{"id":32370,"date":"2019-10-31T21:46:38","date_gmt":"2019-10-31T18:46:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sinhronizirovannaya-bezopasnost-v-sophos-central\/"},"modified":"2019-10-31T21:46:38","modified_gmt":"2019-10-31T18:46:38","slug":"sinhronizirovannaya-bezopasnost-v-sophos-central","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","title":{"rendered":"Securitate sincronizat\u0103 \u00een Sophos Central","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/9d0e5f8349ff2034a71b0f2aacaba5c7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPentru a asigura o eficien\u021b\u0103 ridicat\u0103 a m\u0103surilor de securitate informa\u021bional\u0103, o mare importan\u021b\u0103 o are leg\u0103tura dintre componentele sale. Aceasta permite acoperirea nu doar a amenin\u021b\u0103rilor externe, ci \u0219i a celor interne. \u00cen proiectarea infrastructurii de re\u021bea, fiecare m\u0103sur\u0103 de protec\u021bie, fie c\u0103 este antivirus sau firewall, are o importan\u021b\u0103 semnificativ\u0103, astfel \u00eenc\u00e2t acestea s\u0103 func\u021bioneze nu doar \u00een cadrul propriei clase (Endpoint security sau NGFW), ci \u0219i s\u0103 aib\u0103 capacitatea de a interac\u021biona \u00eentre ele pentru a lupta \u00eempreun\u0103 \u00eempotriva amenin\u021b\u0103rilor.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Pu\u021bin\u0103 teorie<\/h2>\n<p>\nNu este surprinz\u0103tor c\u0103 criminalii cibernetici de ast\u0103zi au devenit mai ingenio\u0219i. Pentru a r\u0103sp\u00e2ndi programe malware, ei aplic\u0103 o \u00eentreag\u0103 gam\u0103 de tehnologii de re\u021bea:<br \/>\n<img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/53a274ad70bc616ea2bafa0b5dbe509b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nCampaniile de phishing prin e-mail fac ca programul malware s\u0103 \u201etreac\u0103 pragul\u201d re\u021belei dumneavoastr\u0103, utiliz\u00e2nd atacuri cunoscute sau \u201eatacuri de tip zero-day\u201d cu ulterioara cre\u0219tere a privilegiilor, sau avansare lateral\u0103 (lateral movement) \u00een re\u021bea. Prezen\u021ba unui singur dispozitiv infectat poate \u00eensemna c\u0103 re\u021beaua dumneavoastr\u0103 poate fi exploatat\u0103 \u00een scopuri malefice de c\u0103tre atacatori. <\/p>\n<p>\u00cen unele cazuri, atunci c\u00e2nd este necesar\u0103 asigurarea interac\u021biunii componentelor de securitate informa\u021bional\u0103, \u00een timpul auditului st\u0103rii actuale a sistemului de securitate informa\u021bional\u0103, nu se poate descrie printr-un complex unitar de m\u0103suri, care s\u0103 fie interconectate. \u00cen majoritatea cazurilor, multe solu\u021bii tehnologice, care se concentreaz\u0103 pe combaterea unui anumit tip de amenin\u021bare, nu prev\u0103d integrarea cu alte solu\u021bii tehnologice. De exemplu, produsele pentru protec\u021bia terminalelor utilizeaz\u0103 analiza pe baz\u0103 de semn\u0103turi \u0219i analiza comportamental\u0103 pentru a determina dac\u0103 un fi\u0219ier este infectat sau nu. Pentru a opri traficul malware, firewall-urile utilizeaz\u0103 alte tehnologii, printre care se num\u0103r\u0103 filtrarea web, IPS, sandboxing etc. Totu\u0219i, \u00een majoritatea organiza\u021biilor, aceste componente de asigurare a securit\u0103\u021bii informa\u021bionale nu sunt interconectate \u0219i func\u021bioneaz\u0103 izolat.<\/p>\n<h2>Tendin\u021bele \u00een implementarea tehnologiei Heartbeat<\/h2>\n<p>\nO nou\u0103 abordare a securit\u0103\u021bii cibernetice implic\u0103 protec\u021bia la fiecare nivel, \u00een care solu\u021biile utilizate la fiecare dintre acestea sunt interconectate \u0219i au capacitatea de a schimba informa\u021bii. Acest lucru duce la crearea sistemului Sunchronized Security (SynSec). SynSec reprezint\u0103 un proces de asigurare a securit\u0103\u021bii informa\u021biilor ca un sistem unitar. \u00cen acest caz, fiecare component\u0103 a securit\u0103\u021bii informa\u021biei este conectat\u0103 \u00eentre ea \u00een timp real. De exemplu, solu\u021bia <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-central.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> a fost implementat\u0103 conform acestui principiu.<\/p>\n<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/f8a937ea7de8f977a0eab9a040db0216.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTehnologia Security Heartbeat asigur\u0103 comunicarea \u00eentre componentele de securitate, garant\u00e2nd func\u021bionarea comun\u0103 a sistemului \u0219i monitorizarea acestuia. \u00cen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> sunt integrate solu\u021bii din urm\u0103toarele categorii:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/endpoint-antivirus.aspx?id=00130000019KE2V\">Protec\u021bia Endpoint<\/a><\/noindex> \u2014 antivirusul clasic bazat pe semn\u0103turi;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/server-security.aspx?id=00130000019KE2V\">Protec\u021bia Server<\/a><\/noindex> \u2014 antivirus specializat pentru servere;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept-X<\/a><\/noindex> \u2013 antivirus de nou\u0103 genera\u021bie (f\u0103r\u0103 semn\u0103turi, cu tehnologii de inteligen\u021b\u0103 artificial\u0103);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos XG Firewall<\/a><\/noindex> \u2014 Next-Generation Firewall;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Managementul Mobilit\u0103\u021bii (EMM)<\/a><\/noindex> \u2014 gestionarea dispozitivelor mobile \u0219i controlul accesului la e-mailuri \u0219i fi\u0219ierele corporative;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/safeguard-encryption.aspx?id=00130000019KE2V\">Protec\u021bia Datelor (Criptare)<\/a><\/noindex>;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Wi-Fi Securizat<\/a><\/noindex> \u2014 puncte de acces gestionate at\u00e2t din cloud, c\u00e2t \u0219i local prin Sophos UTM \/ Sophos XG;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-web-gateway.aspx?id=00130000019KE2V\">Securitatea Web<\/a><\/noindex> \u2014 solu\u021bie clasic\u0103 pentru filtrarea traficului web;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-email.aspx?id=00130000019KE2V\">Securitatea E-mailului<\/a><\/noindex> \u2014 solu\u021bie anti-spam\/antivirus cloud\/local\u0103;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/phish-threat.aspx?id=00130000019KE2V\">Phish Threat<\/a><\/noindex> \u2014 cre\u0219terea con\u0219tientiz\u0103rii angaja\u021bilor, desf\u0103\u0219urarea campaniilor de phishing de test;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/cloud-optix.aspx?id=00130000019KE2V\">Cloud Optix<\/a><\/noindex> \u2014 auditul infrastructurilor cloud.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/b1a60a0d471c250a48c36cde17a4de5f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nNu este greu de observat c\u0103 Sophos Central sus\u021bine un spectru destul de larg de solu\u021bii \u00een domeniul securit\u0103\u021bii informa\u021biilor. \u00cen Sophos Central, conceptul SynSec se bazeaz\u0103 pe trei principii importante: detectare, analiz\u0103 \u0219i reac\u021bie. Pentru a le descrie detaliat, ne vom opri la fiecare dintre ele.<\/p>\n<h2>Concepturile SynSec<\/h2>\n<p>\n<b>DETECTARE<\/b> (identificarea amenin\u021b\u0103rilor necunoscute)<br \/>\nProdusele Sophos gestionate prin Sophos Central \u00eemp\u0103rt\u0103\u0219esc automat informa\u021bii \u00eentre ele pentru a identifica riscuri \u0219i amenin\u021b\u0103ri necunoscute, care includ:<\/p>\n<ul>\n<li>analiza traficului de re\u021bea cu capacitatea de a identifica aplica\u021bii cu risc ridicat \u0219i trafic mali\u021bios;<\/li>\n<li>detectarea utilizatorilor cu grup de risc ridicat prin analiza corela\u021bional\u0103 a ac\u021biunilor lor \u00een re\u021bea.<\/li>\n<\/ul>\n<p>\n<b>ANALIZ\u0102<\/b> (instantanee \u0219i intuitiv\u0103)<br \/>\nAnaliza incidentelor \u00een timp real ofer\u0103 o \u00een\u021belegere instantanee a situa\u021biei curente din sistem.<\/p>\n<ul>\n<li>afi\u015farea \u00eentregului lan\u021b de evenimente care au dus la incident, inclusiv toate fi\u0219ierele, cheile de registry, URL-urile etc.<\/li>\n<\/ul>\n<p>\n<b>R\u0102SPUNS<\/b> (r\u0103spuns automat la incidente)<br \/>\nConfigurarea politicilor de securitate permite reac\u021bia automat\u0103 \u00een c\u00e2teva secunde la infec\u021bii \u0219i incidente. Aceasta este asigurat\u0103 de:<\/p>\n<ul>\n<li>izolarea instantanee a dispozitivelor infectate \u0219i oprirea atacului \u00een timp real (chiar \u0219i \u00een cadrul acelea\u0219i re\u021bele \/ domeniu de broadcast);<\/li>\n<li>restric\u021bionarea accesului la resursele de re\u021bea ale companiei pentru dispozitivele care nu respect\u0103 politicile;<\/li>\n<li>ini\u021bierea de la distan\u021b\u0103 a scan\u0103rii dispozitivului la detectarea spam-ului outbound.<\/li>\n<\/ul>\n<p>\nAm discutat principii fundamentale de protec\u021bie pe care se bazeaz\u0103 func\u021bionarea Sophos Central. Acum s\u0103 trecem la descrierea modului \u00een care tehnologia SynSec se manifest\u0103 \u00een ac\u021biune.<\/p>\n<h2>De la teorie la practic\u0103<\/h2>\n<p>\nPentru \u00eenceput, s\u0103 explic\u0103m cum se stabile\u0219te interac\u021biunea dispozitivelor conform principiului SynSec prin tehnologia Heartbeat. Prima etap\u0103 const\u0103 \u00een \u00eenregistrarea Sophos XG \u00een Sophos Central. \u00cen aceast\u0103 etap\u0103, acesta prime\u0219te un certificat pentru auto-identificare, adresa IP \u0219i portul prin care dispozitivele finale vor interac\u021biona cu el prin tehnologia Heartbeat, precum \u0219i lista ID-urilor dispozitivelor finale gestionate prin Sophos Central \u0219i certificatul lor client. <\/p>\n<p>La scurt timp dup\u0103 \u00eenregistrarea Sophos XG, Sophos Central va transmite dispozitivelor finale informa\u021bii pentru ini\u021bierea interac\u021biunii prin tehnologia Heartbeat:<\/p>\n<ul>\n<li>lista autorit\u0103\u021bilor de certificare utilizate pentru emiterea certificatelor Sophos XG;<\/li>\n<li>lista ID-urilor dispozitivelor care sunt \u00eenregistrate \u00een Sophos XG;<\/li>\n<li>adresa IP \u0219i portul pentru interac\u021biunea prin tehnologia Heartbeat.<\/li>\n<\/ul>\n<p>\nAceast\u0103 informa\u021bie este stocat\u0103 pe computer \u00een urm\u0103toarea cale: %ProgramData%SophosHearbeatConfigHeartbeat.xml \u0219i este actualizat\u0103 \u00een mod regulat.<\/p>\n<p>Comunicarea prin tehnologia Heartbeat se realizeaz\u0103 prin trimiterea de mesaje de c\u0103tre punctul final c\u0103tre adresa IP magic\u0103 52.5.76.173:8347 \u0219i \u00eenapoi. \u00cen urma analizei, s-a constatat c\u0103 pachetele sunt trimise la un interval de 15 secunde, a\u0219a cum a afirmat furnizorul. Merit\u0103 men\u021bionat c\u0103 mesajele Heartbeat sunt procesate direct de XG Firewall \u2014 el captureaz\u0103 pachetele \u0219i monitorizeaz\u0103 starea punctului final. Dac\u0103 se efectueaz\u0103 captura pachetelor pe gazd\u0103, circula\u021bia traficului va sem\u0103na cu comunicarea cu o adres\u0103 IP extern\u0103, de\u0219i, de fapt, punctul final interac\u021bioneaz\u0103 direct cu firewall-ul XG.<\/p>\n<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/76bb24f252a90919a9737be3e7cb4c87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>S\u0103 presupunem c\u0103 pe computer a ajuns, dintr-o anumit\u0103 modalitate, o aplica\u021bie mali\u021bioas\u0103. Sophos Endpoint detecteaz\u0103 aceasta atac sau \u00eencet\u0103m s\u0103 primim Heartbeat de la acest sistem. Dispozitivul infectat trimite automat informa\u021bii despre infec\u021bia sistemului, gener\u00e2nd un lan\u021b automat de ac\u021biuni. XG Firewall izoleaz\u0103 imediate computerul, prevenind r\u0103sp\u00e2ndirea atacului \u0219i interac\u021biunea cu serverele C&amp;C.<\/p>\n<p>Sophos Endpoint elimin\u0103 automat malware-ul. Dup\u0103 eliminare, dispozitivul final se sincronizeaz\u0103 cu Sophos Central, iar apoi XG Firewall restabile\u0219te accesul la re\u021bea. Analiza cauzelor fundamentale (Root Cause Analysis - RCA sau EDR - Endpoint Detection and Response) permite ob\u021binerea unei imagini detaliate a ceea ce s-a \u00eent\u00e2mplat.<\/p>\n<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/77a0f06389830d530c491ad6d9d22cbf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nDac\u0103 presupunem c\u0103 accesul la resursele corporative se realizeaz\u0103 prin dispozitive mobile \u0219i tablete, este posibil s\u0103 se asigure \u00een aceast\u0103 situa\u021bie SynSec?<\/p>\n<p>Pentru un astfel de scenariu, Sophos Central ofer\u0103 suport <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Sophos Mobile<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Sophos Wireless<\/a><\/noindex>. S\u0103 presupunem c\u0103 utilizatorul \u00eencearc\u0103 s\u0103 \u00eencalce politica de securitate pe un dispozitiv mobil protejat prin Sophos Mobile. Sophos Mobile detecteaz\u0103 \u00eenc\u0103lcarea politicii de securitate \u0219i trimite notific\u0103ri c\u0103tre celelalte componente ale sistemului, gener\u00e2nd o reac\u021bie preconfigurat\u0103 la incident. Dac\u0103 \u00een Sophos Mobile este configurat\u0103 politica de \u201einterzicere a conect\u0103rii la re\u021bea\u201d, atunci Sophos Wireless va limita accesul la re\u021bea pentru acest dispozitiv. Pe tabloul de bord Sophos Central, \u00een fila Sophos Wireless, va ap\u0103rea o notificare c\u0103 dispozitivul este infectat. \u00cen momentul \u00een care utilizatorul va \u00eencerca s\u0103 acceseze re\u021beaua, pe ecran va ap\u0103rea un mesaj care informea c\u0103 accesul la internet este restric\u021bionat.<\/p>\n<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/2a49fb10fb5e0ec0082d8772cc2b5194.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/84acd97f5b39f9d52070bb48ae58ce94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPunctul final are mai multe st\u0103ri ale st\u0103rii Heartbeat: ro\u0219u, galben \u0219i verde.<br \/>\nStarea ro\u0219ie apare \u00een urm\u0103toarele cazuri:<\/p>\n<ul>\n<li>a fost detectat un software malware activ;<\/li>\n<li>s-a detectat o \u00eencercare de pornire a unui software malware;<\/li>\n<li>s-a detectat trafic de re\u021bea malware;<\/li>\n<li>software-ul malware nu a fost eliminat.<\/li>\n<\/ul>\n<p>\nStarea galben\u0103 \u00eenseamn\u0103 c\u0103 pe punctul final a fost detectat un software malware inactiv sau a fost detectat un PUP (program poten\u021bial nedorit). Starea verde indic\u0103 faptul c\u0103 nu au fost descoperite problemele men\u021bionate anterior. <\/p>\n<p>Dup\u0103 ce am examinat c\u00e2teva scenarii clasice de interac\u021biune a dispozitivelor protejate cu Sophos Central, s\u0103 trecem la descrierea interfe\u021bei grafice a solu\u021biei \u0219i la examinarea set\u0103rilor de baz\u0103 \u0219i a func\u021bionalit\u0103\u021bilor acceptate.<\/p>\n<h2>Interfa\u021ba grafic\u0103<\/h2>\n<p>\nPe panoul de control sunt afi\u0219ate ultimele notific\u0103ri. De asemenea, \u00eentr-o diagram\u0103 este prezentat\u0103 o caracteristic\u0103 sumar\u0103 a diferitelor componente de protec\u021bie. \u00cen acest caz, sunt prezentate date sumare despre protec\u021bia calculatoarelor personale. Pe acest panou este disponibil\u0103 de asemenea informa\u021bia sumar\u0103 despre \u00eencerc\u0103rile de accesare a resurselor periculoase \u0219i a resurselor cu con\u021binut inacceptabil, precum \u0219i statisticile analizei e-mail-urilor. <\/p>\n<p><img decoding=\"async\" alt=\"Securitate sincronizat\u0103 \u00een Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/c4733e335c2bfce1daa69b90d09b7900.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSophos Central sus\u021bine afi\u0219area notific\u0103rilor \u00een func\u021bie de importan\u021b\u0103, ceea ce nu va permite utilizatorului s\u0103 rateze alertele critice ale sistemului de securitate. Pe l\u00e2ng\u0103 informa\u021biile concise despre starea sistemului de protec\u021bie, Sophos Central suport\u0103 \u00eenregistrarea evenimentelor \u0219i integrarea cu sistemele SIEM. Sophos Central este pentru multe companii o platform\u0103 at\u00e2t pentru SOC intern, c\u00e2t \u0219i pentru oferirea de servicii clien\u021bilor lor - MSSP.<\/p>\n<p>Una dintre caracteristicile importante este suportul pentru cache-ul actualiz\u0103rilor pentru clien\u021bii endpoint. Acest lucru economise\u0219te l\u0103\u021bimea de band\u0103 a traficului extern, deoarece \u00een acest caz actualiz\u0103rile sunt desc\u0103rcate o singur\u0103 dat\u0103 pe unul dintre clien\u021bii endpoint, iar apoi alte dispozitive finale descarc\u0103 actualiz\u0103rile de la acesta. \u00cen plus fa\u021b\u0103 de aceast\u0103 capacitate, endpoint-ul selectat poate retransmite mesaje despre politicile de securitate \u0219i rapoartele informative c\u0103tre cloud-ul Sophos. Aceast\u0103 func\u021bie va fi util\u0103 \u00een cazul \u00een care exist\u0103 dispozitive finale care nu au acces direct la internet, dar necesit\u0103 protec\u021bie. \u00cen Sophos Central este disponibil\u0103 op\u021biunea (tamper protection), care interzice modificarea set\u0103rilor de protec\u021bie a computerului sau eliminarea agentului endpoint.<\/p>\n<p>O component al protec\u021biei endpoint este antivirusul de nou\u0103 genera\u021bie (NGAV) \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept X<\/a><\/noindex>. Cu ajutorul tehnologiilor avansate de \u00eenv\u0103\u021bare automat\u0103, antivirusul este capabil s\u0103 identifice amenin\u021b\u0103ri necunoscute anterior f\u0103r\u0103 a folosi semn\u0103turi. Precizia identific\u0103rii este comparabil\u0103 cu cea a echivalentelor pe baz\u0103 de semn\u0103turi, dar spre deosebire de acestea, ofer\u0103 protec\u021bie proactiv\u0103, prevenind atacurile de tip \u201ezero day\u201d. Intercept X poate func\u021biona \u00een paralel cu antivirusurile pe baz\u0103 de semn\u0103turi de la al\u021bi furnizori.<\/p>\n<p>\u00cen acest articol, am prezentat pe scurt conceptul SynSec, care este implementat \u00een Sophos Central, precum \u0219i c\u00e2teva dintre func\u021bionalit\u0103\u021bile acestei solu\u021bii. Vom discuta despre cum func\u021bioneaz\u0103 fiecare component\u0103 a protec\u021biei integrate \u00een Sophos Central \u00een articolele urm\u0103toare. Pute\u021bi ob\u021bine o versiune demo a solu\u021biei <noindex><a rel=\"nofollow\" href=\"https:\/\/secure2.sophos.com\/en-us\/products\/sophos-central\/free-trial.aspx?id=00130000019KE2V\">aici<\/a><\/noindex>.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/fgts\/blog\/449438\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24184,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32370","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Securitate sincronizat\u0103 \u00een Sophos Central | ProHoster","description":"Pentru a asigura o eficien\u021b\u0103 ridicat\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster","og:description":"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:46:38+00:00","article:modified_time":"2019-10-31T18:46:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32370","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 10:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:00:22","updated":"2026-01-21 10:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/32370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=32370"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/32370\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/24184"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=32370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=32370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=32370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}