1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

Emva kokupapashwa amanqaku Ngaphezulu kweminyaka emibini idlulile, iimodeli ze-1400 ngoku zisusiwe ekuthengiseni. Ixesha lifikile utshintsho kunye nezinto ezintsha, umsebenzi we-CheckPoint wazama ukuphumeza kwi-series ye-1500. Kwinqaku siza kujonga iimodeli zokukhusela iiofisi ezincinci okanye amasebe enkampani, siya kubonisa iimpawu zobugcisa, iimpawu zokuhambisa (ilayisensi, ulawulo kunye nolawulo lwezicwangciso), kunye nokuchukumisa ubuchwepheshe obutsha kunye nokhetho.

Uluhlu

Iimodeli ezintsha ze-SMB zezi: 1530, 1550, 1570, 1570R. Ungajonga iimveliso kwi iphepha Indawo yokujonga. Ngokwengqiqo, siya kubahlula ngamaqela amathathu: isango lokhuseleko lweofisi kunye nenkxaso ye-WIFI (1530, 1550), isango lokhuseleko lweofisi kunye ne-WIFI + 4G / LTE inkxaso (1570, 1550), isango lokhuseleko loshishino (1570R).

Series 1530, 1550

1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

Iimodeli zinee-interface ezi-5 zenethiwekhi yendawo kunye ne-1 interface yokufikelela kwi-Intanethi, i-bandwidth yazo yi-1 GB. Ikwakhona yi-USB-C Console. Ngokuphathelele iimpawu zobugcisa, ngoko Ishiti yedatha Le mizekelo inikezela ngenani elikhulu leeparamitha ezilinganisiweyo, kodwa siya kugxininisa kwizinto ezibaluleke kakhulu (ngokombono wethu).

Iimpawu

1530

1550

Elona nani liphezulu loqhagamshelo ngesekhondi

10 500

14 000

Elona nani liphezulu loqhagamshelo oluhambelanayo

500 000

500 000

Ukutyhutyha ngoFirewall + noThintelo lweNgozi (Mbit/C)

340

450

Ukugqitha ngoFirewall + IPS (Mbit/C)

600

800

I-Firewall Bandwidth (Mbps)

1000

1000

* UThintelo loMngcipheko lubhekiselele kwezi blade zilandelayo: iFirewall, uLawulo lweSicelo kunye ne-IPS.

Iimodeli 1530, 1550 zinenani lemisebenzi:

  • I-Gaia 80.20 Uluhlu olufakelweyo lweenketho luvezwa kuyo SK Indawo yokukhangela
  • Ilayisensi yoFikelelo lweMobile ye-100 yoqhagamshelo lwangaxeshanye iqukwe ekuthengweni kwaso nasiphi na isixhobo. Kuyafaneleka ukuqwalasela ukuba olu phawu loluhlu lwemodeli ye-SMB NGFW likuvumela ukuba ugcine ekuthengeni okuhlukeneyo kweelayisensi ze-Mobile Access, ezingabandakanywanga xa kuthengwa enye imodeli ye-CheckPoint series.
  • Ukukwazi ukulawula isango lokhuseleko usebenzisa i-app ephathwayo yeWatch Tower (iinkcukacha ezingakumbi zibhalwe kweyethu inqaku.)

Kubani uthotho 1530, 1550: Lo mgca ulungele iiofisi zamasebe ezihlala abantu abamalunga ne-100, uqhagamshelwa kwiindawo ezikude, yaye iindlela ezahlukahlukeneyo zolawulo ziyafumaneka.

Series 1570, 1590

1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

Iimodeli ezindala kumgca we-series ye-1500 zinee-interface ezi-8 zokunxibelelana kwendawo, i-interface ye-1 ye-DMZ kunye ne-interface ye-1 ye-intanethi ye-intanethi (i-bandwidth yazo zonke izibuko yi-1 GB / s). Kwakhona ziyafumaneka i-USB 3.0 Port kunye ne-USB-C Console. Iimodeli ziza nenkxaso yeemodem ze4G/LTE. Inkxaso yamakhadi e-Micro-SD ifakiwe ukwandisa imemori yangaphakathi yesixhobo.

Iinkcukacha zinikwe ngezantsi:

Iimpawu

1570

1590

Elona nani liphezulu loqhagamshelo ngesekhondi

15 750

21 000

Elona nani liphezulu loqhagamshelo oluhambelanayo

500 000

500 000

UThintelo loThintelo loMngcipheko (Mbps)

500

660

Ukugqitha ngoFirewall + IPS (Mbit/C)

970

1300

I-Firewall Bandwidth (Mbps)

2800

2800

Iimodeli 1570, 1590 zinenani lemisebenzi:

  • I-Gaia 80.20 Uluhlu olufakelweyo lweenketho luvezwa kuyo SK.
  • Ilayisensi yoFikelelo lweMobile ye-200 yoqhagamshelo ngexesha elinye
    iza nokuthengwa kwazo naziphi na izixhobo. Kuyafaneleka ukuqwalasela ukuba olu phawu loluhlu lwemodeli ye-SMB NGFW likuvumela ukuba ugcine ekuthengeni okuhlukeneyo kweelayisensi ze-Mobile Access, ezingabandakanywanga xa kuthengwa enye imodeli ye-CheckPoint series.
  • Ukukwazi ukulawula isango lokhuseleko usebenzisa i-app ephathwayo yeWatch Tower (iinkcukacha ezingakumbi zibhalwe kweyethu nqaku).

Kubani uthotho 1570, 1590: lo mgca ufanelekile kwiiofisi ukuya kwi-200 yabantu, unikezela uxhulumaniso olukude, kwaye unomsebenzi ophezulu phakathi kwentsapho ye-SMB.

Ukuthelekisa izikhombisi iimodeli zangaphambili:

Iimpawu

1470

1490

Ugqithiso ngoThintelo loMngcipheko + iFirewall (Mbit/C)

500

550

Ukugqitha ngoFirewall + IPS (Mbit/C)

625

800

1570R

I-NGFW 1570R CheckPoint ifanelwe ingqalelo ekhethekileyo. Yaphuhliswa ngokukodwa kwishishini lemizi-mveliso kwaye iya kuba nomdla kwiinkampani ezisebenza kwintsimi: ukuthutha, ukukhutshwa kwemithombo yezimbiwa (i-oyile, igesi, njl.), Ukuveliswa kweemveliso ezahlukeneyo.

1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

I-1570R yenzelwe ukuqwalasela iimpawu kunye neemeko zokusetyenziswa kwayo:

  • ukhuseleko lweperimeter yenethiwekhi kunye nolawulo lwezixhobo ezihlakaniphile;
  • inkxaso yeeprothokholi ze-ICS/SCADA zoshishino, isinxibelelanisi seGPS;
  • ukunyamezela impazamo xa usebenza kwiimeko ezinzima (ukushisa okuphezulu / okuphantsi, imvula, ukunyuka kwe-vibration).

Iimpawu zeNGFW

Ngo-1570, i-Rugged

Elona nani liphezulu loqhagamshelo ngesekhondi

13 500

Elona nani liphezulu loqhagamshelo oluhambelanayo

500 000

UThintelo loThintelo loMngcipheko (Mbps)

400

Ukugqitha ngoFirewall + IPS (Mbit/C)

700

I-Firewall Bandwidth (Mbps)

1900

Iimeko zokusebenza zokusetyenziswa

-40ΒΊC ~ 75ΒΊC (-40ΒΊF ~ +167ΒΊF)

Izatifikethi zamandla

EN/IEC 60529, IEC 60068-2-27 umothuko, IEC 60068-2-6 vibration

Ukongeza, siya kubalaselisa ngokwahlukeneyo inani lemisebenzi ye-1570R:

  • I-Gaia 80.20 Uluhlu olufakelweyo lweenketho luvezwa kuyo SK.
  • Ilayisensi yoFikelelo lweMobile ye-200 yoqhagamshelo ngexesha elinye
    inikezelwe ngokuthengwa kwesixhobo. Kuyafaneleka ukuqwalasela ukuba olu phawu loluhlu olutsha lwe-SMB NGFW lukuvumela ukuba ugcine ekuthengeni okwahlukileyo kweelayisensi ze-Mobile Access, ezingabandakanywanga xa kuthengwa enye imodeli ye-CheckPoint.
  • Ukukwazi ukulawula isango lokhuseleko usebenzisa i-app ephathwayo yeWatch Tower (iinkcukacha ezingakumbi zibhalwe kweyethu nqaku)
  • Ukuveliswa ngokuzenzekelayo kwemigaqo-nkqubo/imithetho yezixhobo ze-IoT ngelo xesha ziqhagamshelwe kwinethiwekhi yakho yasekhaya. Umgaqo uveliswa kwisixhobo ngasinye smart kwaye ivumela kuphela ezo protocol ukuba kufuneka isebenze ngokuchanekileyo.

1500 ulawulo series

Ukuqwalasela iimpawu zobugcisa kunye nobuchule bezixhobo ezitsha zentsapho ye-SMB, kuyafaneleka ukuba uqaphele ukuba kukho iindlela ezahlukeneyo zokulawula kunye nokulawula kwazo. Ezi zicwangciso zilandelayo zikhona:

  1. Ulawulo lwengingqi.

    Idla ngokusetyenziswa kumashishini amancinci apho kukho iiofisi ezininzi kwaye akukho lawulo lusembindini lwezakhiwo. Iinzuzo ziquka: ukuhanjiswa okufikelelekayo kunye nolawulo lwe-NGFW, ukukwazi ukusebenzisana nezixhobo zendawo. Ukungalungi kubandakanya ukulinganiselwa okuhambelana nezakhono zeGaia: ukungabikho kwenqanaba lokwahlula imithetho, izixhobo ezilinganiselweyo zokubeka iliso, ukungabikho kwendawo yokugcina iilogi.

    1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

  2. Ulawulo olubekwe kwindawo enye ngeSeva yoLawulo ezinikeleyo. Le ndlela isetyenziswa kwimeko apho umlawuli anokulawula ii-NGFW ezininzi, zinokubekwa kwiindawo ezahlukeneyo. Inzuzo yale ndlela kukuguquguquka kunye nokulawula kwimeko yonke yeziseko zophuhliso, kwaye ezinye iinketho ezifakwe kwi-Gaia 80.20 zifumaneka kuphela kwesi sikimu.

    1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

  3. Ulawulo olubekwe kwindawo enye ngokusebenzisa I-Smart-1 Cloud. Esi sisikripthi esitsha solawulo lwe-NGFW olusuka kwi-CheckPoint. Iseva yakho yoLawulo ibekwe kwindawo yelifu, lonke ulawulo lwenzeka kwi-Web Interface, ikuvumela ukuba ungaxhomekeki kwi-OS yePC yakho. Ukongezelela, umncedisi wokulawula ugcinwa ziingcali ze-CheckPoint, ukusebenza kwayo kuxhomekeke ngokuthe ngqo kwiiparamitha ezikhethiweyo kwaye kulula ukuhla.

    1. I-NGFW yamashishini amancinci. I-CheckPoint entsha ye-1500 yoKhuseleko lweGateway Line

  4. Ulawulo olubekwe kwindawo enye ngokusebenzisa I-SMP (I-Portal yoLawulo loKhuseleko). Esi sisombululo siquka ilifu okanye kwindawo yokusasazwa kwe-portal yewebhu ekwabelwana ngayo ekwaziyo ukulawula ukuya kuthi ga kwi-10 yezixhobo ze-SMB ngaxeshanye.
  5. Amandla okulawula usebenzisa isixhobo esiphathwayo seWatch Tower afumaneka kuphela emva kokuba kusetyenziswe inkqubo epheleleyo yolawulo (jonga amanqaku 1-4). Funda ngakumbi malunga neli nqaku kwinqaku lethu inqaku.

Makhe sigxininise eyona nto ibalulekileyo kuluvo lwethu:

  1. Ukunqongophala kokukwazi ukusebenzisa i-Mobile Access Portal. Abasebenzisi baya kukwazi ukusebenzisa i-Remote Access ukufikelela kwizibonelelo zenkampani yangaphakathi, kodwa abayi kukwazi ukuxhuma kwi-portal ye-SSL kunye nezicelo zakho ezipapashwe.
  2. Ezi blades zilandelayo okanye iinketho azixhaswanga: Ulwazi loMxholo, i-DLP, iZinto eziHlaziywayo, ukuhlolwa kwe-SSL ngaphandle kokuhlelwa, ukutsalwa kwe-Treat, i-MTA ene-Treat Emulation check, i-Antivirus yokuskena i-archives, i-ClusterXL kwimowudi yoKwabelana ngoMlayisho.

Ekupheleni kwenqaku, ndingathanda ukuqaphela ukuba isihloko sezisombululo ze-NGFW ze-SMB siye safudukela kwinqanaba elitsha lenkxaso kunye nokusebenzisana; ngenxa yokukhululwa kwenguqulo ye-80.20 Embekelwe, ibhalansi ifunyenwe phakathi kweenketho ze inguqulelo epheleleyo yeGaia kunye nobuchule be-hardware bezixhobo zeeofisi ezincinci. Siceba ukuqhubeka nokupapasha uluhlu lwamanqaku oqeqesho, apho siya kuqwalasela ulungelelwaniso olusisiseko lwezisombululo ze-SMB, ukulungiswa komsebenzi kunye neendlela zabo ezintsha.

Ukukhetha okukhulu kwemathiriyeli kwi-Check Point evela kwi-TS Solution. Hla umamele (yocingo, Facebook, VK, TS Solution Blog, Yandex.Zen).

umthombo: www.habr.com

Yongeza izimvo