{"id":36669,"date":"2019-10-31T22:13:01","date_gmt":"2019-10-31T19:13:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\/"},"modified":"2019-10-31T22:13:01","modified_gmt":"2019-10-31T19:13:01","slug":"stealthwatch-razvertyvanie-i-nastrojka-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","title":{"rendered":"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/6d2c187b799a2f811e24d36e2ab48c77.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00dcdv\u00f6zlet, koll\u00e9g\u00e1k! Miut\u00e1n meghat\u00e1roztuk a minim\u00e1lis k\u00f6vetelm\u00e9nyeket a StealthWatch telep\u00edt\u00e9s\u00e9hez, <noindex><a rel=\"nofollow\" href=\"http:\/\/habr.com\/ru\/company\/tssolution\/blog\/458626\/\">az el\u0151z\u0151 r\u00e9szben<\/a><\/noindex>, elkezdhetj\u00fck a term\u00e9k telep\u00edt\u00e9s\u00e9t.<\/p>\n<h3>1. A StealthWatch telep\u00edt\u00e9si m\u00f3djai<\/h3>\n<p>\nT\u00f6bbf\u00e9lek\u00e9ppen \u201ekipr\u00f3b\u00e1lhatjuk\u201d a StealthWatch-ot: <\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/dcloud.cisco.com\/\">dcloud<\/a><\/noindex> \u2013 felh\u0151alap\u00fa laborat\u00f3riumi szolg\u00e1ltat\u00e1s;<\/li>\n<li>Felh\u0151alap\u00fa: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/stealthwatch\/security-visibility-assessment.html\">Stealthwatch Cloud Pr\u00f3baverzi\u00f3 <\/a><\/noindex> \u2013 itt a Netflow az \u00d6n eszk\u00f6z\u00e9r\u0151l a felh\u0151be ker\u00fcl, ahol a StealthWatch szoftver elemzi azt; <\/li>\n<li>Helyben POV (<noindex><a rel=\"nofollow\" href=\"https:\/\/cep.cloudapps.cisco.com\/case\">GVE k\u00e9r\u00e9s<\/a><\/noindex>) \u2013 ez az a m\u00f3dszer, amelyet \u00e9n v\u00e1lasztottam, \u00d6nnek 4 OVF f\u00e1jlt k\u00fcldenek a virtu\u00e1lis g\u00e9pekr\u0151l, be\u00e9p\u00edtett, 90 napos licencekkel, amelyeket dedik\u00e1lt szerveren lehet telep\u00edteni a v\u00e1llalati h\u00e1l\u00f3zatban. <\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nA let\u00f6lt\u00f6tt virtu\u00e1lis g\u00e9pek b\u0151s\u00e9ge ellen\u00e9re a minim\u00e1lis m\u0171k\u00f6d\u00e9si konfigur\u00e1ci\u00f3hoz elegend\u0151 csak 2: StealthWatch Management Console \u00e9s FlowCollector. Ha azonban nincs olyan h\u00e1l\u00f3zati eszk\u00f6z, amely k\u00e9pes Netflow-t export\u00e1lni a FlowCollector-ra, akkor sz\u00fcks\u00e9ges egy FlowSensor telep\u00edt\u00e9se is, mivel az ut\u00f3bbi SPAN\/RSPAN technol\u00f3gi\u00e1k seg\u00edts\u00e9g\u00e9vel k\u00e9pes Netflow-t gy\u0171jteni.<\/p>\n<p>Laborat\u00f3riumi k\u00f6rnyezetk\u00e9nt, ahogy m\u00e1r eml\u00edtettem, a saj\u00e1t val\u00f3s h\u00e1l\u00f3zata is j\u00f3l m\u0171k\u00f6dhet, mivel a StealthWatch sz\u00e1m\u00e1ra csak egy m\u00e1solat vagy pontosabban a forgalom t\u00f6m\u00f6r\u00edtett v\u00e1ltozata sz\u00fcks\u00e9ges. Az al\u00e1bbi \u00e1br\u00e1n l\u00e1that\u00f3 a h\u00e1l\u00f3zatom, ahol a biztons\u00e1gi \u00e1tj\u00e1r\u00f3n be\u00e1ll\u00edtom a Netflow Exportert, \u00e9s ennek eredm\u00e9nyek\u00e9nt Netflow-t k\u00fcld\u00f6k a gy\u0171jt\u0151re.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/b82e6d6e7b229ebfa3e31b5a47292f25.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA j\u00f6v\u0151beli virtu\u00e1lis g\u00e9pek el\u00e9r\u00e9s\u00e9hez az \u00d6n t\u0171zfal\u00e1n, ha van, enged\u00e9lyezni kell a k\u00f6vetkez\u0151 portokat:<\/p>\n<p><b> TCP 22 l TCP 25 l TCP 389 l TCP 443 l TCP 2393 l TCP 5222 l UDP 53 l UDP 123 l UDP 161 l UDP 162 l UDP 389 l UDP 514 l UDP 2055 l UDP 6343 <\/b><\/p>\n<p>N\u00e9h\u00e1ny k\u00f6z\u00fcl\u00fck k\u00f6zismert szolg\u00e1ltat\u00e1sok, m\u00e1sok a Cisco szolg\u00e1ltat\u00e1saihoz vannak fenntartva.<br \/>\nAz \u00e9n esetemben egyszer\u0171en a StealthWatch-t telep\u00edtettem arra a h\u00e1l\u00f3zatra, amelyen a Check Point tal\u00e1lhat\u00f3, \u00e9s nem kellett enged\u00e9lyez\u00e9si szab\u00e1lyokat be\u00e1ll\u00edtanom.<\/p>\n<h3>2. A FlowCollector telep\u00edt\u00e9se a VMware vSphere p\u00e9ld\u00e1j\u00e1val<\/h3>\n<p>\n2.1. Kattintson a Tall\u00f3z\u00e1s gombra, \u00e9s v\u00e1lassza ki az 1. OVF f\u00e1jlt. Ellen\u0151rizze az er\u0151forr\u00e1sok el\u00e9rhet\u0151s\u00e9g\u00e9t, majd l\u00e9pjen a N\u00e9zet men\u00fcbe, lelt\u00e1r \u2192 H\u00e1l\u00f3zat (Ctrl+Shift+N).<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/4533c23d8b9b65163f9f426d25ce3215.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.2. A H\u00e1l\u00f3zat f\u00fcl\u00f6n v\u00e1lasszuk a virtu\u00e1lis kapcsol\u00f3 be\u00e1ll\u00edt\u00e1sokn\u00e1l az \u00daj Disztrib\u00faci\u00f3s portcsoportot.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/26bec9aa59a409f6fd58aef93f685d26.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.3. Adjunk nevet, legyen StealthWatchPortGroup, a t\u00f6bbi be\u00e1ll\u00edt\u00e1st az al\u00e1bbi k\u00e9perny\u0151 szerint v\u00e9gezheti, majd kattintson a K\u00f6vetkez\u0151 gombra.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/1b5f9225675eefb37a8be070cb12dbe0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/c24f649de31b1d55cf9ac97d6321a8c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.4. A Portcsoport l\u00e9trehoz\u00e1s\u00e1t a Befejez\u00e9s gomb megnyom\u00e1s\u00e1val fejezze be.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/4dcd93fc9054f908b3ce69d10538e260.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.5. A l\u00e9trehozott Port Group be\u00e1ll\u00edt\u00e1sait m\u00f3dos\u00edtjuk, jobb gombbal r\u00e1kattintunk a port csoportra, majd az Edit Settings lehet\u0151s\u00e9get v\u00e1lasztjuk. A Security f\u00fcl alatt felt\u00e9tlen\u00fcl aktiv\u00e1ljuk a \u00abnem \u00e1tl\u00e1that\u00f3 m\u00f3dot\u00bb, Promiscuous Mode \u2192 Accept \u2192 OK.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/b7792f5e3c2dad347db252588ae7447e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.6. P\u00e9ldak\u00e9nt import\u00e1ljuk az OVF FlowCollector-t, amelynek let\u00f6lt\u00e9si link\u00e9t a Cisco m\u00e9rn\u00f6ke k\u00fcldte a GVE k\u00e9r\u00e9s ut\u00e1n. Azon a hoszton, ahol a VM-et telep\u00edteni k\u00edv\u00e1nja, jobb gombbal r\u00e1kattintunk, \u00e9s az Deploy OVF Template lehet\u0151s\u00e9get v\u00e1lasztjuk. A helyig\u00e9ny kapcs\u00e1n elegend\u0151 a 50 GB, de \u00e9les k\u00f6rnyezetben javasolt 200 GB-ot biztos\u00edtani.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/000e3a98673b2577f33c0e5fc2913704.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.7. V\u00e1lassza ki a mapp\u00e1t, ahol az OVF f\u00e1jl tal\u00e1lhat\u00f3.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/855a4dfcb92bb41912d059bfedd3e98a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.8. Kattintson a \u00abTov\u00e1bb\u00bb gombra.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/adc372dd2e4df3b75724f6146771e800.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.9. Adja meg a nevet \u00e9s a szervert, ahol telep\u00edtj\u00fck.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/abdb25ced5addf714adf07898541b0b6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.10. Ennek eredm\u00e9nyek\u00e9nt a k\u00f6vetkez\u0151 k\u00e9pet kapjuk, \u00e9s kattintsunk a \u00abBefejez\u00e9s\u00bb gombra.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/eef848e4998de5bab0e0dc3845466134.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.11. Ugyanezeket a l\u00e9p\u00e9seket k\u00f6vetve telep\u00edtj\u00fck a StealthWatch Management Console-t.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/33010b6a604071f68300fb31b951ea71.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.12. Most meg kell adnia a sz\u00fcks\u00e9ges h\u00e1l\u00f3zatokat az interf\u00e9szekben, hogy a FlowCollector l\u00e1thassa tanto SMC-t, mint azokat az eszk\u00f6z\u00f6ket, amelyekr\u0151l export\u00e1lni fogj\u00e1k a Netflow-t. <\/p>\n<h3>3. StealthWatch Management Console inicializ\u00e1l\u00e1sa<\/h3>\n<p>\n3.1. Az SMCVE telep\u00edtett g\u00e9p konzolj\u00e1ba bel\u00e9pve l\u00e1tni fogja a felhaszn\u00e1l\u00f3n\u00e9v \u00e9s jelsz\u00f3 be\u00edr\u00e1s\u00e1hoz sz\u00fcks\u00e9ges helyet, alap\u00e9rtelmez\u00e9s szerint <b>sysadmin\/lan1cope<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/898a885324fd1a5542a94fb40e1f79f8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.2. L\u00e9pjen be a Management men\u00fcbe, adja meg az IP-c\u00edmet \u00e9s m\u00e1s h\u00e1l\u00f3zati param\u00e9tereket, majd er\u0151s\u00edtse meg azok m\u00f3dos\u00edt\u00e1s\u00e1t. Az eszk\u00f6z \u00fajraindul.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/5f7d56d1f108afa873aa370f87a55d0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/76a90cf85e51c9aea91d8b738d0de775.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/a9af327e6449932d0f88f05f31f5601e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.3. L\u00e9pjen a webb\u00f6ng\u00e9sz\u0151 fel\u00fclet\u00e9re (https a megadott SMC c\u00edmre), \u00e9s inicializ\u00e1lja a konzolt, az alap\u00e9rtelmezett bejelentkez\u00e9s\/jelsz\u00f3 \u2014 <b>admin\/lan411cope<\/b>. <\/p>\n<p>P.S.: n\u00e9ha a Google Chrome nem ny\u00edlik meg, az Explorer mindig seg\u00edt.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/a0eb07f52f4080c4fba42df214283dc7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.4. Felt\u00e9tlen\u00fcl v\u00e1ltoztassa meg a jelszavakat, adja meg a DNS, NTP szervereket, a dom\u00e9nt \u00e9s egyebeket. A be\u00e1ll\u00edt\u00e1sok intuit\u00edvan \u00e9rthet\u0151ek. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/d3de68f5f828022df4ef493c8ee91fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.5. A \u00abApply\u00bb gombra kattint\u00e1s ut\u00e1n az eszk\u00f6z \u00fajraindul. 5-7 perc eltelt\u00e9vel \u00fajra csatlakozhat ehhez a c\u00edmhez; a StealthWatch kezel\u00e9se a webes fel\u00fcleten kereszt\u00fcl fog t\u00f6rt\u00e9nni.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/f22752b76ddb46d7262fd3b3999fac2b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>4. FlowCollector be\u00e1ll\u00edt\u00e1sa<\/h3>\n<p>\n4.1. A kollektorn\u00e1l minden ugyanolyan. El\u0151sz\u00f6r a CLI-ben megadjuk az IP-c\u00edmet, a maszkot, a dom\u00e9nt, majd az FC \u00fajraindul. Ezt k\u00f6vet\u0151en webes fel\u00fcleten csatlakozhat a megadott c\u00edmre, \u00e9s elv\u00e9gezheti az alapvet\u0151 be\u00e1ll\u00edt\u00e1st. Mivel a be\u00e1ll\u00edt\u00e1sok hasonl\u00f3ak, a r\u00e9szletes k\u00e9perny\u0151k\u00e9pek elhagy\u00e1sra ker\u00fclnek. <b>Bejelentkez\u00e9si adatok<\/b> a bel\u00e9p\u00e9shez <b>ugyanazok<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/9753ff123a18d6fc7c26a41be71515f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.2. Az utols\u00f3 el\u0151tti l\u00e9p\u00e9sben meg kell adni az SMC IP-c\u00edm\u00e9t, \u00edgy a konzol l\u00e1tni fogja az eszk\u00f6zt, ezt a be\u00e1ll\u00edt\u00e1st a bejelentkez\u00e9si adatok megad\u00e1s\u00e1val kell meger\u0151s\u00edteni.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/0c8504533a1f70475fed8e061bc9f584.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.3. V\u00e1lassza ki a StealthWatch dom\u00e9nt, amelyet kor\u00e1bban adtak meg, \u00e9s a portot <b>2055 <\/b>\u2013 szok\u00e1sos Netflow, ha sFlow-t haszn\u00e1l, port <b>6343<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/6ac15c0eaf9097a2d66bbc54769055a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>5. Netflow Exporter konfigur\u00e1l\u00e1sa<\/h3>\n<p>\n5.1. A Netflow export\u00e1l\u00f3 be\u00e1ll\u00edt\u00e1s\u00e1hoz javaslom, hogy forduljon ehhez a <noindex><a rel=\"nofollow\" href=\"http:\/\/configurenetflow.info\">forr\u00e1shoz <\/a><\/noindex>, itt tal\u00e1lja a f\u0151 \u00fatmutat\u00f3kat a Netflow export\u00e1l\u00f3 konfigur\u00e1l\u00e1s\u00e1hoz sok eszk\u00f6zh\u00f6z: Cisco, Check Point, Fortinet. <\/p>\n<p>5.2. A mi eset\u00fcnkben, ahogy m\u00e1r eml\u00edtettem, a Netflow-t a Check Point \u00e1tj\u00e1r\u00f3b\u00f3l export\u00e1ljuk. A Netflow export\u00e1l\u00f3 be\u00e1ll\u00edt\u00e1sa hasonl\u00f3 nev\u0171 f\u00fcl\u00f6n t\u00f6rt\u00e9nik a webes fel\u00fcleten (Gaia Portal). Ehhez kattintson az \u201eAdd\u201d gombra, majd adja meg a Netflow verzi\u00f3j\u00e1t \u00e9s a sz\u00fcks\u00e9ges portot. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/d3544d986d85aea336081d3fc207c553.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>6. StealthWatch m\u0171k\u00f6d\u00e9s\u00e9nek elemz\u00e9se<\/h3>\n<p>\n6.1. A SMC webes fel\u00fclet\u00e9re l\u00e9pve, az els\u0151 oldalon a Dashboards &gt; Network Security alatt vil\u00e1gosan l\u00e1tszik, hogy a forgalom elindult!<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/8e7d65efd8b212096f447dd2828f68f1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n6.2. N\u00e9h\u00e1ny be\u00e1ll\u00edt\u00e1st, p\u00e9ld\u00e1ul a hosztok csoportos\u00edt\u00e1s\u00e1t, egyes interf\u00e9szek figyel\u00e9s\u00e9t, a terhel\u00e9s\u00fcket, a gy\u0171jt\u0151k kezel\u00e9s\u00e9t \u00e9s m\u00e1sokat csak a StealthWatch Java alkalmaz\u00e1s\u00e1ban tal\u00e1lhat meg. Term\u00e9szetesen a Cisco fokozatosan \u00e1tviszi az \u00f6sszes funkci\u00f3t a b\u00f6ng\u00e9sz\u0151s verzi\u00f3ba, \u00e9s hamarosan lemondunk ezekr\u0151l a desktop kliensekr\u0151l.<\/p>\n<p>Az alkalmaz\u00e1s telep\u00edt\u00e9s\u00e9hez el\u0151sz\u00f6r telep\u00edtenie kell <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jre8-downloads-2133155.html\">JRE <\/a><\/noindex>(\u00e9n a 8-as verzi\u00f3t telep\u00edtettem, b\u00e1r azt mondj\u00e1k, hogy a 10-es verzi\u00f3ig t\u00e1mogatott) az Oracle hivatalos weboldal\u00e1r\u00f3l.<\/p>\n<p>A kezel\u0151i konzol webes fel\u00fclet\u00e9nek jobb fels\u0151 sark\u00e1ban a let\u00f6lt\u00e9shez kattintson a \u201eDesktop Client\u201d gombra.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/6345b6eb1606d219bbaf65f73b196446.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nK\u00e9nyszer\u00edtve menti \u00e9s telep\u00edti az \u00fcgyfelet, a java val\u00f3sz\u00edn\u0171leg panaszkodni fog r\u00e1, esetleg sz\u00fcks\u00e9ges a hosztot a java kiv\u00e9telek k\u00f6z\u00e9 felvenni.<\/p>\n<p>Ennek eredm\u00e9nyek\u00e9nt egy meglehet\u0151sen \u00e9rthet\u0151 kliens jelenik meg, amelyben k\u00f6nnyen megtekintheti az export\u00e1l\u00f3k, interf\u00e9szek, t\u00e1mad\u00e1sok \u00e9s azok folyamatai terhel\u00e9s\u00e9t.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/d5742de9c3d3792c308f34f2a6c87839.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/ca3c8d53a56d6c0e8fac12eb4c263096.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/56ba3458be8c6f50929a1008d30f4412.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>7. StealthWatch K\u00f6zponti Kezel\u00e9s<\/h3>\n<p>\n7.1. A K\u00f6zponti Kezel\u00e9s f\u00fcl alatt tal\u00e1lhat\u00f3k az \u00f6sszes eszk\u00f6z, amelyek a telep\u00edtett StealthWatch r\u00e9sz\u00e9t k\u00e9pezik, mint p\u00e9ld\u00e1ul: FlowCollector, FlowSensor, UDP-Director \u00e9s Endpoint Concetrator. Itt kezelheti az eszk\u00f6z\u00f6k h\u00e1l\u00f3zati be\u00e1ll\u00edt\u00e1sait \u00e9s szolg\u00e1ltat\u00e1sait, licencjeit, \u00e9s manu\u00e1lisan lekapcsolhatja az eszk\u00f6zt.<\/p>\n<p>Ebbe a f\u00fclbe l\u00e9phet a jobb fels\u0151 sarokban tal\u00e1lhat\u00f3 \u201efogasker\u00e9k\u201d megnyom\u00e1s\u00e1val, majd a K\u00f6zponti Kezel\u00e9s kiv\u00e1laszt\u00e1s\u00e1val. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/86c411fef0ec8eb0f1941cd4aa2b8c41.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/1ff2e89817e47ac38fc141f9fe82674a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.2. A FlowCollector-n\u00e9l az Edit Appliance Configuration-be l\u00e9pve l\u00e1thatja az SSH, NTP \u00e9s egy\u00e9b h\u00e1l\u00f3zati be\u00e1ll\u00edt\u00e1sokat, amelyek k\u00f6zvetlen\u00fcl az appliance-ra vonatkoznak. Ahhoz, hogy \u00e1t tudjon l\u00e9pni, v\u00e1lassza az Actions \u2192 Edit Appliance Configuration lehet\u0151s\u00e9get a kiv\u00e1nt eszk\u00f6zn\u00e9l.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/1b1d27c3238f47a9fe4e0190ddf4e8a0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/78be8a43bbbefee502fbbf1e398c6f5e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/15a8b2d77ffba34be2d5ae876a20cf61.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.3. A licencmenedzsment szint\u00e9n megtal\u00e1lhat\u00f3 a K\u00f6zponti Kezel\u00e9s &gt; Licenc Kezel\u00e9se f\u00fcl alatt. A pr\u00f3ba licencek a GVE k\u00e9r\u00e9s eset\u00e9n <b>90 napra \u00e9rhet\u0151k el<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/07\/56b02e7921a94b51b8d2a9a9dea40a16.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA term\u00e9k k\u00e9szen \u00e1ll a m\u0171k\u00f6d\u00e9sre! A k\u00f6vetkez\u0151 r\u00e9szben megvizsg\u00e1ljuk, hogyan k\u00e9pes a StealthWatch azonos\u00edtani a t\u00e1mad\u00e1sokat \u00e9s jelent\u00e9seket k\u00e9sz\u00edteni.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/461831\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0447\u0430\u0441\u0442\u0438, \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. 1. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u00ab\u043f\u043e\u0442\u0440\u043e\u0433\u0430\u0442\u044c\u00bb StealthWatch: dcloud \u2013 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0442; Cloud Based: Stealthwatch Cloud Free Trial \u2013 \u0437\u0434\u0435\u0441\u044c Netflow \u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u044b\u043f\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u043b\u0430\u043a\u043e \u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u041f\u041e StealthWatch; On-premise POV [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36669","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47StealthWatch: telep\u00edt\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s. 2. r\u00e9sz | ProHoster","description":"\u00dcdv\u00f6zl\u00f6m, koll\u00e9g\u00e1k!","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:description":"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:01+00:00","article:modified_time":"2019-10-31T19:13:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36669","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:18:11","updated":"2026-01-22 04:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/36669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=36669"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/36669\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/27463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=36669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=36669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=36669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}