{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point alustamine R80.20. Logid ja aruanded","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nTere tulemast 12. \u00f5ppetundi. T\u00e4na r\u00e4\u00e4gime \u00fchest v\u00e4ga olulistest teemat, nimelt logide ja aruannete haldamisest<\/b>. M\u00f5nikord osutub see funktsionaalsus otsustavaks kaitsemeetme valimisel. Turvatehnika spetsialistid armastavad mugavat aruandluss\u00fcsteemi ja funktsionaalset otsingut erinevate s\u00fcndmuste j\u00e4rgi. Teised ei saa neid selles hukka m\u00f5ista. Logid ja aruanded on tegelikult \u00fcks p\u00f5hilisi komponente turvalisuse hindamisel. Kuidas m\u00f5ista praegust turvalisuse taset, kui te ei n\u00e4e, mis juhtub? \u00d5nneks on Check Point selles osas k\u00f5ik korras ja rohkemgi veel. Check Point omab \u00fchte parimat aruandluss\u00fcsteemi, mis t\u00f6\u00f6tab kohe v\u00e4lja kastist! Samuti on olemas kohandamise v\u00f5imalus ja oma aruannete loomine! K\u00f5ike seda t\u00e4iendab mugav ja intuitiivne protsess logidega t\u00f6\u00f6tamiseks. Aga r\u00e4\u00e4gime k\u00f5igest j\u00e4rjekorras.<\/a><\/noindex><\/p>\n

t\u00e4iesti uus liides<\/h3>\n

\nKui olete varem Check Pointiga t\u00f6\u00f6tanud, siis olete kindlasti \u00fcllatunud t\u00e4iesti uue logide ja aruannete kasutajaliidese \u00fcle R80-s. Pildilt on n\u00e4ha, kui palju erinevaid utiliite on koondatud \u00fche uue vahekaardi alla. Logid ja j\u00e4lgimine<\/b>:<\/p>\n

\"12.
\n<\/p>\n

Logs & Monitor sektsioon<\/h3>\n

\nKui liikuda Logs & Monitor ja avada uus vaheleht, peaksid n\u00e4gema umbes j\u00e4rgmist:<\/p>\n

\"12.
\n
\nEeltasu on siin kaks suurt sektsiooni:<\/p>\n

    \n
  1. Audit Logs View<\/b> \u2014 siit leiad k\u00f5ik s\u00fcndmused, mis on seotud administraatorite sisenemise\/v\u00e4ljumise, konfiguratsiooni muudatuste jne. See t\u00e4hendab klassikalist administraatori tegevuste auditi.<\/li>\n
  2. Logs View<\/b> \u2014 just siin saad otsida s\u00fcndmuste hulgast, mida genereerivad k\u00f5ik meie aktiveeritud bleydid, olgu need firewall, antivirus, IPS jne. Oleme seda funktsiooni juba korduvalt kasutanud.<\/li>\n<\/ol>\n

    \nLisaks on siin lingid aruannetele (Reports<\/b>) ja erinevatele juhtpaneelidele (Views<\/b>). Nende t\u00f6\u00f6ks on vajalik aktiveeritud bley Smart Event<\/b>. Kuid sellest hiljem. Esiteks, uurime, kuidas logidega t\u00f6\u00f6tada.<\/p>\n

    Otsi logisid<\/h3>\n

    \nMinu arvates on logidega t\u00f6\u00f6tamine R80 t\u00f5eline nauding. Meil on \u00fcsna nutikas otsinguriba, mis lubab meil otsida nii suvalise teksti, bley ja mistahes muude indekseeritavate parameetrite nagu source, destination, action jne.<\/p>\n

    \"12.
    \n
    \nSelle k\u00e4igus saame koostada \u00fcsna keerulisi otsingup\u00e4ringuid, kasutades loogilisi operaattoreid: AND<\/b>, OR<\/b>, NOT<\/b>. Ja selleks ei ole isegi midagi tr\u00fckkida vaja. Filtri loomine on v\u00f5imalik s\u00f5na otseses m\u00f5ttes paar hiirekl\u00f5psu teha. Veidi hiljem katsetame seda k\u00f5ik koos praktikas.<\/p>\n

    Logi s\u00f5numite kuvamine juurdep\u00e4\u00e4sulisti j\u00e4rgi<\/h3>\n

    \nOleme juba hindanud logide kuvamise v\u00f5imalust konkreetse juurdep\u00e4\u00e4sulisti j\u00e4rgi. See on \u00e4\u00e4rmiselt mugav ja harjub sellega v\u00e4ga kiiresti. See aitab eriti h\u00e4daldamisel. Valitud huvitavad 'juurdep\u00e4\u00e4sulistid' ning sa vaatad all, kas vajalik liiklus sinna alla mahub. <\/p>\n

    \"12.
    \n
    \nEi ole vaja kuhugi minna v\u00f5i keerulist filtrit logide jaoks koostada.<\/p>\n

    Vaated & Aruanded<\/h3>\n

    \nAndmete aruandluse ja visualiseerimise eest Check Pointis vastutab blade Smart Event<\/b>, mis aktiveeritakse serveril<\/a> halduse. Seda funktsiooni v\u00f5ib julgelt nimetada SIEM-iks, kuid ainult Check Pointi toodete jaoks! Tehniliselt saab Smart Eventi kaudu t\u00f6\u00f6delda logisid ka muudest s\u00fcsteemidest (n\u00e4iteks cisco, microsoft jne), kuid see ei ole parim idee \ud83d\ude42 Praktikas on see \u00fcsna problemaatiline. Kuid Check Pointi logide jaoks t\u00f6\u00f6tab SmartEvent lihtsalt suurep\u00e4raselt. See suudab korreleerida, summeerida, keskmistada ja palju muud. Ja k\u00f5ik see t\u00f6\u00f6tab v\u00e4lja karbist! Loomulikult on juba olemas valmis armatuurlaudade seadistused, et kuvada k\u00f5ige olulisemat teavet. Check Pointis nimetatakse neid Views<\/b>:<\/p>\n

    \"12.
    \n
    \nN\u00e4ha on, et siin on \u00fcsna suur hulk vaikimisi armatuurlaudu, mis on igap\u00e4evases haldamises ja j\u00e4lgimises v\u00e4ga kasulikud.<\/p>\n

    Lisaks armatuurlaudadele, kus teave lihtsalt visualiseeritakse, on v\u00f5imalik genereerida ka t\u00e4ie\u00f5iguslikke aruandeid ja salvestada neid PDF- v\u00f5i Excel-vormingus. Aruandeid saab genereerida graafiku alusel ja saata need m\u00f5nele e-posti aadressile.<\/p>\n

    Ja k\u00f5ige parem! Te saate luua enda kuvandeid ja raportit! See t\u00e4hendab, et te ei ole piiratud ainult sisseehitatud valikutega. Sellega ei saa iga m\u00fc\u00fcja kiidelda. Samuti on v\u00f5imalik nende kuvandite v\u00f5i raportite malle importida v\u00f5i eksportida, mis annab kasutajatele v\u00f5imaluse oma saavutusi jagada. Kuvandi loomise protsess on v\u00e4ga lihtne ja arusaadav. \u00dcritan seda teile n\u00e4idata laborit\u00f6\u00f6 raames, mille leiate allolevast videotunnist.<\/p>\n

    Videokursus<\/h3>\n

    \n

    \r\n \"Vaata\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    J\u00e4tkake j\u00e4lgimist ja liituge meie YouTube'i kanaliga<\/a><\/noindex> \ud83d\ude42
    \n
    Allikas:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","description":"Tere tulemast kaheteistk\u00fcmnendasse \u00f5ppetundi. T\u00e4na r\u00e4\u00e4gime veel \u00fchest v\u00e4ga olulisest teemast, nimelt logide ja raportite k\u00e4sitlemisest. M\u00f5nikord osutub see funktsionaalsus peaaegu otsustavaks kaitsevahendi valimisel. Turvaekspertidele meeldib kindlasti mugav raportite s\u00fcsteem ja funktsionaalne otsing erinevate s\u00fcndmuste vahel. Raskem on neid selles s\u00fc\u00fcdistada. P\u00f5him\u00f5tteliselt logid","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}