1. Sheba Setsi sa Tsamaiso ea Moemeli oa Ntlha ea SandBlast

Rea u amohela letotong le lecha la lingoliloeng tse ikemiselitseng ho sireletsa libaka tsa mosebetsi tsa motho ka ho sebelisa tharollo Sheba Sebaka sa SandBlast Agent le sistimi e ncha ea taolo ea leru - Sethala sa Tsamaiso ea Moemeli oa SandBlast. Moemeli oa SandBlast o ile a hlahlojoa ke rona lihloohong tse mabapi le tlhahlobo ea malware и tlhaloso ea mesebetsi ea phetolelo e ncha E83.10, 'me ke khale re tšepisitse ho phatlalatsa lenaneo le felletseng la lingoliloeng mabapi le ho tsamaisa le ho tsamaisa liakhente. 'Me Sistimi ea Tsamaiso ea Tsamaiso e thehiloeng marung e hlahisitsoeng ke Check Point ka har'a Infinity Portal e loketse sena hantle - ho tloha motsotsong oa ho ingolisa ho portal ho isa qalong ea ho lekola setsi sa mosebetsi ke moemeli le ho fumana ts'ebetso e mpe, ho tla nka. metsotso e mmalwa feela.

Ke hobane'ng ha Moemeli oa SandBlast?

Ho latela tlhahlobo ea morao-rao 2020 NSS Labs Advanced Endpoint Protection (AEP) Teko ea Maraka Check Point SandBlast Agent e filoe lintlha tsa AA mme e khothaletsoa ka liphetho tse latelang tsa liteko:

• Sekhahla sa ho thibela sephethephethe sa WEB ke 100%;
• Sekhahla sa ho thibela ho imeile ke 100%;
• Sekhahla sa ho thibela ts'okelo ntle le marang-rang - 100%;
• Sekhahla sa ho thibela boiteko ba Bypass ke 100%;
• Kakaretso ea sekhahla sa block: 99,12%;
• Boleng ba lintlha tse fosahetseng Bohata-photisetso ke 0,8%.

Moemeli oa SandBlast o fana ka ts'ireletso e phahameng ea ts'ireletso bakeng sa lits'ebetso tsa basebetsi ka tšebelisano-'moho ea likarolo tse 'maloa, tse bitsoang "blades" ka mantsoe a Check Point. Tlhaloso e khuts'oane ea li-blades tse sebelisitsoeng ho SandBlast Agent:

• Emulation ea Kotsi - theknoloji ea sandbox, e hanyetsanang le mekhoa e fapaneng ea ho qoba, le ho lumella ho thibela litlhaselo tsa matsatsi a zero;
• Tshokelo ea Kotsi - thekenoloji ea ho hloekisa lifaele ka sefofaneng, e lumellang mosebelisi ho fumana tokomane e hlakotsoeng ea likarolo tse sebetsang pele ho qeto ea ho etsisa ka botlalo;
• Khahlanong le Tšebeliso - ts'ireletso ea lits'ebetso tse sebelisoang haholo (Microsoft Office, Adobe PDF Reader, li-browser, joalo-joalo) litlhaselong tse sebelisoang ke maqheka;
• Khahlano le Bot - thekenoloji ea ho sireletsa lik'homphieutha tsa motho hore li se ke tsa kena marang-rang a botnet, e u lumella ho bona tšoaetso, ho emisa ts'ebetso ea software e kotsi le "hloekisa" mechine e nang le tšoaetso;
• Zero-Phishing - mojule oa ts'ireletso o thibelang libaka tsa bomenemene tsa phishing le ho tsebisa mosebelisi mabapi le ts'ebeliso ea password e sebetsang mehloling ea batho ba boraro;
• Molebedi wa Boitshwaro - thekenoloji e reretsoeng ho thibela litlhaselo tse sebelisang mahlale ho feta le ho qoba ho fumanoa;
• Khahlano le Thekollo - mojule oa ts'ireletso o bonang le ho thibela liketso tsa ransomware, hape o u lumella ho khutlisa lifaele tse patiloeng u sebelisa Snapshots;
• Forensics - mochine oa tšireletso o tlalehang le ho hlahloba liketsahalo tsohle mochine, 'me ka lebaka leo e fana ka tlaleho ea boleng bo phahameng ba litlhaselo tse ntseng li batlisisoa.

Ho phaella ho likarolo tse thathamisitsoeng, Moemeli oa SandBlast o lumella hore ho be le disk encryption e feletseng, hammoho le ho kenyelletsa mecha ea phatlalatso e tlosoang le tšireletso ea likoung tsa lik'homphieutha, e na le mochine oa VPN o hahiloeng, ho saena le li-module tsa heuristic bakeng sa tšireletso khahlanong le malware. Bokhoni ba likarolo tsohle tsa Moemeli oa SandBlast bo tla tšohloa ka ho qaqileng haholoanyane lihloohong tse latelang, empa joale ke nako ea ho tloaelana le sethala se ntseng se tsoela pele ka mafolofolo - Check Point Infinity.

Sheba Point Infinity: Tšireletso ea Kotsi ea moloko oa V

Ho tloha ka 2017, Check Point esale e nts'etsapele le ho khothaletsa moralo o le mong o kopaneng oa ts'ireletso. Sheba Point Infinity, e leng se u lumellang hore u atlehe ho sireletsa likarolo tsohle tsa lisebelisoa tsa morao-rao tsa IT: lisebelisoa tsa marang-rang le maru, li-workstations, lisebelisoa tsa mohala. Taba ea mantlha ke bokhoni ba ho laola lisebelisoa tsa ts'ireletso tsa mekhahlelo e fapaneng ho tsoa ho khomphutha e le 'ngoe ea taolo e thehiloeng ho sebatli.

Hajoale, meralo ea Check Point Infinity e u lumella ho fana ka tharollo bakeng sa ts'ireletso ea leru - CloudGuard SaaS, litharollo tsa ts'ireletso ea marang-rang - CloudGuard Connect, Smart-1 Cloud, Infinity SOC, hammoho le ho sireletsa lisebelisoa tsa basebelisi ba sebelisang SandBlast Agent Management Platform, SandBlast Agent Cloud Cloud. Tsamaiso le SandBlast Web Dashboard.
Letoto lena la lihlooho le tla neheloa ho SandBlast Agent Management Platform tharollo (eo hona joale e leng Beta version), e leng se u lumellang hore u tsamaise seva sa tsamaiso ea maru ka nako ea metsotso e seng mekae, u lokise leano la ts'ireletso le ho aba baemeli ho lik'homphieutha tsa basebelisi.

Infinity Portal & SandBlast Agent Management Platform: ho qala

Ts'ebetso ea phepelo ea Moemeli oa SandBlast e sebelisang Sethala sa Tsamaiso e na le mehato e 5:

1. Ngoliso ho Check Point Infinity Portal;
2. Ho ngolisa kopo ea Sethala sa Tsamaiso ea Moemeli oa SandBlast;
3. Ho theha Tšebeletso e ncha ea Tsamaiso ea Endpoint ho laola baemeli;
4. Ho theha le ho hlophisa leano bakeng sa baemeli;
5. Ho kenya li-agent ho likhomphutha tsa basebelisi.

Sengoliloeng sena se akaretsa mehato e meraro ea pele, 'me likhatisong tse latelang re tla shebisisa tse peli tse setseng, ho kenyelletsa le ho hlahloba sebopeho sa sethala sa tsamaiso, ho abela liakhente ho likhomphutha tsa bareki, leano la ho hlophisa, le ho leka bokhoni ba moemeli ho sebetsana le tse tsebahalang haholo. ditshoso tsa tshireletso.

1. Ngoliso ho Infinity Portal

Pele ho tsohle, o hloka ho ea webosaeteng Infinity Portal le ho tlatsa foromo ea ngoliso, e bontšang lebitso la k'hamphani, lintlha tsa ho ikopanya le ho lumellana le lipehelo tsa tšebeliso ea tšebeletso le leano la lekunutu la portal, hape u tlatse reCAPTCHA. Ke habohlokoa ho hlokomela hore ha u ngolisa, u ka khetha naha eo ho eona data e bokelitsoeng ke portal e tla bolokoa ho latela melao ea ho sebelisa tšebeletso le leano la lekunutu. Ho na le likhetho tse peli feela: Ireland le USA. Ho etsa sena, o hloka ho hlahloba lebokose la "Sebelisa sebaka se itseng sa bolulo ba data" ebe u khetha naha.

Kamora ho ingolisa ka katleho portal, ho tla romelloa lengolo atereseng ea hau ea lengolo-tsoibila le netefatsang phihlello ea hau ho Infinity Portal le ho u memela ho kena ho portal. Ke habohlokoa ho hlokomela hore ha u kena ka har'a portal ka lekhetlo la pele, u ka 'na ua hlokoa hore u khethe khetho ea ho tsosolosa password bakeng sa ho netefatsa katleho e eketsehileng.

2. Ngolisa kopo ea Sethala sa Tsamaiso ea Moemeli oa SandBlast

Kamora ho netefatsa ho portal le ho tobetsa letšoao la "Menu" (mohato oa 1 setšoantšong se ka tlase), o tla kopuoa ho ngolisa kopo ho tsoa lethathamong la tse fumanehang tlas'a mekhahlelo e latelang: Tšireletso ea Cloud, Tšireletso ea Network le Endpoint Protection. Kopo e 'ngoe le e' ngoe e tšoaneloa ke tsela ea eona ea lihlooho tsa selelekela, kahoo re ke ke ra lula ho tsona ka ho qaqileng haholoanyane ebe re khetha kopo ea SandBlast Agent Management Platform sehlopheng sa Tšireletso ea Endpoint (mohato oa 2 setšoantšong se ka tlase).

Ha u se u khethile kopo, u tlameha ho lumellana le lipehelo tsa ts'ebeliso ea ts'ebeletso le leano la lekunutu la portal, 'me kamora ho tobetsa konopo ea "LEKA HONA JOALE", phihlello ea sebopeho sa ho theha lits'ebeletso tsa Tsamaiso ea Endpoint ea bula.

3. Theha Tšebeletso e ncha ea Tsamaiso ea Endpoint

Mohato oa ho qetela ke ho theha tšebeletso e ncha bakeng sa Tsamaiso ea Endpoint, e leng sebopeho sa websaete bakeng sa baemeli ba tsamaiso. Ts'ebetso, joalo ka pele, e bonolo haholo: khetha khetho ea "New Endpoint Management Service" (joalo ka ha ho bonts'itsoe setšoantšong se ka tlase), tlatsa lintlha tsa ts'ebeletso ea hau e ncha (ID, sebaka sa moeti le password) ebe o tobetsa "CREATE" konopo.

Ka mor'a ho qeta ts'ebetso ea ho theha litšebeletso, u tla fumana lengolo-tsoibila le nang le li-parameter tseo u ka li sebelisang ho hokahanya le seva sa tsamaiso ea maru u sebelisa mochine o tloaelehileng oa Check Point bakeng sa tsamaiso ea moemeli - SmartEndpoint version R80.40. Re ke ke ra nahana ka botsamaisi bo sebelisang komporo e tloaelehileng, kaha letoto lena la lingoliloeng le reretsoe ho bonts'a bokhoni ba sistimi ea tsamaiso ea leru la SandBlast.

Nakong ena, mokhoa oa ho ngolisa tšebeletso ea leru bakeng sa ho laola sesebelisoa sa ts'ireletso ea k'homphieutha ea SandBlast Agent e ka nkoa e phethiloe ka katleho. Re bona sebopeho sa marang-rang sa sethala sa tsamaiso ea moemeli, se tla tšohloa ka ho qaqileng sehloohong sa rona se latelang ho tsoa letotong la "Check Point SandBlast Agent Management Platform".

fihlela qeto e

Ke nako ea ho akaretsa mosebetsi o entsoeng: re atlehile ho ingolisa ho Infinity Portal, ra ngolisa Sebaka sa Tsamaiso ea Moemeli oa SandBlast setsing sa marang-rang le ho theha tšebeletso e ncha ea tsamaiso ea maru, Endpoint Management Service.

Sehloohong sa rona se latelang letotong, re tla shebisisa ka botlalo sebopeho sa tsamaiso ea moemeli - ha ho tabo e le 'ngoe e tla sala e sa hlokomeloe, e tla re lumella ho theha pholisi ea ts'ireletso habonolo nakong e tlang le ho beha leihlo boemo ba mechini e sebelisang basebelisi. lifate le litlaleho.

Khetho e kholo ea lisebelisoa ho Check Point ho tsoa ho TS Solution. E le hore u se ke ua fetoa ke lingoliloeng tse latelang tse mabapi le Sethala sa Tsamaiso ea Moemeli oa SandBlast, latela lintlafatso ho marang-rang a rona a sechaba (thelekramo, Facebook, VK, TS Solution Blog, Yandex Zen).

Source: www.habr.com