{"id":96036,"date":"2020-10-07T01:42:11","date_gmt":"2020-10-06T23:42:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa"},"modified":"2020-10-07T01:42:11","modified_gmt":"2020-10-06T23:42:11","slug":"2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","title":{"rendered":"2. FortiAnalyzer Introduktion v6.4. Forberedelse af layout","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"2.
\n
\nVi byder dig velkommen til det andet lektion i kurset FortiAnalyzer Introduktion<\/a><\/noindex>. I dag vil vi tale om mekanismen for administrative dom\u00e6ner p\u00e5 FortiAnalyzer<\/a><\/noindex>, vi vil ogs\u00e5 diskutere logbehandlingsprocessen \u2014 forst\u00e5else af disse mekanismers principper er n\u00f8dvendig for de indledende indstillinger FortiAnalyzer<\/a><\/noindex>. Efter dette vil vi diskutere layoutet, som vi vil bruge i l\u00f8bet af kurset, samt foretage den indledende konfiguration FortiAnalyzer<\/a><\/noindex>. Den teoretiske del samt den fulde optagelse af video lektionen findes under nedenst\u00e5ende link. <\/a><\/noindex><\/p>\n

For at starte vil vi endnu en gang tale om administrative dom\u00e6ner. Der er flere ting, man skal vide om dem, f\u00f8r man kan begynde at bruge: <\/p>\n

    \n
  1. Muligheden for at oprette administrative dom\u00e6ner aktiveres og deaktiveres centralt.<\/li>\n
  2. For at registrere enhver enhed, undtagen FortiGate, kr\u00e6ves et separat administrativt dom\u00e6ne. Det vil sige, hvis du vil registrere flere FortiMail-enheder p\u00e5 en enhed, har du brug for et separat administrativt dom\u00e6ne til dette form\u00e5l. Men dette \u00e6ndrer ikke det forhold, at for nemheds skyld kan man oprette forskellige administrative dom\u00e6ner for FortiGate-enheder. <\/li>\n
  3. Det maksimale antal underst\u00f8ttede administrative dom\u00e6ner afh\u00e6nger af modellen af FortiAnalyzer-enheden. <\/li>\n
  4. N\u00e5r muligheden for at oprette administrative dom\u00e6ner aktiveres, skal du v\u00e6lge deres driftstilstand \u2014 Normal eller Advanced. I Normal-tilstand er det ikke muligt at tilf\u00f8je forskellige virtuelle dom\u00e6ner (eller VDOMs) fra \u00e9n FortiGate til forskellige administrative dom\u00e6ner p\u00e5 FortiAnalyzer-enheden. I Advanced-tilstand er dette muligt. Advanced-tilstand giver mulighed for at behandle data fra forskellige virtuelle dom\u00e6ner og f\u00e5 separate rapporter for dem. Hvis du har glemt, hvad virtuelle dom\u00e6ner er, kan du se p\u00e5 det andet lektion i Fortinet Getting Started kurset<\/a><\/noindex>, hvor dette er beskrevet ret detaljeret. <\/li>\n<\/ol>\n

    \nVi vil se p\u00e5 oprettelse af administrative dom\u00e6ner og fordeling af hukommelse mellem dem lidt senere i den praktiske del af lektionen. <\/p>\n

    Nu taler vi om mekanismen for registrering og behandling af logfiler, der kommer ind p\u00e5 FortiAnalyzer.
    \nLoggene, der sendes til FortiAnalyzer, komprimeres og gemmes i en logfil. N\u00e5r denne fil n\u00e5r en vis st\u00f8rrelse, overskrives den og arkiveres. Disse logs kaldes arkiverede. De betragtes som offline-logs, da de ikke kan analyseres i realtid. De er kun tilg\u00e6ngelige i raw-format til visning. Politik for datalagring i det administrative dom\u00e6ne bestemmer, hvor l\u00e6nge disse logs vil blive opbevaret i enhedens hukommelse.
    \nSamtidig indekseres logs i SQL-databasen. Disse logs bruges til dataanalyse ved hj\u00e6lp af Log View, FortiView og Reports v\u00e6rkt\u00f8jerne. Politik for datalagring i det administrative dom\u00e6ne bestemmer, hvor l\u00e6nge disse logs vil blive opbevaret i enhedens hukommelse. N\u00e5r disse logs er slettet fra enhedens hukommelse, kan de stadig eksistere som arkiverede logs, men det afh\u00e6nger af politikken for datalagring i det administrative dom\u00e6ne. <\/p>\n

    For at forst\u00e5 de oprindelige indstillinger af disse data er det tilstr\u00e6kkeligt. Lad os nu diskutere vores layout:<\/p>\n

    \"2.
    \n
    \nHer ser du 6 enheder \u2014 FortiGate, FortiMail, FortiAnalyzer, dom\u00e6necontroller, computer for ekstern bruger og computer for intern bruger. FortiGate og FortiMail er n\u00f8dvendige for at generere logs fra forskellige Fortinet-enheder for at kunne se p\u00e5 aspekter af arbejdet med forskellige administrative dom\u00e6ner. De interne og eksterne brugere samt dom\u00e6necontrolleren er n\u00f8dvendige for at generere forskellig trafik. Den interne brugers computer k\u00f8rer Windows OS, mens den eksterne computer k\u00f8rer Kali Linux.
    \nI dette eksempel fungerer FortiMail i Server-tilstand, hvilket betyder, at det er en separat mailserver, som g\u00f8r det muligt for interne og eksterne brugere at udveksle e-mails. N\u00f8dvendige indstillinger, s\u00e5som MX-poster, er konfigureret p\u00e5 dom\u00e6necontrolleren. For den eksterne bruger er DNS-serveren den interne dom\u00e6necontroller \u2014 dette opn\u00e5s ved hj\u00e6lp af portforwarding (eller p\u00e5 anden m\u00e5de teknologi kaldet Virtual IP) p\u00e5 FortiGate.
    \nDisse indstillinger vil ikke blive behandlet i denne lektion, da de ikke relaterer til kursets emne. Vi vil gennemg\u00e5 implementeringen og den indledende konfiguration af FortiAnalyzer-enheden. De \u00f8vrige komponenter i det nuv\u00e6rende layout er blevet forberedt p\u00e5 forh\u00e5nd. <\/p>\n

    Systemkravene til forskellige enheder er angivet nedenfor. Jeg har dette layout k\u00f8rende p\u00e5 en forberedt maskine i det virtuelle milj\u00f8 VMWare Workstation. Specifikationerne for denne maskine er ogs\u00e5 angivet nedenfor. <\/p>\n

    Enhed
    \nRAM, GB
    \nvCPU
    \nHDD, GB<\/p>\n

    Dom\u00e6nekontrol
    \n6
    \n3
    \n40<\/p>\n

    Intern bruger
    \n4
    \n2
    \n32<\/p>\n

    Ekstern bruger
    \n2
    \n2
    \n8<\/p>\n

    FortiGate
    \n2
    \n2
    \n30<\/p>\n

    FortiAnalyzer
    \n8
    \n4
    \n80<\/p>\n

    FortiMail
    \n2
    \n4
    \n50<\/p>\n

    Maskine til layoutet
    \n28
    \n19
    \n280<\/p>\n

    De systemkrav, som er angivet i denne tabel, er minimale \u2014 under reelle forhold anbefales det typisk at tildele flere ressourcer. Yderligere oplysninger om systemkravene kan findes p\u00e5 denne hjemmeside<\/a><\/noindex>. <\/p>\n

    I videoen pr\u00e6senteres det teoretiske materiale, der er gennemg\u00e5et ovenfor, samt en praktisk del \u2014 med den indledende konfiguration af enheden FortiAnalyzer. God forn\u00f8jelse!<\/p>\n

    \r\n \"Afspil\r\n
    <\/div>\r\n <\/div><\/center>
    \nI n\u00e6ste lektion vil vi detaljeret gennemg\u00e5 aspekterne ved at arbejde med logs. For ikke at g\u00e5 glip af den, s\u00e5 tilmeld dig vores     YouTube-kanal<\/a><\/noindex>.<\/p>\n

    Du kan ogs\u00e5 f\u00f8lge opdateringer p\u00e5 f\u00f8lgende ressourcer:<\/p>\n

    Gruppe p\u00e5 VKontakte<\/a><\/noindex>
    \n    Yandex Zen <\/a><\/noindex>
    \n    Vores hjemmeside<\/a><\/noindex>
    \n    Telegram-kanal<\/a><\/noindex>
    \n
    Kilde:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u0443\u0440\u043e\u043a\u0435 \u043a\u0443\u0440\u0441\u0430 FortiAnalyzer Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u043d\u0430 FortiAnalyzer, \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a FortiAnalyzer. \u0418 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043c\u0430\u043a\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0445\u043e\u0434\u0435 \u043a\u0443\u0440\u0441\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043c \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e FortiAnalyzer. \u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96037,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-96036","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd472. FortiAnalyzer Introduktion v6.4. Forberedelse af layout | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. FortiAnalyzer Getting Started v6.4. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043c\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-06T23:42:11+00:00","article:modified_time":"2020-10-06T23:42:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96036","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:52:25","updated":"2022-10-03 07:29:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/96036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=96036"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/96036\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/96037"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=96036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=96036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=96036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}