{"id":32370,"date":"2019-10-31T21:46:38","date_gmt":"2019-10-31T18:46:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sinhronizirovannaya-bezopasnost-v-sophos-central\/"},"modified":"2019-10-31T21:46:38","modified_gmt":"2019-10-31T18:46:38","slug":"sinhronizirovannaya-bezopasnost-v-sophos-central","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","title":{"rendered":"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/9d0e5f8349ff2034a71b0f2aacaba5c7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPre zabezpe\u010denie vysokej efektivity prostriedkov informa\u010dnej bezpe\u010dnosti zohr\u00e1va d\u00f4le\u017eit\u00fa \u00falohu prepojenie jej komponentov. To umo\u017e\u0148uje uzavrie\u0165 nie len vonkaj\u0161ie, ale aj vn\u00fatorn\u00e9 hrozby. Pri projektovan\u00ed sie\u0165ovej infra\u0161trukt\u00fary m\u00e1 ka\u017ed\u00e9 ochrann\u00e9 prostriedok, \u010di u\u017e ide o antiv\u00edrus alebo firewall, d\u00f4le\u017eit\u00fd v\u00fdznam, aby fungovalo nielen v r\u00e1mci svojho druhu (Endpoint security alebo NGFW), ale aj malo schopnos\u0165 vz\u00e1jomne spolupracova\u0165 na spolo\u010dnom boji proti hrozb\u00e1m.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Trochu te\u00f3rie<\/h2>\n<p>\nNie je prekvapen\u00edm, \u017ee dne\u0161n\u00ed kyberzlo\u010dinci sa stali vynaliezavej\u0161\u00edmi. Na \u0161\u00edrenie \u0161kodliv\u00e9ho softv\u00e9ru pou\u017e\u00edvaj\u00fa cel\u00fa radu sie\u0165ov\u00fdch technol\u00f3gi\u00ed:<br \/>\n<img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/53a274ad70bc616ea2bafa0b5dbe509b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPhishingov\u00e1 kampa\u0148 cez e-mail sp\u00f4sobuje, \u017ee \u0161kodliv\u00fd softv\u00e9r \"prekro\u010d\u00ed prah\" va\u0161ej siete, vyu\u017e\u00edvaj\u00fac zn\u00e1me \u00fatoky, alebo \"\u00fatoky nult\u00e9ho d\u0148a\" s n\u00e1sledn\u00fdm zv\u00fd\u0161en\u00edm opr\u00e1vnen\u00ed, alebo horizont\u00e1lnym pohybom (lateral movement) po sieti. Pr\u00edtomnos\u0165 jedn\u00e9ho infikovan\u00e9ho zariadenia m\u00f4\u017ee znamena\u0165, \u017ee va\u0161a sie\u0165 m\u00f4\u017ee by\u0165 zneu\u017eit\u00e1 \u00fato\u010dn\u00edkom na ne\u010destn\u00e9 \u00fa\u010dely. <\/p>\n<p>V niektor\u00fdch pr\u00edpadoch, ke\u010f je potrebn\u00e9 zabezpe\u010di\u0165 interakciu prvkov IB, pri vykon\u00e1van\u00ed auditu informa\u010dnej bezpe\u010dnosti s\u00fa\u010dasn\u00e9ho stavu syst\u00e9mu sa ned\u00e1 op\u00edsa\u0165 pomocou jedn\u00e9ho komplexu opatren\u00ed, ktor\u00e9 s\u00fa medzi sebou prepojen\u00e9. V mnoh\u00fdch pr\u00edpadoch mnoho technologick\u00fdch rie\u0161en\u00ed, zameran\u00fdch na odol\u00e1vanie \u0161pecifick\u00e9mu typu hrozieb, nezah\u0155\u0148a integr\u00e1ciu s in\u00fdmi technologick\u00fdmi rie\u0161eniami. Napr\u00edklad produkty na ochranu koncov\u00fdch zariaden\u00ed pou\u017e\u00edvaj\u00fa signat\u00farov\u00fa a behavior\u00e1lnu anal\u00fdzu na ur\u010denie, \u010di je s\u00fabor infikovan\u00fd alebo nie. Na zastavenie \u0161kodliv\u00e9ho prenosu pou\u017e\u00edvaj\u00fa firewally in\u00e9 technol\u00f3gie, medzi ktor\u00e9 patr\u00ed webov\u00e1 filtr\u00e1cia, IPS, pieskovisko a pod. Napriek tomu v mnoh\u00fdch organiz\u00e1ci\u00e1ch tieto komponenty zabezpe\u010denia informa\u010dnej bezpe\u010dnosti nie s\u00fa navz\u00e1jom prepojen\u00e9 a funguj\u00fa izolovane.<\/p>\n<h2>Tendencie v implement\u00e1cii technol\u00f3gie Heartbeat<\/h2>\n<p>\nNov\u00fd pr\u00edstup k zabezpe\u010deniu kybernetickej bezpe\u010dnosti predpoklad\u00e1 ochranu na ka\u017edej \u00farovni, pri\u010dom rie\u0161enia pou\u017e\u00edvan\u00e9 na ka\u017edej z nich s\u00fa vz\u00e1jomne prepojen\u00e9 a maj\u00fa mo\u017enos\u0165 si vymie\u0148a\u0165 inform\u00e1cie. To vedie k vytvoreniu syst\u00e9mu Synchronized Security (SynSec). SynSec predstavuje proces zabezpe\u010denia informa\u010dnej bezpe\u010dnosti ako jednoliateho syst\u00e9mu. V tomto pr\u00edpade je ka\u017ed\u00fd komponent zabezpe\u010denia informa\u010dnej bezpe\u010dnosti prepojen\u00fd s ostatn\u00fdmi v re\u00e1lnom \u010dase. Napr\u00edklad rie\u0161enie <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-central.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> je realizovan\u00e9 na tomto princ\u00edpe.<\/p>\n<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/f8a937ea7de8f977a0eab9a040db0216.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTechnol\u00f3gia Security Heartbeat zabezpe\u010duje prepojenie medzi komponentmi bezpe\u010dnosti, \u010do zais\u0165uje vz\u00e1jomn\u00e9 fungovanie syst\u00e9mu a jeho monitorovanie. V <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos Central<\/a><\/noindex> s\u00fa integrovan\u00e9 rie\u0161enia nasleduj\u00facich tried:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/endpoint-antivirus.aspx?id=00130000019KE2V\">Ochrana koncov\u00fdch bodov<\/a><\/noindex> \u2013 klasick\u00fd podpisov\u00fd antiv\u00edrus;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/server-security.aspx?id=00130000019KE2V\">Ochrana serverov<\/a><\/noindex> \u2013 \u0161pecializovan\u00fd antiv\u00edrus pre servery;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept-X<\/a><\/noindex> \u2013 antiv\u00edrus novej gener\u00e1cie (bez podpisov a s technol\u00f3giami umelej inteligencie);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/next-gen-firewall.aspx?id=00130000019KE2V\">Sophos XG Firewall<\/a><\/noindex> \u2013 firewall novej gener\u00e1cie;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Spr\u00e1va mobility (EMM)<\/a><\/noindex> \u2013 spr\u00e1va mobiln\u00fdch zariaden\u00ed a kontrola pr\u00edstupu k firemn\u00e9mu e-mailu a s\u00faborom;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/safeguard-encryption.aspx?id=00130000019KE2V\">Ochrana d\u00e1t (\u0161ifrovanie)<\/a><\/noindex>;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Bezpe\u010dn\u00e9 Wi-Fi<\/a><\/noindex> \u2013 pr\u00edstupov\u00e9 body spravovan\u00e9 ako z cloudu, tak lok\u00e1lne cez Sophos UTM \/ Sophos XG;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-web-gateway.aspx?id=00130000019KE2V\">Webov\u00e1 bezpe\u010dnos\u0165<\/a><\/noindex> \u2013 klasick\u00e9 rie\u0161enie pre filtrovanie webov\u00e9ho prenosu;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/sophos-email.aspx?id=00130000019KE2V\">Bezpe\u010dnos\u0165 e-mailov<\/a><\/noindex> \u2013 cloudov\u00e9\/lok\u00e1lne anti-spam\/antiv\u00edrusov\u00e9 rie\u0161enie;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/phish-threat.aspx?id=00130000019KE2V\">Phish Threat<\/a><\/noindex> \u2013 zvy\u0161ovanie povedomia zamestnancov, vykon\u00e1vanie testovac\u00edch phishingov\u00fdch kampan\u00ed;<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/cloud-optix.aspx?id=00130000019KE2V\">Cloud Optix<\/a><\/noindex> \u2013 audit cloudov\u00fdch infra\u0161trukt\u00far.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/b1a60a0d471c250a48c36cde17a4de5f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nNie je \u0165a\u017ek\u00e9 si v\u0161imn\u00fa\u0165, \u017ee Sophos Central podporuje dos\u0165 \u0161irok\u00e9 spektrum rie\u0161en\u00ed v oblasti informa\u010dnej bezpe\u010dnosti. V Sophos Central je koncept SynSec zalo\u017een\u00fd na troch d\u00f4le\u017eit\u00fdch princ\u00edpoch: detekcia, anal\u00fdza a reakcia. Pre podrobn\u00e9 op\u00edsanie sa zastav\u00edme na ka\u017edom z nich.<\/p>\n<h2>Koncepty SynSec<\/h2>\n<p>\n<b>DETEKCIA<\/b> (v\u00fdskum nezn\u00e1mych hrozieb)<br \/>\nProdukty Sophos spravovan\u00e9 prostredn\u00edctvom Sophos Central automaticky zdie\u013eaj\u00fa inform\u00e1cie medzi sebou za \u00fa\u010delom identifik\u00e1cie riz\u00edk a nezn\u00e1mych hrozieb, \u010do zah\u0155\u0148a:<\/p>\n<ul>\n<li>anal\u00fdzu sie\u0165ov\u00e9ho prenosu s mo\u017enos\u0165ou identifikova\u0165 rizikov\u00e9 aplik\u00e1cie a \u0161kodliv\u00fd prenos;<\/li>\n<li>identifik\u00e1ciu pou\u017e\u00edvate\u013eov s vysok\u00fdm rizikom prostredn\u00edctvom korela\u010dnej anal\u00fdzy ich \u010dinnost\u00ed v sieti.<\/li>\n<\/ul>\n<p>\n<b>ANAL\u00ddZA<\/b> (okam\u017eit\u00e1 a intuit\u00edvna)<br \/>\nAnal\u00fdza incidentov v re\u00e1lnom \u010dase poskytuje okam\u017eit\u00e9 pochopenie aktu\u00e1lnej situ\u00e1cie v syst\u00e9me.<\/p>\n<ul>\n<li>zobrazenie celej re\u0165azca udalost\u00ed, ktor\u00e9 viedli k incidentu, vr\u00e1tane v\u0161etk\u00fdch s\u00faborov, k\u013e\u00fa\u010dov registrov, URL adries at\u010f.<\/li>\n<\/ul>\n<p>\n<b>REAKCIA<\/b> (automatick\u00e1 reakcia na incidenty)<br \/>\nNastavenie polit\u00edk zabezpe\u010denia umo\u017e\u0148uje automaticky reagova\u0165 na infekcie a incidenty v priebehu nieko\u013ek\u00fdch sek\u00fand. To sa zabezpe\u010duje:<\/p>\n<ul>\n<li>okam\u017eitou izol\u00e1ciou infikovan\u00fdch zariaden\u00ed a zastaven\u00edm \u00fatoku v re\u00e1lnom \u010dase (aj v r\u00e1mci jednej siete \/ vysielacieho dom\u00e9nu);<\/li>\n<li>obmedzen\u00edm pr\u00edstupu k sie\u0165ov\u00fdm zdrojom spolo\u010dnosti pre zariadenia, ktor\u00e9 nesp\u013a\u0148aj\u00fa politiky;<\/li>\n<li>dia\u013ekov\u00fdm spusten\u00edm skenovania zariadenia pri zisten\u00ed odch\u00e1dzaj\u00faceho spamu.<\/li>\n<\/ul>\n<p>\nPresk\u00famali sme hlavn\u00e9 princ\u00edpy ochrany, na ktor\u00fdch je postaven\u00e1 \u010dinnos\u0165 Sophos Central. Teraz prejdime k popisu toho, ako sa technol\u00f3gia SynSec prejavuje v praxi.<\/p>\n<h2>Od te\u00f3rie k praxi<\/h2>\n<p>\nNa za\u010diatok vysvetl\u00edme, ako sa zria\u010fuje interakcia zariaden\u00ed pod\u013ea princ\u00edpu SynSec pomocou technol\u00f3gie Heartbeat. Prv\u00fd krok spo\u010d\u00edva v registr\u00e1cii Sophos XG v Sophos Central. V tomto kroku dost\u00e1va certifik\u00e1t na sebaidentifik\u00e1ciu, IP adresu a port, cez ktor\u00fd sa koncov\u00e9 zariadenia bud\u00fa s n\u00edm interagova\u0165 prostredn\u00edctvom technol\u00f3gie Heartbeat, ako aj zoznam ID koncov\u00fdch zariaden\u00ed spravovan\u00fdch prostredn\u00edctvom Sophos Central a ich klientsk\u00fdch certifik\u00e1tov. <\/p>\n<p>Hne\u010f po registr\u00e1cii Sophos XG, Sophos Central pred\u00e1 koncov\u00fdm zariadeniam inform\u00e1cie potrebn\u00e9 na iniciovanie interakcie prostredn\u00edctvom technol\u00f3gie Heartbeat:<\/p>\n<ul>\n<li>zoznam certifika\u010dn\u00fdch autor\u00edt pou\u017e\u00edvan\u00fdch na vyd\u00e1vanie certifik\u00e1tov Sophos XG;<\/li>\n<li>zoznam ID zariaden\u00ed, ktor\u00e9 s\u00fa registrovan\u00e9 v Sophos XG;<\/li>\n<li>IP adresu a port na interakciu prostredn\u00edctvom technol\u00f3gie Heartbeat.<\/li>\n<\/ul>\n<p>\nTieto inform\u00e1cie s\u00fa ulo\u017een\u00e9 v po\u010d\u00edta\u010di na nasleduj\u00facej ceste: %ProgramData%SophosHearbeatConfigHeartbeat.xml a pravidelne sa aktualizuj\u00fa.<\/p>\n<p>Komunik\u00e1cia prostredn\u00edctvom technol\u00f3gie Heartbeat sa uskuto\u010d\u0148uje zasielan\u00edm spr\u00e1v z koncov\u00fdch bodov na magick\u00fa IP adresu 52.5.76.173:8347 a sp\u00e4\u0165. Po anal\u00fdze bolo zisten\u00e9, \u017ee pakety sa posielaj\u00fa s peri\u00f3dou 15 sek\u00fand, ako to uv\u00e1dza dod\u00e1vate\u013e. Je potrebn\u00e9 poznamena\u0165, \u017ee spr\u00e1vy Heartbeat spracov\u00e1va priamo XG Firewall - zachyt\u00e1va pakety a sleduje stav koncov\u00e9ho bodu. Ak sa na hostite\u013eovi vykon\u00e1 zachytenie paketov, pohyb prev\u00e1dzky bude pripom\u00edna\u0165 komunik\u00e1ciu s externou IP adresou, hoci v skuto\u010dnosti koncov\u00fd bod interaguje priamo s firewallem XG.<\/p>\n<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/76bb24f252a90919a9737be3e7cb4c87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Predpokladajme, \u017ee na po\u010d\u00edta\u010d sa nejak\u00fdm sp\u00f4sobom dostal \u0161kodliv\u00fd program. Sophos Endpoint identifikuje tento \u00fatok alebo prestaneme dost\u00e1va\u0165 Heartbeat z tohto syst\u00e9mu. Infikovan\u00e9 zariadenie automaticky odosiela inform\u00e1cie o infikovan\u00ed syst\u00e9mu, \u010do sp\u00f4sobuje automatick\u00fd re\u0165azec akci\u00ed. XG Firewall okam\u017eite izoluje po\u010d\u00edta\u010d a zabra\u0148uje \u0161\u00edreniu \u00fatoku a interakcii s C&amp;C servermi.<\/p>\n<p>Sophos Endpoint automaticky odstra\u0148uje \u0161kodliv\u00fd softv\u00e9r. Po jeho odstr\u00e1nen\u00ed sa koncov\u00e9 zariadenie synchronizuje so Sophos Central, a potom XG Firewall obnov\u00ed pr\u00edstup k sieti. Anal\u00fdza kore\u0148ov\u00fdch pr\u00ed\u010din (Root Cause Analysis - RCA alebo EDR - Endpoint Detection and Response) poskytuje podrobn\u00fd preh\u013ead o tom, \u010do sa stalo.<\/p>\n<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/77a0f06389830d530c491ad6d9d22cbf.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAk predpoklad\u00e1me, \u017ee pr\u00edstup k firemn\u00fdm zdrojom sa vykon\u00e1va prostredn\u00edctvom mobiln\u00fdch zariaden\u00ed a tabletov, je mo\u017en\u00e9 v tomto pr\u00edpade zabezpe\u010di\u0165 SynSec?<\/p>\n<p>Pre tak\u00fdto scen\u00e1r je v Sophos Central predpokladan\u00e1 podpora <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/mobile-control.aspx?id=00130000019KE2V\">Sophos Mobile<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/secure-wifi.aspx?id=00130000019KE2V\">Sophos Wireless<\/a><\/noindex>. Predpokladajme, \u017ee pou\u017e\u00edvate\u013e sa pok\u00fa\u0161a poru\u0161i\u0165 bezpe\u010dnostn\u00fa politiku na mobilnom zariaden\u00ed, ktor\u00e9 je chr\u00e1nen\u00e9 pomocou Sophos Mobile. Sophos Mobile identifikuje poru\u0161enie bezpe\u010dnostnej politiky a odosiela ozn\u00e1menia ostatn\u00fdm komponentom syst\u00e9mu, \u010do vyvol\u00e1va vopred nastaven\u00fa reakciu na incident. Ak s\u00fa v Sophos Mobile nastaven\u00e9 politiky \u201ezak\u00e1za\u0165 pripojenie k sieti\u201c, potom Sophos Wireless obmedz\u00ed pr\u00edstup do siete pre toto zariadenie. Na paneli n\u00e1strojov Sophos Central na karte Sophos Wireless sa zobraz\u00ed ozn\u00e1menie, \u017ee zariadenie je infikovan\u00e9. Ke\u010f sa pou\u017e\u00edvate\u013e pok\u00fasi z\u00edska\u0165 pr\u00edstup k sieti, na obrazovke sa objav\u00ed spr\u00e1va, \u017ee pr\u00edstup na internet je obmedzen\u00fd.<\/p>\n<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/2a49fb10fb5e0ec0082d8772cc2b5194.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/84acd97f5b39f9d52070bb48ae58ce94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nKone\u010dn\u00fd bod m\u00e1 nieko\u013eko stavov stavu Heartbeat: \u010derven\u00fd, \u017elt\u00fd a zelen\u00fd.<br \/>\n\u010cerven\u00fd stav nast\u00e1va v nasleduj\u00facich pr\u00edpadoch:<\/p>\n<ul>\n<li>zisten\u00fd akt\u00edvny \u0161kodliv\u00fd softv\u00e9r;<\/li>\n<li>zisten\u00fd pokus o spustenie \u0161kodliv\u00e9ho softv\u00e9ru;<\/li>\n<li>zisten\u00fd \u0161kodliv\u00fd sie\u0165ov\u00fd prenos;<\/li>\n<li>\u0161kodliv\u00fd softv\u00e9r nebol odstr\u00e1nen\u00fd.<\/li>\n<\/ul>\n<p>\n\u017dlt\u00fd stav znamen\u00e1, \u017ee na kone\u010dnom bode bol zisten\u00fd neakt\u00edvny \u0161kodliv\u00fd softv\u00e9r alebo bola zisten\u00e1 PNP (potenci\u00e1lne ne\u017eiad\u00faca program). Zelen\u00fd stav indikuje, \u017ee neboli zisten\u00e9 \u017eiadne z vy\u0161\u0161ie uveden\u00fdch probl\u00e9mov. <\/p>\n<p>Po presk\u00faman\u00ed niektor\u00fdch klasick\u00fdch scen\u00e1rov interakcie chr\u00e1nen\u00fdch zariaden\u00ed so Sophos Central prejdeme k opisu grafick\u00e9ho rozhrania rie\u0161enia a presk\u00famaniu z\u00e1kladn\u00fdch nastaven\u00ed a podporovanej funkcionality.<\/p>\n<h2>Grafick\u00e9 rozhranie<\/h2>\n<p>\nNa ovl\u00e1dacom paneli s\u00fa zobrazen\u00e9 najnov\u0161ie ozn\u00e1menia. Tie\u017e s\u00fa zobrazen\u00e9 v grafoch s\u00fahrnn\u00e9 charakteristiky r\u00f4znych komponentov ochrany. V tomto pr\u00edpade s\u00fa zobrazen\u00e9 s\u00fahrnn\u00e9 \u00fadaje o ochrane osobn\u00fdch po\u010d\u00edta\u010dov. Na tomto paneli je tie\u017e dostupn\u00e1 s\u00fahrnn\u00e1 inform\u00e1cia o pokusoch o n\u00e1v\u0161tevu nebezpe\u010dn\u00fdch zdrojov a zdrojov s neprijate\u013en\u00fdm obsahom, \u0161tatistika anal\u00fdzy elektronickej po\u0161ty. <\/p>\n<p><img decoding=\"async\" alt=\"Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central\" src=\"\/wp-content\/uploads\/2019\/04\/c4733e335c2bfce1daa69b90d09b7900.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSophos Central podporuje zobrazovanie ozn\u00e1men\u00ed pod\u013ea \u00farovne d\u00f4le\u017eitosti, \u010do zabr\u00e1ni pou\u017e\u00edvate\u013eovi prehliadnu\u0165 kritick\u00e9 upozornenia bezpe\u010dnostn\u00e9ho syst\u00e9mu. Okrem preh\u013eadne zobrazen\u00fdch s\u00fahrnn\u00fdch inform\u00e1ci\u00ed o stave syst\u00e9mu ochrany, Sophos Central podporuje logovanie udalost\u00ed, integr\u00e1ciu so SIEM syst\u00e9mami. Sophos Central je pre mnoho spolo\u010dnost\u00ed platf\u00f3mou ako pre intern\u00fd SOC, tak aj na poskytovanie slu\u017eieb svojim z\u00e1kazn\u00edkom \u2013 MSSP.<\/p>\n<p>Jednou z d\u00f4le\u017eit\u00fdch funkci\u00ed je podpora vyrovn\u00e1vacej pam\u00e4te aktualiz\u00e1ci\u00ed pre endpoint-klientov. To umo\u017e\u0148uje \u0161etri\u0165 \u0161\u00edrku p\u00e1sma vonkaj\u0161ieho prenosu, preto\u017ee v tomto pr\u00edpade sa aktualiz\u00e1cie na\u010d\u00edtavaj\u00fa raz na jeden z endpoint-klientov a ostatn\u00e9 koncov\u00e9 zariadenia n\u00e1sledne \u0165ahaj\u00fa aktualiz\u00e1cie od neho. Okrem tejto funkcie m\u00f4\u017ee vybran\u00fd endpoint retransmitova\u0165 spr\u00e1vy o bezpe\u010dnostn\u00fdch politik\u00e1ch a informa\u010dn\u00e9 hl\u00e1senia do cloudu Sophos. T\u00e1to funkcia bude u\u017eito\u010dn\u00e1, ak existuj\u00fa koncov\u00e9 zariadenia, ktor\u00e9 nemaj\u00fa priamy pr\u00edstup na internet, ale vy\u017eaduj\u00fa ochranu. V Sophos Central je zahrnut\u00e1 mo\u017enos\u0165 (ochrana pred manipul\u00e1ciou), ktor\u00e1 zakazuje meni\u0165 nastavenia ochrany po\u010d\u00edta\u010da alebo odstra\u0148ova\u0165 endpoint-agent.<\/p>\n<p>Jednou z komponentov ochrany endpointov je antiv\u00edrus nov\u00e9ho veku (NGAV) \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sophos.com\/en-us\/products\/intercept-x.aspx?id=00130000019KE2V\">Intercept X<\/a><\/noindex>. Pomocou technol\u00f3gi\u00ed hlbok\u00e9ho strojov\u00e9ho u\u010denia je antiv\u00edrus schopn\u00fd odha\u013eova\u0165 predt\u00fdm nezn\u00e1me hrozby bez pou\u017eitia podpisov. Presnos\u0165 detekcie je porovnate\u013en\u00e1 s podpisov\u00fdmi anal\u00f3gmi, av\u0161ak na rozdiel od nich poskytuje proakt\u00edvnu ochranu, \u010d\u00edm predch\u00e1dza \u00fatokom \u201enulov\u00e9ho d\u0148a\u201c. Intercept X je schopn\u00fd pracova\u0165 paralelne s podpisov\u00fdmi antiv\u00edrusmi in\u00fdch dod\u00e1vate\u013eov.<\/p>\n<p>V tomto \u010dl\u00e1nku sme stru\u010dne prerozpr\u00e1vali koncept SynSec, ktor\u00fd je implementovan\u00fd v Sophos Central, ako aj niektor\u00e9 mo\u017enosti tohto rie\u0161enia. O tom, ako funguje ka\u017ed\u00fd z komponentov ochrany integrovan\u00fdch v Sophos Central, budeme rozpr\u00e1va\u0165 v nasleduj\u00facich \u010dl\u00e1nkoch. Z\u00edska\u0165 demo verziu rie\u0161enia m\u00f4\u017eete <noindex><a rel=\"nofollow\" href=\"https:\/\/secure2.sophos.com\/en-us\/products\/sophos-central\/free-trial.aspx?id=00130000019KE2V\">tu<\/a><\/noindex>.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/fgts\/blog\/449438\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0438\u0433\u0440\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0435, \u043d\u043e \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u041f\u0440\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0431\u0443\u0434\u044c \u044d\u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438\u043b\u0438 firewall, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 (Endpoint security \u0438\u043b\u0438 NGFW), \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24184,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32370","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:46:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Synchronizovan\u00e1 bezpe\u010dnos\u0165 v Sophos Central | ProHoster","description":"Pre zabezpe\u010denie vysokej efektivity.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 Sophos Central | ProHoster","og:description":"\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/sinhronizirovannaya-bezopasnost-v-sophos-central","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:46:38+00:00","article:modified_time":"2019-10-31T18:46:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32370","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 10:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:00:22","updated":"2026-01-21 10:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=32370"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32370\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/24184"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=32370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=32370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=32370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}