StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

Kia ora e hoa mahi! I te whakatau i nga whakaritenga iti mo te tuku StealthWatch ki roto wahanga whakamutunga, ka taea e tatou te timata ki te tuku i te hua.

1. Nga tikanga mo te tuku StealthWatch

He maha nga huarahi hei "pa" ki te StealthWatch:

  • dcloud – ratonga kapua mo nga mahi taiwhanga;
  • Kapua i runga: Whakamatau Koreutu Kapua Stealthwatch – i konei ka rere a Netflow mai i to taputapu ki roto i te kapua ka tātarihia e te rorohiko StealthWatch;
  • POV-i-whare (tono GVE) – ko te tikanga i whai ahau, ka tukuna atu e ratou ki a koe nga konae 4 OVF o nga miihini mariko me nga raihana hanga-i roto mo nga ra 90, ka taea te tuku ki runga i te tūmau i whakatapua ki te whatunga umanga.


Ahakoa te nui o nga miihini mariko kua tangohia, mo te whirihoranga mahi iti e 2 noa iho: StealthWatch Management Console me FlowCollector. Engari, ki te kore he taputapu whatunga ka taea te kaweake i te Netflow ki te FlowCollector, he mea tika ano kia tukuna a FlowSensor, na te mea ka taea e koe te kohi Netflow ma te whakamahi i nga hangarau SPAN/RSPAN.

Ka rite ki taku korero i mua ake nei, ka taea e to whatunga tuuturu te mahi hei peera taiwhanga, na te mea ko te StealthWatch he kape anake, he tika ake ranei, ko te kopiri o te kape o nga waka. Ko te pikitia i raro nei e whakaatu ana i taku whatunga, kei runga i te kuaha haumaru ka whirihorahia e ahau te Kaituku Netflow, a, ko te mutunga, ka tukuna atu a Netflow ki te kaikohi.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

Hei uru atu ki nga VM a meake nei, me whakaae nga tauranga e whai ake nei ki to papangaahi, mena kei a koe:

TCP 22 l TCP 25 l TCP 389 l TCP 443 l TCP 2393 l TCP 5222 l UDP 53 l UDP 123 l UDP 161 l UDP 162 l UDP 389 l UDP 514 l UDP 2055 l UDP 6343

Ko etahi o ratou he ratonga rongonui, ko etahi kua rahui mo nga ratonga Cisco.
I roto i taku keehi, i tukuna noa e ahau a StelathWatch ki runga i te kupenga rite ki te Tirotiro Tirohanga, karekau i tika ki te whirihora i nga ture whakaaetanga.

2. Te whakauru i te FlowCollector ma te whakamahi i te VMware vSphere hei tauira

2.1. Pāwhiritia Tirotiro ka kowhiri i te OVF file1. I muri i te tirotiro i te waatea o nga rauemi, haere ki te tahua Tiro, Inventory → Whatunga (Ctrl+Shift+N).

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.2. I roto i te ripa Whatunga, tohua te roopu tauranga Tohaina Hou i roto i nga tautuhinga whakawhiti mariko.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.3. Tautuhia te ingoa, waiho ko StealthWatchPortGroup, ko te toenga o nga tautuhinga ka taea te hanga i roto i te Whakaahuamata ka paato Panuku.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.4. Ka oti te hanga o te Roopu Tauranga me te paatene Mutu.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.5. Me whakatika nga tautuhinga o te Roopu Tauranga i hangaia ma te paato-matau ki te roopu tauranga me te kowhiri i nga Tautuhinga Whakatika. I roto i te ripa Haumarutanga, kia mohio ki te whakahohe i te "aratau moepuku", Aratau Whakatau → Whakaae → OK.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.6. Hei tauira, me kawemai mai a OVF FlowCollector, te hononga tango i tukuna mai e tetahi miihini Cisco i muri i te tono a GVE. Pāwhiri-matau i runga i te kaihautu e whakamahere ana koe ki te tuku i te VM ka kowhiria te Whakatauira OVF. Mo te waahi kua tohaina, ka "tiimata" i te 50 GB, engari mo nga tikanga whawhai ka tūtohu kia tohatohahia te 200 gigabytes.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.7. Tīpakohia te kōpaki kei reira te kōnae OVF.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.8. Pāwhiritia "Next".

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.9. Ka tohuhia e matou te ingoa me te tūmau kei reira ka tukuna e matou.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.10. Ko te mutunga, ka whiwhi tatou i te pikitia e whai ake nei ka paato "Whakaoti".

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.11. He rite tonu ta matou mahi ki te tuku i te StealthWatch Management Console.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

2.12. Inaianei me tohu koe i nga whatunga e tika ana i roto i nga atanga kia kite a FlowCollector i te SMC me nga taputapu ka kawea mai a Netflow.

3. Ka timata i te Papatohu Whakahaere StealthWatch

3.1. Ma te haere ki te papatohu o te miihini SMCVE kua whakauruhia, ka kite koe i tetahi waahi ki te whakauru i to takiuru me to kupuhipa, ma te taunoa sysadmin/lan1cope.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

3.2. Ka haere matou ki te mea Whakahaere, tautuhi i te wahitau IP me etahi atu tawhā whatunga, ka whakaū i o raatau huringa. Ka whakaara ano te taputapu.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

3.3. Haere ki te atanga tukutuku (ma te https ki te wahitau i tohua e koe i roto i te SMC) ka arawhiti i te papatohu, takiuru taunoa/kupuhipa - admin/lan411cope.

PS: ka puta kaore e tuwhera ki a Google Chrome, ka awhina tonu a Explorer.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

3.4. Kia mahara ki te huri i nga kupuhipa, tautuhi DNS, NTP tūmau, rohe, aha atu. He maamaa nga tautuhinga.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

3.5. I muri i te panui i te paatene "Hoatu", ka whakaara ano te taputapu. I muri i nga meneti 5-7 ka taea e koe te hono ano ki tenei wahitau; Ka whakahaeretia a StealthWatch ma te atanga tukutuku.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

4. Te whakatu FlowCollector

4.1. He pera ano ki te kaikohi. Tuatahi, i roto i te CLI ka tohua e matou te wahitau IP, te kanohi, te rohe, katahi ka whakaara ano te FC. Ka taea e koe te hono atu ki te atanga tukutuku i te wahitau kua tohua me te whakahaere i taua tatūnga taketake. Na te mea he rite nga tautuhinga, ka waihohia nga whakaahua taipitopito. Taipitopito ki te tomo he rite tonu.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

4.2. I te waahi whakamutunga, me tautuhi koe i te wahitau IP o te SMC, i tenei keehi ka kite te papatohu i te taputapu, me whakau koe i tenei tautuhinga ma te whakauru i o tohu.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

4.3. Tīpakohia te rohe mo StealthWatch, i whakatakotoria i mua, me te tauranga 2055 – Netflow auau, mena kei te mahi koe me sFlow, tauranga 6343.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

5. Netflow whirihoranga Kaituku

5.1. Hei whirihora i te Kaituku Netflow, ka tino tūtohu ahau kia huri ki tenei rauemi , koinei nga kaiarahi matua mo te whirihora i te Kaituku Netflow mo nga taputapu maha: Cisco, Check Point, Fortinet.

5.2. I roto i ta maatau take, ka whakahoki ano ahau, kei te kaweake matou i te Netflow mai i te kuaha Takitaki. Kua whirihorahia te Kaituku Netflow ki tetahi ripa o taua ingoa i roto i te atanga tukutuku (Gaia Portal). Ki te mahi i tenei, pawhiria te "Tāpiri", tohua te putanga Netflow me te tauranga e hiahiatia ana.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

6. Tātaritanga o te mahi StealthWatch

6.1. Haere ki te atanga tukutuku SMC, i te wharangi tuatahi o Papatohu> Whatunga Haumarutanga ka kite koe kua timata te waka!

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

6.2. Ko etahi tautuhinga, hei tauira, te wehewehe i nga kaihautu ki nga roopu, te aro turuki i nga atanga takitahi, i a raatau kawenga, te whakahaere kaikohi, me etahi atu, ka kitea noa i roto i te tono StealthWatch Java. Ae ra, kei te ata whakawhiti a Cisco i nga mahi katoa ki te putanga kaitirotiro a ka tere ka whakarerea e matou taua kaihoko papamahi.

Hei whakauru i te tono, me whakauru tuatahi koe Ko JRE (I whakauruhia e ahau te putanga 8, ahakoa e kiia ana kei te tautokohia ki te 10) mai i te paetukutuku mana o Oracle.

I te kokonga matau o runga o te atanga tukutuku o te papatohu whakahaere, ki te tango, me panui koe i te paatene "Kaihoko Papamahi".

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

Ka tiakina e koe me te whakauru i te kiritaki ma te kaha, ka oati a java ki a ia, ka hiahia pea koe ki te taapiri i te kaihautu ki nga tuunga java.

Ko te hua o tenei, ka whakaatuhia he kaihoko tino marama, he ngawari ki te kite i te utaina o nga kaihokohoko, atanga, whakaeke me o raatau rerenga.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

7. StealthWatch Central Whakahaere

7.1. Kei roto i te Ripa Whakahaere Matua nga taputapu katoa he waahanga o te StealthWatch kua tukuna, penei: FlowCollector, FlowSensor, UDP-Director me Endpoint Concetrator. I reira ka taea e koe te whakahaere i nga tautuhinga whatunga me nga ratonga taputapu, raihana, me te whakaweto ringa i te taputapu.

Ka taea e koe te haere ki reira ma te panui i te "waahi" kei te kokonga matau o runga me te kowhiri i te Whakahaere Central.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

7.2. Ma te haere ki te Whakatika Whirihoranga Taputapu i roto i te FlowCollector, ka kite koe i te SSH, NTP me etahi atu tautuhinga whatunga e pa ana ki te taupānga ake. Ki te haere, tīpako Hohenga → Whakatika Whirihoranga Taputapu mo te taputapu e hiahiatia ana.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

7.3. Ka kitea hoki te whakahaere raihana i roto i te ripa Whakahaere Pokao > Whakahaere Raihana. Ka tukuna nga raihana whakamatautau mena ka tono a GVE 90 ra.

StealthWatch: whakatakotoranga me te whirihoranga. Wāhanga 2

Kua rite te hua ki te haere! I te waahanga e whai ake nei, ka titiro tatou me pehea e mohio ai a StealthWatch ki nga whakaeke me te whakaputa purongo.

Source: will.com

Tāpiri i te kōrero