6. NGFW for small businesses. Smart-1 Cloud

Greetings to everyone who continues to read the cycle about the new generation of NGFW Check Point SMB family (1500 series). In part 5, we reviewed the SMP (Management Portal for SMB Gateways) solution. Today I would like to talk about the Smart-1 Cloud portal, it positions itself as a SaaS Check Point solution, plays the role of a Management Server in the cloud, so it will be relevant for any NGFW Check Point. For those who have just joined us, let me remind you of the previously discussed topics: initialization and configuration , organization of wireless traffic (WiFi and LTE) , VPN .

Let's highlight the main features of Smart-1 Cloud:

1. One centralized solution for managing your entire Check Point infrastructure (virtual and physical gateways of various levels).
2. ( / ).
3. . , , ..
4. , , .
5. API. , .
6. Web. , , .

, Check Point, , Management Server . , Smart-1 Cloud Check Point. : , , , . () .

, DataSheet.

:

, 3 :

1. Management. 50 , 1 .
2. Management + SmartEvent. 100 , 3 , .
3. Management + Compliance + SmartEvent. 100 , 3 , , .

* : , , .

5 . — DataSheet.

Smart-1 Cloud

, Infinity Portal — Check Point, :

• Cloud Protection (CloudGuard SaaS, CloudGuard Native);
• Network Protection (CloudGuard Connect, Smart-1 Cloud, Infinity SOC);
• Endpoint Protection (Sandblast Agent Management Platform, SandBlast Agent Cloud Management, Sandblast Mobile).

c ( ) Smart-1 Cloud:

( , , ).

:

( Infinity Portal) , Smart-1 Cloud.

:

1. SmartConsole. , -.
2. .
3. .
4. .

C

Security Gateway, . “Connect Gateway”

, . “Register”.

, Management Server, CLI- :

1. , JHF (Jumbo Hotfix).
2. : set security-gateway maas on auth-token
3. :
   
   MaaS Status: Enabled
   
   MaaS Tunnel State: Up
   
   MaaS domain-name:
   
   Service-Identifier.maas.checkpoint.com
   
   Gateway IP for MaaS Communication: 100.64.0.1

, Mass Tunnel, SIC- Smart-1 Cloud Smartconsole. , :

, Smart-1 Cloud, “” 10.64.0.1.

, NAT, , IP- , , . Smart-1 Cloud, IP-.

, Smart-1 Cloud, , Smart Console. -, , .

Smart Console Check Point .

That's all for today, we are waiting for the final article of the cycle, in which we will touch on the performance tuning capabilities of the SMB 1500 series family with Gaia 80.20 Embedded installed.

A large selection of materials on Check Point from TS Solution . Stay tuned for updates ( Telegram , Facebook , VK , TS Solution Blog , Yandex.Zen )