{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point Getting Started R80.20. Logs & Reports","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nBine a\u021bi venit la lec\u021bia a 12-a. Ast\u0103zi vom discuta despre o alt\u0103 tem\u0103 foarte important\u0103, \u0219i anume despre lucrul cu jurnalele \u0219i rapoartele<\/b>. Uneori, aceast\u0103 func\u021bionalitate se dovede\u0219te a fi decisiv\u0103 \u00een alegerea unei solu\u021bii de securitate. Exper\u021bii \u00een securitate apreciaz\u0103 foarte mult un sistem de raportare convenabil \u0219i o c\u0103utare func\u021bional\u0103 a diferitelor evenimente. Nu-i putem \u00eenvinov\u0103\u021bi. Practic, jurnalele \u0219i rapoartele sunt un element esen\u021bial \u00een evaluarea securit\u0103\u021bii. Cum po\u021bi \u00een\u021belege nivelul actual de securitate dac\u0103 nu vezi ce se \u00eent\u00e2mpl\u0103? Din fericire, Check Point st\u0103 foarte bine la acest capitol \u0219i chiar mai bine de at\u00e2t. Check Point dispune de unul dintre cele mai bune sisteme de raportare, care func\u021bioneaz\u0103 din mers! \u00cen plus, exist\u0103 posibilitatea de personalizare \u0219i de creare a propriilor rapoarte! Totul este completat de un proces de lucru cu jurnalele convenabil \u0219i intuitiv. Dar haide\u021bi s\u0103 le lu\u0103m pe r\u00e2nd.<\/a><\/noindex><\/p>\n

Un nou interfa\u021b\u0103 complet<\/h3>\n

\nDac\u0103 a\u021bi lucrat cu Check Point \u00eenainte, probabil c\u0103 a\u021bi fost surprin\u0219i de interfa\u021ba complet nou\u0103 pentru lucrul cu jurnalele \u0219i rapoartele \u00een R80. \u00cen imagine se poate observa c\u00e2te utilit\u0103\u021bi diferite au fost consolidate \u00eentr-un nou tab. Logs & Monitor<\/b>:<\/p>\n

\"12.
\n<\/p>\n

Sec\u021biunea Logs & Monitor<\/h3>\n

\nDac\u0103 accesa\u021bi Logs & Monitor \u0219i deschide\u021bi un tab nou, ar trebui s\u0103 vede\u021bi cam a\u0219a:<\/p>\n

\"12.
\n
\nImplicit, aici exist\u0103 dou\u0103 sec\u021biuni mari:<\/p>\n

    \n
  1. Audit Logs View<\/b> \u2014 aici pute\u021bi g\u0103si toate evenimentele legate de autentificarea\/dezautentificarea administratorilor, modific\u0103rile din configurare etc. Adic\u0103, un audit clasic al ac\u021biunilor administratorului.<\/li>\n
  2. Logs View<\/b> \u2014 aici se poate realiza c\u0103utarea dup\u0103 evenimentele generate de toate blade-urile noastre activate, fie c\u0103 este vorba de firewall, antivirus, IPS etc. De mai multe ori am folosit aceast\u0103 func\u021bie.<\/li>\n<\/ol>\n

    \n\u00cen plus, aici exist\u0103 linkuri c\u0103tre rapoarte (Reports<\/b>) \u0219i diverse tablouri de bord (Views<\/b>). Pentru a func\u021biona, este nevoie de blade-ul activat Smart Event<\/b>. Dar despre asta vom vorbi mai t\u00e2rziu. Mai \u00eent\u00e2i, haide\u021bi s\u0103 ne ocup\u0103m de lucrul cu jurnalele.<\/p>\n

    C\u0103utare \u00een jurnale<\/h3>\n

    \nDin punctul meu de vedere, lucrul cu jurnalele \u00een R80 este o pl\u0103cere. Avem un c\u00e2mp de c\u0103utare foarte inteligent, care ne permite s\u0103 c\u0103ut\u0103m at\u00e2t dup\u0103 text arbitrar, c\u00e2t \u0219i dup\u0103 blade, \u0219i dup\u0103 orice altele parametrii indexabili precum sursa, destina\u021bia, ac\u021biunea etc.<\/p>\n

    \"12.
    \n
    \nDe asemenea, putem compune interog\u0103ri de c\u0103utare destul de complexe cu ajutorul operatorilor logici \u0218I<\/b>, OR<\/b>, EXISTS<\/b>. \u0218i pentru asta nu este nevoie s\u0103 scrii nimic. Po\u021bi crea un filtru \u00een doar c\u00e2teva clicuri de mouse. Pu\u021bin mai t\u00e2rziu, vom testa toate acestea \u00een practic\u0103.<\/p>\n

    Afi\u0219area mesajelor Log \u00een func\u021bie de Access-List<\/h3>\n

    \nDe asemenea, am evaluat deja posibilitatea de a afi\u0219a logurile pe un anumit list\u0103 de acces. Este extrem de convenabil \u0219i te obi\u0219nuie\u0219ti cu rapiditate. \u00cen special, este foarte util \u00een timpul procesului de depanare. Ai selectat acces-lista care te intereseaz\u0103 \u0219i verifici mai jos dac\u0103 traficul necesar o respect\u0103. <\/p>\n

    \"12.
    \n
    \nNu trebuie s\u0103 navighezi nic\u0103ieri sau s\u0103 creezi un filtru complex pentru loguri.<\/p>\n

    Vizualiz\u0103ri & Rapoarte<\/h3>\n

    \nPentru raportare \u0219i vizualizarea datelor \u00een Check Point este responsabil blade-ul Smart Event<\/b>, care se activeaz\u0103 pe server<\/a> management. Aceast\u0103 func\u021bionalitate poate fi numit\u0103 cu \u00eencredere SIEM, dar doar pentru produsele Check Point! Tehnic, \u00een Smart Event pot fi procesate loguri \u0219i din alte sisteme (de tipul cisco, microsoft etc.), dar aceasta nu este cea mai bun\u0103 idee \ud83d\ude42 \u00cen practic\u0103, este destul de problematic. \u00cens\u0103 cu logurile \u201echekpoint\u201d SmartEvent se descurc\u0103 excep\u021bional. Poate corela, sumariza, media \u0219i multe altele. Iar toate acestea func\u021bioneaz\u0103 din cutie! Bine\u00een\u021beles, exist\u0103 deja tablouri de bord gata preg\u0103tite pentru a afi\u0219a cele mai importante informa\u021bii. \u00cen Check Point acestea sunt numite Views<\/b>:<\/p>\n

    \"12.
    \n
    \nSe poate observa c\u0103 aici exist\u0103 un num\u0103r destul de mare de tablouri de bord implicite, care sunt foarte utile \u00een administrarea \u0219i monitorizarea zilnic\u0103.<\/p>\n

    Pe l\u00e2ng\u0103 tablourile de bord, unde informa\u021bia este pur \u0219i simplu vizualizat\u0103, exist\u0103 posibilitatea gener\u0103rii de rapoarte complete \u0219i salvarea acestora \u00een format pdf sau excel. Po\u021bi genera rapoarte conform unui program \u0219i s\u0103 le trimi\u021bi pe un e-mail.<\/p>\n

    \u0218i cel mai pl\u0103cut! Tablourile de bord \u0219i rapoartele pot fi create de c\u0103tre tine! Adic\u0103 nu e\u0219ti limitat la cele \u00eencorporate. Nu to\u021bi furnizorii se pot l\u0103uda cu acest lucru. \u00cen plus, \u0219abloanele acestor tablouri de bord sau rapoarte pot fi importate sau exportate, oferind utilizatorilor posibilitatea de a-\u0219i \u00eemp\u0103rt\u0103\u0219i realiz\u0103rile. Procesul de creare a unui tablou de bord este foarte simplu \u0219i intuitiv. Voi \u00eencerca s\u0103 v\u0103 ar\u0103t acest lucru \u00een cadrul lucr\u0103rii de laborator, pe care o ve\u021bi g\u0103si \u00een videoclipul de mai jos.<\/p>\n

    Videoul lec\u021biei<\/h3>\n

    \n

    \r\n \"Reda\u021bi\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    R\u0103m\u00e2ne\u021bi conecta\u021bi pentru mai multe \u0219i al\u0103tura\u021bi-v\u0103 canalului nostru YouTube<\/a><\/noindex> \ud83d\ude42
    \n
    Sursa:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","description":"Bine ai venit la lec\u021bia a 12-a.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}