{"id":95683,"date":"2020-10-02T01:42:24","date_gmt":"2020-10-01T23:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika"},"modified":"2020-10-02T01:42:24","modified_gmt":"2020-10-01T23:42:24","slug":"obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","title":{"rendered":"Prezentarea func\u021bionalit\u0103\u021bilor principale ale Sophos XG Firewall (partea 1 \"Monitorizare \u0219i analiz\u0103\")","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Prezentarea
\nSalut tuturor! Continu\u00e2nd cu aceasta, recomand\u0103rile sunt aplicabile coronavirusurilor \u00een general \u0219i COVID-19 \u00een particular. A\u0219adar, recomand s\u0103 desc\u0103rca\u021bi \u0219i s\u0103 printa\u021bi articolul (pentru cei interesa\u021bi de acest subiect).<\/a><\/noindex> vreau s\u0103 v\u0103 povestesc mai multe despre func\u021bionalit\u0103\u021bile pe care le ofer\u0103 solu\u021bia Sophos XG Firewall \u0219i s\u0103 v\u0103 familiarizez cu interfa\u021ba web. Articolele comerciale \u0219i documentele sunt bune, dar \u00eentotdeauna este interesant de v\u0103zut cum arat\u0103 solu\u021bia \u00een realitate. Cum este organizat totul? S\u0103 \u00eencepem recenzia.
\n<\/a><\/noindex>
\n\u00cen acest articol va fi prezentat\u0103 prima parte a func\u021bionalit\u0103\u021bii Sophos XG Firewall \u2014 \u201eMonitorizare \u0219i analiz\u0103\u201d. Recenzia complet\u0103 va ap\u0103rea ca un ciclu de articole. Vom merge, plec\u00e2nd de la interfa\u021ba web Sophos XG Firewall \u0219i din tabelul de licen\u021biere.<\/p>\n

\"Prezentarea
\n<\/p>\n

Centru de control al securit\u0103\u021bii<\/h1>\n

\nA\u0219adar, am deschis browserul \u0219i am accesar interfa\u021ba web a NGFW-ului nostru. Vedem un mesaj de a introduce numele de utilizator \u0219i parola pentru a accesa panoul de administrare.<\/p>\n

\"Prezentarea
\n
\nIntroducem numele de utilizator \u0219i parola pe care le-am setat la activarea ini\u021bial\u0103 \u0219i ajungem \u00een centrul nostru de control. A\u0219a arat\u0103 acesta.<\/p>\n

\"Prezentarea
\n
\nAproape fiecare dintre aceste widget-uri este clicabil. Putem accesa incidentul \u0219i vizualiza detalii.<\/p>\n

Haide\u021bi s\u0103 analiz\u0103m fiecare dintre blocuri \u0219i s\u0103 \u00eencepem cu blocul System.<\/p>\n

Blocul System<\/h2>\n

\n\"Prezentarea<\/p>\n

Acest bloc afi\u0219eaz\u0103 starea ma\u0219inii \u00een timp real. Dac\u0103 facem clic pe oricare dintre pictograme, vom accesa o pagin\u0103 cu informa\u021bii detaliate despre starea sistemului.<\/p>\n

\"Prezentarea
\n
\nDac\u0103 exist\u0103 probleme \u00een sistem, acest widget va semnala acest lucru, iar pe pagina de informa\u021bii putem verifica cauza.<\/p>\n

\"Prezentarea
\n
\nNavig\u00e2nd pe tab-uri, putem ob\u021bine mai multe informa\u021bii despre diferitele aspecte ale func\u021bion\u0103rii firewall-ului.<\/p>\n

\"Prezentarea
\n
\n\"Prezentarea
\n
\n\"Prezentarea
\n<\/p>\n

Blocul Traffic insight<\/h2>\n

\n\"Prezentarea<\/p>\n

Aceast\u0103 sec\u021biune ne ofer\u0103 o imagine de ansamblu asupra a ceea ce se \u00eent\u00e2mpl\u0103 \u00een re\u021beaua noastr\u0103 \u00een prezent \u0219i asupra a ceea ce s-a \u00eent\u00e2mplat \u00een ultimele 24 de ore. Top 5 categorii web \u0219i aplica\u021bii pe baz\u0103 de trafic, atacuri de re\u021bea (activarea modulului IPS) \u0219i top 5 aplica\u021bii blocate.<\/p>\n

De asemenea, merit\u0103 s\u0103 eviden\u021biem sec\u021biunea Cloud Applications. Acolo putem vedea prezen\u021ba \u00een re\u021beaua local\u0103 a aplica\u021biilor care utilizeaz\u0103 servicii cloud. Num\u0103rul total al acestora, traficul de intrare \u0219i ie\u0219ire. Dac\u0103 facem clic pe acest widget, vom accesa o pagin\u0103 de informa\u021bii despre aplica\u021biile cloud, unde vom putea vedea mai detaliat ce aplica\u021bii cloud sunt \u00een re\u021bea, cine le folose\u0219te \u0219i informa\u021bii despre trafic.<\/p>\n

\"Prezentarea
\n<\/p>\n

Blocul User & device insights<\/h2>\n

\n\"Prezentarea<\/p>\n

Aceast\u0103 sec\u021biune prezint\u0103 informa\u021bii despre utilizatori. R\u00e2ndul superior ne arat\u0103 informa\u021biile despre computerele infectate ale utilizatorilor, colect\u00e2nd date de la antivirusul Sophos \u0219i transfer\u00e2ndu-le c\u0103tre Sophos XG Firewall. Pe baza acestor informa\u021bii, Firewallul poate, \u00een cazul unei infec\u021bii, deconecta computerul utilizatorului de re\u021beaua local\u0103 sau de un segment de re\u021bea la nivel L2, bloc\u00e2nd toate conexiunile cu acesta. Informa\u021bii mai detaliate despre Security Heartbeat au fost prezentate \u00een aceast\u0103 articole<\/a><\/noindex>. Apoi, urm\u0103toarele dou\u0103 r\u00e2nduri sunt controlul aplica\u021biilor \u0219i sandboxul \u00een cloud. Deoarece aceasta este o func\u021bionalitate separat\u0103, nu va fi discutat\u0103 \u00een acest articol.<\/p>\n

Merit\u0103 s\u0103 se acorde aten\u021bie celor dou\u0103 widgeturi inferioare. Acestea sunt ATP (Advanced Threat Protection) \u0219i UTQ (User Threat Quotient).<\/p>\n

Modulul ATP blocheaz\u0103 conexiunile cu serverele C&C, serverele de control ale re\u021belelor botnet. Dac\u0103 un dispozitiv din re\u021beaua dumneavoastr\u0103 local\u0103 ajunge \u00een re\u021beaua botnet, acest modul v\u0103 va informa despre aceasta \u0219i nu va permite conectarea la serverul de control. Asta arat\u0103 astfel<\/p>\n

\"Prezentarea<\/p>\n

\"Prezentarea
\n
\nModulul UTQ atribuie fiec\u0103rui utilizator un index de securitate. Cu c\u00e2t un utilizator \u00eencearc\u0103 mai mult s\u0103 acceseze site-uri interzise sau s\u0103 ruleze aplica\u021bii interzise, cu at\u00e2t mai mare devine ratingul s\u0103u. Pe baza acestor date, se poate desf\u0103\u0219ura o preg\u0103tire anticipat\u0103 pentru astfel de utilizatori, f\u0103r\u0103 a a\u0219tepta ca, \u00een cele din urm\u0103, computerul s\u0103u s\u0103 fie infectat cu malware. Asta arat\u0103 astfel<\/p>\n

\"Prezentarea
\n
\nUrmeaz\u0103 sec\u021biunea cu informa\u021bii generale despre regulile de firewall active \u0219i rapoartele rapide, care pot fi desc\u0103rcate rapid \u00een format pdf.<\/p>\n

\"Prezentarea<\/p>\n

S\u0103 trecem la urm\u0103toarea sec\u021biune a meniului \u2014 Activit\u0103\u021bi curente <\/p>\n

Activit\u0103\u021bi curente<\/h1>\n

\n\"Prezentarea
\n
\nVom \u00eencepe revizuirea cu tab-ul Utilizatori activi. Pe aceast\u0103 pagin\u0103 putem vedea cine dintre utilizatori este conectat \u00een prezent la Sophos XG Firewall, metoda de autentificare, adresa IP a ma\u0219inii, momentul conect\u0103rii \u0219i volumul de trafic.<\/p>\n

Conexiuni active<\/h2>\n

\n\"Prezentarea
\n
\n\u00cen acest tab sunt afi\u0219ate sesiuni active \u00een timp real. Aceast\u0103 tabel\u0103 poate fi filtrat\u0103 dup\u0103 aplica\u021bii, utilizatori \u0219i adrese IP ale ma\u0219inilor client. <\/p>\n

Conexiuni IPsec<\/h2>\n

\n\"Prezentarea
\n
\n\u00cen acest tab este afi\u0219at\u0103 informa\u021bia despre conexiunile active IPsec VPN.<\/p>\n

Tab-ul Utilizatori la distan\u021b\u0103<\/h2>\n

\n\u00cen tab-ul Utilizatori la distan\u021b\u0103 se afl\u0103 informa\u021bii despre utilizatorii care s-au conectat prin SSL VPN.<\/p>\n

\"Prezentarea
\n
\nDe asemenea, \u00een acest tab putem vizualiza traficul \u00een timp real pe utilizatori \u0219i deconecta for\u021bat orice utilizator.<\/p>\n

Vom trece peste fila Raporturi, deoarece sistemul de raportare din acest produs este foarte voluminos \u0219i necesit\u0103 un articol separat.<\/p>\n

Diagnosticare<\/h1>\n

\n\"Prezentarea
\n
\nSe deschide imediat pagina cu diferite utilitare pentru identificarea problemelor. Acestea includ Ping, Traceroute, C\u0103utarea numelui, C\u0103utarea rutei.<\/p>\n

Apoi urmeaz\u0103 fila cu graficele sistemului pentru \u00eenc\u0103rcarea hardware-ului \u0219i a porturilor \u00een timp real.<\/p>\n

Graficele sistemului<\/h2>\n

\n\"Prezentarea
\n
\nApoi fila unde po\u021bi verifica categoria resursei web.<\/p>\n

C\u0103utare categorie URL<\/h2>\n

\n\"Prezentarea
\n
\nUrm\u0103toarea fil\u0103 Captur\u0103 pachete \u2014 este, practic, tcpdump \u00eencorporat \u00een interfa\u021ba web. Po\u021bi scrie \u0219i filtre.<\/p>\n

Captur\u0103 pachete<\/h2>\n

\n\"Prezentarea<\/p>\n

\"Prezentarea
\n
\nMerit\u0103 men\u021bionat c\u0103 pachetele sunt convertite \u00eentr-un tabel, unde po\u021bi activa sau dezactiva coloane suplimentare cu informa\u021bii. Aceast\u0103 func\u021bionalitate este foarte convenabil\u0103 pentru identificarea problemelor de re\u021bea, de exemplu \u2014 po\u021bi \u00een\u021belege rapid ce reguli de filtrare au fost aplicate traficului real.<\/p>\n

\"Prezentarea<\/p>\n

\u00cen fila Lista de conexiuni po\u021bi vizualiza toate conexiunile existente \u00een timp real \u0219i informa\u021biile despre acestea.<\/p>\n

Lista de conexiuni<\/h2>\n

\"Prezentarea
\n<\/p>\n

Concluzie<\/h1>\n

\nAici vom \u00eencheia prima parte a recenziei. Am acoperit doar o mic\u0103 parte din func\u021bionalitatea existent\u0103 \u0219i nu am discutat deloc despre modulele de protec\u021bie. \u00cen urm\u0103torul articol vom analiza func\u021bionalitatea \u00eencorporat\u0103 de raportare \u0219i regulile de firewall, tipurile \u0219i scopurile acestora. <\/p>\n

V\u0103 mul\u021bumesc pentru timpul acordat.<\/p>\n

Dac\u0103 ave\u021bi \u00eentreb\u0103ri legate de versiunea comercial\u0103 a XG Firewall, ne pute\u021bi contacta \u2014 compania Factor grup<\/a><\/noindex>, distribuitorul Sophos. Este suficient s\u0103 scrie\u021bi \u00een form\u0103 liber\u0103 la sophos@fgts.ru<\/a><\/noindex>.
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Sophos XG Firewall \u0438 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c. \u041a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0432\u0435\u0434\u044c \u0432\u0441\u0435\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0430 \u043a\u0430\u043a \u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0436\u0438\u0432\u0443\u044e? \u041a\u0430\u043a \u0432\u0441\u0435 \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e? \u0418\u0442\u0430\u043a, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c \u043a \u043e\u0431\u0437\u043e\u0440\u0443. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95684,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Recenzia func\u021bionalit\u0103\u021bii de baz\u0103 a Sophos XG Firewall (partea 1 \u201eMonitorizare \u0219i analiz\u0103\u201d) | ProHoster","description":"Salutare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 Sophos XG Firewall (\u0447\u0430\u0441\u0442\u044c 1 \u201c\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u201d) | ProHoster","og:description":"\u0412\u0441\u0435\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T23:42:24+00:00","article:modified_time":"2020-10-01T23:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95683","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:59:42","updated":"2022-09-28 15:05:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=95683"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95683\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/95684"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=95683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=95683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=95683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}