Sanibonani bangane! Futhi ekugcineni safika kweyokugcina, isifundo sokugcina se-Check Point Ukuqalisa. Namuhla sizokhuluma ngesihloko esibaluleke kakhulu - Ukulayisensa. Ngiyashesha ukukuxwayisa ukuthi lesi sifundo asiwona umhlahlandlela ophelele wokukhetha izinto zokusebenza noma amalayisensi. Lesi isifinyezo nje samaphuzu abalulekile okufanele awazi noma yimuphi umlawuli Wephoyinti Lokuhlola. Uma udidekile ngempela ngokukhethwa kwelayisensi noma idivayisi, ngakho-ke kungcono ukuphendukela ochwepheshe, i.e. kuthina :). Kunezingibe eziningi okunzima kakhulu ukukhuluma ngazo esifundweni, futhi ngeke ukwazi ukuzikhumbula ngaso leso sikhathi.
Isifundo sethu sizoba sethiyori ngokuphelele, ukuze ukwazi ukuvala amaseva akho okuhlekisa futhi uphumule. Ekupheleni kwesihloko uzothola isifundo sevidiyo lapho ngichaza yonke into ngokuningiliziwe.
Ilayisense yesango
Ake siqale ngencazelo yezici zelayisensi yamasango okuphepha. Ngaphezu kwalokho, lokhu kusebenza kukho kokubili i-hardware upline kanye nemishini ebonakalayo. Ake sithi unquma ukuthenga isango. Akunakwenzeka ukumane uthenge ucezu lwehadiwe noma umshini obonakalayo ngaphandle "kokubhaliselwe"! Kunezinketho ezintathu zokubhalisa:
Futhi manje isici sokuqala esithakazelisayo! Ungathenga kuphela idivayisi noma umshini obonakalayo ngokubhaliselwe kwe-NGTP noma kwe-NGTX. Kodwa uma uvuselela ukubhalisa kwakho, usungakwazi ukukhetha iphakheji ye-NGFW uma ungawadingi ama-AV, AB, URL, AS, TE kanye nama-TX blades. Lesi yisikhathi. Okubhaliselwe ngokwako kungathengwa isikhathi esingangonyaka owodwa, emibili noma emithathu.
Ngiyakwazi ukubikezela umbuzo wakho wokuqala! βKwenzekani uma ukubhalisa kungavuselelwa?" Ngigqamise ngokukhethekile ngokuluhlaza lawo ma-blades azosebenza NJALO, futhi NGAPHANDLE kwezandiso. Okubizwa ngokuthi ama-perpetual pales. Ama-blade asele adinga ukubuyekezwa njalo azoyeka ukusebenza. Hhayi-ke, mhlawumbe i-IPS isazoba namasiginesha abalulekile asebenzayo (kodwa mancane kakhulu). Lokhu kuyiqiniso kokubili ihadiwe kanye nemishini ebonakalayo, i.e. vSec.
Njengento ehlukile, ngigqamise ama-blade amathathu angafakiwe kunoma iyiphi ikhithi: i-DLP, i-MAB ne-Capsule.
Futhi khumbula ukuthi uma uthenga isixazululo seqoqo, bese ukhetha imodeli enezijobelelo ze-HA (okungukuthi, Ukutholakala Okuphezulu) njengedivayisi yesibili. Isithombe sibonisa isibonelo sesango elingu-5400. Lokhu kuthinta amasango. Manje iseva yokuphatha.
Ukunikezwa kwelayisensi yeseva
Njengoba sesishilo ezifundweni zokuqala, kunezimo ezimbili zokuqalisa Iphuzu Lokuhlola: I-Standalone (lapho kokubili isango nokuphatha kusedivayisini eyodwa) kanye Nokusabalalisa (uma iseva yokuphatha ibekwe kudivayisi ehlukile). Nokho, izinketho azigcini lapho. Ake sibheke izimo ezintathu ezijwayelekile zokuthumela iseva yokuphatha:
- Ukuthenga i-NGSM ezinikele. Inketho ethandwa kakhulu. Khetha ihadiwe ye-Smart-1 noma ihadiwe ebonakalayo. Uyakhetha, vele, ngokuya ngokuthi mangaki amasango ozowaphatha, 5, 10, 25, njll. Ngokuphakela le divayisi, ungasebenzisa izinkebe zokhiye ezingu-4 zeseva yokuphatha: i-NPM (okungukuthi ukuphathwa kwenqubomgomo), Ukugawulwa Kwemithi kanye Nesimo (okungukuthi, ukugawula), Umcimbi Ohlakaniphile (i-SIEM esuka ku-Check Point, esinika konke ukubika) kanye Nokuthobela (lokhu ukuhlola ikhwalithi yezilungiselelo, kungaba ukuthobelana nezimfuneko ezithile zokulawula, i-PCI DSS efanayo, noma Ukuzijwayeza Okungcono Kakhulu). Ungabona ngokushesha ukuthi ama-NPM kanye ne-LS blades angama-blade angunaphakade, i.e. izosebenza ngaphandle kokuvuselela okubhaliselwe, kodwa I-Smart Event and Compliance blades afakwe onyakeni wokuqala kuphela! Ngemuva kwalokho zidinga ukuvuselelwa ngemali ehlukene. Leli yiphuzu elibalulekile, ungakhohlwa. Futhi uma usengakwazi ukuphila ngaphandle kwe-Compliance blade, khona-ke wonke umuntu udinga I-Smart Event.
- Ukuthenga iseva yokuphathwa komcimbi ozinikele NGAPHEZU kweseva yokuphatha ye-NGSM ekhona. Kungani lokhu kudingekile? Iqiniso liwukuthi ukusebenza kokugawula futhi ikakhulukazi I-Smart Event "idla" izinsiza zesistimu ehloniphekile. Futhi uma kukhona izingodo eziningi, khona-ke lokhu kungaholela "kumabhuleki" kuseva yokulawula. Ngakho-ke, kuvame ukujwayela ukuhambisa lokhu kusebenza kudivayisi ehlukile, i-Smart-1 hardware noma, futhi, umshini obonakalayo. Ukuhlanganiswa okukhulu nenani elikhulu lamalogi cishe njalo kudinga iseva ezinikele yomcimbi ohlakaniphile. Ingakwazi futhi ukuthola izingodo. Ngale ndlela iseva yakho yokuphatha izokwenza imisebenzi yokuphatha kuphela. Lokhu kuthuthukisa kakhulu ukuzinza kwesistimu nokusabela. Njengoba ubona, lapho uthenga iseva ye-Smart Event ezinikele, uthola lawa ma-blade amabili ukuze asetshenziswe unomphela, ngisho nangaphandle kokuvuselelwa. Eminyakeni engu-3-4 yomkhathizwe, lokhu kuzobiza kakhulu kunokuthenga izandiso Zomcimbi Ohlakaniphile zeseva evamile ye-NGSM njalo ngonyaka.
- Iseva yokuphathwa kwelogi ezinikezele, eza ngokungeziwe kumaseva e-NGSM nawe-Smart Event. Ngicabanga ukuthi incazelo icacile. Uma kunenani elikhulu KAKHULU lamalogi, singahambisa umsebenzi wokugawula siye kuseva ehlukile. Iseva ye-Log ezinikezele nayo inelayisensi engunaphakade futhi ayidingi ukuvuselelwa.
Isifundo sevidiyo
Thola ulwazi olwengeziwe mayelana nokuphathwa kwelayisensi kanye nokwesekwa kobuchwepheshe be-Check Point lapha:
Source: www.habr.com