{"id":95683,"date":"2020-10-02T01:42:24","date_gmt":"2020-10-01T23:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika"},"modified":"2020-10-02T01:42:24","modified_gmt":"2020-10-01T23:42:24","slug":"obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","title":{"rendered":"Sophos XG Firewalli p\u00f5hifunktsioonide \u00fclevaade (osa 1: \u201cJ\u00e4lgimine ja anal\u00fc\u00fcs\u201d)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Sophos
\nTere k\u00f5igile! J\u00e4tkates... artikkel<\/a><\/noindex> Soovin l\u00e4hemalt r\u00e4\u00e4kida Sophos XG Firewalli pakutavatest funktsioonidest ja tutvuda veebiliidesega. \u00c4rilised artiklid ja dokumendid on head, kuid alati on huvitav n\u00e4ha, kuidas lahendus p\u00e4riselt v\u00e4lja n\u00e4eb. Kuidas k\u00f5ik seal t\u00f6\u00f6tab? Alustame \u00fclevaadet.
\n<\/a><\/noindex>
\nSelles artiklis k\u00e4sitleme Sophos XG Firewalli esimese osa funktsioone \u2014 \u201eJ\u00e4lgimine ja anal\u00fc\u00fcs\u201c. T\u00e4ielik \u00fclevaade tuleb artiklite ts\u00fcklina. J\u00e4tkame Sophos XG Firewalli veebiliidese ja litsentsimistabeli alusel.<\/p>\n

\"Sophos
\n<\/p>\n

Turbehalduskeskus<\/h1>\n

\nN\u00fc\u00fcd oleme avanud meie NGFW veebiliidese ja n\u00e4eme sisselogimise soovi, et sisestada administraatori kasutajanimi ja parool.<\/p>\n

\"Sophos
\n
\nSisestame administraatori kasutajanime ja parooli, mille m\u00e4\u00e4rasime algse aktiveerimise ajal, ning p\u00e4\u00e4seme meie halduskeskusesse. Selle v\u00e4limus on j\u00e4rgmine.<\/p>\n

\"Sophos
\n
\nPeaaegu iga neist vidinatest on klikitavad. Saame uurida juhtu ja vaadata \u00fcksikasju.<\/p>\n

Uurime iga ploki sisu ja alustame plokist System.<\/p>\n

Plokk System<\/h2>\n

\n\"Sophos<\/p>\n

See on plokk, mis kuvab masina staatust reaalajas. Kui kl\u00f5psate m\u00f5nel ikoonil, suundume lehele, kus on p\u00f5hjalikum teave s\u00fcsteemi seisundi kohta.<\/p>\n

\"Sophos
\n
\nKui s\u00fcsteemis on probleeme, annab see vidin sellest m\u00e4rku, ja teabe lehelt saab vaadata probleemi p\u00f5hjust.<\/p>\n

\"Sophos
\n
\nVahetades vahelehti, saab rohkem teavet tulem\u00e4e erinevate aspektide toimimisest.<\/p>\n

\"Sophos
\n
\n\"Sophos
\n
\n\"Sophos
\n<\/p>\n

Traffic insight plokk.<\/h2>\n

\n\"Sophos<\/p>\n

See jaotis annab meile \u00fclevaate sellest, mis meie v\u00f5rgus hetkel toimub ja mis on toimunud viimase 24 tunni jooksul. Topp 5 veebikategooriat ja rakendust liikluse j\u00e4rgi, v\u00f5rgu r\u00fcnnakud (IPS mooduli aktiveerumine) ning topp 5 blokeeritud rakendust.<\/p>\n

Erikohas on Cloud Applications jaotis, kus saab vaadata, kas kohalikus v\u00f5rgus on rakendusi, mis kasutavad pilveteenuseid. T\u00e4iendav arv, sissetulev ja v\u00e4ljaminev liiklus. Kui kl\u00f5psate sellel vidin, suundume lehele pilverakenduste teabe kohta, kus saame p\u00f5hjalikumalt vaadata, millised pilverakendused on v\u00f5rgus, kes neid kasutab ja teavet liikluse kohta.<\/p>\n

\"Sophos
\n<\/p>\n

User & device insights plokk.<\/h2>\n

\n\"Sophos<\/p>\n

Selles plokis on esitatud teave kasutajate kohta. \u00dclemine rida n\u00e4itab meile kasutajate nakatunud arvutite teavet, kogudes teavet Sophos'i viiruset\u00f5rjest ja edastades selle Sophos XG Firewall'ile. Selle teabe p\u00f5hjal saab tulem\u00fc\u00fcr nakatumise korral kasutaja arvuti kohaliku v\u00f5rgu v\u00f5i v\u00f5rgusegmendi L2 tasemel lahti \u00fchendada, blokeerides k\u00f5ik \u00fchendused. Rohkem teavet Security Heartbeat'i kohta leiate selles artiklis<\/a><\/noindex>. Edasi on kaks rida - rakenduste kontroll ja pilvesandik. Kuna see on eraldi funktsionaalsus, ei k\u00e4sitleta seda artiklis.<\/p>\n

Tasub t\u00e4helepanu p\u00f6\u00f6rata kahele alumisele vidinale. Need on ATP (Advanced Threat Protection) ja UTQ (User Threat Quotient).<\/p>\n

ATP moodul blokeerib \u00fchendused C&C, botnetiv\u00f5rgustike juhtserveritega. Kui teie kohaliku v\u00f5rgu seade satub botnetiv\u00f5rku, teavitab see moodul sellest ja ei luba \u00fchendust juhtserveriga. See n\u00e4eb v\u00e4lja selline<\/p>\n

\"Sophos<\/p>\n

\"Sophos
\n
\nUTQ moodul m\u00e4\u00e4rab igale kasutajale turbeindeksi. Mida rohkem kasutaja p\u00fc\u00fcab p\u00e4\u00e4seda keelatud saitidele v\u00f5i k\u00e4ivitada keelatud rakendusi, seda k\u00f5rgemaks tema hinne t\u00f5useb. Tuginedes nendele andmetele, saab selliseid kasutajaid ette valmistada, ilma et peaksite ootama, kuni tema arvuti l\u00f5puks pahavara nakatub. See n\u00e4eb v\u00e4lja nagu<\/p>\n

\"Sophos
\n
\nJ\u00e4rgneb \u00fclevaade aktiivsetest tulem\u00fc\u00fcrireeglitest ja kuumadest raportitest, mille saab kiiresti alla laadida pdf-formaadis.<\/p>\n

\"Sophos<\/p>\n

Liigume j\u00e4rgmisse men\u00fc\u00fcosse - Current activities <\/p>\n

Current activities<\/h1>\n

\n\"Sophos
\n
\nAlustame \u00fclevaadet vahekaartilt Live users. Sellesse lehte saame vaadata, kes hetkel on \u00fchendatud Sophos XG Firewall'iga, autentimise meetodit, masina IP-aadressi, \u00fchenduse aega ja liiklust.<\/p>\n

Live connections<\/h2>\n

\n\"Sophos
\n
\nSelles vahekaardis kuvatakse aktiivsed sessioonid reaalajas. Seda tabelit saab filtreerida rakenduste, kasutajate ja kliendi masinate IP-aadresside j\u00e4rgi. <\/p>\n

IPsec connections<\/h2>\n

\n\"Sophos
\n
\nSelles vahekaardis kuvatakse teave aktiivsete IPsec VPN-\u00fchenduste kohta.<\/p>\n

Vahekaart Remote users<\/h2>\n

\nVahelehe Remote users all on teave kaugkasutajatest, kes on \u00fchendatud SSL VPN-iga.<\/p>\n

\"Sophos
\n
\nSamuti saab sellel vahelehel vaadata kasutajate reaalajas liiklust ja sundida v\u00e4lja l\u00fclitama \u00fcksk\u00f5ik millist kasutajat.<\/p>\n

J\u00e4tame vahelehe Reports vahele, kuna aruandlus s\u00fcsteem selles tootes on v\u00e4ga mahukas ja vajab eraldi artiklit.<\/p>\n

Diagnostics<\/h1>\n

\n\"Sophos
\n
\nAvatakse kohe leht erinevate probleemide otsimise utiliitidega. Nende hulka kuuluvad Ping, Traceroute, Name lookup, Route lookup.<\/p>\n

Edasi tuleb vaheleht s\u00fcsteemi graafikutega, mis n\u00e4itavad riistvara ja portide koormust reaalajas.<\/p>\n

System graphs<\/h2>\n

\n\"Sophos
\n
\nSiis on vaheleht, kus saab kontrollida veebiresursi kategooriat.<\/p>\n

URL category lookup<\/h2>\n

\n\"Sophos
\n
\nJ\u00e4rgmine vaheleht Packet capture \u2014 see on sisuliselt tcpdump, mis on sisse ehitatud veebiliidesesse. Samuti saab kirjutada filtreid.<\/p>\n

Packet capture<\/h2>\n

\n\"Sophos<\/p>\n

\"Sophos
\n
\nTasub mainida, et paketid konverteeritakse tabeliks, kus saab sisse ja v\u00e4lja l\u00fclitada t\u00e4iendavaid teabeveerge. See funktsioon on v\u00e4ga mugav v\u00f5rguh\u00e4irete otsimiseks, n\u00e4iteks \u2014 saab kiiresti m\u00f5ista, millised filtreerimisreeglid kehtisid tegelikule liiklusele.<\/p>\n

\"Sophos<\/p>\n

Connection List vahekaart v\u00f5imaldab vaadata k\u00f5iki olemasolevaid \u00fchendusi reaalajas ja teavet nende kohta.<\/p>\n

Connection List<\/h2>\n

\"Sophos
\n<\/p>\n

Kokkuv\u00f5te<\/h1>\n

\nSellega l\u00f5petame \u00fclevaate esimeses osas. Oleme k\u00e4sitlenud vaid v\u00e4ikest osa olemasolevast funktsionaalsusest ja ei ole \u00fcldse puudutanud kaitsemooduleid. J\u00e4rgmises artiklis uurime sisseehitatud aruandluse funktsionaalsust ja tulem\u00fc\u00fcrireegleid, nende t\u00fc\u00fcpe ja eesm\u00e4rke. <\/p>\n

Ait\u00e4h, et leidsite aega.<\/p>\n

Kui teil on k\u00fcsimusi XG Firewalli \u00e4riversiooni kohta, v\u00f5ite meiega \u00fchendust v\u00f5tta \u2014 ettev\u00f5ttega Faktor grup<\/a><\/noindex>, Sophose edasim\u00fc\u00fcjaga. Piisab, kui kirjutada vabakuulutuse korras aadressile sophos@fgts.ru<\/a><\/noindex>.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Sophos XG Firewall \u0438 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c. \u041a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0432\u0435\u0434\u044c \u0432\u0441\u0435\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0430 \u043a\u0430\u043a \u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0436\u0438\u0432\u0443\u044e? \u041a\u0430\u043a \u0432\u0441\u0435 \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e? \u0418\u0442\u0430\u043a, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c \u043a \u043e\u0431\u0437\u043e\u0440\u0443. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95684,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sophos XG Firewall p\u00f5hifunktsioonide \u00fclevaade (osa 1 \u201cMonitooring ja anal\u00fc\u00fcs\u201d) | ProHoster","description":"Tere k\u00f5igile! J\u00e4tkates antud artiklit, tahan r\u00e4\u00e4kida rohkem funktsioonidest, mida pakub Sophos XG Firewall lahendus ning tutvustada veebiliidest. Kaubanduslikud artiklid ja dokumendid on head, kuid huvitav on n\u00e4ha, kuidas lahendus tegelikult v\u00e4lja n\u00e4eb ja kuidas k\u00f5ik seal t\u00f6\u00f6tab. Nii et alustame \u00fclevaatega. Antud artiklis n\u00e4idatakse esimest osa.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 Sophos XG Firewall (\u0447\u0430\u0441\u0442\u044c 1 \u201c\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u201d) | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Sophos XG Firewall \u0438 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c. \u041a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0432\u0435\u0434\u044c \u0432\u0441\u0435\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0430 \u043a\u0430\u043a \u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0436\u0438\u0432\u0443\u044e? \u041a\u0430\u043a \u0432\u0441\u0435 \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e? \u0418\u0442\u0430\u043a, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c \u043a \u043e\u0431\u0437\u043e\u0440\u0443. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T23:42:24+00:00","article:modified_time":"2020-10-01T23:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95683","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:59:42","updated":"2022-09-28 15:05:57"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=95683"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95683\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/95684"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=95683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=95683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=95683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}