{"id":96036,"date":"2020-10-07T01:42:11","date_gmt":"2020-10-06T23:42:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa"},"modified":"2020-10-07T01:42:11","modified_gmt":"2020-10-06T23:42:11","slug":"2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","title":{"rendered":"2. FortiAnalyzer \u00davod do v6.4. P\u0159\u00edprava n\u00e1vrhu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"2.
\n
\nV\u00edtejte na druh\u00e9 lekci kurzu \u00davod do FortiAnalyzer<\/a><\/noindex>. Dnes se pod\u00edv\u00e1me na mechanismus administrativn\u00edch dom\u00e9n na FortiAnalyzer<\/a><\/noindex>, tak\u00e9 probereme proces zpracov\u00e1n\u00ed log\u016f \u2014 porozum\u011bn\u00ed princip\u016fm pr\u00e1ce s t\u011bmito mechanismy je nezbytn\u00e9 pro po\u010d\u00e1te\u010dn\u00ed nastaven\u00ed FortiAnalyzer<\/a><\/noindex>. A pot\u00e9 si probereme \u0161ablonu, kterou budeme pou\u017e\u00edvat b\u011bhem kurzu, a tak\u00e9 provedeme po\u010d\u00e1te\u010dn\u00ed konfiguraci FortiAnalyzer<\/a><\/noindex>. Teoretick\u00e1 \u010d\u00e1st a tak\u00e9 \u00fapln\u00e1 nahr\u00e1vka video lekce jsou pod katem. <\/a><\/noindex><\/p>\n

Na za\u010d\u00e1tek se je\u0161t\u011b jednou pod\u00edv\u00e1me na administrativn\u00ed dom\u00e9ny. Existuje n\u011bkolik v\u011bc\u00ed, kter\u00e9 je t\u0159eba o nich v\u011bd\u011bt, ne\u017e za\u010dnete pou\u017e\u00edvat: <\/p>\n

    \n
  1. Mo\u017enost vytv\u00e1\u0159en\u00ed administrativn\u00edch dom\u00e9n se aktivuje a deakt\u00edvuje centr\u00e1ln\u011b.<\/li>\n
  2. Pro registraci jak\u00fdchkoli za\u0159\u00edzen\u00ed, krom\u011b FortiGate, je pot\u0159eba samostatn\u00e1 administrativn\u00ed dom\u00e9na. To znamen\u00e1, \u017ee pokud chcete na za\u0159\u00edzen\u00ed zaregistrovat v\u00edce za\u0159\u00edzen\u00ed FortiMail, pot\u0159ebujete k tomu samostatnou administrativn\u00ed dom\u00e9nu. Ale to neznamen\u00e1, \u017ee pro usnadn\u011bn\u00ed seskupen\u00ed za\u0159\u00edzen\u00ed FortiGate nem\u016f\u017eete vytv\u00e1\u0159et r\u016fzn\u00e9 administrativn\u00ed dom\u00e9ny. <\/li>\n
  3. Maxim\u00e1ln\u00ed po\u010det podporovan\u00fdch administrativn\u00edch dom\u00e9n z\u00e1vis\u00ed na modelu za\u0159\u00edzen\u00ed FortiAnalyzer. <\/li>\n
  4. P\u0159i aktivaci mo\u017enosti vytv\u00e1\u0159en\u00ed administrativn\u00edch dom\u00e9n je t\u0159eba zvolit re\u017eim jejich pr\u00e1ce \u2014 Normal nebo Advanced. V re\u017eimu Normal nelze p\u0159id\u00e1vat r\u016fzn\u00e9 virtu\u00e1ln\u00ed dom\u00e9ny (nebo jin\u00fdmi slovy VDOMy) jednoho FortiGate do r\u016fzn\u00fdch administrativn\u00edch dom\u00e9n za\u0159\u00edzen\u00ed FortiAnalyzer. V re\u017eimu Advanced je to mo\u017en\u00e9. Re\u017eim Advanced umo\u017e\u0148uje zpracov\u00e1vat data r\u016fzn\u00fdch virtu\u00e1ln\u00edch dom\u00e9n a z\u00edsk\u00e1vat na n\u011b samostatn\u00e9 reporty. Pokud jste zapomn\u011bli, co jsou to virtu\u00e1ln\u00ed dom\u00e9ny, pod\u00edvejte se na druhou lekci kurzu Fortinet Getting Started<\/a><\/noindex>, tam se to prob\u00edr\u00e1 docela podrobn\u011b. <\/li>\n<\/ol>\n

    \nVytv\u00e1\u0159en\u00ed administrativn\u00edch dom\u00e9n a p\u0159id\u011blov\u00e1n\u00ed pam\u011bti mezi nimi probereme o n\u011bco pozd\u011bji v r\u00e1mci praktick\u00e9 \u010d\u00e1sti lekce. <\/p>\n

    Nyn\u00ed se pod\u00edvejme na mechanismus z\u00e1pisu a zpracov\u00e1n\u00ed log\u016f, kter\u00e9 p\u0159ich\u00e1zej\u00ed na FortiAnalyzer.
    \nLogy, kter\u00e9 p\u0159ich\u00e1zej\u00ed do FortiAnalyzeru, jsou komprimov\u00e1ny a ukl\u00e1d\u00e1ny do logov\u00e9ho souboru. Jakmile tento soubor dos\u00e1hne ur\u010dit\u00e9 velikosti, je p\u0159eps\u00e1n a archivov\u00e1n. Takov\u00e9 logy jsou naz\u00fdv\u00e1ny archivovan\u00fdmi. Pova\u017euj\u00ed se za offline logy, proto\u017ee je nelze analyzovat v re\u00e1ln\u00e9m \u010dase. Pro prohl\u00ed\u017een\u00ed jsou k dispozici pouze v form\u00e1tu raw. Politika uchov\u00e1v\u00e1n\u00ed dat v administrativn\u00ed dom\u00e9n\u011b ur\u010duje, jak dlouho budou tyto logy uchov\u00e1v\u00e1ny v pam\u011bti za\u0159\u00edzen\u00ed.
    \nVe stejnou dobu jsou logy indexov\u00e1ny v datab\u00e1zi SQL. Tyto logy jsou pou\u017e\u00edv\u00e1ny pro anal\u00fdzu dat pomoc\u00ed mechanism\u016f Log View, FortiView a Reports. Politika uchov\u00e1v\u00e1n\u00ed dat v administrativn\u00ed dom\u00e9n\u011b ur\u010duje, jak dlouho budou tyto logy uchov\u00e1v\u00e1ny v pam\u011bti za\u0159\u00edzen\u00ed. Pot\u00e9, co budou tyto logy smaz\u00e1ny z pam\u011bti za\u0159\u00edzen\u00ed, mohou z\u016fstat ve form\u011b archivovan\u00fdch log\u016f, ale to z\u00e1vis\u00ed na politice uchov\u00e1v\u00e1n\u00ed dat v administrativn\u00ed dom\u00e9n\u011b. <\/p>\n

    Pro pochopen\u00ed po\u010d\u00e1te\u010dn\u00edch nastaven\u00ed t\u011bchto znalost\u00ed n\u00e1m zcela posta\u010d\u00ed. Nyn\u00ed diskutujme o na\u0161em modelu:<\/p>\n

    \"2.
    \n
    \nNa n\u011bm vid\u00edte 6 za\u0159\u00edzen\u00ed \u2014 FortiGate, FortiMail, FortiAnalyzer, ovl\u00e1dac\u00ed prvek dom\u00e9ny, po\u010d\u00edta\u010d extern\u00edho u\u017eivatele a po\u010d\u00edta\u010d intern\u00edho u\u017eivatele. FortiGate a FortiMail jsou nezbytn\u00e9 pro generaci log\u016f r\u016fzn\u00fdch za\u0159\u00edzen\u00ed Fortinet, abychom mohli na p\u0159\u00edkladu prozkoumat aspekty pr\u00e1ce s r\u016fzn\u00fdmi administrativn\u00edmi dom\u00e9nami. Intern\u00ed a extern\u00ed u\u017eivatel\u00e9, jako\u017e i ovl\u00e1dac\u00ed prvek dom\u00e9ny, jsou pot\u0159ebn\u00ed pro generaci r\u016fzn\u00fdch datov\u00fdch tok\u016f. Na po\u010d\u00edta\u010di intern\u00edho u\u017eivatele je nainstalov\u00e1n opera\u010dn\u00ed syst\u00e9m Windows a na po\u010d\u00edta\u010di extern\u00edho u\u017eivatele \u2014 Kali Linux.
    \nV tomto p\u0159\u00edkladu FortiMail funguje v re\u017eimu Server, co\u017e znamen\u00e1, \u017ee je samostatn\u00fdm po\u0161tovn\u00edm serverem, p\u0159es kter\u00fd mohou intern\u00ed a extern\u00ed u\u017eivatel\u00e9 vym\u011b\u0148ovat e-maily. Pot\u0159ebn\u00e1 nastaven\u00ed, jako jsou MX z\u00e1znamy, jsou nakonfigurov\u00e1na na ovl\u00e1dac\u00edm prvku dom\u00e9ny. Pro extern\u00edho u\u017eivatele je serverem DNS intern\u00ed ovl\u00e1dac\u00ed prvek dom\u00e9ny \u2014 toho je dosa\u017eeno pomoc\u00ed p\u0159esm\u011brov\u00e1n\u00ed port\u016f (nebo jinou technologi\u00ed Virtual IP) na FortiGate.
    \nTato nastaven\u00ed nejsou b\u011bhem lekce zva\u017eov\u00e1na, proto\u017ee se net\u00fdkaj\u00ed t\u00e9matu kurzu. Bude rozebr\u00e1na implementace a po\u010d\u00e1te\u010dn\u00ed konfigurace za\u0159\u00edzen\u00ed FortiAnalyzer. Ostatn\u00ed slo\u017eky sou\u010dasn\u00e9ho modelu byly p\u0159ipraveny p\u0159edem. <\/p>\n

    Syst\u00e9mov\u00e9 po\u017eadavky pro r\u016fzn\u00e1 za\u0159\u00edzen\u00ed jsou uvedeny n\u00ed\u017ee. Tento model b\u011b\u017e\u00ed na p\u0159edem p\u0159ipraven\u00e9m stroji ve virtu\u00e1ln\u00edm prost\u0159ed\u00ed VMWare Workstation. Specifikace tohoto stroje jsou tak\u00e9 uvedeny n\u00ed\u017ee. <\/p>\n

    Za\u0159\u00edzen\u00ed
    \nRAM, GB
    \nvCPU
    \nHDD, GB<\/p>\n

    Dom\u00e9nov\u00fd \u0159adi\u010d
    \n6
    \n3
    \n40<\/p>\n

    Intern\u00ed u\u017eivatel
    \n4
    \n2
    \n32<\/p>\n

    Extern\u00ed u\u017eivatel
    \n2
    \n2
    \n8<\/p>\n

    FortiGate
    \n2
    \n2
    \n30<\/p>\n

    FortiAnalyzer
    \n8
    \n4
    \n80<\/p>\n

    FortiMail
    \n2
    \n4
    \n50<\/p>\n

    Stroj pro model
    \n28
    \n19
    \n280<\/p>\n

    Syst\u00e9mov\u00e9 po\u017eadavky uveden\u00e9 v t\u00e9to tabulce jsou minim\u00e1ln\u00ed \u2014 ve skute\u010dnosti je obvykle nutn\u00e9 vy\u010dlenit v\u00edce zdroj\u016f. Dal\u0161\u00ed informace o syst\u00e9mov\u00fdch po\u017eadavc\u00edch naleznete na t\u011bchto str\u00e1nk\u00e1ch<\/a><\/noindex>. <\/p>\n

    Ve video lekci jsou p\u0159edstaveny teoretick\u00e9 materi\u00e1ly, kter\u00e9 byly probr\u00e1ny v\u00fd\u0161e, a tak\u00e9 praktick\u00e1 \u010d\u00e1st \u2014 se z\u00e1kladn\u00ed konfigurac\u00ed za\u0159\u00edzen\u00ed FortiAnalyzer. P\u0159\u00edjemn\u00e9 sledov\u00e1n\u00ed!<\/p>\n

    \r\n \"P\u0159ehr\u00e1t\r\n
    <\/div>\r\n <\/div><\/center>
    \nV dal\u0161\u00ed lekci podrobn\u011b probereme aspekty pr\u00e1ce s protokoly. Abyste ji nezme\u0161kali, p\u0159ihlaste se k odb\u011bru na\u0161eho     Youtube kan\u00e1lu<\/a><\/noindex>.<\/p>\n

    M\u016f\u017eete tak\u00e9 sledovat aktualizace na n\u00e1sleduj\u00edc\u00edch zdroj\u00edch:<\/p>\n

    Skupina na Vkontakte<\/a><\/noindex>
    \n    Yandex Zen <\/a><\/noindex>
    \n    Na\u0161e webov\u00e9 str\u00e1nky<\/a><\/noindex>
    \n    Telegram kan\u00e1l<\/a><\/noindex>
    \n
    Zdroj:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u0443\u0440\u043e\u043a\u0435 \u043a\u0443\u0440\u0441\u0430 FortiAnalyzer Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u043d\u0430 FortiAnalyzer, \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a FortiAnalyzer. \u0418 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043c\u0430\u043a\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0445\u043e\u0434\u0435 \u043a\u0443\u0440\u0441\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043c \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e FortiAnalyzer. \u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96037,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-96036","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd472. FortiAnalyzer Z\u00e1klady v6.4. P\u0159\u00edprava modelu | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. FortiAnalyzer Getting Started v6.4. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043c\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-06T23:42:11+00:00","article:modified_time":"2020-10-06T23:42:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96036","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:52:25","updated":"2022-10-03 07:29:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/96036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=96036"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/96036\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/96037"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=96036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=96036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=96036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}