{"id":95683,"date":"2020-10-02T01:42:24","date_gmt":"2020-10-01T23:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika"},"modified":"2020-10-02T01:42:24","modified_gmt":"2020-10-01T23:42:24","slug":"obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","title":{"rendered":"Pregled osnovne funkcionalnosti Sophos XG Firewall (del 1 \u201cMonitoriranje in analiza\u201d)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Pregled
\nPozdravljeni! V nadaljevanju tega \u010dlanka<\/a><\/noindex> bi vam rad podrobneje predstavil funkcionalnosti, ki jih ponuja re\u0161itev Sophos XG Firewall, ter vas seznanil z njegovim spletnim vmesnikom. Komercialni \u010dlanki in dokumenti so dobrodo\u0161li, vendar je vedno zanimivo, kako re\u0161itev izgleda v \u017eivo? Kako je vse organizirano? Zato se posvetimo pregledu.
\n<\/a><\/noindex>
\nV tem \u010dlanku bo prikazana prva del funkcionalnosti Sophos XG Firewall \u2014 to je \u201eNadzor in analiza\u201c. Celoten pregled bo izdan kot ciklus \u010dlankov. Potovali bomo, izhajajo\u010d iz spletnega vmesnika Sophos XG Firewall in tabele licenciranja.<\/p>\n

\"Pregled
\n<\/p>\n

Center za upravljanje varnosti<\/h1>\n

\nTako smo odprli brskalnik in odprli spletni vmesnik na\u0161ega NGFW, vidimo poziv za vnos uporabni\u0161kega imena in gesla za dostop do administracije.<\/p>\n

\"Pregled
\n
\nVnesemo uporabni\u0161ko ime in geslo, ki smo jih dolo\u010dili ob prvotni aktivaciji, in pridemo do na\u0161ega upravljalskega sredi\u0161\u010da. Izgleda tako:<\/p>\n

\"Pregled
\n
\nSkoraj vsak od teh gradnikov je klikabilen. Lahko pridemo do incidenta in si ogledamo podrobnosti.<\/p>\n

Poglejmo si vsako od blokov in za\u010dnimo z blokom Sistem.<\/p>\n

Blok Sistem<\/h2>\n

\n\"Pregled<\/p>\n

Ta blok prikazuje stanje naprave v realnem \u010dasu. \u010ce pritisnemo na katero koli od ikonic, preidemo na stran s podrobnimi informacijami o stanju sistema.<\/p>\n

\"Pregled
\n
\n\u010ce ima sistem te\u017eave, bo ta gradnik o tem signaliziral, na strani informacij pa lahko pogledamo vzrok.<\/p>\n

\"Pregled
\n
\nPreko zavihkov lahko pridobimo ve\u010d informacij o razli\u010dnih vidikih delovanja po\u017earnega zidu.<\/p>\n

\"Pregled
\n
\n\"Pregled
\n
\n\"Pregled
\n<\/p>\n

Blok Pregled prometa<\/h2>\n

\n\"Pregled<\/p>\n

Ta razdelek nam daje predstavo o tem, kaj se trenutno dogaja v na\u0161i mre\u017ei in kaj se je dogajalo v zadnjih 24 urah. Top 5 spletnih kategorij in aplikacij po prometu, omre\u017eni napadi (aktivacija IPS modula) ter top 5 blokiranih aplikacij.<\/p>\n

Prav tako je vredno izpostaviti razdelek Oblak aplikacije. V njem lahko pogledamo, katere aplikacije v lokalni mre\u017ei uporabljajo obla\u010dne storitve. Skupno \u0161tevilo, vhodni in izhodni promet. \u010ce pritisnemo na ta gradnik, pridemo na stran informacij o obla\u010dnih aplikacijah, kjer bomo lahko podrobneje pregledali, katere obla\u010dne aplikacije so v omre\u017eju, kdo jih uporablja in informacije o prometu.<\/p>\n

\"Pregled
\n<\/p>\n

Blok Uporabni\u0161ke & naprave vpogledi<\/h2>\n

\n\"Pregled<\/p>\n

Ta blok prikazuje informacije o korisnicima. Gornji redak pokazuje nam informacije o zara\u017eenim ra\u010dunalima korisnika, prikuplja informacije od antivirusnog programa Sophos i proslje\u0111uje ih u Sophos XG Firewall. Na temelju tih informacija, Firewall mo\u017ee isklju\u010diti korisni\u010dko ra\u010dunalo iz lokalne mre\u017ee ili sektora mre\u017ee na L2 razini, blokiraju\u0107i sve veze s njim. Vi\u0161e pojedinosti o Security Heartbeat-u je bilo u this article<\/a><\/noindex>. Nadalje, dva retka su kontrola aplikacija i obla\u010dna sandbox funkcionalnost. Budu\u0107i da je to zaseban funkcionalni sklop, u ovom \u010dlanku se ne\u0107e razmatrati.<\/p>\n

Treba obratiti pa\u017enju na dva donja widgeta. To su ATP (Advanced Threat Protection) i UTQ (User Threat Quotient).<\/p>\n

ATP modul blokira veze s C&C, upravlja\u010dkim poslu\u017eiteljima botnet mre\u017ea. Ako je ure\u0111aj u va\u0161oj lokalnoj mre\u017ei postao dio botnet mre\u017ee, ovaj modul \u0107e o tome obavijestiti i onemogu\u0107iti povezivanje s upravlja\u010dkim poslu\u017eiteljem. Izgleda to ovako<\/p>\n

\"Pregled<\/p>\n

\"Pregled
\n
\nUTQ modul dodjeljuje svakom korisniku indeks sigurnosti. \u0160to vi\u0161e korisnik poku\u0161ava posjetiti zabranjene stranice ili pokrenuti zabranjene aplikacije, njegov rejting raste. Oslanjaju\u0107i se na te podatke, mo\u017ee se unaprijed provesti obuka za takve korisnike, ne \u010dekaju\u0107i da na kraju njihovo ra\u010dunalo bude zara\u017eeno zlonamjernim softverom. Izgleda to ovako<\/p>\n

\"Pregled
\n
\nNakon toga slijedi odjeljak op\u0107ih informacija o aktivnim pravilima vatrozida i brzi izvje\u0161taji koje je mogu\u0107e brzo preuzeti u pdf formatu<\/p>\n

\"Pregled<\/p>\n

Prelazimo na sljede\u0107i odjeljak izbornika \u2014 Current activities <\/p>\n

Current activities<\/h1>\n

\n\"Pregled
\n
\nZapo\u010dnimo pregled s kartice Live users. Na ovoj stranici mo\u017eemo vidjeti tko je od korisnika trenutno povezan na Sophos XG Firewall, metodu autentifikacije, IP adresu ure\u0111aja, vrijeme povezivanja i koli\u010dinu prometa.<\/p>\n

Live connections<\/h2>\n

\n\"Pregled
\n
\nNa ovoj kartici prikazane su aktivne sesije u stvarnom vremenu. Ovu tablicu mo\u017eemo filtrirati prema aplikacijama, korisnicima i IP adresama klijentskih ure\u0111aja. <\/p>\n

IPsec connections<\/h2>\n

\n\"Pregled
\n
\nNa ovoj kartici prikazane su informacije o aktivnim IPsec VPN vezama<\/p>\n

Kartica Remote users<\/h2>\n

\nNa kartici Remote users nalaze se informacije o udaljenim korisnicima koji su se povezali putem SSL VPN<\/p>\n

\"Pregled
\n
\nTako\u0111er, na ovoj kartici mo\u017eete vidjeti promet po korisnicima u stvarnom vremenu i prisilno isklju\u010diti bilo kojeg korisnika.<\/p>\n

Presko\u010dimo na karticu Izve\u0161taji, jer je sistem izve\u0161tavanja u ovom proizvodu veoma opse\u017ean i zahteva poseban \u010dlanak.<\/p>\n

Dijagnostika<\/h1>\n

\n\"Pregled
\n
\nOdmah se otvara stranica sa razli\u010ditim alatima za re\u0161avanje problema. Oni uklju\u010duju Ping, Traceroute, Proveru imena, Proveru rute.<\/p>\n

Zatim dolazi kartica sa sistemskim grafikonima optere\u0107enja hardvera i portova u realnom vremenu.<\/p>\n

Sistemski grafikon<\/h2>\n

\n\"Pregled
\n
\nPotom postoji kartica gde mo\u017eete proveriti kategoriju veb resursa.<\/p>\n

Provera kategorije URL-a<\/h2>\n

\n\"Pregled
\n
\nSlede\u0107a kartica \u0160tap preuzimanja \u2014 to je u su\u0161tini ugra\u0111eni tcpdump u veb interfejs. Mo\u017eete tako\u0111e pisati filtre.<\/p>\n

\u0160tap preuzimanja<\/h2>\n

\n\"Pregled<\/p>\n

\"Pregled
\n
\nInteresantno je napomenuti da se paketi pretvaraju u tabelu u kojoj mo\u017eete isklju\u010diti i uklju\u010diti dodatne kolone sa informacijama. Ova funkcionalnost je vrlo zgodna za prepoznavanje mre\u017enih problema, na primer \u2014 mo\u017eete brzo razumeti koje su pravila filtriranja primenjena na stvarni saobra\u0107aj.<\/p>\n

\"Pregled<\/p>\n

Na kartici Lista veza mo\u017eete pogledati sve postoje\u0107e konekcije u realnom vremenu i informacije o njima.<\/p>\n

Lista veza<\/h2>\n

\"Pregled
\n<\/p>\n

Zaklju\u010dek<\/h1>\n

\nTime zavr\u0161avamo prvi deo pregleda. Razmotrili smo samo najmanji deo dostupne funkcionalnosti i uop\u0161te se nismo dotakli modula za\u0161tite. U slede\u0107em \u010dlanku razmotri\u0107emo ugra\u0111enu funkcionalnost izve\u0161tavanja i pravila firewall-a, njihove vrste i svrhe. <\/p>\n

Hvala za va\u0161 \u010das.<\/p>\n

\u010ce imate vpra\u0161anja glede komercialne razli\u010dice XG Firewall, nam lahko pi\u0161ete \u2014 podjetju Faktor skupine<\/a><\/noindex>, distributerju Sophos. Zado\u0161\u010da, da napi\u0161ete v prosti obliki na sophos@fgts.ru<\/a><\/noindex>.
\n
Izvor: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Sophos XG Firewall \u0438 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c. \u041a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0432\u0435\u0434\u044c \u0432\u0441\u0435\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0430 \u043a\u0430\u043a \u0436\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0436\u0438\u0432\u0443\u044e? \u041a\u0430\u043a \u0432\u0441\u0435 \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e? \u0418\u0442\u0430\u043a, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c \u043a \u043e\u0431\u0437\u043e\u0440\u0443. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95684,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pregled osnovnog funkcionalnosti Sophos XG Firewall (deo 1 \u201cPra\u0107enje i analiza\u201d) | ProHoster","description":"Zdravo svima.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 Sophos XG Firewall (\u0447\u0430\u0441\u0442\u044c 1 \u201c\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u201d) | ProHoster","og:description":"\u0412\u0441\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/obzor-osnovnogo-funkczionala-sophos-xg-firewall-chast-1-monitoring-i-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T23:42:24+00:00","article:modified_time":"2020-10-01T23:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95683","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:59:42","updated":"2022-09-28 15:05:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/95683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=95683"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/95683\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/95684"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=95683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=95683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=95683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}