13. Khangela Indawo yokuQala R80.20. Ukukhutshwa kwelayisensi

Molweni, bahlobo! Kwaye ekugqibeleni safika kwelokugqibela, isifundo sokugqibela se-Check Point Ukuqalisa. Namhlanje siza kuthetha ngesihloko esibaluleke kakhulu - Ukunikezelwa kwemvume. Ndikhawuleza ukukulumkisa ukuba esi sifundo ayisosikhokelo esipheleleyo sokukhetha izixhobo okanye iilayisensi. Esi sisishwankathelo nje samanqaku aphambili ukuba nawuphi na umlawuli we-Check Point kufuneka awazi. Ukuba udidekile ngokwenene ngokukhetha ilayisenisi okanye isixhobo, ngoko kungcono ukuphendukela kwiingcali, oko kukuthi. kuthi :). Mininzi imigibe ekunzima kakhulu ukuthetha ngayo ekhosini, kwaye awuyi kukwazi ukuyikhumbula kwangoko.
Isifundo sethu siya kuba yithiyori ngokupheleleyo, ukuze ucime iiseva zakho zokuhlekisa kwaye uphumle. Ekupheleni kwenqaku uya kufumana isifundo sevidiyo apho ndichaza yonke into ngokubanzi.

iGateway Licensing

Masiqale ngenkcazo yeempawu zelayisensi yesango lokhuseleko. Ngaphezu koko, oku kusebenza kuzo zombini ii-hardware uplines kunye noomatshini benyani. Masithi uthathe isigqibo sokuthenga isango. Akunakwenzeka ukuba uthenge nje isiqwenga se-hardware okanye umatshini obonakalayo ngaphandle "kokubhaliselwa"! Kukho iindlela ezintathu zokubhalisa:

Kwaye ngoku inqaku lokuqala elinomdla! Ungathenga kuphela isixhobo okanye umatshini onenyani ngobhaliso lwe-NGTP okanye lwe-NGTX. Kodwa xa uhlaziya umrhumo wakho, unokukhetha iphakheji ye-NGFW ukuba awuyidingi i-AV, AB, URL, AS, TE kunye ne-TX blades. Lo ngumzuzu. Imirhumo ngokwayo inokuthengwa ixesha elilodwa, iminyaka emibini okanye emithathu.

Ndiyakwazi ukuqikelela umbuzo wakho wokuqala! “Kwenzeka ntoni ukuba umrhumo awuhlaziywa?" Ndigxininise ngokuthe ngqo kuluhlaza ezo blades eziya KUHLALA zisebenza, kwaye NGAPHANDLE kolwandiso. Into ebizwa ngokuba yi-perpetual pales. Amagqabi aseleyo afuna uhlaziyo rhoqo aya kuyeka ukusebenza. Ewe, mhlawumbi i-IPS izakubanotyikityo oluphambili olusebenzayo (kodwa bambalwa kakhulu). Oku kuyinyani kuzo zombini ii-hardware kunye noomatshini benyani, okt. vSec.

Njengento eyahlukileyo, ndigxininise ii-blades ezintathu ezingabandakanywanga kuyo nayiphi na ikiti: i-DLP, i-MAB kunye ne-Capsule.

Kwakhona khumbula ukuba ukuba uthenga isisombululo se-cluster, ngoko ukhethe imodeli kunye nesimamva se-HA (oko kukuthi ukuFumana okuPhezulu) njengesixhobo sesibini. Umfanekiso ubonisa umzekelo wesango 5400. Oku kuchaphazela amasango. Ngoku iseva yolawulo.

Ilayisensi yomncedisi wolawulo

Njengoko sele sitshilo kwizifundo zokuqala, kukho iimeko ezimbini zokuphumeza i-Check Point: I-Standalone (xa zombini isango kunye nolawulo kwisixhobo esinye) kunye nokusasazwa (xa iseva yokulawula ifakwe kwisixhobo esahlukileyo). Nangona kunjalo, ukhetho alupheli apho. Makhe sijonge iimeko ezintathu eziqhelekileyo zokuthumela iseva yolawulo:

1. Ukuthenga i-NGSM ezinikeleyo. Olona khetho ludumileyo. Khetha nokuba yi-Smart-1 hardware okanye ihardware ebonakalayo. Ukhetha, ewe, ngokusekwe kubungakanani bamasango oza kulawula, 5, 10, 25, njl. Ngokusebenzisa esi sixhobo, ungasebenzisa i-4 i-key management blades blades: NPM (okt ulawulo lomgaqo-nkqubo), ukuLogging kunye neSimo (oko kukuthi, ukugawulwa kwemithi), umcimbi we-Smart (SIEM ukusuka kwi-Check Point, esinika yonke ingxelo) kunye nokuThotyelwa (oku ku Uvavanyo lomgangatho wesethingi, nokuba kukuthotyelwa kweemfuneko ezithile zolawulo, i-PCI DSS efanayo, okanye uQeqesho oluNgcono ngokulula). Unokubona ngokukhawuleza ukuba i-NPM kunye ne-LS blades ziyi-blades ezisisigxina, okt. iya kusebenza ngaphandle kokuhlaziya imirhumo, kodwa i-Smart Event and Compliance blades ibandakanyiwe kuphela kunyaka wokuqala! Emva koko kufuneka zihlaziywe ngemali eyahlukileyo. Le ngongoma ebalulekileyo, musa ukulibala. Kwaye ukuba usenokuhlala ngaphandle kweblade yokuThobela, ke wonke umntu ufuna uMnyhadala oSmart.
2. Ukuthenga iseva yoLawulo loMsitho ozinikeleyo NGAPHANDLE komncedisi wolawulo we-NGSM okhoyo. Kutheni oku kuyimfuneko? Inyani yeyokuba umsebenzi wokugawulwa kwemithi kwaye ngakumbi uMnyhadala oSmart "utya kude" izixhobo ezifanelekileyo zenkqubo. Kwaye ukuba kukho iilogi ezininzi, oku kunokukhokelela "kwiibhuleki" kwiseva yokulawula. Ke ngoko, kudla ngokuqhelwa ukuhambisa lo msebenzi kwisixhobo esahlukileyo, i-Smart-1 hardware okanye, kwakhona, umatshini wenyani. Ukudityaniswa okukhulu kunye nenani elikhulu leelogi phantse kusoloko kufuna iseva ezinikeleyo kwiSigigaba esiSmart. Iyakwazi ukufumana iilog. Ngale ndlela umncedisi wakho wolawulo uya kwenza imisebenzi yolawulo kuphela. Oku kuphucula kakhulu ukuzinza kwenkqubo kunye nokuphendula. Njengoko ubona, xa uthenga iseva yeSigigaba seSmart esinikezelweyo, ufumana ezi blades zimbini ukuze zisetyenziswe ngokusisigxina, ngaphandle kokuhlaziya. Ngaphezulu kweminyaka emi-3 ukuya kweyesi-4, oku kuya kuba neendleko ezingaphezulu kunokuthenga izandiso zoMnyhadala weSmart kwiseva eqhelekileyo ye-NGSM minyaka le.
3. Iseva yolawulo lwelog ezinikeleyo, esiza ukongeza kwi-NGSM kunye neeseva ze-Smart Event. Ndicinga ukuba intsingiselo icacile. Ukuba kukho inani elikhulu KAKHULU leelogi, sinokuhambisa umsebenzi wokuloga kumncedisi owahlukileyo. Umncedisi weLog ozinikeleyo unelayisensi esisigxina kwaye ayifuni ukuhlaziywa.

Isifundo sevidiyo

Fumana ulwazi oluthe kratya malunga nolawulo lwelayisenisi kunye neNkxaso yeNkxaso yoBuchwepheshe apha:

umthombo: www.habr.com