Sanibonani nonke! Ekuqhubekeni kwalokhu izindatshana Ngifuna ukukutshela kabanzi mayelana nokusebenza okuhlinzekwa yisisombululo se-Sophos XG Firewall futhi ngikwethule ku-interface yewebhu. Izihloko zezentengiselwano namadokhumenti zinhle, kodwa kuhlale kuthakazelisa, ingabe ikhambi libukeka kanjani ekuphileni kwangempela? Konke kusebenza kanjani lapho? Ngakho-ke ake siqale ngesibuyekezo.

Lesi sihloko sizobonisa ingxenye yokuqala yokusebenza kwe-Sophos XG Firewall - "Ukuqapha Nokuhlaziya". Isibuyekezo esigcwele sizoshicilelwa njengochungechunge lwezihloko. Sizoqhubeka ngokususelwa kusixhumi esibonakalayo sewebhu seSophos XG Firewall kanye netafula lamalayisensi

Trust Center

Ngakho-ke, sethule isiphequluli futhi savula isixhumi esibonakalayo sewebhu ye-NGFW yethu, sibona ukwaziswa kokufaka igama lakho lomsebenzisi nephasiwedi ukuze ufake indawo yomqondisi.

Sifaka ukungena ngemvume nephasiwedi esiyibeka ngesikhathi sokuvula kokuqala bese sifika esikhungweni sethu sokulawula. Ubukeka kanje

Cishe wonke lawa mawijethi ayachofozeka. Ungawela kulesi sigameko futhi ubone imininingwane.

Ake sibheke ibhulokhi ngayinye, futhi sizoqala ngebhulokhi Yesistimu

Vimba Isistimu

Leli bhulokhi libonisa isimo somshini ngesikhathi sangempela. Uma uchofoza kunoma yiziphi izithonjana, sizoya ekhasini elinolwazi oluningiliziwe mayelana nesimo sohlelo

Uma kunezinkinga ohlelweni, lesi sinqunjwana sizobonisa lokhu, futhi ekhasini lolwazi ungabona isizathu

Ngokuchofoza kumathebhu, ungathola ulwazi olwengeziwe mayelana nezici ezihlukene zohlelo lokuvikela.

Ibhulokhi lemininingwane yethrafikhi

Lesi sigaba sisinika umbono walokho okwenzeka kunethiwekhi yethu okwamanje nokuthi kwenzekeni emahoreni angama-24 edlule. Izigaba ezi-5 eziphezulu zewebhu nezinhlelo zokusebenza ngethrafikhi, ukuhlaselwa kwenethiwekhi (i-IPS module icushiwe) kanye nezinhlelo zokusebenza ezi-5 eziphezulu ezivinjiwe.

Futhi, isigaba sezinhlelo zokusebenza zamafu kufanele sigqanyiswe ngokuhlukile. Kuyo ungabona ubukhona bezinhlelo zokusebenza kunethiwekhi yendawo ezisebenzisa izinsiza zamafu. Inani labo eliphelele, ithrafikhi engenayo nephumayo. Uma uchofoza lesi sinqunjwana, sizoyiswa ekhasini lolwazi ngezinhlelo zokusebenza zamafu, lapho singabona khona kabanzi ukuthi yiziphi izinhlelo zokusebenza zamafu ezikunethiwekhi, ubani ozisebenzisayo kanye nolwazi lwethrafikhi.

Ukuvimba kwemininingwane yomsebenzisi nedivayisi

Le block ibonisa ulwazi mayelana nabasebenzisi. Umugqa ophezulu usikhombisa ulwazi mayelana namakhompyutha abasebenzisi abangenwe yileli gciwane, ukuqoqa ulwazi ku-antivirus ye-Sophos bese uludlulisela ku-Sophos XG Firewall. Ngokusekelwe kulolu lwazi, i-Firewall, lapho ithelelekile, ingakwazi ukunqamula ikhompuyutha yomsebenzisi kunethiwekhi yendawo noma ingxenye yenethiwekhi ezingeni le-L2, ivimbe konke ukuxhumana nayo. Ulwazi olwengeziwe mayelana ne-Security Heartbeat belungenile lesi sihloko. Imigqa emibili elandelayo isilawuli sohlelo lokusebenza nebhokisi lesihlabathi samafu. Njengoba lokhu kuwumsebenzi ohlukile, ngeke kuxoxwe ngakho kulesi sihloko.

Kuyafaneleka ukunaka amawijethi amabili aphansi. Lezi yi-ATP (Advanced Threat Protection) kanye ne-UTQ (User Threat Quotient).

Imojula ye-ATP ivimba ukuxhumana ne-C&C, amaseva okulawula amanethiwekhi e-botnet. Uma idivayisi kunethiwekhi yakho yendawo ikunethiwekhi ye-botnet, le mojula izobika lokhu futhi ngeke ikuvumele ukuthi uxhume kuseva yokulawula. Kubukeka kanje

Imojula ye-UTQ yabela inkomba yezokuphepha kumsebenzisi ngamunye. Uma umsebenzisi ezama kakhulu ukuya kumasayithi anqatshelwe noma asebenzise izinhlelo zokusebenza ezinqatshelwe, kulapho isilinganiso sakhe sikhuphuka khona. Ngokusekelwe kule datha, kungenzeka ukunikeza ukuqeqeshwa kubasebenzisi abanjalo kusengaphambili ngaphandle kokulinda iqiniso lokuthi, ekugcineni, ikhompyutha yabo izongenwa yi-malware. Kubukeka kanjena

Okulandelayo yisigaba solwazi olujwayelekile mayelana nemithetho ye-firewall esebenzayo nemibiko eshisayo, engalandwa ngokushesha ngefomethi ye-pdf

Masiqhubekele esigabeni esilandelayo semenyu - Imisebenzi yamanje

Imisebenzi yamanje

Masiqale isibuyekezo ngethebhu yabasebenzisi ababukhoma. Kuleli khasi singabona ukuthi yibaphi abasebenzisi abaxhumeke ku-Sophos XG Firewall, indlela yokuqinisekisa, ikheli le-IP lomshini, isikhathi sokuxhuma kanye nevolumu yethrafikhi.

Ukuxhumana okubukhoma

Le thebhu ibonisa izikhathi ezisebenzayo ngesikhathi sangempela. Leli thebula lingahlungwa ngezinhlelo zokusebenza, abasebenzisi namakheli e-IP emishini yamaklayenti.

Izixhumanisi ze-IPsec

Le thebhu ibonisa ulwazi mayelana noxhumo olusebenzayo lwe-IPsec VPN

Ithebhu yabasebenzisi berimothi

Ithebhu yabasebenzisi abakude iqukethe ulwazi olumayelana nabasebenzisi abakude abaxhume nge-SSL VPN

Futhi, kule thebhu ungakwazi ukubuka ithrafikhi ngomsebenzisi ngesikhathi sangempela futhi unqamule ngokunamandla noma yimuphi umsebenzisi.

Aseqe ithebhu ethi Imibiko, njengoba isistimu yokubika kulo mkhiqizo inamandla kakhulu futhi idinga i-athikili ehlukile.

Diagnostics

Ikhasi elinezinsiza ezahlukene zokuthola izinkinga liyavuleka ngokushesha. Lokhu kufaka phakathi i-Ping, i-Traceroute, ukubheka igama, ukubheka umzila.

Okulandelayo ithebhu enamagrafu esistimu yehadiwe nembobo yokulayisha ngesikhathi sangempela

Amagrafu esistimu

Bese kuba ithebhu lapho ungabheka khona isigaba sesisetshenziswa sewebhu

Ukubheka isigaba se-URL

Ithebhu elandelayo, Ukuthwebula kwephakethe, empeleni kuwukubonwa kwe-tcpdump eyakhelwe kuwebhu. Ungakwazi futhi ukubhala izihlungi

Ukuthwebula iphakethe

Into ethokozisayo okufanele uyiqaphele ukuthi amaphakheji aguqulwa abe ithebula lapho ungakhubaza futhi unike amandla amakholomu engeziwe ngolwazi. Lokhu kusebenza kulula kakhulu ukuthola izinkinga zenethiwekhi, isibonelo - ungakwazi ukuqonda ngokushesha ukuthi yimiphi imithetho yokuhlunga esetshenziswe kuthrafikhi yangempela.

Kuthebhu Yohlu Lokuxhumanisa ungabuka konke ukuxhumana okukhona ngesikhathi sangempela kanye nolwazi olukhona

Uhlu Lokuxhumanisa

isiphetho

Lokhu kuphetha ingxenye yokuqala yokubuyekeza. Sihlole ingxenye encane kuphela yokusebenza okutholakalayo futhi asizange sithinte amamojula okuphepha nhlobo. Esihlokweni esilandelayo sizohlaziya umsebenzi wokubika owakhelwe ngaphakathi kanye nemithetho ye-firewall, izinhlobo zayo nezinjongo.

Ngiyabonga ngesikhathi sakho.

Uma unemibuzo mayelana nenguqulo yezohwebo ye-XG Firewall, ungaxhumana nathi, inkampani iqembu lesici, Sophos distributor. Okufanele ukwenze ukubhala ngefomu lamahhala ku [i-imeyili ivikelwe].

Source: www.habr.com