Ngamukela abafundi ochungechungeni lwethu lwama-athikili, olunikezelwe ku-SMB Check Point, okuyibanga lamamodeli ochungechunge lwe-1500. IN ikhulume ngekhono lokuphatha uchungechunge lwakho lwe-SMB NGFWs usebenzisa isevisi yefu ye-Security Management Portal (SMP). Ekugcineni, sekuyisikhathi sokukhuluma ngakho kabanzi, sibonise izinketho ezitholakalayo namathuluzi okuphatha. Kulabo abasanda kusijoyina, ake nginikhumbuze ngezihloko okuxoxwe ngazo ngaphambilini: , ,
I-SMP ingosi emaphakathi yokuphatha amadivayisi akho e-SMB, okuhlanganisa isixhumi esibonakalayo sewebhu namathuluzi okuphatha amadivayisi afinyelela kwangu-5. Uchungechunge olulandelayo lwemodeli ye-Check Point luyasekelwa: 000, 600, 700, 910, 1100R, 1200, 1400.
Okokuqala, ake sichaze izinzuzo zalesi sixazululo:
- Ukugcinwa kwengqalasizinda endaweni eyodwa. Ngenxa yephothali yamafu, ungakwazi ukusebenzisa izinqubomgomo, usebenzise izilungiselelo, imicimbi yokufunda - ngaphandle kokunaka indawo yakho kanye nenani lama-NGFW enhlanganweni.
- Scalability nokusebenza kahle. Ngokuthenga isisombululo se-SMP, uthatha ukubhalisa okusebenzayo ngokusekelwa kuze kufike ku-5000 NGFW, lokhu kuzokuvumela ukuthi wengeze kalula ama-node amasha kungqalasizinda, okuvumela ukuxhumana okunamandla phakathi kwabo ngenxa ye-VPN.
Ungafunda kabanzi mayelana nezinketho zokuthola amalayisense kumadokhumenti e-SMP; kukhona izinketho ezimbili:
- I-SMP ebanjwe ngamafu. Iseva yokuphatha isingathwe ku-Check Point cloud futhi isekela amasango angafika kwangu-50.
- I-SMP yasendaweni. Iseva yokuphatha isingathwe kusixazululo samafu sekhasimende, usekelo lwamasango angafika kwangu-5000 luyatholakala.
Ake sengeze isici esisodwa esibalulekile, ngokombono wethu: lapho uthenga noma iyiphi imodeli ochungechungeni lwe-1500, ilayisense eyodwa ye-SMP ifakiwe ephaketheni. Ngakho-ke, ngokuthenga isizukulwane esisha se-SMB, uzokwazi ukufinyelela ekuphathweni kwamafu ngaphandle kwezindleko ezengeziwe.
Ukusetshenziswa okuwusizo
Ngemva kwesethulo esifushane, sizodlulela ekwazaneni okungokoqobo nesixazululo; okwamanje, inguqulo yedemo yengosi iyatholakala uma iceliwe ehhovisi lendawo yangakini Lokuhlola. Ekuqaleni, uzobingelelwa yiwindi lokugunyazwa lapho uzodinga ukucacisa: isizinda, igama lomsebenzisi, iphasiwedi.
Ikheli lengosi ye-SMP esetshenzisiwe ikhonjiswe ngqo njengesizinda; uma ulithenga ngokubhaliselwe kwe- βCloud Hosted SMPβ, bese uthumela entsha, kufanele uthumele isicelo ngokuchofoza inkinobho ethi βIsicelo Sesizinda Esishaβ ( isikhathi sokubuyekeza kufika ezinsukwini ezi-3).
Okulandelayo, ikhasi lephothali eliyinhloko liboniswa nezibalo mayelana namasango aphethwe kanye nezinketho ezitholakalayo kumenyu.
Ake sibheke ithebhu ngayinye ngokwehlukana, sichaze kafushane amakhono ayo.
Map
Isigaba sikuvumela ukuthi ulandelele indawo ye-NGFW yakho, ubuke isimo sayo, noma uye kuzilungiselelo zayo eziqondile.
Amasango
Ithebula, elihlanganisa amasango e-SMB aphethwe avela kungqalasizinda yakho, liqukethe ulwazi: igama lesango, imodeli, inguqulo ye-OS, iphrofayela yenqubomgomo.
Plans
Isigaba siqukethe uhlu lwamaphrofayili abonisa isimo sama-Blades afakiwe kuwo, lapho kungenzeka khona ukukhetha amalungelo okufinyelela ukuze wenze izinguquko ekucushweni (izinqubomgomo zomuntu ngamunye zingalungiselelwa endaweni kuphela).
Uma ungena kuzilungiselelo zephrofayili ethile, ungafinyelela ukucushwa okugcwele kwe-NGFW yakho.
Isigaba se-Security Software Blades sinikezelwe ekulungiseleleni izindwani ze-NGFW ngayinye, ikakhulukazi:
I-Firewall, Izinhlelo zokusebenza nama-URL, i-IPS, i-Anti-Virus, i-Anti-Spam, i-QoS, Ukufinyelela Okukude, I-Site-to-Site VPN, Ukuqwashisa Umsebenzisi, I-Anti-Bot, Ukulingisa Usongo, Ukuvimbela Usongo, Ukuhlolwa kwe-SSL.
Qaphela ikhono lokumisa imibhalo ye-CLI ezosetshenziswa ngokuzenzakalelayo emasangweni ashiwo kokuthi Izinhlelo->Iphrofayela. Ngosizo lwabo, ungasetha izilungiselelo ezifanayo ezihlukene (idethi/isikhathi, amaphasiwedi okufinyelela, sebenza ngezimiso zokuqapha ze-SNMP, njll.)
Ngeke sigxile kuzilungiselelo ezithile ngokuningiliziwe, lokhu kuhlanganiswe ngaphambili, kukhona nesifundo .
izingodo
Enye yezinzuzo zokusebenzisa i-SMP kuzoba ukubuka okumaphakathi kwamalogi eminyango yakho ye-SMB, engafinyelelwa ngokuya kokuthi Amalogi β Amalogi Esango.
Kusihlungi, ungacacisa isango elithile, ucacise umthombo noma ikheli lendawo, njll. Ngokuvamile, ukusebenza ngamalogi kufana nokubuka ku-Smart Console; ukuguquguquka nokuqukethwe kolwazi kuyagcinwa.
Ukubuka kwe-Cyber
Lesi sigaba siqukethe izibalo ngendlela yemibiko yemicimbi yakamuva yezokuphepha; zikuvumela ukuthi uhlele amalogi ngokushesha futhi wethule i-infographics ewusizo:
Iziphetho ezijwayelekile
Ngakho-ke, i-SMP ingosi yesimanje ehlanganisa isikhombimsebenzisi esibonakalayo namandla ajulile mayelana nokuphatha izixazululo zakho ze-NGFW zomndeni we-SMB. Ake siphinde siphawule izinzuzo zayo eziyinhloko:
- Amathuba okuphatha okukude okufika ku-5000 NGFW.
- Ukugcinwa kwephothali ngochwepheshe be-Check Point (esimeni sokubhaliselwe kwe-SMP Okusingathwe Ngamafu).
- Idatha enolwazi nehlelekile mayelana nengqalasizinda yakho ethuluzini elilodwa.
. Hlala ubukele (, , , , ).
Source: www.habr.com