{"id":32370,"date":"2019-10-31T21:46:38","date_gmt":"2019-10-31T18:46:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sinhronizirovannaya-bezopasnost-v-sophos-central\/"},"modified":"2019-10-31T21:46:38","modified_gmt":"2019-10-31T18:46:38","slug":"sinhronizirovannaya-bezopasnost-v-sophos-central","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","title":{"rendered":"S\u00fcnkroniseeritud turvalisus Sophos Centralis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/9d0e5f8349ff2034a71b0f2aacaba5c7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nInformatsioonikaitse t\u00f5hususe tagamiseks on komponentide omavaheline \u00fchendus \u00e4\u00e4rmiselt oluline. See v\u00f5imaldab katta mitte ainult v\u00e4lised, vaid ka sisemised ohud. V\u00f5rguinfrastruktuuri projekteerimisel on iga kaitsevahendi, olgu selleks siis viiruset\u00f5rje v\u00f5i tulem\u00fc\u00fcr, roll \u00fclioluline, et need toimiksid mitte ainult oma klassi piires (Endpoint security v\u00f5i NGFW), vaid ka suudaksid omavahel suhelda, et \u00fchiselt v\u00f5idelda ohtudega.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Natuke teooriat<\/h2>\n<p>\nEi ole \u00fcllatav, et t\u00e4nased k\u00fcberkurjategijad on muutunud leidlikumaks. Kahjustavate programmide levitamiseks kasutavad nad mitmeid v\u00f5rgutehnoloogiaid:<br \/>\n<img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/53a274ad70bc616ea2bafa0b5dbe509b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPhishing-kirjade saatmine p\u00f5hjustab seda, et kahjulik programm \u201esammub \u00fcle k\u00fcnnise\u201d teie v\u00f5rku, kasutades tuntud r\u00fcnnakuid v\u00f5i \u201enullp\u00e4eva r\u00fcnnakuid\u201d koos sellele j\u00e4rgnevate \u00f5iguste suurendamisega, v\u00f5i horisontaalse edasiviimisega (lateral movement) v\u00f5rgus. \u00dche nakatunud seadme olemasolu v\u00f5ib t\u00e4hendada, et teie v\u00f5rku saab kasutada r\u00fcndaja isiklikuks kasuks. <\/p>\n<p>M\u00f5nel juhul, kui on vajalik tagada IT-komponentide vaheline koost\u00f6\u00f6, ei \u00f5nnestu teabe turvalisuse auditi k\u00e4igus s\u00fcsteemi praegust seisundit kirjeldada \u00fchtse meetmete kogumiga, mis oleks omavahel seotud. Enamikul juhtudel ei paku paljud tehnoloogilised lahendused, mis keskenduvad teatud t\u00fc\u00fcpi ohtude vastu v\u00f5itlemisele, integreerimist teiste tehnoloogiliste lahendustega. N\u00e4iteks l\u00f5ppseadmete kaitse tooted kasutavad allkirjaanaly\u00fcsi ja k\u00e4itumisanal\u00fc\u00fcsi, et m\u00e4\u00e4rata, kas fail on nakatunud v\u00f5i mitte. Kahjuliku liikluse peatamiseks kasutavad tulem\u00fc\u00fcri tehnoloogiad, mille hulka kuuluvad veebifiltreerimine, IPS, liivakast jne. Sellegipoolest on enamikus organisatsioonides need infokaitse komponendid omavahel seotud ja t\u00f6\u00f6tavad isoleeritult.<\/p>\n<h2>Heartbeat tehnoloogia rakendamise suundumused<\/h2>\n<p>\nUus l\u00e4henemine k\u00fcberjulgeoleku tagamisele h\u00f5lmab kaitset igal tasandil, kus iga tasandi lahendused on omavahel seotud ja on suuteline vahetama teavet. See toob kaasa Sunchronized Security (SynSec) s\u00fcsteemi loomise. SynSec on informatsiooni turbe tagamise protsess kui \u00fchtne s\u00fcsteem. Sellisel juhul on iga informatsiooni turbe komponent omavahel reaalajas \u00fchendatud. N\u00e4iteks lahendus <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-central.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> on ellu viidud selle printsiibi alusel.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/f8a937ea7de8f977a0eab9a040db0216.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSecurity Heartbeat tehnoloogia tagab \u00fchenduse turbe komponentide vahel, v\u00f5imaldades s\u00fcsteemi koost\u00f6\u00f6d ja selle j\u00e4lgimist. Sisse on <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> integreeritud j\u00e4rgmiste klasside lahendused:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/endpoint-antivirus.aspx?id=00130000019KE2V\">Endpoint Protection<\/a><\/noindex> \u2014 klassikaline allkirjadega viiruset\u00f5rje;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/server-security.aspx?id=00130000019KE2V\">Server Protection<\/a><\/noindex> \u2014 spetsialiseeritud viiruset\u00f5rje serveritele;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept-X<\/a><\/noindex> \u2013 j\u00e4rgmise p\u00f5lvkonna viiruset\u00f5rje (ilma allkirjadeta ja tehisintellekti tehnoloogiatega);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos XG Firewall<\/a><\/noindex> \u2014 j\u00e4rgmise p\u00f5lvkonna tulem\u00fc\u00fcr;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Mobility Management (EMM)<\/a><\/noindex> \u2014 mobiilseadmete haldamine ja juurdep\u00e4\u00e4su kontroll ettev\u00f5tte e-postile ja failidele;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/safeguard-encryption.aspx?id=00130000019KE2V\">Data Protection (Encryption)<\/a><\/noindex>;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Secure Wi-Fi<\/a><\/noindex> \u2014 juurdep\u00e4\u00e4supunktid, mida hallatakse nii pilves kui ka kohalikult Sophos UTM \/ Sophos XG kaudu;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-web-gateway.aspx?id=00130000019KE2V\">Veebi turvalisus<\/a><\/noindex> \u2014 klassikaline lahendus veebiliikluse filtreerimiseks;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-email.aspx?id=00130000019KE2V\">E-kirja turvalisus<\/a><\/noindex> \u2014 pilve\/kohalik anti-spam\/viiruset\u00f5rje lahendus;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/phish-threat.aspx?id=00130000019KE2V\">Phish Threat<\/a><\/noindex> \u2014 t\u00f6\u00f6tajate teadlikkuse suurendamine, testkalastustaktikate l\u00e4biviimine;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/cloud-optix.aspx?id=00130000019KE2V\">Cloud Optix<\/a><\/noindex> \u2014 pilveinfrastruktuuri auditeerimine.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/b1a60a0d471c250a48c36cde17a4de5f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nEi ole raske m\u00e4rkida, et Sophos Central toetab piisavalt laia valikut informatsioonitehnoloogia turvalahendusi. Sophos Centralis p\u00f5hineb SynSec kontseptsioon kolmel oluliselt printsiibil: avastamine, anal\u00fc\u00fcs ja reageerimine. Iga\u00fche \u00fcksikasjaliku kirjelduse jaoks peatume nende juures.<\/p>\n<h2>SynSec kontseptsioonid<\/h2>\n<p>\n<b>AVASTAMINE<\/b> (tunnustamine tundmatute ohtude)<br \/>\nSophos tooted, mida hallatakse Sophos Centralis, jagavad automaatselt teavet \u00fcksteisega riskide ja tundmatute ohtude tuvastamiseks, sealhulgas:<\/p>\n<ul>\n<li>v\u00f5rguliikluse anal\u00fc\u00fcs v\u00f5imalusega tuvastada k\u00f5rge riskitasemega rakendusi ja pahavara;<\/li>\n<li>kasutajate, kellel on k\u00f5rgenenud riskigrupp, avastamine nende tegevuste korrelatsioonianal\u00fc\u00fcsi kaudu veebis.<\/li>\n<\/ul>\n<p>\n<b>ANAL\u00dc\u00dcS<\/b> (kohene ja intuitiivne)<br \/>\nReaalaegne intsidentide anal\u00fc\u00fcs tagab, et m\u00f5istate s\u00fcsteemi praegust olukorda kohe.<\/p>\n<ul>\n<li>k\u00f5ikide s\u00fcndmuste t\u00e4ieliku ahela kuvamine, mis viis intsidenti, sealhulgas k\u00f5ik failid, registriv\u00f5tmed, URL-id jne.<\/li>\n<\/ul>\n<p>\n<b>REAKTSIOON<\/b> (automaalne reageerimine intsidentidele)<br \/>\nTurvapoliitikate seadistamine v\u00f5imaldab automaatselt m\u00f5ne sekundi jooksul reageerida nakatumistele ja intsidentidele. Seda tagavad:<\/p>\n<ul>\n<li>korraga nakatunud seadmete kohene isoleerimine ja r\u00fcnnaku peatamine reaalajas (isegi \u00fche v\u00f5rgu \/ laiale kuulutamise domeeni piires);<\/li>\n<li>ettev\u00f5tte v\u00f5rguressursside juurdep\u00e4\u00e4su piiramine seadmetele, mis ei vasta poliitikatele;<\/li>\n<li>seadmest l\u00e4htuva r\u00e4mpsposti avastamisel seadme kaugelt skannimise k\u00e4ivitamine.<\/li>\n<\/ul>\n<p>\nOleme vaadanud Sophos Centrali tegevuse p\u00f5hialuseid, n\u00fc\u00fcd liigume edasi SynSec tehnoloogia rakendamise kirjeldamise juurde.<\/p>\n<h2>Teooriast praktikani<\/h2>\n<p>\nK\u00e4ivitame selgitusega, kuidas seadmete suhtlus toimib SynSec p\u00f5him\u00f5tte alusel Heartbeat tehnoloogia abil. Esimene etapp on Sophos XG registreerimine Sophos Centralis. Selle etapi k\u00e4igus saab ta enesetuvastamiseks sertifikaadi, IP-aadressi ja sadama, mille kaudu l\u00f5pp-seadmed temaga Heartbeat tehnoloogia kaudu suhtlevad, samuti loetelu l\u00f5pp-seadmete ID-dest, mida haldab Sophos Central ja nende kliendisertifikaadid. <\/p>\n<p>Varsti p\u00e4rast Sophos XG registreerimist edastab Sophos Central l\u00f5pp-seadmetele teabe Heartbeat tehnoloogia k\u00e4ivitamiseks:<\/p>\n<ul>\n<li>Sophos XG sertifikaatide v\u00e4ljastamiseks kasutatavate sertifitseerimiskeskuste loetelu;<\/li>\n<li>Loetelu seadme ID-dest, mis on registreeritud Sophos XG-s;<\/li>\n<li>IP-aadress ja sadam Heartbeat tehnoloogia kaudu suhtlemiseks.<\/li>\n<\/ul>\n<p>\nSee teave salvestatakse arvutisse j\u00e4rgmisel teel: %ProgramData%SophosHearbeatConfigHeartbeat.xml ja seda uuendatakse regulaarselt.<\/p>\n<p>Heartbeat-tehnoloogia kommunikatsioon toimub, saates s\u00f5numeid l\u00f5pp-punktist maagilisele IP-aadressile 52.5.76.173:8347 ja tagasi. Anal\u00fc\u00fcsi k\u00e4igus selgus, et pakette saadetakse iga 15 sekundi j\u00e4rel, nagu on tootja v\u00e4itnud. Tasub m\u00e4rkida, et Heartbeat-s\u00f5numeid t\u00f6\u00f6deldakse otse XG Firewall'is \u2014 see peatab pakette ja j\u00e4lgib l\u00f5pp-punkti olukorda. Kui p\u00fc\u00fcda pakette hostis kinni, n\u00e4eb liiklus v\u00e4lja nagu side v\u00e4lise IP-aadressiga, kuigi tegelikult suunab l\u00f5pp-punkt suhtlust otse XG tulem\u00fc\u00fcri kaudu.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/76bb24f252a90919a9737be3e7cb4c87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kujutage ette, et m\u00f5ne viisi kaudu on arvutisse sattunud pahavara. Sophos Endpoint tuvastab selle r\u00fcnnaku v\u00f5i l\u00f5petame Heartbeat'i saamise seadmest. Nakatunud seade saadab automaatselt teavet s\u00fcsteemi nakatumise kohta, k\u00e4ivitades automaatse tegevuste ahela. XG Firewall isoleerib arvuti koheselt, ennetades r\u00fcnnaku levikut ja suhtlemist C&amp;C serveritega.<\/p>\n<p>Sophos Endpoint eemaldab automaatselt kahjulikku tarkvara. P\u00e4rast selle eemaldamist s\u00fcnkroonitakse l\u00f5ppseade Sophos Centraliga, seej\u00e4rel taastab XG Firewall juurdep\u00e4\u00e4su v\u00f5rgule. Juurp\u00f5hjuste anal\u00fc\u00fcs (Root Cause Analysis \u2014 RCA v\u00f5i EDR \u2014 Endpoint Detection and Response) v\u00f5imaldab saada \u00fcksikasjalikku teavet selle kohta, mis juhtus.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/77a0f06389830d530c491ad6d9d22cbf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nKui eeldada, et juurdep\u00e4\u00e4s ettev\u00f5tte ressurssidele toimub mobiilseadmete ja tahvelarvutite kaudu, kas on siis v\u00f5imalik tagada SynSec?<\/p>\n<p>Selle stsenaariumi jaoks on Sophos Centralis toetamine ette n\u00e4htud <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Sophos Mobile<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Sophos Wireless<\/a><\/noindex>. Oletame, et kasutaja \u00fcritab rikkuda mobiiliseadme turvapoliitikat, mida kaitseb Sophos Mobile. Sophos Mobile tuvastab turvapoliitika rikkumise ja saadab teateid teistele s\u00fcsteemi komponentidele, kutsudes esile eelnevalt seadistatud reageerimise intsidentidele. Kui Sophos Mobile on seadistatud poliitikaga \u201ekeela v\u00f5rgu\u00fchendus\u201d, piirab Sophos Wireless selle seadme v\u00f5rgu\u00fchendust. Sophos Central juhtpaneelil Sophos Wireless vahekaardil kuvatakse teade, et seade on nakatunud. Kui kasutaja \u00fcritab v\u00f5rku p\u00e4\u00e4seda, kuvatakse ekraanil teade, et interneti\u00fche on piiratud.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/2a49fb10fb5e0ec0082d8772cc2b5194.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/84acd97f5b39f9d52070bb48ae58ce94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nL\u00f5pp-punktil on mitu Heartbeat oleku staatust: punane, kollane ja roheline.<br \/>\nPunane olek tekib j\u00e4rgmistel juhtudel:<\/p>\n<ul>\n<li>aktiivne pahavara on tuvastatud;<\/li>\n<li>pahavara k\u00e4ivitamise katse on tuvastatud;<\/li>\n<li>pahavara v\u00f5rgu liiklus on tuvastatud;<\/li>\n<li>pahavara ei ole eemaldatud.<\/li>\n<\/ul>\n<p>\nKollane staatus t\u00e4hendab, et l\u00f5pp-punktis on avastatud passiivne pahavara v\u00f5i tuvastatud RDP (potentsiaalselt soovimatu programm). Roheline staatus n\u00e4itab, et \u00fclaltoodud muresid ei ole tuvastatud. <\/p>\n<p>Arutame klassikalisi stsenaariume, milles kaitstud seadmed suhtlevad Sophos Centraliga, ja liigume edasi lahenduse kasutajaliidese kirjeldamise ning p\u00f5hiseadete ja toetatava funktsionaalsuse vaatamise juurde.<\/p>\n<h2>Graafiline liides<\/h2>\n<p>\nArmatuurlaud n\u00e4itab viimaseid teateid. Samuti on diagrammidena esitatud erinevate kaitsekomponentide kokkuv\u00f5tlikud omadused. Antud juhul kuvatakse kokkuv\u00f5tlik teave isiklike arvutite kaitse kohta. Selles paneelis on samuti saadaval kokkuv\u00f5tlik teave ohtlike ressursside ja vastuv\u00f5etamatute sisuga ressursside k\u00fclastamise katsete, samuti e-posti anal\u00fc\u00fcsi statistika kohta. <\/p>\n<p><img decoding=\"async\" alt=\"S\u00fcnkroniseeritud turvalisus Sophos Centralis\" src=\"\/wp-content\/uploads\/2019\/04\/c4733e335c2bfce1daa69b90d09b7900.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSophos Central toetab teavituste kuvamist olenevalt nende t\u00e4htsusest, mis aitab v\u00e4ltida kriitiliste turvas\u00fcsteemi teavituste mahaj\u00e4tmist. Peale l\u00fchidal k\u00fcljendatud \u00fclevaate teavet kaitses\u00fcsteemi oleku kohta toetab Sophos Central ka s\u00fcndmuste logimist ja integreerimist SIEM-s\u00fcsteemidega. Paljude ettev\u00f5tete jaoks on Sophos Central platvorm nii sisemise SOC-i kui ka oma klientide teenuste osutamiseks \u2014 MSSP.<\/p>\n<p>\u00dche olulisema omaduse hulka kuulub uuenduste vahem\u00e4lu tugi endpoint-klientide jaoks. See s\u00e4\u00e4stab v\u00e4lise liikluse ribalaiust, kuna uuendused laaditakse \u00fcles \u00fche korra \u00fchele endpoint-klientidele ja seej\u00e4rel laadivad teised l\u00f5ppseadmed uuendused temalt. Lisaks sellele saab valitud endpoint edastada teateid turvapoliitikate ja teabe aruannete kohta Sophose pilve. See funktsioon on kasulik, kui on l\u00f5ppseadmeid, mis ei p\u00e4\u00e4se otse internetti, kuid vajavad kaitset. Sophos Central pakub v\u00f5imalust (tamper protection), mis keelab arvuti kaitse seadistuste muutmise v\u00f5i endpoint-agendi eemaldamise.<\/p>\n<p>\u00dcks endpoint-kaitse komponente on j\u00e4rgmise p\u00f5lvkonna viiruset\u00f5rje (NGAV) \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept X<\/a><\/noindex>. S\u00fcgava masin\u00f5ppe tehnoloogia abil suudab viiruset\u00f5rje tuvastada varem tundmatuid ohte ilma allkirjade kasutamiseta. Tuvastamise t\u00e4psus on v\u00f5rreldav allkirjarakenduste omadega, kuid erinevalt neist pakub see proaktiivset kaitset, takistades \u201enullp\u00e4eva\u201d r\u00fcnnakuid. Intercept X suudab t\u00f6\u00f6tada paralleelselt teiste tootjate allkirjarakendusega viiruset\u00f5rjetega.<\/p>\n<p>Selles artiklis anname l\u00fchidalt \u00fclevaate SynSeci kontseptsioonist, mida rakendatakse Sophos Centralis, ning m\u00f5nest selle lahenduse v\u00f5imalusest. Kuidas iga Sophos Centrali integreeritud kaitsekomponent t\u00f6\u00f6tab, r\u00e4\u00e4gime j\u00e4rgmistes artiklites. Lahenduse demoversiooni saate <noindex><a rel=\"nofollow\" href=\"https:\/\/secure2.sophos.com\/en-us\/products\/sophos-central\/free-trial.aspx?id=00130000019KE2V\">siit<\/a><\/noindex>.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/fgts\/blog\/449438\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24184,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32370","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00fcnnitatud turvalisus Sophos Centralis | ProHoster","description":"Teabe turbevahendite k\u00f5rge efektiivsuse tagamiseks m\u00e4ngib olulist rolli nende komponentide omavaheline seos. See v\u00f5imaldab katta mitte ainult v\u00e4liseid, vaid ka sisemisi ohte. V\u00f5rgu infrastruktuuri kavandamisel on iga kaitsevahendi \u2014 olgu see siis viiruset\u00f5rje v\u00f5i tulem\u00fc\u00fcr \u2014 t\u00f6\u00f6 oluline, et nad t\u00f6\u00f6taksid mitte ainult oma klassi (Endpoint security v\u00f5i NGFW) raames, vaid ka oleksid funktsionaalsed.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster","og:description":"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:46:38+00:00","article:modified_time":"2019-10-31T18:46:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32370","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 10:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:00:22","updated":"2026-01-21 10:32:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=32370"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32370\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/24184"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=32370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=32370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=32370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}