{"id":33772,"date":"2019-10-31T21:54:36","date_gmt":"2019-10-31T18:54:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/12-check-point-getting-started-r80-20-logs-reports\/"},"modified":"2019-10-31T21:54:36","modified_gmt":"2019-10-31T18:54:36","slug":"12-check-point-getting-started-r80-20-logs-reports","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","title":{"rendered":"12. Check Point \u041d\u0430\u0447\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u044b R80.20. \u041b\u043e\u0433\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u044b","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"12.
\n
\nDobrodo\u0161li na 12. lekciju. Danas \u0107emo razgovarati o jo\u0161 jednoj veoma va\u017enoj temi, naime, o radu s logovima i izve\u0161tajima<\/b>. Ponekad se ova funkcionalnost pokazuje kao klju\u010dna prilikom izbora sredstva za\u0161tite. Bezbednjaci \u010desto preferiraju udoban sistem izve\u0161tavanja i funkcionalno pretra\u017eivanje raznih doga\u0111aja. Te\u0161ko ih je kriviti. U su\u0161tini, logovi i izve\u0161taji su najva\u017eniji elementi procene sigurnosti. Kako razumeti trenutni nivo bezbednosti ako ne vidite \u0161ta se de\u0161ava? Na sre\u0107u, u tom smislu Check Point ima sve u najboljem redu, pa \u010dak i vi\u0161e. Check Point ima jedan od najboljih sistema izve\u0161tavanja koji radi bez dodatne konfiguracije! Uz to, postoji mogu\u0107nost prilago\u0111avanja i kreiranja vlastitih izve\u0161taja! Sve to je dopunjeno jednostavnim i intuitivnim procesom rada s logovima. Ali hajde da krenemo redom.<\/a><\/noindex><\/p>\n

Potpuno novi interfejs<\/h3>\n

\nAko ste ranije radili s Check Point-om, verovatno ste bili iznena\u0111eni potpuno novim interfejsom za rad s logovima i izve\u0161tajima u R80. Na slici je prikazano koliko je razli\u010ditih alata objedinjeno u okviru nove kartice Logs & Monitor<\/b>:<\/p>\n

\"12.
\n<\/p>\n

Odsek Logs & Monitor<\/h3>\n

\nAko pre\u0111ete na Logs & Monitor i otvorite novu karticu, trebalo bi da vidite otprilike slede\u0107e:<\/p>\n

\"12.
\n
\nPo difoltu ovde postoje dva velika odeljka:<\/p>\n

    \n
  1. Audit Logs View<\/b> \u2014 ovde mo\u017eete prona\u0107i sve doga\u0111aje vezane za ulaz\/izlaz administratora, promene u konfiguraciji itd. To jest, klasi\u010dan audit radnji administratora.<\/li>\n
  2. Logs View<\/b> \u2014 ovde se mo\u017ee pretra\u017eivati doga\u0111aje koje 'generi\u0161u' svi na\u0161i aktivirani moduli, bilo da je re\u010d o firewall-u, antivirusu, IPS-u itd. Vi\u0161e puta smo koristili ovu funkcionalnost.<\/li>\n<\/ol>\n

    \nPored toga, ovde su i linkovi ka izve\u0161tajima (Reports<\/b>) i raznim kontrolnim tablama (Views<\/b>). Za njihovo funkcionisanje potreban je aktivni modul Smart Event<\/b>. O tome \u0107emo kasnije. Prvo da vidimo kako raditi s logovima.<\/p>\n

    Log Search<\/h3>\n

    \nPo mom mi\u0161ljenju, rad s logovima u R80 je pravo u\u017eivanje. Imamo vrlo pametnu pretra\u017eiva\u010dku traku, koja nam omogu\u0107ava da 'pretra\u017eujemo' i po proizvoljnom tekstu, i po modu, i po bilo kojim drugim indeksiranim parametrima kao \u0161to su izvor, odredi\u0161te, akcija itd.<\/p>\n

    \"12.
    \n
    \nPri tome mo\u017eemo sastavljati vrlo slo\u017eene upite koriste\u0107i logi\u010dke operatore AND<\/b>, ILI<\/b>, NOT<\/b>. In order to do this, you don't even need to type anything. You can create a filter literally in a couple of clicks.<\/p>\n

    Displaying Log Messages by Access-List<\/h3>\n

    \nWe have already evaluated the capability to display logs by a specific access list. It's incredibly convenient and you quickly get used to it. This is especially helpful during troubleshooting. You select an interesting 'access-list' and then check below whether the needed traffic falls under it. <\/p>\n

    \"12.
    \n
    \nYou don't need to go anywhere or create a complicated log filter.<\/p>\n

    Views & Reports<\/h3>\n

    \nThe blade responsible for reporting and data visualization in Check Point is Smart Event<\/b>, which is activated on stre\u017enikom<\/a> management. This functionality could confidently be called a SIEM, but only for Check Point products! Technically, you can funnel logs from other systems (like Cisco, Microsoft, etc.) into Smart Event, but that's not usually the best idea \ud83d\ude42 In practice, it's quite problematic. However, SmartEvent handles 'Checkpoint' logs exceptionally well. It can correlate, sum up, average, and much more. And all of this works out of the box! Naturally, there are already ready-made dashboards for displaying the most important information. In Check Point, they are called Views<\/b>:<\/p>\n

    \"12.
    \n
    \nYou can see that there are quite a few default dashboards here that are very useful in everyday administration and monitoring.<\/p>\n

    Besides dashboards where information is simply visualized, there is an option to generate full reports and save them in PDF or Excel format. You can generate them on a schedule and send them to a specific email address.<\/p>\n

    And the best part! You can create your own dashboards and reports! That is, you're not limited to the built-in ones. Not every vendor can boast this. Moreover, the templates for these dashboards or reports can be imported or exported, allowing users to share their works. The process of creating a dashboard is quite simple and intuitive. I will try to show you this within the scope of the lab work, which you will find in the video lesson below.<\/p>\n

    Video lekcija<\/h3>\n

    \n

    \r\n \"Predvajaj\r\n
    <\/div>\r\n <\/div><\/center><\/p>\n

    Ostanite z nami in se pridru\u017eite na\u0161emu YouTube kanalu<\/a><\/noindex> \ud83d\ude42
    \n
    Izvor:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u0435\u043c\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0438 \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438. \u041f\u043e\u0440\u043e\u0439 \u0434\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041e\u0447\u0435\u043d\u044c \u0443\u0436 \u043b\u044e\u0431\u044f\u0442 \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u00bb \u0443\u0434\u043e\u0431\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c. \u0422\u0440\u0443\u0434\u043d\u043e \u0438\u0445 \u0432 \u044d\u0442\u043e\u043c \u0432\u0438\u043d\u0438\u0442\u044c. \u041f\u043e \u0441\u0443\u0442\u0438, \u043b\u043e\u0433\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","description":"Welcome to lesson 12.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4712. Check Point Getting Started R80.20. Logs & Reports | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 12-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/12-check-point-getting-started-r80-20-logs-reports","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:36+00:00","article:modified_time":"2019-10-31T18:54:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:46:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:11","updated":"2026-02-09 21:46:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/33772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=33772"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/33772\/revisions"}],"predecessor-version":[{"id":159761,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/33772\/revisions\/159761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/25448"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=33772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=33772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=33772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}