{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point Komme i gang R80.20. Loggfiler & Rapporter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nVelkommen til den 12. lektionen. I dag skal vi tale om et andet meget vigtigt emne, nemlig arbejdet med logs og rapporter<\/b>. Nogle gange er denne funktionalitet n\u00e6sten afg\u00f8rende, n\u00e5r man v\u00e6lger et sikkerhedsv\u00e6rkt\u00f8j. Sikkerhedsfolkene elsker virkelig et brugervenligt rapporteringssystem og en funktionel s\u00f8gning efter forskellige h\u00e6ndelser. Det er sv\u00e6rt at klandre dem for det. I bund og grund er logs og rapporter et v\u00e6sentligt element til vurdering af sikkerhedsniveauet. Hvordan kan du forst\u00e5 det nuv\u00e6rende sikkerhedsniveau, hvis du ikke kan se, hvad der sker? Heldigvis har Check Point alt i orden p\u00e5 dette omr\u00e5de og mere til. Check Point har et af de bedste rapporteringssystemer, der fungerer ud af boksen! Derudover er der mulighed for tilpasning og oprettelse af egne rapporter! Alt dette suppleres af en praktisk og intuitiv m\u00e5de at arbejde med logs p\u00e5. Men lad os tage det hele i r\u00e6kkef\u00f8lge.<\/a><\/noindex><\/p>\n

Et helt nyt interface<\/h3>\n

\nHvis du har arbejdet med Check Point f\u00f8r, vil du sandsynligvis blive overrasket over det helt nye interface til arbejde med logs og rapporter i R80. P\u00e5 billedet kan du se, hvor mange forskellige v\u00e6rkt\u00f8jer der er samlet i en ny fane Logs & Monitor<\/b>:<\/p>\n

\"12.
\n<\/p>\n

N\u00e5r du g\u00e5r til Logs & Monitor og \u00e5bner en ny fane, skal du se noget, der ligner f\u00f8lgende:<\/h3>\n

\nSom standard er der her to store sektioner:<\/p>\n

\"12.
\n
\nAudit Logs View<\/p>\n

    \n
  1. \u2014 her kan du finde alle h\u00e6ndelser relateret til administratorers log ind\/log ud, \u00e6ndringer i konfigurationen osv. Det vil sige, klassisk audit af administratorhandlinger.<\/b> Logs View<\/li>\n
  2. \u2014 det er her, du kan s\u00f8ge efter h\u00e6ndelser, som genereres af alle vores aktiverede blades, hvad enten det er firewall, antivirus, IPS osv. Vi har tidligere brugt denne funktion.<\/b> Derudover er der links til rapporter (<\/li>\n<\/ol>\n

    \nReports) og forskellige dashboards (<\/b>Views). For at de kan fungere, kr\u00e6ves et aktiveret blade<\/b>Smart Event . Men mere om det senere. Lad os f\u00f8rst se p\u00e5 arbejdet med logs.<\/b>S\u00f8gning i logs<\/p>\n

    Jeg mener, at det er en forn\u00f8jelse at arbejde med logs i R80. Vi har en meget smart s\u00f8gestreng, der giver os mulighed for at \"sk\u00e6re\" b\u00e5de p\u00e5 vilk\u00e5rlig tekst, blade og andre indeks\u00e9rbare parametre som kilde, destination, handling osv.<\/h3>\n

    \nVi kan samtidig lave meget komplekse s\u00f8gninger ved hj\u00e6lp af logiske operatorer.<\/p>\n

    \"12.
    \n
    \nSamtidig kan vi lage ganske komplekse s\u00f8kesp\u00f8rsm\u00e5l ved hjelp av logiske operatorer OG<\/b>, Eller<\/b>, NOT<\/b>. Og for dette er det ikke engang n\u00f8dvendig \u00e5 skrive noe. Filteret kan opprettes bokstavelig talt med noen f\u00e5 museklikk. Litt senere skal vi teste alt dette i praksis.<\/p>\n

    Visning av loggmeldinger etter Access-List<\/h3>\n

    \nVi har allerede vurdert muligheten for \u00e5 vise logger etter en spesifikk tilgangsliste. Dette er utrolig praktisk, og man venner seg til det veldig raskt. Spesielt nyttig n\u00e5r man feils\u00f8ker. Man velger interessante \u2018access lists\u2019 og ser under om n\u00f8dvendig trafikk faller inn under dem. <\/p>\n

    \"12.
    \n
    \nDet er ikke n\u00f8dvendig \u00e5 navigere noe sted eller lage et komplisert filter for loggene.<\/p>\n

    Views & Reports<\/h3>\n

    \nDet er bladen som er ansvarlig for rapportering og visualisering av data i Check Point. . Men mere om det senere. Lad os f\u00f8rst se p\u00e5 arbejdet med logs.<\/b>, som aktiveres p\u00e5 serveren<\/a> administrasjon. Denne funksjonen kan trygt kalles et SIEM, men kun for Check Point-produkter! Teknisk sett kan man samle logger fra andre systemer (som Cisco, Microsoft, osv.), men dette er ikke alltid en god id\u00e9 \ud83d\ude42 I praksis kan det v\u00e6re ganske problematisk. Men med \u2018Check Point\u2019-logger h\u00e5ndterer SmartEvent det bare fantastisk. Det kan korrelere, oppsummere, finne gjennomsnitt og mye mer. Alt dette fungerer rett ut av boksen! Det finnes allerede ferdige dashbord for \u00e5 vise den viktigste informasjonen. I Check Point kalles de ). For at de kan fungere, kr\u00e6ves et aktiveret blade<\/b>:<\/p>\n

    \"12.
    \n
    \nMan kan se at det finnes et ganske stort antall standard dashbord, som er veldig nyttige i daglig administrering og overv\u00e5king.<\/p>\n

    I tillegg til dashbord, hvor informasjonen bare visualiseres, er det muligheter for \u00e5 generere fullverdige rapporter og lagre dem i PDF- eller Excel-format. Det er mulig \u00e5 generere dem etter en tidsplan og sende dem til en e-postadresse.<\/p>\n

    Og det beste av alt! Dashbordene og rapportene kan lages selv! Alts\u00e5, man er ikke begrenset til de innebygde. Dette kan ikke alle leverand\u00f8rer skryte av. Samtidig kan malene for disse dashbordene eller rapportene importeres eller eksporteres, noe som gir brukerne mulighet til \u00e5 dele sine oppdagelser. Selve prosessen for \u00e5 lage et dashbord er ganske enkel og intuitiv. Jeg skal pr\u00f8ve \u00e5 vise deg dette i l\u00f8pet av laboratorieoppgaven som du finner i videooppl\u00e6ringen nedenfor.<\/p>\n

    Videoleksjon<\/h3>\n

    \n

    \r\n \"Spill\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    Hold deg oppdatert for mer og bli med i v\u00e5r YouTube-kanal<\/a><\/noindex> \ud83d\ude42
    \n
    Kilde:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","description":"Velkommen til den 12. leksjonen.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}