{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point Za\u010diatok R80.20. Z\u00e1znamy & Spr\u00e1vy","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nVitajte na 12. lekcii. Dnes sa budeme rozpr\u00e1va\u0165 o e\u0161te jednej ve\u013emi d\u00f4le\u017eitej t\u00e9me, a to o pr\u00e1ci s logmi a spr\u00e1vami<\/b>. Niekedy sa t\u00e1to funkcionalita ukazuje ako rozhoduj\u00faca pri v\u00fdbere ochrann\u00e9ho prostriedku. Bezpe\u010dnostn\u00ed \u0161pecialisti naozaj miluj\u00fa pohodln\u00fd syst\u00e9m reportovania a funk\u010dn\u00fd vyh\u013ead\u00e1va\u010d pre r\u00f4zne udalosti. \u0164a\u017eko ich za to obvi\u0148ova\u0165. V podstate s\u00fa logy a spr\u00e1vy najd\u00f4le\u017eitej\u0161\u00edm prvkom hodnotenia bezpe\u010dnosti. Ako m\u00f4\u017eete pochopi\u0165 aktu\u00e1lnu \u00farove\u0148 zabezpe\u010denia, ak nevid\u00edte, \u010do sa deje? Na\u0161\u0165astie, v tomto oh\u013eade je Check Point v poriadku a e\u0161te viac. Check Point m\u00e1 jeden z najlep\u0161\u00edch syst\u00e9mov reportovania, ktor\u00fd funguje priamo \u201ez krabice\u201c! Existuje aj mo\u017enos\u0165 prisp\u00f4sobenia a vytv\u00e1rania vlastn\u00fdch spr\u00e1v! To v\u0161etko je doplnen\u00e9 pohodln\u00fdm a intuit\u00edvnym procesom pr\u00e1ce s logmi. Ale po\u010fme po poriadku.<\/a><\/noindex><\/p>\n

\u00daplne nov\u00e9 rozhranie<\/h3>\n

\nAk ste s Check Pointom pracovali predt\u00fdm, ur\u010dite v\u00e1s prekvapilo \u00faplne nov\u00e9 rozhranie pr\u00e1ce s logmi a spr\u00e1vami v R80. Na obr\u00e1zku je vidno, ko\u013eko r\u00f4znych util\u00edt bolo zl\u00fa\u010den\u00fdch v r\u00e1mci jednej novej z\u00e1lo\u017eky Logs & Monitor<\/b>:<\/p>\n

\"12.
\n<\/p>\n

Sekcia Logs & Monitor<\/h3>\n

\nAk prejdete do Logs & Monitor a otvor\u00edte nov\u00fa z\u00e1lo\u017eku, mali by ste vidie\u0165 pribli\u017ene toto:<\/p>\n

\"12.
\n
\nPod\u013ea predvolen\u00e9ho nastavenia s\u00fa tu dva ve\u013ek\u00e9 oddiely:<\/p>\n

    \n
  1. Audit Logs View<\/b> \u2014 tu m\u00f4\u017eete n\u00e1js\u0165 v\u0161etky udalosti spojen\u00e9 so vstupom\/v\u00fdstupom administr\u00e1torov, zmenami v konfigur\u00e1cii at\u010f. T.j. klasick\u00e1 auditn\u00e1 \u010dinnos\u0165 administr\u00e1tora.<\/li>\n
  2. Logs View<\/b> \u2014 pr\u00e1ve tu m\u00f4\u017eete vyh\u013ead\u00e1va\u0165 v udalostiach, ktor\u00e9 \u201egeneruj\u00fa\u201c v\u0161etky na\u0161e zapnut\u00e9 blade, \u010di u\u017e ide o firewall, antivirus, IPS a pod. U\u017e sme touto funkciou viackr\u00e1t pou\u017eili.<\/li>\n<\/ol>\n

    \nOkrem toho s\u00fa tu aj odkazy na spr\u00e1vy (Reports<\/b>) a r\u00f4zne dashboardy (Views<\/b>). Na ich fungovanie je potrebn\u00fd zapnut\u00fd blade Smart Event<\/b>. Ale o tom nesk\u00f4r. Najprv sa po\u010fme pozrie\u0165 na pr\u00e1cu s logmi.<\/p>\n

    Vyh\u013ead\u00e1vanie v logoch<\/h3>\n

    \nPod\u013ea m\u00f4jho n\u00e1zoru je pr\u00e1ca s logmi v R80 \u010dist\u00e1 rados\u0165. M\u00e1me ve\u013emi inteligentn\u00fd vyh\u013ead\u00e1vac\u00ed riadok, ktor\u00fd n\u00e1m umo\u017e\u0148uje \u201erozsekn\u00fa\u0165\u201c a vyh\u013ead\u00e1va\u0165 pod\u013ea \u013eubovo\u013en\u00e9ho textu, blade a ak\u00fdchko\u013evek in\u00fdch indexovate\u013en\u00fdch parametrov ako source, destination, action at\u010f.<\/p>\n

    \"12.
    \n
    \nM\u00f4\u017eeme vytv\u00e1ra\u0165 dos\u0165 zlo\u017een\u00e9 vyh\u013ead\u00e1vacie dotazy s pou\u017eit\u00edm logick\u00fdch oper\u00e1torov A<\/b>, OR<\/b>, NOT<\/b>. A na to ani nemus\u00edte ni\u010d p\u00edsa\u0165. Filter m\u00f4\u017eete vytvori\u0165 doslova v p\u00e1r kliknutiach my\u0161i. O chv\u00ed\u013eu si to v\u0161etko vysk\u00fa\u0161ame na praxi.<\/p>\n

    Zobrazenie Log spr\u00e1v pod\u013ea Access-List<\/h3>\n

    \nU\u017e sme si vyhodnotili mo\u017enos\u0165 zobrazenia logov pod\u013ea konkr\u00e9tneho pr\u00edstupov\u00e9ho zoznamu. Je to nesmierne pohodln\u00e9 a ve\u013emi r\u00fdchlo si na to zvyknete. Obzvl\u00e1\u0161\u0165 to pom\u00e1ha pri rie\u0161en\u00ed probl\u00e9mov. Vyberiete z\u00e1ujmov\u00fd \u201eaccess list\u201c a sledujete, \u010di pod neho patr\u00ed potrebn\u00fd prenos. <\/p>\n

    \"12.
    \n
    \nNie je potrebn\u00e9 nikam prech\u00e1dza\u0165 ani zostavova\u0165 zlo\u017eit\u00fd filter pre logy.<\/p>\n

    Zobrazenia a spr\u00e1vy<\/h3>\n

    \nZa reporty a vizualiz\u00e1ciu \u00fadajov v Check Point zodpoved\u00e1 blade Smart Event<\/b>, ktor\u00fd sa aktivuje na serveri<\/a> spr\u00e1vu. T\u00fato funkcionalitu m\u00f4\u017eeme smelo naz\u00fdva\u0165 SIEM-om, ale iba pre produkty Check Point! Technicky je mo\u017en\u00e9 na Smart Event spracov\u00e1va\u0165 logy aj z in\u00fdch syst\u00e9mov (napr\u00edklad Cisco, Microsoft a pod.), ale to nie je najlep\u0161ia idea \ud83d\ude42 V praxi je to dos\u0165 problematick\u00e9. No logy z \u201eCheck Pointu\u201c Smart Event zvl\u00e1da jednoducho skvele. M\u00f4\u017ee korelova\u0165, s\u00fahrnne dokazova\u0165, priemerova\u0165 a robi\u0165 mnoho \u010fal\u0161ieho. A to v\u0161etko funguje priamo z krabice! Samozrejme, existuj\u00fa u\u017e predpripraven\u00e9 dashboardy na zobrazenie najd\u00f4le\u017eitej\u0161\u00edch inform\u00e1ci\u00ed. V Check Point sa naz\u00fdvaj\u00fa Views<\/b>:<\/p>\n

    \"12.
    \n
    \nM\u00f4\u017eete vidie\u0165, \u017ee tu je dos\u0165 ve\u013ek\u00e9 mno\u017estvo predvolen\u00fdch dashboardov, ktor\u00e9 s\u00fa ve\u013emi u\u017eito\u010dn\u00e9 pri ka\u017edodennom spravovan\u00ed a monitorovan\u00ed.<\/p>\n

    Okrem dashboardov, kde sa inform\u00e1cie jednoducho vizualizuj\u00fa, existuje mo\u017enos\u0165 generovania plnohodnotn\u00fdch reportov a ich ukladan\u00ed vo form\u00e1te pdf alebo excel. M\u00f4\u017eete ich generova\u0165 pod\u013ea pl\u00e1nu a posiela\u0165 ich na nejak\u00fa e-mailov\u00fa schr\u00e1nku.<\/p>\n

    A najpr\u00edjemnej\u0161ie! Dashboardy a reporty m\u00f4\u017eete vytv\u00e1ra\u0165 aj sami! To znamen\u00e1, \u017ee nie ste obmedzen\u00ed iba vstavan\u00fdmi. T\u00fdm sa nem\u00f4\u017ee pochv\u00e1li\u0165 ka\u017ed\u00fd dod\u00e1vate\u013e. \u0160abl\u00f3ny t\u00fdchto dashboardov alebo reportov je mo\u017en\u00e9 importova\u0165 alebo exportova\u0165, \u010do umo\u017e\u0148uje pou\u017e\u00edvate\u013eom zdie\u013ea\u0165 svoje v\u00fdstupy. Samotn\u00fd proces vytv\u00e1rania dashboardu je ve\u013emi jednoduch\u00fd a intuit\u00edvny. Pok\u00fasim sa v\u00e1m to uk\u00e1za\u0165 v r\u00e1mci laborat\u00f3rneho cvi\u010denia, ktor\u00e9 n\u00e1jdete v ni\u017e\u0161ie uvedenom videu.<\/p>\n

    Video lekcia<\/h3>\n

    \n

    \r\n \"Prehrajte\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    Sledujte n\u00e1s na\u010falej a pridajte sa k na\u0161ej YouTube channel<\/a><\/noindex> \ud83d\ude42
    \n
    Zdroj:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","description":"Vitajte na 12. lekcii.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}