{"id":32370,"date":"2019-10-31T21:46:38","date_gmt":"2019-10-31T18:46:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sinhronizirovannaya-bezopasnost-v-sophos-central\/"},"modified":"2019-10-31T21:46:38","modified_gmt":"2019-10-31T18:46:38","slug":"sinhronizirovannaya-bezopasnost-v-sophos-central","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","title":{"rendered":"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/9d0e5f8349ff2034a71b0f2aacaba5c7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA kibert\u00e1mad\u00e1sok hat\u00e9kony kezel\u00e9s\u00e9ben kulcsszerepet j\u00e1tszik az inform\u00e1ci\u00f3biztons\u00e1gi eszk\u00f6z\u00f6k \u00f6sszekapcsolts\u00e1ga. Ez lehet\u0151v\u00e9 teszi a k\u00fcls\u0151 \u00e9s bels\u0151 fenyeget\u00e9sek egy\u00fcttes elleni v\u00e9delm\u00e9t. A h\u00e1l\u00f3zati infrastrukt\u00fara tervez\u00e9sekor minden v\u00e9delmi eszk\u00f6z fontos, legyen sz\u00f3 antiv\u00edrusr\u00f3l vagy t\u0171zfalr\u00f3l, hogy ne csak saj\u00e1t kateg\u00f3ri\u00e1jukban (v\u00e9gponti biztons\u00e1g vagy NGFW) m\u0171k\u00f6djenek, hanem k\u00e9pesek legyenek egy\u00fcttm\u0171k\u00f6dni a fenyeget\u00e9sek elleni k\u00f6z\u00f6s harc \u00e9rdek\u00e9ben.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Egy kis elm\u00e9let<\/h2>\n<p>\nNem meglep\u0151, hogy a mai kiberb\u0171n\u00f6z\u0151k egyre tal\u00e1l\u00e9konyabbak. A rosszindulat\u00fa programok terjeszt\u00e9s\u00e9re sz\u00e1mos h\u00e1l\u00f3zati technol\u00f3gi\u00e1t alkalmaznak:<br \/>\n<img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/53a274ad70bc616ea2bafa0b5dbe509b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA phishing e-mail kamp\u00e1nyok lehet\u0151v\u00e9 teszik, hogy a rosszindulat\u00fa program \"\u00e1tl\u00e9pje a k\u00fcsz\u00f6b\u00f6t\" a h\u00e1l\u00f3zat\u00e1ba, kihaszn\u00e1lva a j\u00f3l ismert t\u00e1mad\u00e1sokat, p\u00e9ld\u00e1ul a \"nulladik napi t\u00e1mad\u00e1sokat\", amelyek privilegiz\u00e1lt hozz\u00e1f\u00e9r\u00e9shez vezetnek, vagy a h\u00e1l\u00f3zaton bel\u00fcli v\u00edzszintes mozg\u00e1st (lateral movement). Ha egy eszk\u00f6z megfert\u0151z\u0151dik, az azt jelenti, hogy a h\u00e1l\u00f3zatot a t\u00e1mad\u00f3 \u00f6n\u00e9rdek\u00e9nek szolg\u00e1lat\u00e1ra haszn\u00e1lj\u00e1k. <\/p>\n<p>Esetenk\u00e9nt, amikor az inform\u00e1ci\u00f3biztons\u00e1gi \u00f6sszetev\u0151k interoperabilit\u00e1s\u00e1t kell biztos\u00edtani, a biztons\u00e1gi audit sor\u00e1n a rendszer aktu\u00e1lis \u00e1llapot\u00e1t gyakran nem lehet egy \u00f6sszef\u00fcgg\u0151 int\u00e9zked\u00e9scsomaggal le\u00edrni. Sok esetben a k\u00fcl\u00f6nb\u00f6z\u0151 fenyeget\u00e9sek ellen k\u00fczd\u0151 technol\u00f3giai megold\u00e1sok nem integr\u00e1l\u00f3dnak m\u00e1s megold\u00e1sokkal. P\u00e9ld\u00e1ul a v\u00e9gpontok v\u00e9delm\u00e9re szolg\u00e1l\u00f3 term\u00e9kek a v\u00edrusirt\u00f3 \u00e9s viselked\u00e9selemz\u00e9st haszn\u00e1lj\u00e1k annak meg\u00e1llap\u00edt\u00e1s\u00e1ra, hogy egy f\u00e1jl fert\u0151z\u00f6tt-e. A rosszindulat\u00fa forgalom meg\u00e1ll\u00edt\u00e1s\u00e1hoz a t\u0171zfalak m\u00e1s technol\u00f3gi\u00e1kat alkalmaznak, mint p\u00e9ld\u00e1ul a websz\u0171r\u00e9st, IPS-t, sandboxot stb. Ennek ellen\u00e9re a legt\u00f6bb szervezetben ezek az inform\u00e1ci\u00f3biztons\u00e1gi \u00f6sszetev\u0151k nincsenek \u00f6sszekapcsolva, \u00e9s elszigetelten m\u0171k\u00f6dnek.<\/p>\n<h2>A Heartbeat technol\u00f3gia megval\u00f3s\u00edt\u00e1s\u00e1nak trendjei<\/h2>\n<p>\nAz \u00faj megk\u00f6zel\u00edt\u00e9s a kiberbiztons\u00e1g biztos\u00edt\u00e1s\u00e1ra minden szinten v\u00e9delmet jelent, ahol az egyes szinteken haszn\u00e1lt megold\u00e1sok \u00f6sszekapcsol\u00f3dnak \u00e9s k\u00e9pesek inform\u00e1ci\u00f3t cser\u00e9lni. Ez a Sunchronized Security (SynSec) rendszer l\u00e9trehoz\u00e1s\u00e1hoz vezet. A SynSec a teljes inform\u00e1ci\u00f3biztons\u00e1gi rendszerk\u00e9nt val\u00f3 biztos\u00edt\u00e1si folyamatot jelenti. Ebben az esetben minden inform\u00e1ci\u00f3biztons\u00e1gi komponens val\u00f3s id\u0151ben kapcsol\u00f3dik egym\u00e1shoz. P\u00e9ld\u00e1ul a megold\u00e1s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-central.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> ezen elv alapj\u00e1n val\u00f3sult meg.<\/p>\n<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/f8a937ea7de8f977a0eab9a040db0216.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA Security Heartbeat technol\u00f3gia lehet\u0151v\u00e9 teszi a biztons\u00e1gi komponensek k\u00f6z\u00f6tti kapcsolatot, biztos\u00edtva ezzel a rendszer egy\u00fcttes m\u0171k\u00f6d\u00e9s\u00e9t \u00e9s monitoroz\u00e1s\u00e1t. A <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> k\u00f6vetkez\u0151 oszt\u00e1lyok megold\u00e1sai integr\u00e1lva vannak:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/endpoint-antivirus.aspx?id=00130000019KE2V\">Endpoint Protection<\/a><\/noindex> \u2014 klasszikus al\u00e1\u00edr\u00e1s-alap\u00fa v\u00edrus\u00edrt\u00f3;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/server-security.aspx?id=00130000019KE2V\">Server Protection<\/a><\/noindex> \u2014 kiszolg\u00e1l\u00f3k sz\u00e1m\u00e1ra kialak\u00edtott speci\u00e1lis v\u00edrus\u00edrt\u00f3;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept-X<\/a><\/noindex> \u2013 \u00faj gener\u00e1ci\u00f3s v\u00edrus\u00edrt\u00f3 (al\u00e1\u00edr\u00e1sok n\u00e9lk\u00fcl, mesters\u00e9ges intelligencia technol\u00f3gi\u00e1kkal);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos XG Firewall<\/a><\/noindex> \u2014 \u00faj gener\u00e1ci\u00f3s t\u0171zfal;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Mobility Management (EMM)<\/a><\/noindex> \u2014 mobil eszk\u00f6z\u00f6k kezel\u00e9se \u00e9s a v\u00e1llalati levelez\u00e9shez \u00e9s f\u00e1jlokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s ellen\u0151rz\u00e9se;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/safeguard-encryption.aspx?id=00130000019KE2V\">Data Protection (Encryption)<\/a><\/noindex>;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Secure Wi-Fi<\/a><\/noindex> \u2014 hozz\u00e1f\u00e9r\u00e9si pontok, amelyeket felh\u0151b\u0151l \u00e9s lok\u00e1lisan a Sophos UTM \/ Sophos XG seg\u00edts\u00e9g\u00e9vel kezelnek;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-web-gateway.aspx?id=00130000019KE2V\">Web Security<\/a><\/noindex> \u2014 klasszikus webforgalom sz\u0171r\u00e9si megold\u00e1s;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-email.aspx?id=00130000019KE2V\">E-mail Security<\/a><\/noindex> \u2014 felh\u0151- \/ lok\u00e1lis anti-spam \/ v\u00edrusv\u00e9delmi megold\u00e1s;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/phish-threat.aspx?id=00130000019KE2V\">Phish Threat<\/a><\/noindex> \u2014 alkalmazottak tudatoss\u00e1g\u00e1nak n\u00f6vel\u00e9se, teszt phishing kamp\u00e1nyok lebonyol\u00edt\u00e1sa;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/cloud-optix.aspx?id=00130000019KE2V\">Cloud Optix<\/a><\/noindex> \u2014 felh\u0151infrastrukt\u00far\u00e1k audit\u00e1l\u00e1sa.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/b1a60a0d471c250a48c36cde17a4de5f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nNem neh\u00e9z \u00e9szrevenni, hogy a Sophos Central sz\u00e9les spektrum\u00fa megold\u00e1sokat t\u00e1mogat az inform\u00e1ci\u00f3biztons\u00e1g ter\u00fclet\u00e9n. A Sophos Centralban a SynSec koncepci\u00f3 h\u00e1rom fontos elven alapul: a felfedez\u00e9s, az elemz\u00e9s \u00e9s a reag\u00e1l\u00e1s. R\u00e9szletes le\u00edr\u00e1s c\u00e9lj\u00e1b\u00f3l mindegyiken \u00e1lljunk meg egy kicsit.<\/p>\n<h2>A SynSec koncepci\u00f3ja<\/h2>\n<p>\n<b>FELFEDEZ\u00c9S<\/b> (ismeretlen fenyeget\u00e9sek azonos\u00edt\u00e1sa)<br \/>\nA Sophos Central alatt m\u0171k\u00f6d\u0151 Sophos term\u00e9kek automatikusan megosztj\u00e1k az inform\u00e1ci\u00f3kat egym\u00e1ssal a kock\u00e1zatok \u00e9s ismeretlen fenyeget\u00e9sek azonos\u00edt\u00e1s\u00e1ra, ami mag\u00e1ban foglalja:<\/p>\n<ul>\n<li>a h\u00e1l\u00f3zati forgalom elemz\u00e9se, amely lehet\u0151v\u00e9 teszi a magas kock\u00e1zat\u00fa alkalmaz\u00e1sok \u00e9s k\u00e1rtev\u0151 forgalom azonos\u00edt\u00e1s\u00e1t;<\/li>\n<li>a magas kock\u00e1zati csoportba tartoz\u00f3 felhaszn\u00e1l\u00f3k felfedez\u00e9se a tev\u00e9kenys\u00e9geik h\u00e1l\u00f3zatbeli korrel\u00e1ci\u00f3s elemz\u00e9s\u00e9n kereszt\u00fcl.<\/li>\n<\/ul>\n<p>\n<b>ELEMENTS<\/b> (azonnali \u00e9s intuit\u00edv)<br \/>\nA val\u00f3s idej\u0171 incidenselemz\u00e9s azonnali betekint\u00e9st biztos\u00edt a rendszer aktu\u00e1lis \u00e1llapot\u00e1ba.<\/p>\n<ul>\n<li>a teljes esem\u00e9nyl\u00e1nc megjelen\u00edt\u00e9se, amely az incidenshez vezetett, bele\u00e9rtve minden f\u00e1jlt, rendszerle\u00edr\u00f3 kulcsot, URL-c\u00edmet stb.<\/li>\n<\/ul>\n<p>\n<b>REAG\u00c1L\u00c1S<\/b> (automatikus reag\u00e1l\u00e1s az incidensekre)<br \/>\nA biztons\u00e1gi politik\u00e1k be\u00e1ll\u00edt\u00e1sa lehet\u0151v\u00e9 teszi, hogy automatikusan, m\u00e1sodpercek alatt reag\u00e1ljunk a fert\u0151z\u00e9sekre \u00e9s incidensekre. Ez a k\u00f6vetkez\u0151ket biztos\u00edtja:<\/p>\n<ul>\n<li>azonnali elszigetel\u00e9s a fert\u0151z\u00f6tt eszk\u00f6z\u00f6kt\u0151l \u00e9s a t\u00e1mad\u00e1s meg\u00e1ll\u00edt\u00e1sa val\u00f3s id\u0151ben (m\u00e9g egy h\u00e1l\u00f3zaton bel\u00fcl \/ sz\u00e9les s\u00e1v\u00fa dom\u00e9nen is);<\/li>\n<li>a v\u00e1llalati h\u00e1l\u00f3zati er\u0151forr\u00e1sokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s korl\u00e1toz\u00e1sa olyan eszk\u00f6z\u00f6k eset\u00e9ben, amelyek nem felelnek meg a politik\u00e1knak;<\/li>\n<li>t\u00e1voli eszk\u00f6zk\u00e9nti szkennel\u00e9s ind\u00edt\u00e1sa kimen\u0151 spam \u00e9szlel\u00e9sekor.<\/li>\n<\/ul>\n<p>\nMegvizsg\u00e1ltuk a Sophos Central m\u0171k\u00f6d\u00e9s\u00e9nek alapelveit. Most t\u00e9rj\u00fcnk \u00e1t arra, hogyan val\u00f3sul meg a SynSec technol\u00f3gia a gyakorlatban.<\/p>\n<h2>A gyakorlatban<\/h2>\n<p>\nEls\u0151 l\u00e9p\u00e9sk\u00e9nt magyar\u00e1zzuk el, hogyan \u00e1llap\u00edtj\u00e1k meg az eszk\u00f6z\u00f6k k\u00f6z\u00f6tti kapcsolatot a SynSec elv\u00e9n a Heartbeat technol\u00f3gia seg\u00edts\u00e9g\u00e9vel. Az els\u0151 l\u00e9p\u00e9s a Sophos XG regisztr\u00e1l\u00e1sa a Sophos Centralban. Ezen a l\u00e9p\u00e9sen kereszt\u00fcl az eszk\u00f6z kap egy tan\u00fas\u00edtv\u00e1nyt az \u00f6nazonos\u00edt\u00e1shoz, egy IP c\u00edmet \u00e9s portot, amelyen kereszt\u00fcl a v\u00e9gberendez\u00e9sek a Heartbeat technol\u00f3gi\u00e1n kereszt\u00fcl fognak kommunik\u00e1lni, valamint a Sophos Central \u00e1ltal kezelt v\u00e9gberendez\u00e9sek ID-j\u00e1t \u00e9s \u00fcgyf\u00e9l-tan\u00fas\u00edtv\u00e1nyaikat. <\/p>\n<p>Nem sokkal a Sophos XG regisztr\u00e1l\u00e1sa ut\u00e1n a Sophos Central \u00e1tadja a v\u00e9gberendez\u00e9seknek az inform\u00e1ci\u00f3t a Heartbeat technol\u00f3gia szerinti kommunik\u00e1ci\u00f3 kezdem\u00e9nyez\u00e9s\u00e9re:<\/p>\n<ul>\n<li>a Sophos XG tan\u00fas\u00edtv\u00e1nyainak kiad\u00e1s\u00e1hoz haszn\u00e1lt tan\u00fas\u00edtv\u00e1ny-kibocs\u00e1t\u00f3 k\u00f6zpontok list\u00e1ja;<\/li>\n<li>a Sophos XG-ben regisztr\u00e1lt eszk\u00f6z\u00f6k ID-j\u00e1nak list\u00e1ja;<\/li>\n<li>IP c\u00edm \u00e9s port a Heartbeat technol\u00f3gia szerinti interakci\u00f3hoz.<\/li>\n<\/ul>\n<p>\nEz az inform\u00e1ci\u00f3 a sz\u00e1m\u00edt\u00f3g\u00e9p k\u00f6vetkez\u0151 el\u00e9r\u00e9si \u00fatj\u00e1n t\u00e1rol\u00f3dik: %ProgramData%SophosHearbeatConfigHeartbeat.xml \u00e9s rendszeresen friss\u00fcl.<\/p>\n<p>A Heartbeat technology communication is carried out by sending messages from the endpoint to the magic IP address 52.5.76.173:8347 and back. The analysis revealed that packets are sent at an interval of 15 seconds, as stated by the vendor. It is worth noting that Heartbeat messages are processed directly by the XG Firewall \u2014 it intercepts the packets and monitors the endpoint status. If packet capture is performed on the host, the traffic movement will resemble communication with an external IP address, although in reality, the endpoint interacts directly with the XG Firewall.<\/p>\n<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/76bb24f252a90919a9737be3e7cb4c87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Imagine a malicious application somehow made its way onto the computer. Sophos Endpoint detects this attack or we stop receiving Heartbeat from this system. The infected device automatically sends out information about the system infection, triggering an automated chain of actions. The XG Firewall immediately isolates the computer, preventing the spread of the attack and interaction with C&amp;C servers.<\/p>\n<p>Sophos Endpoint automatically removes the malware. After its removal, the endpoint synchronizes with Sophos Central, then the XG Firewall restores network access. Root Cause Analysis (RCA or EDR \u2014 Endpoint Detection and Response) allows for a detailed understanding of what happened.<\/p>\n<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/77a0f06389830d530c491ad6d9d22cbf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAssuming access to corporate resources is via mobile devices and tablets, can SynSec be ensured in this case?<\/p>\n<p>For such a scenario, Sophos Central provides support for <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Sophos Mobile<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Sophos Wireless<\/a><\/noindex>. Let\u2019s assume a user attempts to violate security policies on a mobile device protected by Sophos Mobile. Sophos Mobile detects the security policy violation and sends notifications to other system components, triggering a pre-configured incident response. If the policy in Sophos Mobile is set to \"forbid network connection\", then Sophos Wireless will restrict network access for this device. A notification will appear on the Sophos Central dashboard under the Sophos Wireless tab stating that the device is infected. When the user attempts to access the network, a splash screen will appear, informing that internet access is restricted.<\/p>\n<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/2a49fb10fb5e0ec0082d8772cc2b5194.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/84acd97f5b39f9d52070bb48ae58ce94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA v\u00e9gpontnak t\u00f6bb \u00e1llapotjelz\u0151 st\u00e1tusza van, mint p\u00e9ld\u00e1ul a sz\u00edvver\u00e9s: piros, s\u00e1rga \u00e9s z\u00f6ld.<br \/>\nA piros st\u00e1tusz a k\u00f6vetkez\u0151 esetekben jelentkezik:<\/p>\n<ul>\n<li>akt\u00edv rosszindulat\u00fa program \u00e9szlelve;<\/li>\n<li>rosszindulat\u00fa program ind\u00edt\u00e1s\u00e1ra tett k\u00eds\u00e9rlet \u00e9szlelve;<\/li>\n<li>rosszindulat\u00fa h\u00e1l\u00f3zati forgalom \u00e9szlelve;<\/li>\n<li>a rosszindulat\u00fa program nem ker\u00fclt elt\u00e1vol\u00edt\u00e1sra.<\/li>\n<\/ul>\n<p>\nA s\u00e1rga st\u00e1tusz azt jelenti, hogy a v\u00e9gponton inakt\u00edv rosszindulat\u00fa programot, vagy potenci\u00e1lisan nem k\u00edv\u00e1nt programot (PUP) \u00e9szleltek. A z\u00f6ld st\u00e1tusz azt mutatja, hogy a fent eml\u00edtett probl\u00e9m\u00e1k k\u00f6z\u00fcl egyet sem \u00e9szleltek. <\/p>\n<p>Miut\u00e1n \u00e1ttekintett\u00fck n\u00e9h\u00e1ny klasszikus szcen\u00e1ri\u00f3t, amelyekben a v\u00e9dett eszk\u00f6z\u00f6k a Sophos Central-lal interakci\u00f3ba l\u00e9pnek, \u00e1tt\u00e9r\u00fcnk a megold\u00e1s grafikus fel\u00fclet\u00e9nek le\u00edr\u00e1s\u00e1ra, valamint a f\u0151 be\u00e1ll\u00edt\u00e1sok \u00e9s a t\u00e1mogatott funkci\u00f3k \u00e1ttekint\u00e9s\u00e9re.<\/p>\n<h2>Grafikus fel\u00fclet<\/h2>\n<p>\nA vez\u00e9rl\u0151pulton a legfrissebb \u00e9rtes\u00edt\u00e9sek jelennek meg. Diagram form\u00e1j\u00e1ban \u00f6sszefoglal\u00f3 jellemz\u0151k jelennek meg a k\u00fcl\u00f6nb\u00f6z\u0151 v\u00e9delmi komponensekr\u0151l. Jelen esetben a szem\u00e9lyi sz\u00e1m\u00edt\u00f3g\u00e9pek v\u00e9delmi adatai l\u00e1that\u00f3k. Ezen a panelen \u00f6sszegz\u0151 inform\u00e1ci\u00f3k is el\u00e9rhet\u0151k a vesz\u00e9lyes forr\u00e1sok l\u00e1togat\u00e1s\u00e1ra tett k\u00eds\u00e9rletekr\u0151l \u00e9s az elfogadhatatlan tartalm\u00fa forr\u00e1sokr\u00f3l, valamint az elektronikus levelek elemz\u00e9si statisztik\u00e1ir\u00f3l. <\/p>\n<p><img decoding=\"async\" alt=\"Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban\" src=\"\/wp-content\/uploads\/2019\/04\/c4733e335c2bfce1daa69b90d09b7900.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA Sophos Central t\u00e1mogatja az \u00e9rtes\u00edt\u00e9sek fontoss\u00e1gi szint szerinti megjelen\u00edt\u00e9s\u00e9t, \u00edgy a felhaszn\u00e1l\u00f3 nem hagyhatja figyelmen k\u00edv\u00fcl a kritikus biztons\u00e1gi figyelmeztet\u00e9seket. A rendszer v\u00e9delm\u00e9nek \u00e1llapot\u00e1r\u00f3l rendelkez\u00e9sre \u00e1ll\u00f3 t\u00f6m\u00f6r inform\u00e1ci\u00f3k mellett a Sophos Central esem\u00e9nynapl\u00f3z\u00e1st \u00e9s integr\u00e1ci\u00f3t is t\u00e1mogat a SIEM-rendszerekkel. A Sophos Central sok v\u00e1llalat sz\u00e1m\u00e1ra egy platform, amely a bels\u0151 SOC sz\u00e1m\u00e1ra \u00e9s a szolg\u00e1ltat\u00e1sok ny\u00fajt\u00e1s\u00e1hoz \u00fcgyfeleik sz\u00e1m\u00e1ra \u2014 MSSP.<\/p>\n<p>Az egyik fontos funkci\u00f3 az endpoint-\u00fcgyfelek friss\u00edt\u00e9si gyors\u00edt\u00f3t\u00e1r\u00e1nak t\u00e1mogat\u00e1sa. Ez lehet\u0151v\u00e9 teszi a k\u00fcls\u0151 forgalom s\u00e1vsz\u00e9less\u00e9g\u00e9nek megtakar\u00edt\u00e1s\u00e1t, mivel ebben az esetben a friss\u00edt\u00e9sek egyszer t\u00f6lt\u0151dnek le az egyik endpoint-\u00fcgyf\u00e9lre, \u00e9s ezt k\u00f6vet\u0151en a t\u00f6bbi v\u00e9gs\u0151 eszk\u00f6z err\u0151l t\u00f6lti le a friss\u00edt\u00e9seket. A le\u00edrt lehet\u0151s\u00e9gen t\u00fal a kiv\u00e1lasztott endpoint k\u00e9pes tov\u00e1bb\u00edtani a biztons\u00e1gi h\u00e1zirendekr\u0151l sz\u00f3l\u00f3 \u00fczeneteket \u00e9s inform\u00e1ci\u00f3s jelent\u00e9seket a Sophos felh\u0151be. Ez a funkci\u00f3 hasznos lesz, ha olyan v\u00e9gs\u0151 eszk\u00f6z\u00f6k \u00e1llnak rendelkez\u00e9sre, amelyeknek nincs k\u00f6zvetlen internet-hozz\u00e1f\u00e9r\u00e9se, de v\u00e9delemre van sz\u00fcks\u00e9g\u00fck. A Sophos Centralban el\u00e9rhet\u0151 egy lehet\u0151s\u00e9g (tamper protection), amely megtiltja a sz\u00e1m\u00edt\u00f3g\u00e9p v\u00e9delmi be\u00e1ll\u00edt\u00e1sainak megv\u00e1ltoztat\u00e1s\u00e1t vagy az endpoint-\u00fcgyn\u00f6k elt\u00e1vol\u00edt\u00e1s\u00e1t.<\/p>\n<p>Az endpoint-v\u00e9delem egyik alkot\u00f3eleme a k\u00f6vetkez\u0151 gener\u00e1ci\u00f3s v\u00edruskeres\u0151 (NGAV) \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept X<\/a><\/noindex>. A m\u00e9ly g\u00e9pi tanul\u00e1si technol\u00f3gi\u00e1k seg\u00edts\u00e9g\u00e9vel a v\u00edruskeres\u0151 k\u00e9pes kor\u00e1bban ismeretlen fenyeget\u00e9sek azonos\u00edt\u00e1s\u00e1ra al\u00e1\u00edr\u00e1sok haszn\u00e1lata n\u00e9lk\u00fcl. Az azonos\u00edt\u00e1s pontoss\u00e1ga hasonl\u00f3 az al\u00e1\u00edr\u00e1salap\u00fa megfelel\u0151ihez, de elt\u00e9r\u0151en t\u0151l\u00fck proakt\u00edv v\u00e9delmet ny\u00fajt, megakad\u00e1lyozva a \"nulladik napi\" t\u00e1mad\u00e1sokat. Az Intercept X k\u00e9pes p\u00e1rhuzamosan m\u0171k\u00f6dni m\u00e1s gy\u00e1rt\u00f3k al\u00e1\u00edr\u00e1salap\u00fa v\u00edruskeres\u0151ivel.<\/p>\n<p>Ebben a cikkben r\u00f6viden bemutattuk a Sophos Central-ban megval\u00f3s\u00edtott SynSec koncepci\u00f3t, valamint a megold\u00e1s n\u00e9h\u00e1ny lehet\u0151s\u00e9g\u00e9t. Arr\u00f3l, hogy az egyes v\u00e9delmi komponensek, amelyek integr\u00e1lva vannak a Sophos Central-ba, hogyan m\u0171k\u00f6dnek, a k\u00f6vetkez\u0151 cikkekben sz\u00e1molunk be. A megold\u00e1s dem\u00f3verzi\u00f3j\u00e1t itt \u00e9rheti el <noindex><a rel=\"nofollow\" href=\"https:\/\/secure2.sophos.com\/en-us\/products\/sophos-central\/free-trial.aspx?id=00130000019KE2V\">itt<\/a><\/noindex>.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/fgts\/blog\/449438\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24184,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32370","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Szinkroniz\u00e1lt biztons\u00e1g a Sophos Centralban | ProHoster","description":"A magas hat\u00e9konys\u00e1g biztos\u00edt\u00e1sa \u00e9rdek\u00e9ben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster","og:description":"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:46:38+00:00","article:modified_time":"2019-10-31T18:46:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32370","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 10:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:00:22","updated":"2026-01-21 10:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/32370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=32370"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/32370\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/24184"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=32370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=32370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=32370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}