{"id":95683,"date":"2020-10-02T01:42:24","date_gmt":"2020-10-01T23:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika"},"modified":"2020-10-02T01:42:24","modified_gmt":"2020-10-01T23:42:24","slug":"obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","title":{"rendered":"Sophos XG Firewalli p\u00f5hifunktsioonide \u00fclevaade (osa 1: \"Monitooring ja anal\u00fc\u00fcs\")","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Sophos
\nTere k\u00f5igile! J\u00e4tkates artikleid<\/a><\/noindex> tahan r\u00e4\u00e4kida teile l\u00e4hemalt funktsioonidest, mida pakub Sophos XG Firewall lahendus, ja tutvustada veebiliidest. Kaubandustooted ja dokumendid on head, kuid alati on huvitav teada, kuidas lahendus p\u00e4riselus v\u00e4lja n\u00e4eb? Kuidas k\u00f5ik seal toimib? Alustame \u00fclevaadet.
\n<\/a><\/noindex>
\nSelles artiklis n\u00e4idatakse Sophos XG Firewalli funktsionaalsuse esimest osa \u2013 \"Monitooring ja anal\u00fc\u00fcs\". T\u00e4ielik \u00fclevaade ilmub artiklite seeriana. Liikume edasi, tuginedes Sophos XG Firewalli veebiliidesele ja litsentsimise tabelile.<\/p>\n

\"Sophos
\n<\/p>\n

Turvalisuse halduskeskus<\/h1>\n

\nJa nii avasime brauseri ja k\u00e4ivitasime meie NGFW veebiliidese, n\u00e4eme sisselogimise taset, kus palutakse sisestada kasutajanimi ja paroole.<\/p>\n

\"Sophos
\n
\nSisestame sisselogimiseks algselt m\u00e4\u00e4ratud kasutajanime ja parooli ning p\u00e4\u00e4seme meie halduskeskusesse. See n\u00e4eb v\u00e4lja selline<\/p>\n

\"Sophos
\n
\nPeaaegu iga selline vidin on klikitav. Saame minna s\u00fcndmuse juurde ja vaadata \u00fcksikasju.<\/p>\n

Vaatame l\u00e4bi iga ploki ning alustame s\u00fcsteemiplokist.<\/p>\n

S\u00fcsteemiplokk<\/h2>\n

\n\"Sophos<\/p>\n

See plokk kuvab masina olekut reaalajas. Kui kl\u00f5psata m\u00f5nel ikoonil, liigume detailsema teabe lehele s\u00fcsteemi oleku kohta.<\/p>\n

\"Sophos
\n
\nKui s\u00fcsteemis on probleeme, annab see vidin sellest m\u00e4rku ning teabelehelt saab vaadata p\u00f5hjus.<\/p>\n

\"Sophos
\n
\nVahetades vahekaartide vahel, saab tutvuda erinevate aspektide teabega tulem\u00fc\u00fcri t\u00f6\u00f6st.<\/p>\n

\"Sophos
\n
\n\"Sophos
\n
\n\"Sophos
\n<\/p>\n

Liiklusanal\u00fc\u00fcsi plokk<\/h2>\n

\n\"Sophos<\/p>\n

See jaotis annab meile \u00fclevaate, mis meie v\u00f5rgus praegu toimub ja mis viimase 24 tunni jooksul toimus. Top 5 veebikategooriat ja rakendust liikluse j\u00e4rgi, v\u00f5rgu r\u00fcnnakud (IPS mooduli aktiveerumine) ja top 5 blokeeritud rakendust.<\/p>\n

Eraldi tasub v\u00e4lja tuua pilve rakenduste jaotis. Siin saab vaadata kohaliku v\u00f5rgu rakenduste arvu, mis kasutavad pilveteenuseid. \u00dcldine arv, sissetulev ja v\u00e4ljaminev liiklus. Kui kl\u00f5psata sellel vidin, p\u00e4\u00e4seme pilve rakenduste teabelehele, kus saame l\u00e4hemalt vaadata, millised pilve rakendused v\u00f5rgus olemas on, kes neid kasutab ning liikluse teavet.<\/p>\n

\"Sophos
\n<\/p>\n

Kasutaja ja seadme anal\u00fc\u00fcsi plokk<\/h2>\n

\n\"Sophos<\/p>\n

Selles plokis on teave kasutajate kohta. \u00dclemine rida n\u00e4itab meile nakatunud arvutite teavet, kogudes andmeid Sophose viiruset\u00f5rjest ja edastades need Sophos XG Firewall'ile. Selle teabe p\u00f5hjal v\u00f5ib Firewall nakatumise korral kasutaja arvuti lokaalsest v\u00f5rgust v\u00f5i v\u00f5rgu segmendist L2 tasemel eraldada, blokeerides k\u00f5ik sidemed temaga. T\u00e4iendavat teavet Security Heartbeat'i kohta oli selles artiklis<\/a><\/noindex>. Edasi on kaks rida \u2013 rakenduste kontroll ja pilvesandbox. Kuna see on eraldi funktsionaalsus, ei k\u00e4sitleta seda artiklis.<\/p>\n

Tuleb t\u00e4helepanu p\u00f6\u00f6rata kahele alumisele vidinale. Need on ATP (Advanced Threat Protection) ja UTQ (User Threat Quotient).<\/p>\n

ATP moodul blokeerib \u00fchendusi C&C, botiv\u00f5rkude juhtserveritega. Kui teie lokaalses v\u00f5rgus olev seade satub botiv\u00f5rku, teavitab see moodul sellest ning ei luba \u00fchendust juhtserveriga. See n\u00e4eb v\u00e4lja j\u00e4rgmine.<\/p>\n

\"Sophos<\/p>\n

\"Sophos
\n
\nUTQ moodul m\u00e4\u00e4rab igale kasutajale turvajaotuse. Mida rohkem kasutaja p\u00fc\u00fcab k\u00fclastada keelatud saite v\u00f5i k\u00e4ivitada keelatud rakendusi, seda k\u00f5rgemaks tema reiting t\u00f5useb. Tuginedes nendele andmetele, on v\u00f5imalik selliste kasutajate jaoks ennetavat koolitust l\u00e4bi viia, ilma et peaks ootama, et tema arvuti l\u00f5ppkokkuv\u00f5ttes pahavara saaks. See n\u00e4eb v\u00e4lja nii.<\/p>\n

\"Sophos
\n
\nEdasi j\u00e4rgneb \u00fcldine teave aktiivsete tulem\u00fc\u00fcrireeglite kohta ja kuumad raportid, mida saab kiiresti pdf-formaadis alla laadida.<\/p>\n

\"Sophos<\/p>\n

Liigume j\u00e4rgmisse men\u00fc\u00fc jaotusse - Current activities <\/p>\n

Current activities<\/h1>\n

\n\"Sophos
\n
\nAlustame \u00fclevaatust vahekaartidest Live users. Sellel lehel saame n\u00e4ha, kes on hetkel \u00fchendatud Sophos XG Firewall'iga, autentimismeetodit, masina IP-aadressi, \u00fchenduse aega ja andmemahtu.<\/p>\n

Live connections<\/h2>\n

\n\"Sophos
\n
\nSellel vahekaardil kuvatakse aktiivsed seansid reaalajas. Seda tabelit saab filtreerida vastavalt rakendustele, kasutajatele ja kliendi masinate IP-aadressidele. <\/p>\n

IPsec connections<\/h2>\n

\n\"Sophos
\n
\nSellel vahekaardil kuvatakse teave aktiivsete IPsec VPN-\u00fchenduste kohta.<\/p>\n

Vahekaart Remote users<\/h2>\n

\nRemote users vahekaardil on teave kaugkasutajate kohta, kes on \u00fchendatud SSL VPN-i kaudu.<\/p>\n

\"Sophos
\n
\nSamuti saab sel lehel reaalajas j\u00e4lgida kasutajate liiklust ja sundida mistahes kasutaja lahti \u00fchendama.<\/p>\n

J\u00e4tame vahele Reports vahekaardi, kuna selle toote raportis\u00fcsteem on v\u00e4ga mahukas ja vajab eraldi artiklit.<\/p>\n

Diagnostics<\/h1>\n

\n\"Sophos
\n
\nAvatakse kohe leht erinevate probleemide otsingut\u00f6\u00f6riistadega. Nendesse kuuluvad Ping, Traceroute, Nimen\u00e4idatud, Marsruudi otsing.<\/p>\n

Edasi liigume vahekaardile, kus on s\u00fcsteemi graafikud raua ja portide koormusest reaalajas<\/p>\n

S\u00fcsteemi graafikud<\/h2>\n

\n\"Sophos
\n
\nSiis on vahekaart, kus saab kontrollida veebiresursi kategooriat<\/p>\n

URL kategooria otsing<\/h2>\n

\n\"Sophos
\n
\nJ\u00e4rgmine vahekaart Packet capture \u2014 see on sisuliselt tcpdump, mis on integreeritud veebiliidesesse. Samuti on v\u00f5imalik kirjutada filtreid<\/p>\n

Packet capture<\/h2>\n

\n\"Sophos<\/p>\n

\"Sophos
\n
\nHuvi pakub see, et paketid muudetakse tabeliks, kus saab sisse ja v\u00e4lja l\u00fclitada t\u00e4iendavaid teabeveerusid. See funktsioon on v\u00e4ga mugav v\u00f5rku puudutavate probleemide leidmiseks, n\u00e4iteks \u2014 saab kiiresti aru, millised filtreerimise reeglid rakendati tegelikule liiklusele.<\/p>\n

\"Sophos<\/p>\n

Vahekaardil Connection List saab vaadata k\u00f5iki olemasolevaid \u00fchendusi reaalajas ja teavet nende kohta<\/p>\n

Connection List<\/h2>\n

\"Sophos
\n<\/p>\n

Kokkuv\u00f5te<\/h1>\n

\nSellega l\u00f5petame \u00fclevaate esimese osa. Oleme k\u00e4sitlenud ainult v\u00e4ga v\u00e4ikest osa olemasolevast funktsionaalsusest ja pole \u00fcldse k\u00e4sitlenud kaitsemodule. J\u00e4rgmises artiklis vaatleme sisseehitatud aruandefunktsioone ja tulem\u00fc\u00fcrireegleid, nende t\u00fc\u00fcpe ja eesm\u00e4rke. <\/p>\n

Ait\u00e4h, et leiate aega.<\/p>\n

Kui teil on k\u00fcsimusi XG Firewalli \u00e4riversiooni kohta, v\u00f5ite meiega \u00fchendust v\u00f5tta \u2014 ettev\u00f5ttega Faktor grup<\/a><\/noindex>, Sophose edasim\u00fc\u00fcjaga. Piisab, kui kirjutada vabakujulises vormis aadressile sophos@fgts.ru<\/a><\/noindex>.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Sophos XG Firewall \u0438 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c. \u041a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0432\u0435\u0434\u044c \u0432\u0441\u0435\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0430 \u043a\u0430\u043a \u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0436\u0438\u0432\u0443\u044e? \u041a\u0430\u043a \u0432\u0441\u0435 \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e? \u0418\u0442\u0430\u043a, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c \u043a \u043e\u0431\u0437\u043e\u0440\u0443. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95684,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sophos XG Firewall p\u00f5hifunktsionaalsuse \u00fclevaade (osa 1 \u201cJ\u00e4lgimine ja anal\u00fc\u00fctika\u201d) | ProHoster","description":"Tere k\u00f5igile.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 Sophos XG Firewall (\u0447\u0430\u0441\u0442\u044c 1 \u201c\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u201d) | ProHoster","og:description":"\u0412\u0441\u0435\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T23:42:24+00:00","article:modified_time":"2020-10-01T23:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95683","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:59:42","updated":"2022-09-28 15:05:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=95683"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95683\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/95684"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=95683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=95683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=95683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}