Mhoroi mose! Mukuenderera mberi kweizvi zvinyorwa Ini ndoda kukuudza zvimwe nezve mashandiro ayo Sophos XG Firewall mhinduro inopa uye kukuzivisa iwe kune yewebhu interface. Zvinyorwa zvekutengesa uye zvinyorwa zvakanaka, asi zvinogara zvichifadza, mhinduro yacho inoratidzika sei muupenyu chaihwo? Zvinhu zvese zvinoshanda sei ikoko? Saka ngatitangei nekuongorora.

Ichi chinyorwa chicharatidza chikamu chekutanga cheSophos XG Firewall mashandiro - "Monitoring uye Analytics". Ongororo yakazara ichaburitswa senhevedzano yezvinyorwa. Tichaenderera mberi zvichibva paSophos XG Firewall web interface uye tafura yerezinesi

Trust Center

Uye saka, isu takatangisa bhurawuza uye tikavhura iyo webhu interface yeNGFW yedu, tinoona kukurumidza kuisa zita rako rekushandisa nepassword kuti upinde admin panel.

Isu tinoisa iyo login uye password yatinoisa panguva yekutanga activation uye tisvike kunzvimbo yedu yekutonga. Anoratidzika seizvi

Anenge ese emamwe majeti aya anodzvanywa. Iwe unogona kuwira muchiitiko chacho uye ona tsanangudzo.

Ngatitarisei pane imwe neimwe yezvivharo, uye isu tichatanga neSystem block

Block System

Iyi block inoratidza mamiriro emuchina munguva chaiyo. Kana iwe ukadzvanya pane chero zvidhori, isu tinoenda kune peji ine ruzivo rwakadzama nezve system mamiriro

Kana paine matambudziko muhurongwa, saka widget iyi icharatidza izvi, uye pane ruzivo peji unogona kuona chikonzero

Nekudzvanya kuburikidza nematebhu, unogona kuwana rumwe ruzivo nezve akasiyana mafirewall.

Traffic insight block

Ichi chikamu chinotipa pfungwa yezviri kuitika panetiweki yedu panguva ino uye zvakaitika mumaawa makumi maviri nemana apfuura. Epamusoro mashanu ewebhu mapoka uye maapplication netraffic, network kurwiswa (IPS module yakakonzeresa) uye epamusoro mashanu akavharirwa maapplication.

Zvakare, iyo Cloud Zvishandiso chikamu chakakodzera kuratidza zvakasiyana. Mariri iwe unogona kuona kuvepo kwezvishandiso pane yemuno network inoshandisa makore masevhisi. Nhamba yavo yese, traffic inouya neinobuda. Kana iwe ukadzvanya pane iyi widget, isu tichaendeswa kune iyo ruzivo peji pane gore maapplication, kwatinogona kuona zvakadzama kuti ndeapi maapplication ari pane network, anoashandisa uye ruzivo rwetraffic.

Mushandisi & mudziyo zviziviso block

Iyi block inoratidza ruzivo nezve vashandisi. Mutsara wepamusoro unotiratidza ruzivo nezve hutachiona hwevashandisi makomputa, kuunganidza ruzivo kubva kuSophos antivirus uye nekuiendesa kuSophos XG Firewall. Zvichienderana neruzivo urwu, Firewall inogona, kana yatapukirwa, kubvisa komputa yemushandisi kubva kunetiweki yemunharaunda kana network segment padanho reL2, ichivharira kutaurirana kwese nayo. Ruzivo rwakawanda nezveSecurity Heartbeat yaivemo ichi chinyorwa. Mitsetse miviri inotevera ndeye kutonga kwekushandisa uye cloud sandbox. Sezvo ichi chiri chakasiyana mashandiro, hachizokurukurwa munyaya ino.

Izvo zvakakodzera kubhadhara kune maviri ezasi majeti. Aya ndiwo ATP (Advanced Threat Protection) uye UTQ (User Threat Quotient).

Iyo ATP module inovhara kubatana neC&C, maseva ekudzora e botnet network. Kana chishandiso panetiweki yako yemuno chiri mu botnet network, iyi modhi inoshuma izvi uye haizokubvumiri kuti ubatanidze kune control server. Zvinoita seizvi

Iyo UTQ module inopa chengetedzo index kumushandisi wega wega. Kana mushandisi akanyanya kuyedza kuenda kunzvimbo dzinorambidzwa kana kumhanyisa maapplication anorambidzwa, zviyero zvake zvinobva zvawedzera. Kubva pane iyi data, zvinokwanisika kupa dzidziso kuvashandisi vakadaro nguva isati yasvika pasina kumirira chokwadi chekuti, pakupedzisira, komputa yavo ichabatwa ne malware. Zvinoita seizvi

Inotevera chikamu cheruzivo rwakakwana nezve inoshanda firewall mitemo uye inopisa mishumo, iyo inogona kukurumidza kutorwa mu pdf fomati

Ngatienderere mberi kune chikamu chinotevera chemenu - Zviitwa zvazvino

Zviitwa zvazvino

Ngatitange ongororo neLive vashandisi tebhu. Pane ino peji isu tinogona kuona kuti ndevapi vashandisi vari parizvino vakabatana neSophos XG Firewall, iyo nzira yechokwadi, IP kero yemuchina, nguva yekubatanidza uye traffic traffic.

Live zvinongedzo

Iyi tebhu inoratidza masesheni anoshanda munguva chaiyo. Iyi tafura inogona kusefa nezvishandiso, vashandisi uye IP kero yemakina evatengi.

IPsec kubatana

Iyi tebhu inoratidza ruzivo nezve inoshanda IPsec VPN kubatana

Remote vashandisi tab

Iyo Remote vashandisi tebhu ine ruzivo nezve vashandisi vari kure vakabata kuburikidza neSSL VPN

Zvakare, pane ino tebhu iwe unogona kuona traffic nemushandisi munguva chaiyo uye nechisimba kudzima chero mushandisi.

Ngatisvetukei iyo Mishumo tebhu, sezvo iyo yekuzivisa system muchigadzirwa ichi yakakura kwazvo uye inoda chinyorwa chakasiyana.

Diagnostics

Peji ine zvakasiyana-siyana zvekutsvaga zvibatsiro zvinongovhura. Izvi zvinosanganisira Ping, Traceroute, Name lookup, Route lookup.

Inotevera tebhu ine system magirafu e Hardware uye port kurodha munguva chaiyo

System magirafu

Wobva waita tab kwaunogona kutarisa chikamu chewebhu sosi

URL chikamu chekutsvaga

Iyo inotevera tebhu, Packet capture, inonyanya tcpdump interface yakavakirwa muwebhu. Iwe unogona zvakare kunyora mafirita

Packet kutorwa

Chinhu chinonakidza chekucherechedza ndechekuti mapakeji anoshandurwa kuita tafura kwaunogona kudzima uye kugonesa mamwe makoramu ane ruzivo. Izvi zvinoshanda zvakanyanya nyore kuwana matambudziko etiweki, semuenzaniso - unogona kukurumidza kunzwisisa kuti ndeipi mitemo yekusefa yakashandiswa kune chaiyo traffic.

PaKubatanidza Rondedzero tebhu unogona kuona ese aripo ekubatanidza munguva chaiyo uye ruzivo pazviri

Connection List

mhedziso

Izvi zvinopedzisa chikamu chekutanga chekuongorora. Isu takaongorora chete chikamu chidiki cheiyo iripo mashandiro uye hatina kubata pane ekuchengetedza mamodule zvachose. Muchinyorwa chinotevera tichaongorora yakavakirwa-mukati mishumo mashandiro uye mitemo firewall, mhando dzavo uye zvinangwa.

Ndinokutendai nenguva yenyu.

Kana iwe uine chero mibvunzo nezve vhezheni yekutengesa yeXG Firewall, unogona kutibata isu, iyo kambani factor group, Sophos muparidzi. Zvese zvaunofanirwa kuita kunyora nemahara fomu pa [email inodzivirirwa].

Source: www.habr.com