time":"2020-07-25T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89739","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:05:27","updated":"2022-10-01 11:43:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/89739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=89739"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/89739\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/89740"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=89739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=89739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=89739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}