Check Point Certified Security Engineer

Chia sẻ: Phong Thinh | Ngày: | Loại File: PDF | Số trang:13

0
260
lượt xem
27
download

Check Point Certified Security Engineer

Mô tả tài liệu
  Download Vui lòng tải xuống để xem tài liệu đầy đủ

The firewall module object must be defined as an internal object in order for remote management to work.

Chủ đề:
Lưu

Nội dung Text: Check Point Certified Security Engineer

  1. TM %UDLQ%X]] &UDPVHVVLRQ /DVW XSGDWHG -XQH  &OLFN KHUH IRU XSGDWHV &UDPVHVVLRQŒ IRU &OLFN KHUH WR VHH DGGLWLRQDO &KHFN 3RLQW GRFXPHQWV UHODWHG WR WKLV VWXG\ JXLGH &HUWLILHG 6HFXULW\ (QJLQHHU ; &RQWHQWV $EVWUDFW 8‚‡r‡†  Sr€‚‡rÃHhhtr€r‡Ã6…puv‡rp‡ˆ…r  ! 7KLV &UDPVHVVLRQ ZLOO KHOS \RX WR SUHSDUH IRU &KHFN 3RLQW ([DP &&6( [ Av…rhyyÃH‚qˆyr†  ! &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU Hhhtr€r‡Ã8‚†‚yr  ! ; ([DP WRSLFV LQFOXGH )LUH:DOO BVDÃ8yvr‡†  " &RQILJXUDWLRQ &30$' DQG 6
  2. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;  &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ; 5HPRWH 0DQDJHPHQW $UFKLWHFWXUH • $ WLHU DUFKLWHFWXUH WKHUH FDQ EH PDQ\ GLIIHUHQW ORFDWLRQV VHFXULW\ HQIRUFHPHQW SRLQWV
  3. FRQWUROOHG E\ D FHQWUDO 0DQDJHPHQW &RQVROH $GPLQLVWUDWRUV FDQ DGPLQLVWHU WKH VHFXULW\ V\VWHP HLWKHU GLUHFWO\ YLD WKH FRQVROH RU E\ UXQQLQJ *8, FOLHQWV FRQQHFWHG WR WKH 0DQDJHPHQW &RQVROH WKURXJK WKH QHWZRUN IURP DQRWKHU GHVNWRS )LUHZDOO 0RGXOHV 5HVSRQVLEOH IRU • (QIRUFLQJ VHFXULW\ SROLF\ • 5HSRUWLQJ VWDWXV DQG ORJ GDWD WR LWV PDQDJHPHQW VHUYHU 5XQV RQ • 6XQ +3 • :LQGRZV 17 • ,%0 56 • %D\ 1HWZRUNV &LVFR DQG &RP 5RXWHUV • ;\ODQ DQG ,SVLORQ 6ZLWFKHV Inspection Engine uses Stateful Inspection Technology • 8VHV FRQWH[W WR GHWHUPLQH LI D FRPPXQLFDWLRQ UHTXHVW VKRXOG EH DOORZHG • 8QGHUVWDQGV WKH LQWHQW RI D JLYHQ FRPPXQLFDWLRQ E\ OHDUQLQJ IURP SUHYLRXV FRPPXQLFDWLRQ VHVVLRQV DQG DOORZV LW WKURXJK IRU WKH GXUDWLRQ RI WKH VHVVLRQ • %XLOGV XS D G\QDPLF VWDWH WDEOH WR VWRUH VWDWH LQIRUPDWLRQ • &ORVHV WKH QHHGHG SRUW ZKHQ WKH FOLHQW VHVVLRQ FRQFOXGHV 0DQDJHPHQW &RQVROH 5HVSRQVLEOH IRU • 0DQDJLQJ REMHFW '%V UXOH EDVHV ORJ ILOHV • &RQFXUUHQW DGPLQLVWUDWLYH DFFHVV ZLWK YDU\LQJ ULJKWV
  4. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;  5XQV RQ • 6XQ26 • 6RODULV • 6RODULV [ • +38; • :LQGRZV 17 • $,; *8, &OLHQWV 5HVSRQVLEOH IRU • %XLOGLQJ REMHFWV UXOHV • 9LHZV ORJV DQG ): VWDWXV 5XQV RQ • :LQGRZV 17 • ;0RWLI 6XQ +3 $,;
  5. • *8, LV DYDLODEOH RQO\ IRU :LQ17 DQG 0RWLI 7KH H[DP IRFXVHV RQ WKH *8, QRW WKH FRPPDQG OLQH 7KH  GLIIHUHQW *8,V DUH 6HFXULW\ 3ROLF\ (GLWRU IRU VHWWLQJ XS WKH VHFXULW\ VHWWLQJV /RJ 9LHZHU IRU YLHZLQJ WKH ORJV DQG 6\VWHP 6WDWXV WRRO IRU YLHZLQJ WKH FXUUHQW VWDWLVWLFV RI GLIIHUHQW ILUHZDOO FRPSRQHQWV 1HWZRUN 2EMHFW 0DQDJHU LV D IXQFWLRQ ZLWKLQ WKH 3ROLF\ (GLWRU ,W LV XVHG WR FUHDWH REMHFWV VR WKDW ZH FDQ SODFH WKH REMHFWV LQ WKH UXOH EDVH DQG VHW XS FRUUHVSRQGLQJ VHFXULW\ UXOHV /LFHQVLQJ • )RU WKH 6LQJOH *DWHZD\ 3URGXFW WKHUH LV RQO\ RQH )LUHZDOO 0RGXOH FRQWUROOHG E\ RQH 0DQDJHPHQW &RQVROH DQG WKH\ KDYH WR EH LQVWDOOHG RQ WKH VDPH PDFKLQH PHDQLQJ WKHUH LV RQO\ RQH VHFXULW\ HQIRUFHPHQW SRLQW +RZHYHU \RX FDQ VWLOO UXQ WKH *8, FOLHQW IRUP DQRWKHU GHVNWRS )RU PXOWLSOH JDWHZD\ SURGXFWV WKHUH FRXOG EH PXOWLSOH HQIRUFHPHQW SRLQWV )RU H[DPSOH )LUHZDOO ,QWHUQHW *DWHZD\ PHDQV \RX FDQ KDYH XS WR  )LUHZDOO PRGXOHV FRQWUROOHG E\ RQH 0DQDJHPHQW &RQVROH 6HW XS DQG FRQILJXUDWLRQ • 7R VHW XS WKH 0DQDJHPHQW &RQVROH ILUVW UXQ &RQILJXUDWLRQ 0DQDJHU RQ WKH UHPRWH 17 PDQDJHPHQW VWDWLRQ DQG FUHDWH WKH DGPLQLVWUDWRU DFFRXQW V
  6. YLD WKH $GPLQLVWUDWRUV WDE 7KHQ DGG WKH ,3 DGGUHVVHV RI WKH *8, &OLHQWV WKDW FDQ
  7. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;  ORJ LQ WR WKH ORFDO JDWHZD\ YLD WKH *8, &OLHQWV WDE )LQDOO\ ORJ LQWR WKH 0DQDJHPHQW &RQVROH YLD WKH *8, &OLHQW V 6HFXULW\ 3ROLF\ /RJLQ ZLQGRZ • 2Q 8QL[ VHW XS LQYROYHV UXQQLQJ WKH FRPPDQG ³IZP±D´ RQ WKH 0DQDJHPHQW &RQVROH WR DGG WKH QHFHVVDU\ )LUH:DOO DGPLQLVWUDWRU DFFRXQWV (GLW WKH HWFIZFRQIJXLFOLHQWV ILOH RQ WKH 0DQDJHPHQW &RQVROH DQG DGG WKH ,3 DGGUHVVHV RU KRVWQDPHV RI WKH *8, &OLHQW KRVWV WKDW DUH DOORZHG WR UHPRWHO\ ORJ LQ $GPLQLVWUDWRU ORJ LQ SURFHVV • *8, FOLHQW WUDQVPLWV WKH DGPLQLVWUDWRU V XVHUQDPH DQG SDVVZRUG WR WKH 0DQDJHPHQW &RQVROH $IWHU YDOLGDWLQJ WKH *8, FOLHQW V ,3 DGGUHVV WKH 0DQDJHPHQW &RQVROH V ):0 DXWKHQWLFDWHV WKH DGPLQLVWUDWRU V XVHUQDPH SDVVZRUG DQG DVVLJQV WKH *8, FOLHQW LWV DFFHVV FRQWURO ULJKWV DQG VHQGV DORQJ WKH DSSURSULDWH GDWDEDVH LQIRUPDWLRQ LQFOXGLQJ VHFXULW\ SROLF\ REMHFW GDWDEDVHV ORJ GDWDEDVH HWF o $GPLQLVWUDWRU FDQ KDYH  GLIIHUHQW OHYHOV RI DFFHVV ULJKWV o 0RQLWRU 2QO\  DFFHVV RQO\ WR WKH ORJ YLHZHU DQG V\VWHP VWDWXV WRRO LQ UHDG RQO\ PDQQHU o 5HDG 2QO\  LQ DGGLWLRQ WR WKH ULJKWV HQMR\HG E\ 0RQLWRU 2QO\ DGPLQLVWUDWRU FDQ DFFHVV WKH 6HFXULW\ 3ROLF\ (GLWRU LQ UHDG RQO\ PDQQHU o 8VHU $FFHVV  DGPLQLVWUDWRU FDQ PRGLI\ XVHU LQIRUPDWLRQ EXW QRWKLQJ HOVH o 5HDG:ULWH $FFHVV  DGPLQLVWUDWRU FDQ GR HYHU\WKLQJ 2QO\ RQH DGPLQLVWUDWRU FDQ ORJ LQ XVLQJ WKLV PRGH DW D WLPH &RPPXQLFDWLRQ EHWZHHQ WKH 0DQDJHPHQW &RQVROH DQG WKH )LUHZDOO 0RGXOHV • 7KH )LUHZDOO 0RGXOH REMHFW PXVW EH GHILQHG DV DQ ,QWHUQDO REMHFW LQ RUGHU IRU UHPRWH PDQDJHPHQW WR ZRUN • IZG RQ WKH 0DQDJHPHQW &RQVROH LQLWLDWHV D FRQQHFWLRQ WR IZG RQ WKH ILUHZDOO DQG VHQGV WKH HQFU\SWHG SXWNH\ SDVVZRUG DV FRPSLODWLRQ RI WKH 6HFXULW\ 3ROLF\ LV ILQLVKHG $IWHU YDOLGDWLQJ WKH 0DQDJHPHQW &RQVROH V ,3 DGGUHVV LQ WKH ):',5FRQIPDVWHUV ILOH IZG DXWKHQWLFDWHV WKH SXWNH\ SDVVZRUG DQG DFFHSWV WKH FRPSLOHG LQWHUQDO XVHU GDWDEDVHV DQG VHFXULW\ SROLF\ DQG LQVWDOOV LW LQ WKH ,QVSHFWLRQ (QJLQH • $Q DXWKHQWLFDWLRQ NH\ QHHGV WR EH FUHDWHG RQ WKH 0DQDJHPHQW &RQVROH IRU HDFK )LUHZDOO 0RGXOH WKDW WKLV 0DQDJHPHQW &RQVROH ZLOO UHPRWHO\ EH LQ FKDUJH RI o 1RQ8QL[ SXWNH\ FRPPDQG V\QWD[ IZ SXWNH\ S SDVVZRUG ILUHZDOO PRGXOHLSDGGUHVV o 8QL[ SXWNH\ FRPPDQG V\QWD[ IZ SXWNH\ S DEF Q
  8. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;  5HPRYLQJ 5HPRWH 0DQDJHPHQW • %RXQFLQJ WKH )LUHZDOO LV WKH SURFHVV RI VWRSSLQJ DQG UHVWDUWLQJ WKH ILUHZDOO GDHPRQ IZG 7KLV FDXVHV IZG WR UHUHDG WKH ORFDO PDVWHUV ILOH DQG DOORZ WKH 0DQDJHPHQW &RQVROH WR UHPRWHO\ LQVWDOO VHFXULW\ SROLFLHV • 7R UHPRYH UHPRWH PDQDJHPHQW \RX UHPRYH WKH PDVWHUV ILOH LQ WKH ):',5FRQI GLUHFWRU\ IURP WKH )LUHZDOO 0RGXOH %RXQFH WKH ILUHZDOO DQG WKHQ ORJ LQWR WKH VHFXULW\ SROLF\ &KDQJH WKH ORFDWLRQ RI WKH )LUHZDOO 0RGXOH WR H[WHUQDO DQG LQVWDOO WKH SROLF\ DJDLQ 3ODFHPHQW RI 63) )LOH • 5XOHV WKDW PDNH XS D 6HFXULW\ 3ROLF\ )LOH 63)
  9. IRU D VLQJOH )LUHZDOO 0RGXOH FDQ EH NHSW LQ DQ LQGLYLGXDO 63) RQ WKH 0DQDJHPHQW &RQVROH RU FRPELQHG ZLWK UXOHV RI RWKHU )LUHZDOO 0RGXOHV LQWR D FRPELQHG 63) 7R DYRLG FRQIXVLRQ QDPH WKH 63) WR LQGLFDWH LW LQFOXGHV WKH FRPELQHG UXOHV RI PXOWLSOH )LUHZDOO 0RGXOHV $OVR LQ WKH ,QVWDOO 2Q FROXPQ RI HDFK UXOH VSHFLI\ WKH SDUWLFXODU WDUJHW V
  10. RI WKH )LUHZDOO 0RGXOH V REMHFW V
  11. FOHDUO\ • )RU 'XDO 0DQDJHPHQW &RQVROH FRQILJXUDWLRQ 63)V VKRXOG EH PDLQWDLQHG RQ WKH 3ULPDU\ 0DQDJHPHQW &RQVROH 30& :KHQ D FKDQJH LV PDGH WR DQ 63) WKDW 63) DQG FHUWDLQ UHODWHG ILUHZDOO GDWDEDVHV QHHG WR EH FRSLHG WR WKH 6HFRQGDU\ 0DQDJHPHQW &RQVROH 60& PDQXDOO\ E\ WKH ): $GPLQLVWUDWRU (DFK )LUHZDOO 0RGXOH VKRXOG LQFOXGH WKH ,3 DGGUHVV RI ERWK WKH 30& DQG 60& LQ WKHLU ORFDO PDVWHU¶V ILOH • )LUHZDOO 0RGXOH ZLOO VHQG HDFK ORJ HQWU\ WR ERWK 0&V $OO ORJV IURP DOO UHPRWH )LUHZDOO 0RGXOHV ZLOO EH GLVSOD\HG RQ ERWK 0&V LQ WKH RUGHU WKH\ ZHUH UHFHLYHG 7R GLVSOD\ VSHFLILF HQWULHV XVH WKH 6HOHFWLRQ &ULWHULD 0DQDJHU 5RXWHU 6HFXULW\ 0DQDJHPHQW • 7KHUH DUH VHYHQ PDLQ VWHSV LQ FRQILJXULQJ URXWHU VHFXULW\ IRU D VSHFLILF URXWHU  &RQILJXUH URXWHU LQWHUIDFHV RQ WKH URXWHU YLD WKH FRQVROH FDEOH IROORZLQJ WKH VWHSV VSHFLILHG E\ WKH URXWHU PDQXIDFWXUHU  &RQILJXUH 6103 RQ WKH URXWHU ƒ )LUH:DOO FDQ JHW DQG VHW
  12. 6103 LQIRUPDWLRQ IURP WR
  13. WKH URXWHU ƒ 6103 UHDG DQG ZULWH FRPPXQLW\ VWULQJV QHHG WR EH FRQILJXUHG LQWR WKH URXWHU PDQXDOO\ VR WKDW 6103 LQIRUPDWLRQ FDQ EH UHDG IURP DQG ZULWWHQ WR WKH URXWHU E\ DOO ZKR NQRZ WKH UHDGZULWH FRPPXQLW\ VWULQJ  &RQILJXUH WKH HQDEOH SDVVZRUG RQ WKH URXWHU ƒ 2Q D &LVFR URXWHU WKHUH DUH WZR SDVVZRUGV  WKH ORJLQ SDVVZRUG DQG WKH HQDEOH SDVVZRUG ƒ *R LQWR WKH JOREDO FRQILJXUDWLRQ PRGH DQG XVH WKH HQD SDVVZRUG FRPPDQG
  14. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;   'HILQH WKH $FFHVV /LVWV SURSHUWLHV LQ WKH 6HFXULW\ 3ROLF\ 3URSHUWLHV ZLQGRZ $YDLODEOH SURSHUWLHV IRU FRQWUROOLQJ WKH URXWHU • (QDEOH (VWDEOLVKHG 7&3 &RQQHFWLRQV  $FFHSWV SDFNHWV RI HVWDEOLVKHG 7&3 FRQQHFWLRQV • (QDEOH 5,3  $FFHSW 5RXWLQJ ,QIRUPDWLRQ 3URWRFRO • (QDEOH 'RPDLQ 1DPH 4XHULHV 8'3
  15.  $FFHSW 'RPDLQ 1DPH 4XHULHV XVHG E\ QDPHG • (QDEOH 'RPDLQ 1DPH 'RZQORDG 7&3
  16.  $OORZ XSORDGLQJ RI GRPDLQ QDPH UHVROYLQJ WDEOHV • (QDEOH ,&03  $FFHSW ,QWHUQHW &RQWURO 0HVVDJHV 3LQJV
  17.  'HILQH WKH URXWHU REMHFW LQ WKH 1HWZRUN 2EMHFWV 0DQDJHU  $GG VHFXULW\ UXOHV IRU WKH URXWHU LQ WKH 6HFXULW\ 3ROLF\ (GLWRU  ,QVWDOO WKH VHFXULW\ SROLF\ RQ WKH URXWHU (QFU\SWLRQ 7HFKQRORJ\ • )LUH:DOO HQFU\SWV SDFNHWV WUDYHOLQJ EHWZHHQ WZR JDWHZD\V RQ WKH ,QWHUQHW XVLQJ WKH IROORZLQJ HQFU\SWLRQ WHFKQRORJLHV $V\PPHWULF HQFU\SWLRQ • VHFXUH NH\ H[FKDQJH PHFKDQLVPV $XWKHQWLFDWLRQ DQG 'DWD LQWHJULW\ FKHFNLQJ • HDFK QRGH XVHV WZR PDWKHPDWLFDOO\ UHODWHG NH\V RQH SXEOLF RQH SULYDWH • SULYDWH NH\ QRW GHULYDEOH IURP WKH SXEOLF NH\ • SXEOLF NH\ FDQ EH IUHHO\ GLVWULEXWHG • RQO\ WKH KROGHU RI WKH SULYDWH NH\ FDQ GHFU\SW WKH PHVVDJH HQFU\SWHG E\ WKH FRUUHVSRQGLQJ SXEOLF NH\ 6\PPHWULF HQFU\SWLRQ '(6 '(6 ):= 5& 5&
  18. • XVHG WR HQFU\SW GDWD DW D KLJKHU SHUIRUPDQFH • VDPH NH\ XVHG WR HQFU\SW FOHDUWH[W LV XVHG WR GHFU\SW FLSKHUWH[W • XVHV V\PPHWULF NH\V GHULYHG IURP DV\PPHWULF NH\ H[FKDQJH YLD 'LIILH +HOOPDQ NH\ H[FKDQJH SURWRFRO • SULYDF\ RI WKH PHVVDJH EDVHG RQ SURWHFWLRQ RI WKLV RQH NH\ • SULYDF\ LV HQVXUHG EHFDXVH RI WKH VHFXUH QDWXUH RI WKH 'LIILH+HOOPDQ NH\ H[FKDQJH SURWRFROV
  19. %UDLQ%X]] &UDPVHVVLRQ &KHFN 3RLQW &HUWLILHG 6HFXULW\ (QJLQHHU ;  .H\V VKRXOG EH FKDQJHG SHULRGLFDOO\ DV FUDFNLQJ WKH NH\ LV SRVVLEOH 7KLV GHSHQGV RQ WKH DPRXQW RI HQFU\SWHG GDWD 'LIIHUHQW 7HUPV &HUWLILFDWH $XWKRULW\ 3XEOLF3ULYDWH .H\ • $V\PPHWULF NH\ SURYLGLQJ GLJLWDOO\ VLJQHG DXWKHQWLFLW\ WR SURYH WKDW D KRVW V 3XEOLF .H\ LV YDOLG 'LIILH+HOOPDQ 3XEOLF3ULYDWH .H\ • $V\PPHWULF NH\ H[FKDQJH V\VWHP XVHG WR FUHDWH D VKDUHG VHFUHW NH\ RQ HDFK 931 QRGH %DVLF 6HVVLRQ .H\ • 6KDUHG VHFUHW NH\ SURGXFHG E\ WKH 'LIILH+HOOPDQ NH\ H[FKDQJH SURFHVV 6HVVLRQ .H\ • 6\PPHWULF NH\ IRU GHULYLQJ 3DFNHW 'DWD ,QWHJULW\ NH\V 'DWD ,QWHJULW\ .H\ • $V\PPHWULF NH\ V\VWHP IRU SURYLGLQJ GDWD LQWHJULW\ 3DFNHW .H\ • 6\PPHWULF NH\ IRU HQFU\SWLQJGHFU\SWLQJ D SDFNHW &HUWLILFDWH $XWKRULW\ &$
  20. • 7UXVWHG WKLUG SDUW\ IURP ZKRP VRPHRQH V SXEOLF NH\ FDQ EH UHOLDEO\ REWDLQHG WKURXJK HLWKHU VHFXUH RU LQVHFXUH FKDQQHO ,W FHUWLILHV D SXEOLF NH\ E\ JHQHUDWLQJ D FHUWLILFDWH GLJLWDO VLJQDWXUH
Đồng bộ tài khoản