{"id":36669,"date":"2019-10-31T22:13:01","date_gmt":"2019-10-31T19:13:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\/"},"modified":"2019-10-31T22:13:01","modified_gmt":"2019-10-31T19:13:01","slug":"stealthwatch-razvertyvanie-i-nastrojka-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","title":{"rendered":"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/6d2c187b799a2f811e24d36e2ab48c77.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDobr\u00fd den, kolegov\u00e9! Jakmile stanov\u00edme minim\u00e1ln\u00ed po\u017eadavky pro nasazen\u00ed StealthWatch v <noindex><a rel=\"nofollow\" href=\"http:\/\/habr.com\/ru\/company\/tssolution\/blog\/458626\/\">p\u0159edchoz\u00ed \u010d\u00e1sti<\/a><\/noindex>, m\u016f\u017eeme za\u010d\u00edt s nasazen\u00edm produktu.<\/p>\n<h3>1. Zp\u016fsoby nasazen\u00ed StealthWatch<\/h3>\n<p>\nExistuje n\u011bkolik zp\u016fsob\u016f, jak si StealthWatch \"osahat\": <\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/dcloud.cisco.com\/\">dcloud<\/a><\/noindex> \u2013 cloudov\u00e1 slu\u017eba laborato\u0159\u00ed;<\/li>\n<li>Cloud Based: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/stealthwatch\/security-visibility-assessment.html\">Stealthwatch Cloud Free Trial <\/a><\/noindex> \u2013 zde Netflow z va\u0161eho za\u0159\u00edzen\u00ed p\u0159en\u00e1\u0161\u00edme do cloudu, kde je analyzov\u00e1no softwarem StealthWatch; <\/li>\n<li>On-premise POV (<noindex><a rel=\"nofollow\" href=\"https:\/\/cep.cloudapps.cisco.com\/case\">\u017d\u00e1dost GVE<\/a><\/noindex>) \u2013 zp\u016fsob, kter\u00fdm jsem se vydal j\u00e1, obdr\u017e\u00edte 4 OVF soubory virtu\u00e1ln\u00edch stroj\u016f s integrovan\u00fdmi licencemi na 90 dn\u00ed, kter\u00e9 lze nasadit na dedikovan\u00e9m serveru v podnikov\u00e9 s\u00edti. <\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nI p\u0159es mno\u017estv\u00ed sta\u017een\u00fdch virtu\u00e1lek sta\u010d\u00ed pro minim\u00e1ln\u00ed provozn\u00ed konfiguraci pouze 2: StealthWatch Management Console a FlowCollector. Pokud v\u0161ak nem\u00e1te s\u00ed\u0165ov\u00e9 za\u0159\u00edzen\u00ed, kter\u00e9 m\u016f\u017ee exportovat Netflow na FlowCollector, je t\u0159eba nasadit tak\u00e9 FlowSensor, proto\u017ee ten pomoc\u00ed technologi\u00ed SPAN\/RSPAN umo\u017e\u0148uje shroma\u017e\u010fovat Netflow.<\/p>\n<p>Jako laboratorn\u00ed stanovi\u0161t\u011b, jak jsem ji\u017e zm\u00ednil d\u0159\u00edve, m\u016f\u017ee slou\u017eit va\u0161e skute\u010dn\u00e1 s\u00ed\u0165, proto\u017ee StealthWatch pot\u0159ebuje jen kopii, nebo p\u0159esn\u011bji \u0159e\u010deno, v\u00fdtah kopie provozu. Na obr\u00e1zku n\u00ed\u017ee je moje s\u00ed\u0165, kde na br\u00e1n\u011b bezpe\u010dnosti nakonfiguruji Netflow Exporter a v d\u016fsledku toho budu pos\u00edlat Netflow na kolektor.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/b82e6d6e7b229ebfa3e31b5a47292f25.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPro p\u0159\u00edstup k budouc\u00edm VM je t\u0159eba na va\u0161em firewallu, pokud n\u011bjak\u00fd m\u00e1te, povolit n\u00e1sleduj\u00edc\u00ed porty:<\/p>\n<p><b> TCP 22 l TCP 25 l TCP 389 l TCP 443 l TCP 2393 l TCP 5222 l UDP 53 l UDP 123 l UDP 161 l UDP 162 l UDP 389 l UDP 514 l UDP 2055 l UDP 6343 <\/b><\/p>\n<p>N\u011bkter\u00e9 z nich jsou ve\u0159ejn\u011b zn\u00e1m\u00e9 slu\u017eby, n\u011bkter\u00e9 jsou vyhrazeny pro slu\u017eby Cisco.<br \/>\nV m\u00e9m p\u0159\u00edpad\u011b jsem prost\u011b nasadil StealthWatch ve stejn\u00e9 s\u00edti jako Check Point, a nemuselo se konfigurovat \u017e\u00e1dn\u00e9 pravidlo pro povolen\u00ed.<\/p>\n<h3>2. Instalace FlowCollector na p\u0159\u00edkladu VMware vSphere<\/h3>\n<p>\n2.1. Klikn\u011bte na Proch\u00e1zet a vyberte OVF soubor. Zkontrolujte dostupnost zdroj\u016f, p\u0159ejd\u011bte do nab\u00eddky Zobrazen\u00ed, Invent\u00e1\u0159 \u2192 S\u00ed\u0165ov\u00e1n\u00ed (Ctrl+Shift+N).<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/4533c23d8b9b65163f9f426d25ce3215.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.2. Na kart\u011b S\u00ed\u0165ov\u00e1n\u00ed vyberte v nastaven\u00ed virtu\u00e1ln\u00edho switche Novou distribuovanou skupinu port\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/26bec9aa59a409f6fd58aef93f685d26.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.3. Zadejte n\u00e1zev, dejme tomu StealthWatchPortGroup, ostatn\u00ed nastaven\u00ed mohou b\u00fdt jako na screenshotu a klikn\u011bte na Dal\u0161\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/1b5f9225675eefb37a8be070cb12dbe0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/c24f649de31b1d55cf9ac97d6321a8c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.4. Dokon\u010dete vytv\u00e1\u0159en\u00ed Skupiny port\u016f stisknut\u00edm tla\u010d\u00edtka Dokon\u010dit.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/4dcd93fc9054f908b3ce69d10538e260.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.5. U vytvo\u0159en\u00e9 Skupiny port\u016f uprav\u00edme nastaven\u00ed, kliknut\u00edm prav\u00fdm tla\u010d\u00edtkem na skupinu port\u016f vybereme Upravit nastaven\u00ed. Na kart\u011b Bezpe\u010dnost nezapome\u0148te zapnout \"nep\u0159\u00edstupn\u00fd re\u017eim\", Promiscuous Mode \u2192 P\u0159ijmout \u2192 OK.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/b7792f5e3c2dad347db252588ae7447e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.6. Jako p\u0159\u00edklad importujeme OVF FlowCollector, jeho\u017e odkaz ke sta\u017een\u00ed poslal in\u017een\u00fdr Cisco po \u017e\u00e1dosti GVE. Klikn\u011bte prav\u00fdm tla\u010d\u00edtkem my\u0161i na hostitele, na kter\u00e9m pl\u00e1nujete nasadit VM, a vyberte Deploy OVF Template. Co se t\u00fd\u010de vyhrazen\u00e9ho m\u00edsta, na 50 GB to \u201ebude fungovat\u201c, ale pro provozn\u00ed podm\u00ednky se doporu\u010duje vyhradit 200 GB.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/000e3a98673b2577f33c0e5fc2913704.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.7. Vyberte slo\u017eku, kde se nach\u00e1z\u00ed OVF soubor.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/855a4dfcb92bb41912d059bfedd3e98a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.8. Klikn\u011bte na \u201eDal\u0161\u00ed\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/adc372dd2e4df3b75724f6146771e800.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.9. Uve\u010fte n\u00e1zev a server, na kter\u00e9m to nasazujeme.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/abdb25ced5addf714adf07898541b0b6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.10. V\u00fdsledkem je n\u00e1sleduj\u00edc\u00ed obrazovka, na kter\u00e9 kliknete na \u201eDokon\u010dit\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/eef848e4998de5bab0e0dc3845466134.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.11. Prove\u010fte stejn\u00e9 kroky pro nasazen\u00ed StealthWatch Management Console.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/33010b6a604071f68300fb31b951ea71.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.12. Nyn\u00ed je t\u0159eba uv\u00e9st pot\u0159ebn\u00e9 s\u00edt\u011b v rozhran\u00edch, aby FlowCollector vid\u011bl jak SMC, tak za\u0159\u00edzen\u00ed, z nich\u017e bude exportov\u00e1n Netflow. <\/p>\n<h3>3. Inicializace StealthWatch Management Console<\/h3>\n<p>\n3.1. Po p\u0159echodu do konzole nainstalovan\u00e9ho SMCVE uvid\u00edte pole pro zad\u00e1n\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla, v\u00fdchoz\u00ed je <b>sysadmin\/lane1cope<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/898a885324fd1a5542a94fb40e1f79f8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.2. P\u0159ihlaste se do sekce Management, zadejte IP adresu a dal\u0161\u00ed s\u00ed\u0165ov\u00e9 parametry, pot\u00e9 je potvr\u010fte. Za\u0159\u00edzen\u00ed se restartuje.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/5f7d56d1f108afa873aa370f87a55d0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/76a90cf85e51c9aea91d8b738d0de775.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/a9af327e6449932d0f88f05f31f5601e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.3. P\u0159ejd\u011bte na webov\u00e9 rozhran\u00ed (p\u0159es https na adresu, kterou jste zadali pro SMC) a inicializujte konzoli, v\u00fdchoz\u00ed p\u0159ihla\u0161ovac\u00ed \u00fadaje jsou <b>admin\/lane411cope<\/b>. <\/p>\n<p>P.S.: m\u016f\u017ee se st\u00e1t, \u017ee se v Google Chrome neotev\u0159e, Explorer v\u017edy pom\u016f\u017ee.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/a0eb07f52f4080c4fba42df214283dc7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.4. Nezapome\u0148te zm\u011bnit hesla, nastavit DNS, NTP servery, dom\u00e9nu a dal\u0161\u00ed. Nastaven\u00ed je intuitivn\u011b pochopiteln\u00e9. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/d3de68f5f828022df4ef493c8ee91fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.5. Po kliknut\u00ed na tla\u010d\u00edtko \u201ePou\u017e\u00edt\u201c se za\u0159\u00edzen\u00ed znovu restartuje. Po 5-7 minut\u00e1ch se m\u016f\u017eete znovu p\u0159ipojit na tuto adresu; spr\u00e1va StealthWatch se bude prov\u00e1d\u011bt p\u0159es webov\u00e9 rozhran\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/f22752b76ddb46d7262fd3b3999fac2b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>4. Nastaven\u00ed FlowCollector<\/h3>\n<p>\n4.1. S kolektorem je to stejn\u00e9. Nejprve v CLI nastavte IP adresu, masku, dom\u00e9nu, pot\u00e9 se FC restartuje. Pot\u00e9 se m\u016f\u017eete p\u0159ipojit k webov\u00e9mu rozhran\u00ed na zadan\u00e9 adrese a prov\u00e9st stejn\u00e9 z\u00e1kladn\u00ed nastaven\u00ed. Vzhledem k tomu, \u017ee nastaven\u00ed jsou podobn\u00e1, podrobn\u00e9 sn\u00edmky obrazovky jsou vynech\u00e1ny. <b>P\u0159ihla\u0161ovac\u00ed \u00fadaje<\/b> pro p\u0159ihl\u00e1\u0161en\u00ed <b>stejn\u00e9<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/9753ff123a18d6fc7c26a41be71515f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.2. Na p\u0159edposledn\u00edm bod\u011b mus\u00edte zadat IP adresu SMC, v tomto p\u0159\u00edpad\u011b konsola uvid\u00ed za\u0159\u00edzen\u00ed, potvrzen\u00ed tohoto nastaven\u00ed budete muset prov\u00e9st zad\u00e1n\u00edm p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/0c8504533a1f70475fed8e061bc9f584.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.3. Vyberte dom\u00e9nu pro StealthWatch, byla nastavena d\u0159\u00edve, a port <b>2055 <\/b>\u2013 b\u011b\u017en\u00fd Netflow, pokud pracujete se sFlow, port <b>6343<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/6ac15c0eaf9097a2d66bbc54769055a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>5. Konfigurace Netflow Exporter<\/h3>\n<p>\n5.1. Pro nastaven\u00ed export\u00e9ru Netflow d\u016frazn\u011b doporu\u010duji obr\u00e1tit se na tento <noindex><a rel=\"nofollow\" href=\"http:\/\/configurenetflow.info\">zdroj <\/a><\/noindex>, zde jsou hlavn\u00ed pr\u016fvodce pro konfiguraci Netflow export\u00e9ru pro mnoh\u00e9 za\u0159\u00edzen\u00ed: Cisco, Check Point, Fortinet. <\/p>\n<p>5.2. V na\u0161em p\u0159\u00edpad\u011b, jak jsem ji\u017e zm\u00ednil, exportujeme Netflow ze za\u0159\u00edzen\u00ed Check Point. Nastaven\u00ed Netflow export\u00e9ru se prov\u00e1d\u00ed v podobn\u00e9 z\u00e1lo\u017ece v odkaze na webov\u00e9m rozhran\u00ed (Gaia Portal). K tomu je t\u0159eba kliknout na \u201eP\u0159idat\u201c, zadat verzi Netflow a pot\u0159ebn\u00fd port. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/d3544d986d85aea336081d3fc207c553.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>6. Anal\u00fdza pr\u00e1ce StealthWatch<\/h3>\n<p>\n6.1. Po p\u0159echodu na webov\u00e9 rozhran\u00ed SMC, na prvn\u00ed str\u00e1nce Dashboards &gt; Network Security je vid\u011bt, \u017ee traffic se rozjel!<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/8e7d65efd8b212096f447dd2828f68f1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n6.2. N\u011bkter\u00e1 nastaven\u00ed, jako nap\u0159\u00edklad rozd\u011blen\u00ed hostitel\u016f do skupin, monitorov\u00e1n\u00ed jednotliv\u00fdch rozhran\u00ed, jejich zat\u00ed\u017een\u00ed, spr\u00e1va kolektor\u016f a dal\u0161\u00ed, lze naj\u00edt pouze v Java aplikaci StealthWatch. Cisco samoz\u0159ejm\u011b pomalu p\u0159en\u00e1\u0161\u00ed ve\u0161kerou funkcionalitu do verze pro prohl\u00ed\u017ee\u010d a brzy se zbav\u00edme tohoto desktopov\u00e9ho klienta.<\/p>\n<p>Pro instalaci aplikace je nejprve t\u0159eba nainstalovat <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jre8-downloads-2133155.html\">JRE <\/a><\/noindex>(nainstaloval jsem verzi 8, a\u010dkoliv bylo \u0159e\u010deno, \u017ee a\u017e do 10 je podporov\u00e1no) z ofici\u00e1ln\u00edch str\u00e1nek Oracle.<\/p>\n<p>V prav\u00e9m horn\u00edm rohu webov\u00e9ho rozhran\u00ed \u0159\u00edd\u00edc\u00ed konzole je pro sta\u017een\u00ed t\u0159eba kliknout na tla\u010d\u00edtko \u201eDesktop Client\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/6345b6eb1606d219bbaf65f73b196446.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nUkl\u00e1d\u00e1te a instalujete klienta ru\u010dn\u011b, Java bude pravd\u011bpodobn\u011b na n\u011bj upozor\u0148ovat, m\u016f\u017ee b\u00fdt nutn\u00e9 zahrnout hostitele do v\u00fdjimek Java.<\/p>\n<p>V\u00fdsledkem je docela srozumiteln\u00fd klient, ve kter\u00e9m je snadn\u00e9 prohl\u00ed\u017eet zat\u00ed\u017een\u00ed export\u00e9r\u016f, rozhran\u00ed, \u00fatoky a jejich toky.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/d5742de9c3d3792c308f34f2a6c87839.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/ca3c8d53a56d6c0e8fac12eb4c263096.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/56ba3458be8c6f50929a1008d30f4412.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>7. StealthWatch Central Management<\/h3>\n<p>\n7.1. Na z\u00e1lo\u017ece Central Management jsou v\u0161echna za\u0159\u00edzen\u00ed, kter\u00e1 jsou sou\u010d\u00e1st\u00ed rozvinut\u00e9ho StealthWatch, jako: FlowCollector, FlowSensor, UDP-Director a Endpoint Concetrator. Zde je mo\u017en\u00e9 spravovat s\u00ed\u0165ov\u00e1 nastaven\u00ed a slu\u017eby za\u0159\u00edzen\u00ed, licence a manu\u00e1ln\u011b vypnout za\u0159\u00edzen\u00ed.<\/p>\n<p>Do n\u00ed se m\u016f\u017eete dostat kliknut\u00edm na \u201eozuben\u00e9 kolo\u201c v prav\u00e9m horn\u00edm rohu a v\u00fdb\u011brem Central Management. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/86c411fef0ec8eb0f1941cd4aa2b8c41.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/1ff2e89817e47ac38fc141f9fe82674a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.2. Po p\u0159echodu na Edit Appliance Configuration u FlowCollector uvid\u00edte nastaven\u00ed SSH, NTP a dal\u0161\u00ed s\u00ed\u0165ov\u00e1 nastaven\u00ed, kter\u00e1 se t\u00fdkaj\u00ed p\u0159\u00edmo appliance. K p\u0159echodu je t\u0159eba vybrat Actions \u2192 Edit Appliance Configuration u po\u017eadovan\u00e9ho za\u0159\u00edzen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/1b1d27c3238f47a9fe4e0190ddf4e8a0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/78be8a43bbbefee502fbbf1e398c6f5e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/15a8b2d77ffba34be2d5ae876a20cf61.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.3. Management licenc\u00ed lze tak\u00e9 nal\u00e9zt na z\u00e1lo\u017ece Central Management &gt; Manage Licences. Zku\u0161ebn\u00ed licence v p\u0159\u00edpad\u011b GVE po\u017eadavku jsou poskytov\u00e1ny na <b>90 dn\u00ed<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: nasazen\u00ed a konfigurace. \u010c\u00e1st 2\" src=\"\/wp-content\/uploads\/2019\/07\/56b02e7921a94b51b8d2a9a9dea40a16.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nProdukt je p\u0159ipraven k pou\u017eit\u00ed! V dal\u0161\u00ed \u010d\u00e1sti se pod\u00edv\u00e1me, jak StealthWatch dok\u00e1\u017ee rozpoznat \u00fatoky a generovat zpr\u00e1vy.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/461831\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0447\u0430\u0441\u0442\u0438, \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. 1. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u00ab\u043f\u043e\u0442\u0440\u043e\u0433\u0430\u0442\u044c\u00bb StealthWatch: dcloud \u2013 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0442; Cloud Based: Stealthwatch Cloud Free Trial \u2013 \u0437\u0434\u0435\u0441\u044c Netflow \u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u044b\u043f\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u043b\u0430\u043a\u043e \u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u041f\u041e StealthWatch; On-premise POV [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36669","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47StealthWatch: nasazen\u00ed a nastaven\u00ed. \u010c\u00e1st 2 | ProHoster","description":"Dobr\u00fd den, kolegov\u00e9!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:description":"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:01+00:00","article:modified_time":"2019-10-31T19:13:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36669","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:18:11","updated":"2026-01-22 04:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36669"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36669\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/27463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}