Ngingathanda ukukhuluma ngemikhiqizo yamahhala evela eSophos engasetshenziswa kokubili ekhaya nasebhizinisini (imininingwane ngaphansi kokusikwa). Ukusebenzisa izixazululo ze-TOP ezivela ku-Gartner kanye ne-NSS Labs kuzokwandisa kakhulu izinga lakho lokuphepha. Izixazululo zamahhala zifaka: I-Sophos UTM, i-XG Firewall (NGFW), i-Antivirus (Ikhaya le-Sophos elinokuhlunga kwewebhu kwe-Win/MAC; ye-Linux, i-Android) namathuluzi okususa uhlelo olungayilungele ikhompuyutha. Okulandelayo, sizobheka ukusebenza kwezinga eliphezulu nezinyathelo zokuthola izinguqulo zamahhala.
Namuhla, abantu abaningi banamakhompyutha aphathekayo amaningana, amaphilisi, amafoni ekhaya, kunezingosi ezikude (amakhaya abazali, izihlobo), kunezingane ezidinga ukuvikelwa kokuqukethwe okungafunwa, futhi zivikele amakhompyutha ku-ransomware/ransomware. Konke lokhu kwehlela emisebenzini yenkampani encane - enengqalasizinda ye-IT esabalalisiwe kanye nezidingo zokuphepha eziphezulu. Namuhla sizokhuluma ngemikhiqizo evumela ukuthi uxazulule lezi zinkinga mahhala ekhaya.
Ukwehla kwezwi mayelana noSophos
I-Sophos yasungulwa ngo-1985 njengenkampani ye-antivirus futhi yahlala injalo kwaze kwaba sekuqaleni kwawo-2000. Kusukela ngaleso sikhathi kuqhubeke, i-Sophos yaqala ukuthuthukisa ngezinye izindlela: ngosizo lobuchwepheshe bayo kanye nezindawo zokucwaninga, kanye nokutholwa kwezinye izinkampani. Namuhla inkampani inabasebenzi abangu-3300, ozakwethu abangu-39000 namakhasimende angu-300000. Inkampani isesidlangalaleni - imibiko yabatshalizimali iyatholakala . Inkampani yenza ucwaningo emkhakheni wezokuphepha kolwazi (SophosLabs) futhi iqaphe izindaba - ungayilandela kubhulogi naku-podcast evela eSophos - .
Injongo:
Ukuze ube ohamba phambili emhlabeni ukuhlinzeka ngokuphepha okuphelele kwe-IT kumabhizinisi anosayizi abahlukahlukene (kusuka kumabhizinisi amancane kuya ezinkampanini zamazwe ngamazwe).
Isu:
- Ukuphepha kuphela.
- Ukuvikeleka okuphelele kwenziwe kwaba lula.
- Ukuphatha kokubili endaweni ngokuphelele nangefu.
Ukuphela komthengisi we-cybersecurity ongumholi kwezokuphepha kwenethiwekhi nokuphepha kwendawo yokusebenza - babe ngabokuqala ukuqhamuka nomsebenzi wabo ohlanganyelwe. Inkampani igxile emkhakheni wezinkampani, ngakho-ke izixazululo zabasebenzisi basekhaya aziqukethe ukukhangisa futhi zisebenza ngokugcwele. Sicela uqaphele ukuthi iningi lezixazululo ezivezwe ngezansi zenzelwe ukusetshenziswa ekhaya. Zonke izixazululo zezentengiso zeSophos zingahlolwa izinsuku ezingama-30.
Eduze kwephuzu noma ake siqale ngokulandelana
Ikhasi eliyinhloko elibala cishe zonke izixazululo zamahhala yikhasi: Imikhiqizo Yamahhala ye-Sophos.
Ukuzulazula ngokushesha kusixazululo, ngizonikeza incazelo emfushane. Ukuze kube lula kuwe, izixhumanisi ezisheshayo zizonikezwa ukuthola umkhiqizo ofanele.
Izinyathelo eziyisisekelo okudingeka zithathwe cishe kuwo wonke umkhiqizo:
- Ukubhalisa - thola i-MySophos ID. Konke kusezingeni, njengakuyo yonke indawo.
- Landa isicelo. Gcwalisa izinkambu ezidingekayo.
- Thumela isheke. Ukunyakaza okungajwayelekile. Ngeshwa, lokhu akunakugwema (izimfuneko zomthetho wokuthekelisa). Lapho ulanda umkhiqizo, kufanele ugcwalise izinkambu ezifanele. Lesi sinyathelo singathatha cishe usuku (kuya ngenani lezicelo, njengoba sihlolwa mathupha). Ngokuzayo uzodinga ukuphinda ngemva kwezinsuku ezingu-90.
- Landa isicelo. Gcwalisa izinkambu ezidingekayo futhi. Into esemqoka ukusebenzisa i-imeyili negama eligcwele ukusuka kusinyathelo No. 2.
- Landa futhi ufake.
Ikhaya le-Sophos leWindows ne-Mac OS
- I-antivirus yamahhala nezilawuli zabazali. Igcina wonke amakhompyutha asekhaya ephephile nge-antivirus yamahhala ye-Sophos Home. Lokhu ukuvikela okufanayo kwe-antivirus kanye nobuchwepheshe bokuhlunga iwebhu obuthenjwa amakhulu ezinkulungwane zezinkampani, ezitholakalayo ukusetshenziswa ekhaya.
- Qapha imicimbi futhi ushintshe izilungiselelo zokuphepha zawo wonke umndeni phakathi nendawo kunoma yisiphi isiphequluli.
- Lawula ukufinyelela ngesigaba sewebhusayithi ngokuchofoza okukodwa.
- Ivikela amakhompyutha asebenzisa iWindows ne-Mac OS.
- Mahhala, kufikela kumadivayisi angu-3 nge-akhawunti ye-imeyili ngayinye.
inikeza isivikelo ku-ransomware kanye nokuxhashazwa kwabasebenzisi basekhaya, isebenzisa ubuchwepheshe ukuthola uhlelo olungayilungele ikhompuyutha olungakaveli = isivikeli magciwane sesizukulwane esilandelayo (ukusebenza komkhiqizo wentengiso ). Ikhuphula inombolo yamadivayisi angaphansi kwe-akhawunti eyodwa iye kwezingu-10. Umsebenzi uyakhokhwa, utholakala ezindaweni eziningi emhlabeni, ngeshwa awutholakali e-Russia - VPN/Proxy ukusiza.
Landa isixhumanisi .
Inguqulo yezohwebo ikuvumela ukuthi uphathe kusuka kukhonsoli eyodwa:
- - i-antivirus yezindawo zokusebenza.
- - isivikeli magciwane esinomshini ojulile wokufunda kanye ne-EDR yophenyo lwesigameko. Kungokwesigaba sezixazululo: I-Next Generation Antivirus, EDR.
- - I-antivirus ye-Windows, i-Linux kanye namaseva e-virtualization.
- — Ukuphathwa kwedivayisi yeselula — MDM, iziqukathi zokufinyelela iposi nedatha.
- - I-cloud anti-spam, isibonelo i-Office365. I-Sophos futhi inezinketho ezahlukahlukene Zasendaweni Zokulwa Nogaxekile.
- - Ukuphathwa kwezindawo zokufinyelela ze-Sophos kusuka efwini.
- - ikuvumela ukuthi wenze ama-imeyili obugebengu bokweba imininingwane ebucayi futhi uqeqeshe abasebenzi.
Isici esihlukile se-Sophos antivirus ijubane eliphezulu lenjini yokuvikela amagciwane kuhlanganiswe nokutholwa kwekhwalithi ephezulu yohlelo olungayilungele ikhompuyutha. Injini elwa namagciwane yakhelwe abanye abathengisi bezokuphepha bolwazi, isibonelo, iCisco, BlueCoat, njll. (bona. . E-Russia, injini ye-antivirus isebenzisa, isibonelo, .
I-antivirus ibalwa kwabathathu abaphezulu ngokwenguqulo , ngakho-ke, ukusebenzisa inguqulo yasekhaya ye-antivirus yezimboni ngokuqinisekile kuzokwandisa izinga eliphelele lokuphepha kolwazi lwasekhaya.
I-Sophos UTM Home Edition
Ikilasi: I-UTM (Ukuphathwa Kosongo Oluhlanganisiwe) - ummese waseSwitzerland emkhakheni wezokuphepha kolwazi (konke-kukodwa)
Umholi: , kusukela ngo-2012
Amapulatifomu: iseva ye-x86, i-virtualization (VMWare, Hyper-V, KVM, Citrix), ifu (i-Amazon), inkundla yehadiwe yasekuqaleni
I-interface yedemo iyatholakala lapha .
Landa isixhumanisi .
Izici Nencazelo:
ihlinzeka ngakho konke ukusebenza okudingekayo ukuze uvikele inethiwekhi yakho: i-firewall, ukuhlunga iwebhu, i-IDS/IPS, i-anti-spam, i-WAF, i-VPN. Okuwukuphela komkhawulo wenguqulo yasekhaya amakheli e-IP angaphakathi avikelwe angu-50. I-Sophos UTM iza njengesithombe se-ISO nesistimu yayo yokusebenza futhi ibhala ngaphezulu idatha eku-hard drive ngesikhathi sokufakwa. Ngakho-ke, ikhompyutha ehlukile, eklanywe ngokukhethekile noma umshini we-virtual iyadingeka.
Ubevele eku-Habré mayelana nokuhlela ukuhlunga kwewebhu okusekelwe ku-Sophos UTM (kusuka endaweni yokubuka esikhundleni se-Microsoft TMG).
Umkhawulo uma uqhathaniswa nenguqulo yezentengiso ukuvikela amakheli e-IP angafika kwangu-50. Ayikho imikhawulo yokusebenza!
Njengebhonasi: I-Home Edition inamalayisense ayi-12 e-Endpoint Protection antivirus, okusho ukuthi ungakwazi ukulawula kukhonsoli ye-UTM hhayi ukuphepha kwenethiwekhi kuphela, kodwa futhi nokuvikeleka kwezindawo zakho zokusebenza: sebenzisa imithetho yokuhlunga i-antivirus, ukuhlunga iwebhu kubo, lawula amadivayisi axhunyiwe - isebenza nakulawo makhompyutha angekho kunethiwekhi yendawo.
Izinyathelo:
Isigaba 1 - ukuthola iSofthiwe
- Thola i-MySophos ID - bona ngenhla.
- Gcwalisa izinkambu ezidingekayo bese uhambisa ifomu (ihlukaniswe izikrini ezimbalwa).
- Thola i-imeyili enezixhumanisi.
- Yenza isicelo sokulanda isithombe se-ISO usebenzisa izixhumanisi ezisencwadini noma ngokuqondile. Uma kudingeka, linda amasheke okulawula ukuthekelisa.
- Sebenzisa i-ISO ukuze ufake kuseva yakho ye-x86 nanoma yikuphi ukwenziwa kwezinto ezibonakalayo (VMware, Hyper-V, KVM, Citrix).
Isigaba 2 - ukuthola ilayisensi
- Landela isixhumanisi esivela encwadini engenhla ukuze uvule i-akhawunti yakho kuphothali . Uma i-imeyili yakho ike yasetshenziswa ngaphambilini, ngena noma usethe kabusha igama-mfihlo lakho ukuze uthole ukufinyelela ku-MyUTM.
- Dawuniloda ifayela lelayisense esigabeni Ukuphathwa Kwelayisensi -> Ilayisense Yokusebenzisa Ekhaya. Chofoza ilayisense bese ukhetha Ifayela Lelayisensi Lokulanda. Ifayela lombhalo elibizwa ngokuthi “ilayisensiXXXXXXX.txt” lizolandwa.
- Ngemva kokufaka, vula iphaneli yokulawula ye-WebAdmin ekhelini le-IP elishiwo: isibonelo
https://192.168.0.1:4444 - Layisha ifayela lelayisense esigabeni: Ukuphatha -> Ukunikeza Ilayisense -> Ukufaka -> Layisha.
Umhlahlandlela Wokuqalisa .
Ilayisense yakhelwe iminyaka emi-3, ngemuva kwalokho ilayisensi kumele yenziwe futhi ngokwezinyathelo zeSigaba sesi-2, ngemuva kokusula kuqala ilayisense ephelelwe yisikhathi kuphothali ye-MyUTM.
I-Sophos UTM Essential Firewall
I-firewall yamahhala yokusetshenziswa kwezentengiso. Ukuze uthole ilayisensi, kufanele ugcwalise ifomu ngokwalokhu . Ifayela lombhalo elinelayisensi yaphakade lizothunyelwa ku-imeyili yakho.
Imisebenzi: I-Firewall ifika ku-L4, umzila, i-NAT, i-VLAN, i-PPTP/L2TP ukufinyelela okukude, i-Amazon VPC, ukuhlunga kwe-GeoIP, izinsizakalo ze-DNS/DHCP/NTP, ukuphathwa kwe-Sophos SUM okumaphakathi.
Ukumelwa okubonakalayo kwemisebenzi kukhonjisiwe emfanekisweni ongenhla. Amamojula azungeza i-Essential Firewall ayizikhokhelo ezihlukene ezinelayisensi.
I-Sophos SUM
Kulula ukusebenzisa i-Sophos SUM (I-Sophos UTM Manager) yokuphatha okumaphakathi kwama-UTM ahlukene kumasayithi ahlukene. I-SUM ikuvumela ukuthi uqaphe izimo zezinhlelo ezingaphansi futhi usabalalise izinqubomgomo ngazinye kusuka kusixhumi esibonakalayo sewebhu esisodwa. Kumahhala ukusetshenziselwa ukuhweba.
Landa isixhumanisi nesicelo selayisensi . I-imeyili izoqukatha izixhumanisi zokulanda (ezifana ne-Sophos UTM) kanye nefayela lelayisense njengesinamathiseli.
I-Sophos XG Firewall Home Edition
Ikilasi: NGFW (Next Generation Firewall), UTM (Unified Threat Management) - ukuhlunga ngohlelo lokusebenza, umsebenzisi kanye nomsebenzi we-UTM
Umholi:
Amapulatifomu: iseva ye-x86, i-virtualization (VMWare, Hyper-V, KVM, Citrix), ifu (Azure), iplathifomu yokuqala yehadiwe
I-interface yedemo iyatholakala lapha .
Landa isixhumanisi .
Izici Nencazelo:
Isixazululo sikhishwe ngo-2015 ngenxa yokutholwa kwe-Cyberoam.
I-Home Edition ye-Sophos XG Firewall inikeza ukuvikeleka okuphelele kwenethiwekhi yakho yasekhaya, okuhlanganisa zonke izici zenguqulo yezentengiso: ukuvikelwa kwegciwane, ukuhlunga iwebhu ngesigaba ne-URL, ukulawula uhlelo lokusebenza, i-IPS, ukubunjwa kwethrafikhi, i-VPN (IPSec, SSL, HTML5, njll.) , ukubika, ukuqapha nokunye okuningi. Isibonelo, usebenzisa i-XG Firewall ungahlola inethiwekhi, uhlonze abasebenzisi abayingozi futhi uvimbele ithrafikhi ngohlelo lokusebenza.
- Ukuvikela okuphelele kwabasebenzisi basekhaya namanethiwekhi asekhaya.
- Ihlinzekwa njengesithombe esiphelele se-ISO esine-OS yaso esekelwe ku-Linux kernel.
- Sebenza ku-Intel-compatible hardware kanye ne-virtualization.
Ayinalayisensi ngamakheli e-IP. Umkhawulo uma uqhathaniswa nenguqulo yezohwebo ungafika ku-4 CPU cores, 6GB RAM. Ayikho imikhawulo yokusebenza!
Umhlahlandlela Wokuqalisa wenguqulo yeSoftware и .
Umphathi we-Firewall we-Sophos XG
Iwuhlelo oluthuthukisiwe lokuphatha okumaphakathi kwabangaphansi kwe-XG Firewall. Ibonisa isimo sokuvikeleka samadivayisi axhunyiwe. Ikuvumela ukuthi uphathe ukucushwa: dala izifanekiso, yenza izinguquko ezinkulu kumaqembu wamadivayisi, shintsha noma yiziphi izilungiselelo ezinhle. Ingasebenza njengendawo eyodwa yokungena yengqalasizinda esabalalisiwe. Kumahhala kumadivayisi aphethwe afika kwangu-5.
I-interface yedemo iyatholakala lapha .
Landa isixhumanisi .
I-Sophos iView
Uma unokufakwa okuningana kwe-Sophos UTM kanye/noma i-Sophos XG Firewall futhi udinga ukuba nezibalo ezifingqiwe, ungafaka i-iView, ingumqoqi we-Syslog wemikhiqizo ye-Sophos. Umkhiqizo umahhala kuze kufike ku-100GB wesitoreji.
Landa isixhumanisi .
I-Sophos Mobile Security ye-Android
I-antivirus yamahhala ewine umklomelo i-Sophos Mobile Security ye-Android ivikela amadivayisi e-Android ngaphandle kokuba nomthelela ekusebenzeni noma impilo yebhethri. Ukuvumelanisa kwesikhathi sangempela ne-SophosLabs kuqinisekisa ukuthi idivayisi yakho yeselula ihlezi ivikelekile.
- Thola uhlelo olungayilungele ikhompuyutha futhi uvimbele izinhlelo zokusebenza ezingase zingafunwa kanye nezinsongo ze-inthanethi.
- Vikela ekulahlekelweni nasekwebiweni ngokukhiya ukude, ukusulwa kwedatha nokutholwa kwendawo.
- Umeluleki Wobumfihlo kanye Nomeluleki Wokuvikela basiza ukugcina idivayisi yakho ivikeleke nakakhulu.
- I-Authenticator iphatha amaphasiwedi esikhathi esisodwa okuqinisekisa ngezinto eziningi.
- Vikela i-QR Code Scanner ivimba okuqukethwe okunonya okungase kufihlwe ngemuva kwekhodi ye-QR.
Landa isixhumanisi .
Umkhiqizo Wezentengiso: - ingeyesigaba se-MDM futhi ikuvumela ukuthi uphathe omakhalekhukhwini (i-IOS, i-Android) nezindawo zokusebenza (i-MAC OS, i-Windows) usebenzisa umqondo we-BYOD ngeziqukathi zemeyili nokulawula ukufinyelela kwedatha.
I-Sophos Mobile Security ye-iOS
Isinyathelo sokuqala sokugcina idivayisi yakho ye-iOS ivikelekile ukufaka izibuyekezo zakamuva. I-Sophos Mobile Security yesixazululo se-iOS ichaza isidingo sokufaka izibuyekezo, futhi iqukethe iqoqo lamathuluzi okuphepha alula wamadivayisi we-iOS:
- Umeluleki Wenguqulo Ye-OS uchaza izinzuzo zokuphepha zokuthuthukela enguqulweni yakamuva ye-iOS (ngezincazelo eziwusizo zezibuyekezo nokulungiswa).
- Isiqinisekisi sokuphatha amaphasiwedi esikhathi esisodwa sokufakazela ubuqiniso bezinto eziningi.
- Vikela i-QR Code Scanner ivimba okuqukethwe okunonya okungase kufihlwe ngemuva kwekhodi ye-QR.
Landa isixhumanisi .
Ithuluzi Lokususa I-Malware (HitmanPro)
Ithuluzi Lokususa Isofthiwe Ye-Windows Eliyingozi liskena ikhompuyutha yakho yonke ngezinkinga, futhi uma kukhona okutholakele, unikezwa ilayisense yamahhala yezinsuku ezingama-30 yokususa usongo. Ungalindi ukuthi ukutheleleka kwenzeke, ungasebenzisa leli thuluzi nganoma yisiphi isikhathi ukuze ubone ukuthi i-antivirus yakho yamanje noma isoftware yokuvikela indawo yokugcina isebenza kanjani.
- Isusa amagciwane, ama-Trojan, ama-rootkits, i-spyware nolunye uhlelo olungayilungele ikhompuyutha.
- Akukho ukucushwa noma ukufakwa.
- Isithwebuli samahhala, esizimele sizokhomba okugejiwe.
Landa isixhumanisi .
Umkhiqizo Wezentengiselwano: I-Sophos Clean ifakiwe emikhiqizweni eminingi yokuhweba, isb. .
Ithuluzi Lokususa Igciwane
Ithuluzi lamahhala Lokususa Igciwane lizokusiza ukuthi uthole ngokushesha futhi kalula futhi ususe izinsongo ezikulalele kukhompyutha yakho. Ithuluzi lihlonza futhi lisuse amagciwane okungenzeka ukuthi i-antivirus yakho iwagejile.
- Ukukhipha amagciwane, izikelemu, ama-rootkits nama-antivirus mbumbulu.
- Usekelo lwe-Windows XP SP2 nakamuva.
- Isebenza kanyekanye ne-antivirus ekhona.
Landa isixhumanisi .
I-Sophos Antivirus yeLinux - Uhlelo lwamahhala
Vikela amaseva akho e-Linux abalulekile futhi uvimbele zonke izinsongo—ngisho nalezo eziklanyelwe iWindows. I-antivirus ayisindi futhi kulula ukuyisebenzisa ukuze amaseva e-Linux akwazi ukugcina isivinini esikhulu. Isebenza buthule ngemuva futhi iskena ngeyodwa yamamodi alandelayo: ekufinyeleleni, lapho kudingeka khona, noma okuhleliwe.
- Icinga futhi ivimbe amafayela anonya.
- Ukufakwa okulula nokusebenza ngobuhlakani.
- Isekela izinhlobo eziningi ze-Linux, okuhlanganisa ukusatshalaliswa kwangokwezifiso nama-kernel.
- Thuthukela kalula kunguqulo yezohwebo ngokusekelwa kanye nokuphathwa okumaphakathi.
Landa isixhumanisi .
Umkhiqizo wezentengiselwano: uvumela ukuxhunywa kusistimu yokuphatha emaphakathi futhi isekela izinhlobonhlobo zezinhlelo zokusebenza - i-Linux ne-Unix.
Zisekele noma uzisize
Iwindi lokungena ngemvume elilodwa yisigaba sokusekela kuwebhusayithi yomthengisi - , ngokusesha ekupheleni kuzo zonke izinsiza. Eyehlukile idalelwe iSophos Home .
Kunezindlela ezintathu eziyinhloko zokuthola isisombululo senkinga:
- Imibhalo, ezimweni eziningi yakhelwa kumkhiqizo ngokwawo, kepha uma ufuna ukufunda i-PDF ngaphambi kokulala, kunesigaba. .
- Isisekelo solwazi sitholakala esidlangalaleni eSophos. Lapha ungabona izimo zezilungiselelo eziyinhloko nezikhathi ezinzima. Cm. .
- Umphakathi wabasebenzisi okuvumela ukuthi uthole isixazululo senkinga yakho utholakala kuwo .
Kumakhasimende ezentengiselwano, vele, kukhona ukwesekwa okugcwele okuvela kubo bobabili umthengisi kanye nomsabalalisi. E-Russia, i-CIS ne-Georgia - kusuka .
Zivikele ku-ransomware!
Ekugcineni, ungabuka ividiyo mayelana ne-Time Machine ukuze uvikele ku-ransomware :)
Source: www.habr.com