Kamuva nje (ngo-2016), inkampani yethule amadivaysi ayo amasha (kokubili amasango namaseva okulawula). Umehluko oyinhloko kusuka kulayini owedlule ukhuphuka kakhulu umkhiqizo.
Kulesi sihloko sizogxila kuphela kumamodeli aphansi. Sizochaza izinzuzo zemishini emisha kanye nezingibe ezingaba khona okungaxoxwa ngazo ngaso sonke isikhathi. Sizophinde sabelane ngemibono yomuntu siqu yokusetshenziswa kwazo.
Hlola uhlelo lwephoyinti
Njengoba ubona esithombeni, i-Check Point ihlukanisa amadivayisi ayo ngezigaba ezintathu ezinkulu:
- Isikhungo Esiphezulu Sebhizinisi Nedatha (amamodeli , )
- Enterprise (amamodeli )
- Amabhizinisi Amancane Naphakathi (amamodeli , , , , , , 1200R)
Kulokhu, esinye sezici eziyinhloko yilokho okubizwa ngokuthi I-SPU - Amayunithi Amandla Okuphepha. Lesi isilinganiso sobunikazi se-Check Point esibonisa ukusebenza kwangempela kwedivayisi. Njengesibonelo, ake siqhathanise indlela evamile yokulinganisa ukusebenza kwe-Firewall (Mbps) nendlela βentshaβ evela ku-Check Point (SPU).
Indlela yendabuko - I-Firewall Throughput
- Izilinganiso zenziwa ezimweni zaselabhorethri kuthrafikhi "yokwenziwa".
- Ukusebenza komsebenzi we-Firewall kuphela kuyahlolwa, ngaphandle kwamamojula engeziwe njenge-IPS, Ukulawulwa Kohlelo, njll.
- Ukuhlola kuvame ukwenziwa ngomthetho owodwa we-Firewall.
I-Check Point Methodology - Amandla Okuphepha
- Izilinganiso kuthrafikhi yomsebenzisi wangempela.
- Ukusebenza kwakho konke ukusebenza (I-Firewall, IPS, Control Application, ukuhlunga i-URL, njll.) kuyahlolwa.
- Ihlolwe ngenqubomgomo ejwayelekile ehlanganisa imithetho eminingi.
Hlola Ithuluzi Lokulinganisa Iphuzu Lokusebenza
Ngakho-ke, lapho ukhetha imodeli ye-Check Point efanelekile, kungcono ukuthembela kupharamitha Iyunithi Yamandla Ezokuphepha. Ikhonjiswe kunoma iyiphi i-database yocingo. Ngeke ukwazi ukubala i-SPU efanele yenethiwekhi yakho uwedwa. Lokhu kungenziwa kuphela ngosizo lozakwethu okwazi ukufinyelela ithuluzi Hlola Ithuluzi Lokulinganisa Iphuzu Lokusebenza:
Ukuze ukhethe isisombululo esifanele, udinga ukucabangela imingcele efana nalokhu:
- Ububanzi besiteshi se-inthanethi;
- Isamba sokuphuma kwesango (lingase lihluke esiteshini se-inthanethi uma, isibonelo, uhlukanise inethiwekhi yendawo usebenzisa Iphoyinti Lokuhlola);
- Inombolo yabasebenzisi kunethiwekhi;
- Imisebenzi edingekayo (I-Firewall, i-Anti-Virus, i-Anti-Bot, Ukulawula Uhlelo Lokusebenza, Ukuhlunga kwe-URL, i-IPS, Ukulingiswa Kosongo, njll.).
Kukhona futhi izilungiselelo ezicashile ezichaza ukuthi la ma-blade azosetshenziswa kuyiphi ithrafikhi:
Ngemva kokucacisa zonke izici, ungathola umbiko ochaza amadivayisi afanelekile:
Lapha ungabona i-SPU edingekayo (i-72 kithi) kanye nenconyiwe (144). Futhi namamodeli ngokwawo anencazelo yomthwalo wawo "nokubekela" ithrafikhi nama-blade. Uma ukhetha imodeli, kunconywa ukuthi uthathe idivayisi endaweni eluhlaza (okungukuthi, ukulayisha kufika kumaphesenti angu-50):
Lokhu kuqinisekisa ukuthi azikho izinkinga ngesikhathi sokulayisha okuphezulu noma ukwenyuka okuhleliwe kobubanzi besiteshi se-inthanethi. Uma ukhetha idivayisi, hlala ucela uzakwenu ukuthi akunikeze umbiko ofanayo. Isibonelo singalandwa .
Okudala vs Okusha
Ngemva kokuqonda ipharamitha eyinhloko ebonisa ukusebenza kwamadivayisi, singabhekisisa amamodeli amasha amabhizinisi amancane naphakathi nendawo. Njengoba kushiwo ngenhla, i-Check Point inengxenye yonke - Amabhizinisi Amancane Naphakathi (amamodeli 3200, 3100, 1490, 1470, 1450, 1430, 1200R). Lawa madivayisi angabizwa ngokuthi isibuyekezo sochungechunge oludala luka-2012 (2200, 1180, 1140, 1120). Ukuze uqonde umehluko oyinhloko, cabangela isithombe esingezansi:
(izintengo ziku-GPL, ngaphandle kwe-VAT nokusekelwa kobuchwepheshe)
Njengoba ubona, uchungechunge lwe-2016 lukhulise kakhulu ukusebenza (SPU), futhi amanani ahlala cishe ezingeni elifanayo (ngaphandle kwemodeli ye-3200). Umugqa omusha uhlanganisa nemodeli 3100, kodwa hhayi okwamanje asikho isaziso futhi ukungenisa eRussia akuvunyelwe! Khumbula lokhu!
Uma sibala kabusha izindleko ze-SPU eyodwa, imodeli ye-1450 iyona ebhalansile kakhulu. Ngezansi sizobhekisisa uchungechunge olusha lwe-Check Point.
Amasu okusebenzisa amadivayisi e-SMB
Njengoba kungabonwa emfanekisweni, kunezimo ezimbili eziyinhloko zokuqalisa zamadivayisi we-SMB:
- Kumodi yesango elizenzakalelayo. Kulesi simo, i-Check Point ifakwa njengedivayisi ye-perimeter futhi ilawulwa endaweni.
- Isango legatsha. Kulesi simo, i-hardware yegatsha iphathwa phakathi nendawo (kusetshenziswa iseva Yokuphatha) kusukela ehhovisi elikhulu.
Okwechungechunge ΠΈ Kukhona ezinye izici kwimodi ngayinye. Sizowabheka ngezansi.
Uchungechunge lwe-SMB 3000
Okwamanje kukhona "izingcezu zensimbi" ezimbili - 3200 ΠΈ 3100. Njengoba kushiwo ngaphambili, i-3100 ayikwazi ukuthunyelwa ezweni. Ngokuqondene ne-3200, ithatha indawo enhle kakhulu yochungechunge oludala lwe-2200. Idivayisi isebenzisa inguqulo ephelele ye-Gaia (zombili i-R77.30 kanye ne-R80.10). Uma usebenzisa idivayisi njengesango elikhulu ebhizinisini elincane, ungalindela ukusebenza okulandelayo:
- Isiteshi se-inthanethi - 50 Mbit;
- Ingqikithi yomkhawulokudonsa - 300 Mbit;
- Inani labasebenzisi - 200.
Njengoba ubona, umthwalo wedivayisi kuleli cala u-47% futhi lokhu kubaphathi bendawo, i.e. I-Standalone ukucushwa (okuningi mayelana nokuzimele nokusabalalisa ). Ngokuhlangenwe nakho kwami ββββngingasho ukuthi nabaphathi bendawo akunconywa ukweqa umthwalo we-50%, ngoba... Kungase kube nezinkinga ngokulawula (kuzohamba kancane).
Uma idivayisi ibhekwa njengedivayisi yegatsha (okungukuthi ngokuphathwa okuphakathi nendawo), khona-ke izinkomba zizoba phezulu kakhulu. Futhi usungakwazi kakade ukufaka indawo ephuzi ngosayizi (okungukuthi, ngomthwalo we-50% kuya ku-70%). Ungabuka imininingwane yedivayisi .
Uchungechunge lwe-SMB 1400
Lolu chungechunge luhlanganisa amadivayisi amaningana ngesikhathi esisodwa: 1490, 1470, 1450, 1430 (Ukushintshwa okunengqondo kwe-1120, 1140 kanye ne-1180).
Ngaphandle kweqiniso lokuthi lawa angamamodeli amancane we-Check Point, anakho konke ukusebenza okudingekayo:
- Amadivayisi e-SMB angahlanganiswa abe yiqoqo le-HA (Iyasebenza/Ilindile);
- Cishe wonke ama-software blades ayatholakala (njengakuzingcezu βezinkuluβ zehadiwe);
- ingaphathwa endaweni kanye naphakathi nendawo (kusetshenziswa Iseva Yokuphatha yendabuko);
- kukhona ukuguqulwa nge-WiFi, ADSL kanye ne-PoE;
- ungaxhuma amamodemu e-3G;
- Amakhithi wokukhweza ayatholakala.
Nokho, kufanelekile ukuxwayisa mayelana nemikhawulo ethile/izici:
- Idivayisi ine-Gaia enesici ebhodini, futhi I-Gaia 77.20 Ishumekiwe. Lo mkhawulo ungenxa yesakhiwo sedivayisi (kusetshenziswa ama-ARM processors). Esimeni sokulawula kwasendaweni (okuzimele), ngeke ukwazi ukusebenzisa i-SmartConsole evamile. Kunalokho, kukhona isikhombimsebenzisi sewebhu. Ungayibona kule vidiyo:
Isibonelo sibheka uchungechunge lwe-700, kodwa empeleni aluthengiswa eRussia. - Umsebenzi Wokukhipha Usongo awusebenzi. Ukulingiswa Kosongo kuphela. Ungabona ukuthi kuyini
- Akunakwenzeka ukuhlanganisa iqoqo kumodi yokwabelana ngomthwalo. Labo. ukukopela ngokuthenga izingcezu ezimbili βezishibhileβ zehardware nokusabalalisa umthwalo eqoqweni eliphakathi kwabo ngeke kusebenze.
- Ngabaphathi bendawo kunemikhawulo engathi sΓna mayelana nokuhlolwa kwe-HTTPS.
- Ukuskena kwe-Anti-Virus kwezingobo zomlando akusebenzi.
- Awukho umsebenzi we-DLP.
Amaphuzu okugcina mhlawumbe imingcele ebaluleke kakhulu evame ukugcinwa ingasho lutho. Ukuze uhlole ngokugcwele i-HTTPS, uzophoqeleka ukuthi usebenzise iseva yokuphatha ezinikele ngokwesiko. Kulesi simo, uzolawula idivayisi njengesango elinenguqulo egcwele (ecishe igcwele) ye-Gaia.
Eminye imikhawulo ye-Gaia Embedded ingatholakala lapha . Qiniseka ukuthi uyawahlola ngaphambi kokwenza isinqumo sokuthenga.
Isibonelo, cabangela ihhovisi elincane elinalezi zinhlaka ezilandelayo:
- Isiteshi se-inthanethi - 50 Mbit;
- Ingqikithi yomkhawulokudonsa - 200 Mbit;
- Inombolo yabasebenzisi - 200;
- Ukuphathwa kwendawo (Isixhumi esibonakalayo sewebhu).
Njengoba kubonakala ekulinganisweni, imodeli ye-1490 ibhekana ngempumelelo nalo msebenzi ngomthwalo we-46% (ngaphandle kokushiya indawo eluhlaza). Ngabaphathi abazinikele, i-1470 izobhekana nalo msebenzi.
I-Datasheet yamadivayisi angu-1400 ochungechunge ingabukwa .
Imodeli 1200R
Le modeli ngeke ibizwe nge-SMB. Lesi sekuyisixazululo sezimboni futhi mhlawumbe sifanelwe isihloko esihlukile. Manje ngeke sicabangele le modeli ngokuningiliziwe.
I-Webinar
Imininingwane eyengeziwe mayelana namadivayisi we-SMB ingatholakala ku-webinar yethu yangaphambilini:
okutholakele
Ngokubona kwami, amamodeli amasha e-SMB aphumelele impela. Ukusebenza kwamadivayisi kukhuphuke kakhulu ngenkathi kugcinwa izinga lentengo. Angikakulungeli ukukhuluma ngezindleko eziphakeme / ukushibhile kwamadivayisi, ngoba Le mibono ihluke kakhulu ezinkampanini ezahlukene.
Imodeli Ngingayincoma ezinkampanini ezincane ezinentshisekelo yezinga eliphezulu lokuvikela ngentengo efanelekile. Ngaphezu kwalokho, lokhu kuyisinqumo esihle kulabo asebejwayele ukusebenza ngenguqulo egcwele ye-Gaia. Inguqulo ka-R80.10 iyatholakala lapha. Uma isaziso se-3100 sitholwa, ithegi yentengo izokwehla kancane. Lena inketho ekahle yamagatsha.
Amadivayisi ochungechunge zivumelane kahle futhi zinesilinganiso samanani/ikhwalithi engcono kakhulu (ikakhulukazi ngokwentengo nge-SPU ngayinye engu-1). Lawa madivayisi mahle kumagatsha kubhajethi. Ngokusebenzisa ukuphathwa okumaphakathi, ungaphatha amadivayisi afana namasango avamile anenguqulo egcwele ye-Gaia. Kodwa, futhi, ungakhohlwa mayelana , okufanele nakanjani uzijwayeze.
PS Ngithanda ukubonga u-Alexey Matveev () ukuze uthole usizo ekulungiseleleni indaba.
Source: www.habr.com