Siyakwamukela ochungechungeni olusha lwezihloko ezinikezelwe ekuvikeleni izindawo zokusebenza zomuntu siqu usebenzisa isixazululo kanye nohlelo olusha lokuphatha amafu - . I-SandBlast Agent ibuyekezwe yithi ezihlokweni ezimayelana ΠΈ , futhi kudala sithembisa ukushicilela inkambo egcwele yezindatshana mayelana nama-ejenti wokuphakela nokuphatha. Futhi Iplathifomu Yokuphatha yomenzeli esekelwe efwini eyethulwe i-Check Point ngaphakathi kwe-Infinity Portal ikufanelekela kangcono lokhu - kusukela ngesikhathi sokubhaliswa kuphothali kuya ekuqaleni kokuskena indawo yokusebenza yi-ejenti nokuthola umsebenzi omubi, kuzothatha. imizuzu embalwa kuphela.
Kungani i-SandBlast Agent?
Ngokusho kokuhlolwa kwakamuva I-Check Point SandBlast Agent ilinganiselwe nge-AA futhi Kunconywe ngemiphumela yokuhlolwa elandelayo:
- Izinga lokuvinjwa kwe-WEB traffic ngu-100%;
- Izinga lokuvimbela ku-imeyili ngu-100%;
- Izinga lokuvimbela izinsongo ezingaxhunyiwe ku-inthanethi - 100%;
- Izinga lokuvinjwa komzamo we-Bypass ngu-100%;
- Isilinganiso se-block block: 99,12%;
- Inani lezinto ezingezona iqiniso Okungelona iqiniso ngu-0,8%.
I-SandBlast Agent inikeza izinga eliphezulu lokuphepha lezindawo zokusebenza zabasebenzisi ngokusebenzisana kwezingxenye ezimbalwa, ezibizwa ngokuthi βama-bladesβ ku-Check Point terminology. Incazelo emfushane yama-blades asetshenziswe ku-SandBlast Agent:
- Ukulingisa Usongo - Ubuchwepheshe be-sandbox, ukumelana namasu ahlukahlukene okugwema, nokuvumela ukuvimbela ukuhlaselwa kwezinsuku eziyiziro;
- Ukukhipha Usongo - Ubuchwepheshe bokuhlanza ifayela e-fly, okuvumela umsebenzisi ukuthi athole idokhumenti esuliwe yezingxenye ezisebenzayo ngaphambi kwesinqumo sokulingisa okugcwele;
- I-Anti-Exploit β ukuvikelwa kwezinhlelo ezisetshenziswa kakhulu (i-Microsoft Office, i-Adobe PDF Reader, iziphequluli, njll.) ekuhlaselweni kusetshenziswa izinto ezisizayo;
- I-Anti-Bot - Ubuchwepheshe bokuvikela amakhompiyutha omuntu siqu ekujoyineni amanethiwekhi e-botnet, ikuvumela ukuthi ubone izifo, umise ukusebenza kwesoftware enonya kanye nemishini "ehlanzekile" enegciwane;
- Zero-Phishing β imojula yokuvikela evimba amasayithi obugebengu bokweba imininingwane ebucayi futhi yazisa umsebenzisi mayelana nokusetshenziswa kwephasiwedi esebenzayo ezinsizeni zezinkampani zangaphandle;
- Unogada Wokuziphatha - ubuchwepheshe obuhloselwe ukuvimbela ukuhlasela okusebenzisa ubuchwepheshe ukuze kudlule futhi kugweme ukubonwa;
- I-Anti-Rhlengware - imojula yokuvikela ethola futhi ivimbe izenzo ze-ransomware, futhi ikuvumela ukuthi ubuyisele amafayela abethelwe usebenzisa izifinyezo;
- Forensics - imojula yezokuphepha erekhoda futhi ihlaziye zonke izehlakalo emshinini, futhi ngenxa yalokho inikeza umbiko wekhwalithi ephezulu ngokuhlaselwa okuphenywayo.
Ngaphezu kwezici ezisohlwini, i-SandBlast Agent ivumela ukubethela okugcwele kwediski, kanye nokubethela kwemidiya ekhishwayo kanye nokuvikelwa kwamachweba wekhompyutha, ineklayenti le-VPN elakhelwe ngaphakathi, isiginesha kanye namamojula we-heuristic okuvikela ngokumelene ne-malware. Amakhono azo zonke izingxenye ze-SandBlast Agent azodingidwa ngokuningiliziwe ezihlokweni ezilandelayo, kodwa manje sekuyisikhathi sokujwayelana neplatifomu ethuthukayo esebenzayo - Hlola Point Infinity.
Hlola i-Infinity: I-Generation V Threat Protection
Kusukela ngo-2017, i-Check Point ibilokhu ithuthukisa futhi iphromotha i-architecture eyodwa ehlanganisiwe yezokuphepha. , okuvumela ukuthi uvikele ngempumelelo zonke izingxenye zengqalasizinda yesimanje ye-IT: ingqalasizinda yenethiwekhi namafu, izindawo zokusebenza, amadivaysi eselula. Umqondo oyinhloko yikhono lokuphatha amathuluzi okuphepha ezigaba ezihlukahlukene kusukela kukhonsoli yokuphatha esekelwe kusiphequluli esisodwa.
Okwamanje, i-Check Point Infinity architecture ikuvumela ukuthi ulawule izixazululo zokuvikela amafu - CloudGuard SaaS, izixazululo zokuphepha kwenethiwekhi - CloudGuard Connect, Smart-1 Cloud, Infinity SOC, kanye nokuvikela amadivayisi abasebenzisi usebenzisa i-SandBlast Agent Management Platform, i-SandBlast Agent Cloud. Ukuphathwa kanye ne-SandBlast Web Dashboard.
Lolu chungechunge lwama-athikili luzonikelwa kusixazululo se-SandBlast Agent Management Platform (okwamanje inguqulo ye-Beta), esikuvumela ukuthi usebenzise iseva yokuphatha ifu ngendaba yamaminithi, ulungise inqubomgomo yezokuphepha futhi usabalalise ama-ejenti kumakhompyutha omsebenzisi.
I-Infinity Portal & SandBlast Agent Management Platform: ukuqalisa
Inqubo yokuphakelwa kwe-SandBlast Agent isebenzisa Inkundla Yokuphatha iqukethe izinyathelo ezi-5:
- Ukubhaliswa ku-Check Point Infinity Portal;
- Ukubhalisa isicelo se-SandBlast Agent Management Platform;
- Ukudala i-Endpoint Management Service entsha yokuphatha ama-ejenti;
- Ukudala nokulungisa inqubomgomo yama-ejenti;
- Ukuthumela ama-agent kumakhompyutha abasebenzisi.
Lesi sihloko sihlanganisa izinyathelo ezintathu zokuqala, futhi kokuthunyelwe okulandelayo sizobhekisisa lezi ezimbili ezisele, okuhlanganisa ukuhlola isixhumi esibonakalayo senkundla yokuphatha, ama-ejenti wokusabalalisa kumakhompuyutha eklayenti, ukulungisa inqubomgomo, nokuhlola ikhono le-ejenti lokusingatha okudume kakhulu. izinsongo zokuphepha.
1. Ukubhaliswa ku-Infinity Portal
Okokuqala, udinga ukuya kusayithi futhi ugcwalise ifomu lokubhalisa, elibonisa igama lenkampani, imininingwane yokuxhumana futhi uyavumelana nemibandela yokusebenzisa isevisi kanye nenqubomgomo yobumfihlo yephothali, futhi ugcwalise ne-reCAPTCHA. Kuyaqapheleka ukuthi lapho ubhalisa, ungakhetha izwe okukusikhungo sedatha idatha eqoqwe yingosi izogcinwa ngokuhambisana nemithetho yokusebenzisa isevisi kanye nenqubomgomo yobumfihlo. Kunezinketho ezimbili kuphela: i-Ireland ne-USA. Ukuze wenze lokhu, udinga ukuthikha ibhokisi elithi βSebenzisa indawo yokuhlala yedatha ethileβ bese ukhetha izwe.
Lapho ukubhaliswa ngempumelelo kuphothali, kuzothunyelwa incwadi ekhelini lakho le-imeyili eqinisekisa ukufinyelela kwakho ku-Infinity Portal futhi ikumema ukuthi ungene kuphothali. Kubalulekile ukuqaphela ukuthi lapho ungena kuphothali okokuqala ngqa, ungase udingeke ukuba ukhethe inketho yokusetha kabusha iphasiwedi ukuze uqinisekise ngokuqhubekayo ngempumelelo.
2. Bhalisa isicelo se-SandBlast Agent Management Platform
Ngemva kokuqinisekisa kuphothali nokuchofoza isithonjana "Imenyu" (isinyathelo 1 esithombeni esingezansi), uzocelwa ukuthi ubhalise isicelo ohlwini lwabatholakalayo ngaphansi kwezigaba ezilandelayo: Ukuvikelwa Kwamafu, Ukuvikelwa Kwenethiwekhi kanye Nokuvikelwa Kwephoyinti Lokuphela. Isicelo ngasinye sifanelwe inkambo yaso yezindatshana eziyisingeniso, ngakho-ke ngeke sigxile kuzo ngokuningiliziwe bese sikhetha isicelo se-SandBlast Agent Management Platform esigabeni Sokuvikela Iphoyinti lokugcina (isinyathelo sesi-2 esithombeni esingezansi).
Ngemva kokukhetha uhlelo lokusebenza, kufanele uvumelane nemigomo yokusebenzisa insizakalo kanye nenqubomgomo yobumfihlo yengosi, futhi ngemva kokuchofoza inkinobho ethi "ZAMA MANJE", ukufinyelela kusixhumi esibonakalayo sokudala izinsiza Zokuphatha Iphoyinti lokugcina kuyavuleka.
3. Dala Isevisi Yokuphatha Indawo Yokugcina entsha
Isinyathelo sokugcina siwukwenza isevisi entsha ye-Endpoint Management, okuyisixhumi esibonakalayo sewebhu sokuphatha ama-ejenti. Inqubo, njengangaphambili, ilula kakhulu: khetha inketho ethi βIsevisi Yokuphatha Indawo Entshaβ (njengoba kukhonjisiwe esithombeni esingezansi), gcwalisa imininingwane yensizakalo yakho entsha (i-ID, isifunda sokusingatha kanye nephasiwedi) bese uchofoza okuthi βDALAβ inkinobho.
Ngemva kokuqeda inqubo yokudala isevisi, uzothola i-imeyili enemingcele ongayisebenzisa ukuze uxhume kuseva yokuphatha ifu usebenzisa ikhonsoli evamile Yokuhlola Indawo yokuphatha i-ejenti - inguqulo ye-SmartEndpoint R80.40. Ngeke sicabangele ukuphatha sisebenzisa ikhonsoli ejwayelekile, njengoba lolu chungechunge lwama-athikili luhloselwe ukukhombisa amakhono esistimu yokuphatha i-ejenti yamafu ye-SandBlast.
Kuleli qophelo, inqubo yokubhalisa isevisi yefu yokuphatha ithuluzi lokuvikela ikhompyutha yomuntu siqu ye-SandBlast Agent ingabhekwa njengeqediwe ngempumelelo. Sibona ukusebenzelana kwewebhu yesikhulumi sokuphatha i-ejenti, okuzoxoxwa ngakho ngokuningiliziwe esihlokweni sethu esilandelayo ochungechungeni lwe-βCheck Point SandBlast Agent Management Platformβ.
isiphetho
Isikhathi sokufingqa umsebenzi owenziwe: sibhalise ngempumelelo ku-Infinity Portal, sabhalisa isicelo se-SandBlast Agent Management Platform kuphothali futhi sakha isevisi entsha yokuphatha amafu, Isevisi Yokuphathwa Kwephoyinti Ye-Endpoint.
Esihlokweni sethu esilandelayo ochungechungeni, sizobheka kabanzi isixhumi esibonakalayo sokuphatha i-ejenti - akukho neyodwa ithebhu ezoshiywa ingagadiwe, okuzosivumela ukuthi senze kalula inqubomgomo yezokuphepha ngokuzayo futhi siqaphe isimo semishini yomsebenzisi esebenzisa. izingodo nemibiko.
. Ukuze ungaphuthelwa ukushicilelwa okulandelayo esihlokweni se-SandBlast Agent Management Platform - landela izibuyekezo ezinkundleni zokuxhumana zethu (, , , , ).
Source: www.habr.com