{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point Uvod u R80.20. Dnevnici & Izvje\u0161taji","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nDobrodo\u0161li na 12. lekciju. Danas \u0107emo razgovarati o jo\u0161 jednoj vrlo va\u017enoj temi, a to je rad s logovima i izvje\u0161tajima<\/b>. Ponekad ova funkcionalnost postane gotovo presudna pri odabiru sredstva za\u0161tite. Zbog prakti\u010dnosti, \u201esigurnosni\u201d stru\u010dnjaci vole jednostavan sustav izvje\u0161tavanja i funkcionalno pretra\u017eivanje raznih doga\u0111aja. Te\u0161ko ih je kriviti. U su\u0161tini, logovi i izvje\u0161taji su klju\u010dni elementi evaluacije sigurnosti. Kako shvatiti trenutnu razinu sigurnosti ako ne vidite \u0161to se doga\u0111a? Sre\u0107om, s Check Pointom nema problema po tom pitanju i to u velikoj mjeri. Check Point ima jedan od najboljih sustava izvje\u0161tavanja koji funkcionira s kutije! Uz to, postoji mogu\u0107nost prilagodbe i stvaranja vlastitih izvje\u0161taja! Sve to dolazi s jednostavnim i intuitivnim procesom rada s logovima. No, idimo redom.<\/a><\/noindex><\/p>\n

Potpuno novi su\u010delje<\/h3>\n

\nAko ste ranije radili sa Check Pointom, sigurno ste se iznenadili potpuno novom su\u010delju za rad s logovima i izvje\u0161tajima u R80. Na slici mo\u017eete vidjeti koliko je razli\u010ditih alata objedinjeno unutar jedne nove kartice Logs & Monitor<\/b>:<\/p>\n

\"12.
\n<\/p>\n

Odjeljak Logs & Monitor<\/h3>\n

\nAko pre\u0111ete na Logs & Monitor i otvorite novu karticu, trebali biste vidjeti otprilike sljede\u0107e:<\/p>\n

\"12.
\n
\nPrema zadanim postavkama ovdje su dva velika odjeljka:<\/p>\n

    \n
  1. Audit Logs View<\/b> \u2014 ovdje mo\u017eete prona\u0107i sve doga\u0111aje vezane uz ulaz\/izlaz administratora, promjene u konfiguraciji itd. To jest, klasi\u010dni audit radnji administratora.<\/li>\n
  2. Logs View<\/b> \u2014 ovdje se mo\u017ee provesti pretra\u017eivanje doga\u0111aja koje generiraju svi na\u0161i uklju\u010deni blaydi, bez obzira je li to firewall, antivirus, IPS itd. Ve\u0107 smo ne jednom koristili ovu funkciju.<\/li>\n<\/ol>\n

    \nOsim toga, ovdje su i linkovi na izvje\u0161taje (Reports<\/b>) i razli\u010dite nadzorne plo\u010de (Views<\/b>). Za njihovo funkcioniranje potreban je uklju\u010den blayd Smart Event<\/b>. No o tome malo kasnije. Prvo, razjasnimo rad s logovima.<\/p>\n

    Pretra\u017eivanje po logovima<\/h3>\n

    \nPo mom mi\u0161ljenju, rad s logovima u R80 je u\u017eitak. Imamo vrlo pametan pretra\u017eiva\u010d koji nam omogu\u0107uje pretra\u017eivanje prema proizvoljnom tekstu, blaydu i svim drugim indeksiranim parametrima poput izvora, odredi\u0161ta, akcije itd.<\/p>\n

    \"12.
    \n
    \nU istom trenutku mo\u017eemo sastavljati vrlo slo\u017eene upite koriste\u0107i logi\u010dke operatore AND<\/b>, ILI<\/b>, NOT<\/b>. I za to nije potrebno ni\u0161ta pisati. Filtr mo\u017eete stvoriti u doslovno nekoliko klikova mi\u0161em. Malo kasnije \u0107emo to isprobati u praksi.<\/p>\n

    Prikaz Log poruka prema Access-listi<\/h3>\n

    \nTako\u0111er smo ve\u0107 ocijenili mogu\u0107nost prikazivanja logova prema odre\u0111enom popisu pristupa. To je izuzetno prakti\u010dno i vrlo brzo se naviknete. Osobito poma\u017ee pri rje\u0161avanju problema. Odabrali ste zanimljivi 'access-list' i gledate dolje, ulazi li potrebni promet. <\/p>\n

    \"12.
    \n
    \nNije potrebno nigdje prelaziti ili sastavljati slo\u017eeni filtar za logove.<\/p>\n

    Pogledi i izvje\u0161taji<\/h3>\n

    \nZa izvje\u0161tavanje i vizualizaciju podataka u Check Pointu odgovara blade Smart Event<\/b>, koji se aktivira na serveru<\/a> upravljanju. Ovu funkcionalnost slobodno mo\u017eemo nazvati SIEM-om, ali samo za proizvode Check Point! Tehni\u010dki, na Smart Event mo\u017ee se preusmjeriti logove i iz drugih sustava (tipa Cisco, Microsoft itd.), ali to nije najbolja ideja \ud83d\ude42 U praksi, to je prili\u010dno problemati\u010dno. Ali sa 'Check Point' logovima, Smart Event se jednostavno savr\u0161eno snalazi. Mo\u017ee korelirati, sumirati, prosje\u010diti i jo\u0161 mnogo toga. I sve to radi odmah! Naravno, postoje ve\u0107 gotovi dashboardi za prikazivanje najva\u017enijih informacija. U Check Pointu se nazivaju Views<\/b>:<\/p>\n

    \"12.
    \n
    \nMo\u017ee se vidjeti da ovdje postoji prili\u010dno veliki broj zadani dashboarda koji su vrlo korisni u svakodnevnom administriranju i pra\u0107enju.<\/p>\n

    Osim dashboarda, gdje se informacije jednostavno vizualiziraju, postoji mogu\u0107nost generacije punih izvje\u0161taja i pohrane istih u pdf ili excel format. Mo\u017eete generirati prema rasporedu i slati ih na neki mail.<\/p>\n

    I najljep\u0161e! Dashboardi i izvje\u0161taji mogu se stvarati sami! To jest, niste ograni\u010deni na one unaprijed ugra\u0111ene. Time se ne mo\u017ee pohvaliti svaki dobavlja\u010d. Osim toga, predlo\u0161ci tih dashboarda ili izvje\u0161taja mogu se uvoziti ili izvoziti, \u0161to omogu\u0107ava korisnicima dijeljenje svojih radova. Sam proces stvaranja dashboarda prili\u010dno je jednostavan i intuitivan. Poku\u0161at \u0107u vam to pokazati tijekom laboratorijskog rada, koji \u0107ete prona\u0107i u videu ispod.<\/p>\n

    Video lekcija<\/h3>\n

    \n

    \r\n \"Pogledajte\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    Stay tuned for more and join our YouTube channel<\/a><\/noindex> \ud83d\ude42
    \n
    Izvor:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Uvod u R80.20. Logovi i izvje\u0161taji | ProHoster","description":"Dobrodo\u0161li na 12. lekciju.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}