{"id":93215,"date":"2020-09-04T13:42:05","date_gmt":"2020-09-04T11:42:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad"},"modified":"2020-09-04T13:42:05","modified_gmt":"2020-09-04T11:42:05","slug":"check-point-gaia-r81-teper-ea-pervyj-vzglyad","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","title":{"rendered":"Check Point Gaia R81 \u00e4r nu EA. F\u00f6rsta intrycket","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\n
\nDen nya versionen av Gaia R81 har publicerats i tidig \u00e5tkomst (EA). Tidigare kunde man bekanta sig med de planerade nyheterna<\/a><\/noindex> i release notes. Nu har vi m\u00f6jligheten att se detta i verkligheten. F\u00f6r detta \u00e4ndam\u00e5l har en standardkonfiguration med en dedikerad hanteringsserver och gateway sammanst\u00e4llts. Naturligtvis har vi inte haft tid att genomf\u00f6ra alla omfattande tester, men vi \u00e4r redo att dela med oss av det som omedelbart f\u00e5ngar \u00f6gat vid f\u00f6rsta bekantskapen med det nya systemet. Under cuten finns de viktigaste punkterna vi har identifierat vid f\u00f6rsta m\u00f6tet med systemet (m\u00e5nga bilder).
\n<\/a><\/noindex><\/p>\n

Hantering<\/h3>\n

\nVid initiering av gatewayen f\u00e5r du m\u00f6jlighet att genast ansluta till den molnbaserade hanteringsservern \u2014 Smart 1 Cloud<\/b> (den s\u00e5 kallade MaaS):<\/p>\n

\"Check
\nDetta \u00e4r en relativt ny funktion (finns \u00e4ven i de senaste versionerna 80.40) och vi kommer att ber\u00e4tta mer om denna tj\u00e4nst inom den n\u00e4rmaste tiden<\/a><\/noindex>. H\u00e4r \u00e4r den st\u00f6rsta f\u00f6rdelen (enligt v\u00e5r \u00e5sikt) \u2014 den efterl\u00e4ngtade m\u00f6jligheten att hantera via webbl\u00e4saren \ud83d\ude42<\/p>\n

VxLAN och GRE<\/h3>\n

\nDet f\u00f6rsta vi ville kolla var st\u00f6det f\u00f6r VxLAN och GRE. Release Notes ljuger inte, allt finns p\u00e5 plats:<\/p>\n

\"Check
\n
\nDet g\u00e5r att diskutera behovet av dessa funktioner p\u00e5 NGFW, men det \u00e4r \u00e4nd\u00e5 b\u00e4ttre n\u00e4r anv\u00e4ndaren har det valet.<\/p>\n

Infinity Threat Prevention<\/h3>\n

\nDetta \u00e4r f\u00f6rmodligen det f\u00f6rsta som f\u00e5ngar \u00f6gat n\u00e4r man b\u00f6rjar justera s\u00e4kerhetspolicyn. En ny aktiveringsvariant f\u00f6r Threat Prevention-blades har tillkommit \u2014 Infinity. Det vill s\u00e4ga, du beh\u00f6ver inte v\u00e4lja vilka blades som ska aktiveras, Check Point har beslutat \u00e5t oss (jag vet inte hur bra det \u00e4r):<\/p>\n

\"Check
\nSamtidigt har du sj\u00e4lvklart m\u00f6jlighet att vanligtvis anpassa inst\u00e4llningarna f\u00f6r blades.<\/p>\n

Infinity Threat Prevention Policy<\/h3>\n

\nEftersom vi talade om Threat Prevention, l\u00e5t oss genast titta p\u00e5 policyn. Detta \u00e4r f\u00f6rmodligen en av de mest betydande f\u00f6r\u00e4ndringarna:<\/p>\n

\"Check
\n
\nSom syns har det tillkommit m\u00e5nga fler f\u00f6rinst\u00e4llda policys. Du kan detaljerat se skillnaderna mellan dem genom att klicka p\u00e5 Help me decide<\/b>:<\/p>\n

\"Check
\n\"Check
\n\"Check
\n
\nDetta \u00e4r en dynamisk policy som uppdateras utan ditt deltagande.<\/p>\n

Change Report<\/h3>\n

\n\u00c4ntligen kan man p\u00e5 ett bekv\u00e4mt s\u00e4tt se vad som faktiskt har \u00e4ndrats under justeringen av konfigurationen:<\/p>\n

\"Check
\n
\nDet finns en allm\u00e4n rapport:<\/p>\n

\"Check
\n
\nOch s\u00e5 finns det helt specifika sektioner:<\/p>\n

\"Check
\n\"Check
\n
\nMycket praktiskt f\u00f6r att f\u00f6lja \u00e4ndringarna.<\/p>\n

Web Management f\u00f6r Endpoint<\/h3>\n

\nSom du s\u00e4kert vet kan Endpoint Management aktiveras p\u00e5 administrationsservern f\u00f6r att hantera SandBlast-agenter. I R81 har vi lagt till en intressant funktion \u2014 webbaserad hantering. Detta aktiveras p\u00e5 ett ganska intressant s\u00e4tt. Du m\u00e5ste g\u00e5 in i CLI-l\u00e4get expert<\/b> och skriva kommandot \u201cweb_mgmt_start\u201d<\/b>, och sedan g\u00e5 till adressen \u2014 https:\/\/:4434\/sba\/. D\u00e5 \u00f6ppnas webbkonsole.<\/p>\n

\"Check
\n
\nVi har delvis ber\u00e4ttat om den h\u00e4r plattformen i artiklarna "Check Point SandBlast Agent Management Platform<\/a><\/noindex>" av Alexei Malko. Visserligen var en s\u00e5dan konsol bara tillg\u00e4nglig i molnet d\u00e5, men nu fungerar det \u00e4ven p\u00e5 lokala hanteringsservrar.<\/p>\n

Smart Update<\/h3>\n

\nN\u00e4r du f\u00f6rs\u00f6ker l\u00e4gga till licenser via gamla goda Smart Update, kommer konsolen v\u00e4nligt att meddela att detta nu kan g\u00f6ras direkt fr\u00e5n den v\u00e4lbekanta Smart Console:<\/p>\n

\"Check
\n<\/p>\n

NAT<\/h3>\n

\nEn efterl\u00e4ngtad funktion. Nu kan du anv\u00e4nda Access Roles<\/b>, Security Zones<\/b> eller Updatable Objects<\/b>. Det finns tillf\u00e4llen n\u00e4r detta \u00e4r mycket anv\u00e4ndbart och n\u00f6dv\u00e4ndigt.<\/p>\n

Slutsats<\/h3>\n

\nDet \u00e4r allt f\u00f6r nu. Det finns m\u00e5nga fler nyheter som beh\u00f6ver testas (IoT, Azure AD, Updgrade, Logs API osv.). Som n\u00e4mnts tidigare kommer vi snart att publicera en \u00f6versikt av det nya molnbaserade administrationssystemet \u2014 Smart-1 Cloud<\/a><\/noindex><\/b>. H\u00e5ll utkik efter uppdateringar p\u00e5 v\u00e5ra kanaler (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>)!<\/p>\n

Gl\u00f6m inte v\u00e5r stora samling av material om Check Point<\/a><\/noindex>.
\n
K\u00e4lla: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Gaia R81 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f (EA). \u0420\u0430\u043d\u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432\u0430\u043c\u0438 \u0432 release notes. \u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0443 \u043d\u0430\u0441 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u044d\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0436\u0438\u0437\u043d\u0438. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0448\u043b\u044e\u0437\u043e\u043c. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u0441\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b, \u043d\u043e \u0437\u0430\u0442\u043e \u0433\u043e\u0442\u043e\u0432\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-93215","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point Gaia R81 \u00e4r nu EA. F\u00f6rsta intrycket | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point Gaia R81 \u0442\u0435\u043f\u0435\u0440\u044c EA. \u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 | ProHoster","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/check-point-gaia-r81-teper-ea-pervyj-vzglyad","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T11:42:05+00:00","article:modified_time":"2020-09-04T11:42:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93215","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:31","updated":"2022-10-03 07:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/93215","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=93215"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/93215\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/93216"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=93215"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=93215"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=93215"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}