{"id":52712,"date":"2023-07-12T10:36:18","date_gmt":"2023-07-12T09:36:18","guid":{"rendered":"https:\/\/www.soitron.com\/?p=52712"},"modified":"2023-07-12T13:20:04","modified_gmt":"2023-07-12T12:20:04","slug":"cisco-umbrella-kyberbezpecnost-za-par-minut","status":"publish","type":"post","link":"https:\/\/new.soitron.com\/cs\/cisco-umbrella-kyberbezpecnost-za-par-minut\/","title":{"rendered":"Cisco Umbrella: Kyberbezpe\u010dnost za p\u00e1r minut"},"content":{"rendered":"\n

Kdyby v\u0161ichni firemn\u00ed zam\u011bstnanci sed\u011bli v\u00a0kancel\u00e1\u0159\u00edch v\u00a0centr\u00e1le u stoln\u00edch po\u010d\u00edta\u010d\u016f, v\u0161ichni IT bezpe\u010d\u00e1ci by byli mnohem klidn\u011bj\u0161\u00ed. Ale doba je \u00fapln\u011b jin\u00e1. V\u0161ichni komunikuj\u00ed odkudkoliv a kamkoliv. I v\u00a0t\u00e9hle situaci ale mohou m\u00edt firemn\u00ed bezpe\u010d\u00e1ci tep kolem sedmdes\u00e1tky, pokud nasad\u00ed Cisco Umbrella.<\/strong><\/p>\n\n\n\n

Nikdy se nem\u016f\u017eete spolehnout na to, \u017ee zam\u011bstnanci vyu\u017e\u00edvaj\u00ed p\u0159i pr\u00e1ci jen zabezpe\u010den\u00e1 p\u0159ipojen\u00ed. Naopak, pohybuj\u00ed se ve ve\u0159ejn\u00e9m prost\u0159ed\u00ed kav\u00e1ren, leti\u0161\u0165 nebo restaurac\u00ed, v n\u011bm\u017e mohou b\u00fdt jejich za\u0159\u00edzen\u00ed napadena. Jeden notebook se pot\u00e9, co jeho intern\u00ed antivirus prohr\u00e1l boj se \u0161kodliv\u00fdm k\u00f3dem, st\u00e1v\u00e1 nebezpe\u010d\u00edm pro celou firmu. Prvn\u00ed linii obrany p\u0159ed hrozbami na internetu p\u0159edstavuje cloudov\u00e1 platforma Cisco Umbrella<\/a>. Jde o cloudovou bezpe\u010dnostn\u00ed platformu, kter\u00e1 chr\u00e1n\u00ed s\u00edt\u011b a koncov\u00e1 za\u0159\u00edzen\u00ed p\u0159ed hrozbami z internetu, jako jsou malware, ransomware, phishing a jin\u00e9 \u0161kodliv\u00e9 aktivity. \u0158e\u0161\u00ed tak p\u0159edev\u0161\u00edm situace, kdy pracovn\u00edk pou\u017e\u00edv\u00e1 nezabezpe\u010den\u00e9 Wi-Fi s\u00edt\u011b a nepot\u0159ebuje zapnout VPN, proto\u017ee nep\u0159istupuje dovnit\u0159 firemn\u00ed s\u00edt\u011b a t\u0159eba si jen hled\u00e1 informaci na webu.<\/p>\n\n\n\n

Zabezpe\u010den\u00ed na \u00farovni DNS<\/h2>\n\n\n\n

Fungov\u00e1n\u00ed Cisco Umbrella spo\u010d\u00edv\u00e1 v tom, \u017ee vyu\u017e\u00edv\u00e1 DNS (Domain Name System) k ovl\u00e1d\u00e1n\u00ed p\u0159\u00edstupu k internetov\u00fdm str\u00e1nk\u00e1m. DNS je protokol, kter\u00fd p\u0159ekl\u00e1d\u00e1 dom\u00e9nov\u00e1 jm\u00e9na (nap\u0159\u00edklad soitron.cz) na IP adresy, kter\u00e9 jsou pou\u017e\u00edv\u00e1ny k identifikaci konkr\u00e9tn\u00edch server\u016f.<\/p>\n\n\n\n

Cisco Umbrella prov\u00e1d\u00ed filtraci internetov\u00fdch po\u017eadavk\u016f na z\u00e1klad\u011b sady p\u0159edem definovan\u00fdch pravidel a bezpe\u010dnostn\u00edch politik. Kdy\u017e u\u017eivatel nebo za\u0159\u00edzen\u00ed v s\u00edti po\u017e\u00e1d\u00e1 o p\u0159\u00edstup k webov\u00e9 str\u00e1nce, je tento po\u017eadavek sm\u011brov\u00e1n p\u0159es infrastrukturu Cisco Umbrella. \u201ePlatforma vyhodnot\u00ed po\u017eadavek a rozhodne, zda je str\u00e1nka bezpe\u010dn\u00e1, podez\u0159el\u00e1 nebo \u0161kodliv\u00e1. Ve chv\u00edli, kdy Umbrella identifikuje, \u017ee str\u00e1nka, k\u00a0n\u00ed\u017e se chce pracovn\u00edk p\u0159ipojit, je podez\u0159el\u00e1, p\u0159ipojen\u00ed zablokuje. Je\u0161t\u011b p\u0159ed t\u00edm, ne\u017e dojde k\u00a0propojen\u00ed nap\u0159\u00edklad notebooku a p\u0159enesen\u00ed dat obsahuj\u00edc\u00edch hrozbu,\u201c<\/em> vysv\u011btluje Petr Kocmich<\/a>, Global Cyber Security Delivery Manager ve spole\u010dnosti Soitron.<\/p>\n\n\n\n

\"Cisco<\/figure>\n\n\n\n

S\u00a0podporou Cisco Talos<\/h2>\n\n\n\n

Kl\u00ed\u010dem ke \u0161pi\u010dkov\u00e9 efektivit\u011b Cisco Umbrella je podpora ze strany Cisco Talos. Cisco Talos Intelligence<\/a> Group je jedn\u00edm z nejv\u011bt\u0161\u00edch komer\u010dn\u00edch t\u00fdm\u016f pro sledov\u00e1n\u00ed hrozeb na sv\u011bt\u011b. Sb\u00edr\u00e1 data z des\u00edtek milion\u016f instalac\u00ed po cel\u00e9m sv\u011bt\u011b a na jejich z\u00e1klad\u011b vytv\u00e1\u0159\u00ed p\u0159esn\u00e9, rychl\u00e9 a vyu\u017eiteln\u00e9 zpravodajsk\u00e9 informace o hrozb\u00e1ch. D\u00edky zpravodajstv\u00ed Cisco Talos um\u00ed n\u00e1stroje Umbrella vyhodnotit nap\u0159\u00edklad to, zda u\u017eivatel nesm\u011b\u0159uje na str\u00e1nku obsahuj\u00edc\u00ed \u0161kodliv\u00fd k\u00f3d, zda jeho po\u010d\u00edta\u010d nekomunikuje se \u0159\u00edd\u00edc\u00edm serverem pro ransomware, zda nejde o nov\u011b zalo\u017eenou dom\u00e9nu, ke kter\u00e9 nen\u00ed dostatek informac\u00ed a podobn\u011b. A pr\u00e1v\u011b v takov\u00e9m p\u0159\u00edpad\u011b zablokuje spojen\u00ed.<\/p>\n\n\n\n

Body pro Umbrellu<\/h2>\n\n\n\n

Cisco svoji Umbrellu neust\u00e1le vyv\u00edj\u00ed a dok\u00e1zala tak do n\u00ed krom\u011b DNS ochrany integrovat \u0159adu dal\u0161\u00edch bezpe\u010dnostn\u00edch funkcionalit.<\/p>\n\n\n\n