5. NGFW bakeng sa likhoebo tse nyane. Tsamaiso ea Cloud SMP

Ke amohela babali letotong la lingoloa tsa rona, tse inehetseng ho SMB Check Point, e leng mofuta oa mefuta ea 1500. IN karolo ea pele e boletse bokhoni ba ho laola li-NGFW tsa hau tsa SMB u sebelisa ts'ebeletso ea leru ea Security Management Portal (SMP). Qetellong, ke nako ea ho bua ka eona ka botlalo, ho bonts'a likhetho tse teng le lisebelisoa tsa tsamaiso. Bakeng sa ba sa tsoa kopanela le rona, e re ke le hopotse ka lihlooho tseo ho buisanoeng ka tsona pele: qalo le tlhophiso , mokhatlo oa phetisetso ea sephethephethe e se nang mohala (WiFi le LTE) , VPN

SMP ke sebaka se bohareng sa ho laola lisebelisoa tsa hau tsa SMB, ho kenyeletsoa sebopeho sa webo le lisebelisoa tsa ho tsamaisa lisebelisoa tse fihlang ho 5. Letoto le latelang la mohlala oa Check Point le tšehetsoa: 000, 600, 700, 910, 1100R, 1200, 1400.

Pele, a re hlaloseng melemo ea tharollo ena:

1. Tlhokomelo ea litšebeletso tsa motheo. Ka lebaka la cloud portal, o ka sebelisa maano, oa sebelisa litlhophiso, liketsahalo tsa boithuto - ho sa tsotelehe sebaka sa hau le palo ea NGFWs mokhatlong oa hau.
2. Scalability le katleho. Ka ho reka tharollo ea SMP, o nka peeletso e sebetsang ka ts'ehetso ea ho fihla ho 5000 NGFW, sena se tla u lumella ho kenya li-node tse ncha habonolo ho lisebelisoa tsa motheo, ho lumella puisano e matla pakeng tsa bona ka lebaka la VPN.

U ka ithuta haholoanyane ka likhetho tsa laesense ho tsoa litokomaneng tsa SMP; ho na le likhetho tse peli:

• SMP e tsamaisoang ke Cloud. Seva ea tsamaiso e tšoaretsoe lerung la Check Point mme e ts'ehetsa liheke tse fihlang ho tse 50.
• Sebakeng sa SMP. Seva ea tsamaiso e ts'oaroa ka tharollo ea leru la moreki, tšehetso ea liheke tse fihlang ho 5000 lia fumaneha.

Ha re kenye karolo e le 'ngoe ea bohlokoa, ka maikutlo a rona: ha u reka mofuta ofe kapa ofe ho tsoa letotong la 1500, laesense e le' ngoe ea SMP e kenyellelitsoe ka har'a sephutheloana. Kahoo, ka ho reka moloko o mocha oa SMB, o tla ba le phihlello ea taolo ea leru ntle le litšenyehelo tse ling.

Tšebeliso e sebetsang

Kamora kenyelletso e khuts'oane, re tla fetela pele ho tloaelana le tharollo; hajoale, mofuta oa demo oa portal o fumaneha ha o o kopa ofising ea heno ea Check Point. Qalong, o tla lumelisoa ke fensetere ea tumello moo o tla hloka ho hlakisa: domain, username, password.

Aterese ea portal ea SMP e kentsoeng e bonts'itsoe ka kotloloho e le sebaka sa marang-rang; haeba u e reka ka peeletso ea "Cloud Hosted SMP", ebe u kenya e ncha, o tlameha ho romella kopo ka ho tobetsa konopo ea "New Domain Request" ( nako ea tlhahlobo ho fihlela matsatsi a 3).

Ka mor'a moo, leqephe le ka sehloohong la portal le hlahisoa ka lipalo-palo mabapi le liheke tse laoloang le likhetho tse fumanehang ho tsoa ho menu.

Ha re shebeng tab e 'ngoe le e' ngoe ka thoko, re hlalose ka bokhutšoanyane bokhoni ba eona.

Map

Karolo ena e u lumella ho tseba hore na NGFW ea hau e hokae, u shebe boemo ba eona, kapa u ee ho litlhophiso tsa eona tse tobileng.

Litsela

Tafole, e kenyelletsang liheke tsa SMB tse laoloang ho tsoa lits'ebetsong tsa hau, e na le tlhaiso-leseling: lebitso la heke, mohlala, mofuta oa OS, profil ea leano.

Plans

Karolo ena e na le lethathamo la li-profile tse bonts'ang boemo ba li-Blades tse kentsoeng ho tsona, moo ho ka khonehang ho khetha litokelo tsa phihlello ho etsa liphetoho ho tlhophiso (meralo ea motho ka mong e ka hlophisoa sebakeng sa heno feela).

Haeba u kena litlhophisong tsa boemo bo itseng, u ka khona ho fihlella tlhophiso e felletseng ea NGFW ea hau.

Karolo ea Security Software Blades e ikemiselitse ho hlophisa e 'ngoe le e' ngoe ea li-blades tsa NGFW, haholo-holo:
Firewall, Applications le URLs, IPS, Anti-Virus, Anti-Spam, QoS, Remote Access, Site-to-Site VPN, Tlhokomeliso ea Basebelisi, Anti-Bot, Emulation ea Tšokelo, Thibelo ea Tšokelo, Tlhahlobo ea SSL.

Hlokomela bokhoni ba ho hlophisa lingoloa tsa CLI tse tla sebelisoa ka bo eona ho liheke tse boletsoeng ho Meralo-> Profaele. Ka thuso ea bona, o ka beha litlhophiso tse fapaneng tse tšoanang (letsatsi/nako, li-password tsa phihlello, ho sebetsa ka liprothokholo tsa tlhahlobo ea SNMP, jj.)

Re ke ke ra lula holim'a litlhophiso tse itseng ka botlalo, sena se ile sa koaheloa pejana, ho boetse ho na le thupelo Hlahloba Ntlha ea ho Qala.

notlelela

O mong oa melemo ea ho sebelisa SMP e tla ba pono e bohareng ea lits'oants'o tsa liheke tsa hau tsa SMB, tse ka fihlellehang ka ho ea ho Li-Logs → Gateway Logs.

Sefateng, o ka bolela heke e itseng, hlalosa mohloli kapa aterese ea moo u eang teng, joalo-joalo. Ka kakaretso, ho sebetsa ka lits'oants'o ho ts'oana le ho shebella ho Smart Console; maemo le litaba tsa tlhahisoleseling lia bolokoa.

Lipono tsa Cyber

Karolo ena e na le lipalo-palo ka mokhoa oa litlaleho tsa liketsahalo tsa morao-rao tsa ts'ireletso; li u lumella ho hlophisa lits'oants'o kapele le ho hlahisa infographics ea bohlokoa:

Liphetho tse akaretsang

Kahoo, SMP ke portal ea sejoale-joale e kopanyang sebopeho se hlakileng le bokhoni bo tebileng mabapi le ho fana ka tharollo ea hau ea NGFW ea lelapa la SMB. Ha re hlokomele hape melemo ea eona ea mantlha:

1. Monyetla oa taolo ea hole ea ho fihla ho 5000 NGFW.
2. Tlhokomelo ea portal ke litsebi tsa Check Point (tabeng ea ho ngolisoa ha Cloud SMP).
3. Lintlha tse nang le tsebo le tse hlophisitsoeng mabapi le lisebelisoa tsa hau ka sesebelisoa se le seng.

Khetho e kholo ea lisebelisoa ho Check Point ho tsoa ho TS Solution. Lula u mametse (thelekramo, Facebook, VK, TS Solution Blog, Yandex Zen).

Source: www.habr.com