Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Mhoroi mose! Nhasi tichataura nezve nzira yekuwana bhizinesi kirasi chigadzirwa chine zvizere kushanda kweimba yako mahara zvachose.
Kumba ini ndinoshandisa zvinotevera mabasa:

  • Ini ndinosefa web traffic yevashandisi vekumba (iyo Internet yemazuva ano, kunyangwe ikashandiswa zviri pamutemo, inogona kuve yakavanzika kune vashandisi vemba);
  • Ini ndinoronga kutaurirana pakati pemafurati uye imba yezhizha (izvi zvinokutendera kuti utyaire multicast rukova rwefirimu re4K kubva kune minidlna server kuburikidza neVPN tunnel kuenda kuTV mune imwe imba (UpLinks pa100 Mbit))
  • Kuchengetedza Yenharaunda Nextcloud Server ine WAF

Inonakidza? Zvadaro kugamuchirwa pasi pekucheka.

Tose tinoziva kuti internet yedu yatinoda yave nzvimbo ine njodzi kune mushandisiwo zvake. Vazhinji vedu tinofanira kubata nhengo dzemhuri (vana, vabereki, vanasekuru nasekuru) vachitora mavhairasi akasiyana-siyana pamakombiyuta avo ekumba, uye isu, se "muri vagadziri vemapurogiramu," tinofanira kuchenesa zvese izvi nesimbi inopisa (fomati c:). Zvakare, chero ani zvake ane mavhairasi ekumba angangodaro akambofunga nezvekudzivirira kubva ku "cool hackers," marobhoti ane hukasha, hacking through exploits, nezvimwewo. 99% yematambudziko aya anogona kuseferwa ne firewall, kudzivirira, semuenzaniso, amai vako kuti vasabve paYandex search results kuenda kune saiti yakaipa ine mavhairasi akawanda, kana kuona nekudzivirira kuedza kushandisa exploit inozivikanwa mushanduro yekare yeApache kana plugin mu WordPress, kana wakangoerekana usina nguva yekuzvigadzirisa pasevha yako yekumba, kana kuti vagadziri vemapurogiramu vasina nguva yekugadzirisa dambudziko guru riri muchigadzirwa chavo.

"Uye chii mhinduro iyi inogadzirisa matambudziko ese aya?" munobvunza, uye ini ndichapindura - ndizvo Sophos XG FirewallJehovha, ndinokumbira kuti mude nenyasha. Heino ruzivo nezve chigadzirwa uye muchidimbu nezve mutengesi:

Sophos yakavambwa muna 1985 muOxford, UK. Kambani iyi ine vashandi vanopfuura zviuru zvitatu nemazana matatu. Iyo kambani ine nzvimbo dzebudiriro nemahofisi pasi rese. Inobata chete nezvigadzirwa kuti ive nechokwadi chekuchengetedzwa kwakazara pamatanho ese etiweki: iyo chete munyika inotungamira muGartner's quadrants munzvimbo dzinoverengeka kamwechete: UTM uye antiviruses. 

Sophos XG Firewall ndeye bhizinesi-chikamu mhinduro, ndeye NextGen Firewall (NGFW) kirasi. Musiyano mukuru kubva kune yekare Firewall ndeyekuti mushandisi ari pakati pedziviriro, kwete maprotocol kana madoko, sezvakaita mukirasi Firewall.

Mazita ekushanda nemarezinesi:

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose
Izvo zvakakosha kuti ticherechedze kuti chigadzirwa chatove chakazara-chakazara Webhu Chikumbiro Firewall, antispam uye inochinjika yekuzivisa kune ese mamodule akavakirwa mazviri.

Usarega izwi rekuti "marezinesi" richikuvhundutsa. Nekushandisa kwekutengesa, chigadzirwa chakabhadharwa zvechokwadi. Asi kushandiswa kwemusha, chigadzirwa chacho chakasununguka zvachose. "Kubata kupi?" unobvunza. Munhu wose anoziva kuti cheese yakasununguka ndeyedu chete ... Uye pano tinosvika kune chikamu chinonyanya kufadza, kune zvisingakwanisi shanduro yemahara yeimba, hongu, pane zvisingakwanisi, hongu:

  • Iwe haugone kuisa iyo yekumba vhezheni yekushandiswa kwekutengesa;
  • haigone kuiswa pamushini une anopfuura 4 cores uye 6 GB ye RAM;
  • Hazvizogoneke kushandisa sandbox.

Uye ndizvozvo, hapasisina zvirambidzo. Kwete mukushanda, kwete muhuwandu hwevashandisi, kwete mumasiginecha dhatabhesi, hapana chimwe chinhu. Hapasisina misiyano kubva kune yakatengwa chigadzirwa ine FullGuard rezinesi. Uye hapana kubata. Tora ushandise.

Haunditendi here? Ndobva ndati utore wozvionera wega. Saka chii chaunoda kuti ichi chigadzirwa chechishamiso chishande?

  1. Sevha yehardware kana muchina chaiwo usina anopfuura 4 cores uye 6 GB ye RAM (nenzira, izvi zvakakwana kupa chengetedzo kune vanopfuura makumi matatu vashandisi vanoshanda pasina kana kutyora ziya)
  2. SSD dhisiki isiri pasi pe64 GB
  3. Anenge maviri network interfaces (LAN neWAN)

Inotsigirwa virtualization mapuratifomu: 

  1. VMWare
  2. Hyper-V
  3. KVM
  4. Citrix XenApp
  5. Microsoft Azure

Kune imwe neimwe yemapuratifomu aya kune pre-yakagadzirirwa virtual muchina ane pre-yakaiswa maturusi uye madhiraivha eiyo hypervisor. 

Ngatifambei takananga kuhurongwa hwekutoresa imba yedu rezenisi. Tichada chero VPN yekunze. Zvese zvimwe zviito zvinofanirwa kuitwa kubva pasi peiyo IP kero yeimwe nyika.

Chinhu chekutanga chaunofanirwa kuita kugadzira account yako pawebhusaiti yeSophos, kubva kwatinogona kudhawunirodha kugovera, kutonga marezinesi, nezvimwe. Izvi zvinogona kuitwa zviri nyore, uchishandisa iyi link: https://id.sophos.com/
Iwindo remvumo rinovhurika pamberi pako, isu tichafanirwa kudzvanya paGadzira Sophos ID bhatani:

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose
Tevere, zadza minda yese uye tinya Register

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose
Tevere, tinoenda kune yedu tsamba, tevera chinongedzo chiri mutsamba, gadzira password uye pinda muakaundi yedu nyowani. Ndizvozvo, isu takagadzira account. 

Enda kune peji rezvigadzirwa zvemahara kubva kuSophos uchishandisa iyi link
https://www.sophos.com/en-us/products/free-tools.aspx

Skira kune chikamu cheSophos XG Firewall Home Edition uye tinya Dhawunirodha. Papeji rinotevera, tinya bhatani rekuti Tanga.

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Ngatizadze ruzivo nezvedu:

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Chinhu chikuru ndechekuti email yaunotsanangura pano inoenderana neemail yawakashandisa kunyoresa yako Sophos portal.

Mushure mematanho aya, iwe uchaona iyi meseji nezve yakabudirira chikumbiro:

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Papeji rino unogona kurodha Software vhezheni yeXG. Dzvanya bhatani reKudhawunirodha, gamuchira chibvumirano cherezinesi uye tinya Tumira. Kudhawunirodha kwe.iso mufananidzo weSophos XG Firewall ichatanga, inogona kuiswa pane chero x86 hardware.

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Uye email ine kiyi yerezinesi remba yeSophos XG Firewall inofanira kusvika kune yako email kero.

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Kana iwe uchida mufananidzo wemashini chaiwo, wobva waita zvinotevera:

Ngatiendei zvakananga kune portal pachayo MySophos uye pinda uchishandisa account yedu yatakagadzira kare.

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Tevere, tinya pa Network Dziviriro -> Dhawunirodha Vanoisa mune menyu kuruboshwe uye iwe uchaendeswa kune peji kwaunogona kudhawunirodha ese ari maviri eSoftware disk mufananidzo uye Sophos XG Firewall chaiyo muchina mifananidzo.

Maitiro ekutora NextGen Firewall yeimba yako yemahara zvachose

Sarudza kuti ndeipi vhezheni yakakodzera hypervisor yako.

Dzvanya pabhatani reKudhawunirodha uye ona peji ine chibvumirano cherezinesi, gamuchira uye tinya chinotevera, zvese zvakafanana nezviri muSoftware vhezheni.

Nekuda kweizvozvo, takagamuchira dhisiki yekuisa ine system uye kiyi yerezinesi ine zvizere kushanda kusvika 2999. 

Zvadaro, unogona kutanga kugadzirisa matambudziko ako ekuchikoro. Iwe unogona kutanga nekuverenga iyo Kutanga Gwaro reSoftware vhezheni pa Chirungu uye pamusoro ChiRussian. Woenda kumukuru zvinyorwa uye vhura zivo base.

Ndatenda nenguva yenyu.

Kana iwe uine chero mibvunzo nezve vhezheni yekutengesa yeXG Firewall, unogona kutibata - iyo kambani factor group, Sophos muparidzi. Zvese zvaunofanirwa kuita kunyora nemahara fomu pa sophos@fgts.ru.

Source: www.habr.com

Tenga inovimbika yekutambira kwemasaiti ane DDoS dziviriro, VPS VDS maseva 🔥 Tenga webhusaiti yakavimbika ine dziviriro yeDDoS, maseva eVPS VDS | ProHoster