Mhoro, shamwari! Isu tinofara kukugamuchirai kune yedu nyowani FortiAnalyzer Kutanga kosi. Pachokwadi Isu takatotarisa mashandiro eFortiAnalyzer, asi isu takapfuura mazviri zviri pamusoro. Iye zvino ndinoda kukuudza zvakadzama nezvechigadzirwa ichi, nezvezvinangwa zvayo, zvinangwa uye kugona. Iyi kosi haifanirwe kuve yakawanda seyekupedzisira, asi ndinovimba ichave inonakidza uye inodzidzisa.
Sezvo chidzidzo chakazove chekufungidzira, kuti zvikunakire isu takafunga kuzvipawo muchimiro chechinyorwa.
Muchidzidzo ichi tichabata pfungwa dzinotevera:
- Ruzivo rwakakwana nezvechigadzirwa, chinangwa chayo, mabasa uye akakosha maficha
- Ngatigadzirirei dhizaini, panguva yekugadzirira isu tichatora zvakadzama kutarisa kwekutanga kumisikidzwa kweFortiAnalyzer.
- Ngatijairanei nemagadzirirwo ekuchengetedza, kugadzirisa uye kusefa matanda kuti atsvage zviri nyore, uye zvakare funga nezve FortiView meshini, iyo inopa ruzivo rwekuona nezve mamiriro etiweki nenzira yemagirafu akasiyana, dhayagiramu uye mamwe majeti.
- Ngatitarisei maitiro ekugadzira mishumo iripo, uye zvakare dzidza kugadzira yako mishumo uye kugadzirisa iripo mishumo
- Ngatipfuurei nenyaya huru dzine chekuita neFortiAnalyzer manejimendi
- Ngatikurukurei nezvechirongwa chekupihwa rezenisi zvakare - Ndakatotaura nezvazvo muchidzidzo 11 chekosi. , asi sezvavanotaura, kudzokorora ndiko amai vekudzidza.
Chinangwa chikuru cheFortiAnalyzer ndiko kuchengetedza kwepakati kwematanda kubva kune imwe kana kupfuura Fortinet zvishandiso, pamwe nekugadzirisa kwavo uye kuongorora. Izvi zvinobvumira vatariri vekuchengetedza kuti vatarise akasiyana network uye kuchengetedza zviitiko kubva panzvimbo imwe, nekukurumidza kuwana ruzivo rwakakosha kubva kumatanda uye majeti, uye kuvaka mishumo pane ese kana chaiwo maturusi.
Rondedzero yemidziyo kubva kune FortiAnalyzer inogona kugamuchira matanda nekuaongorora inoratidzwa mumufananidzo uri pazasi.
FortiAnalyzer ine matatu akakosha maficha: kushuma, chenjedzo, uye kuchengetedza. Ngatitarisei pane imwe neimwe yadzo.
Kurevera - Mishumo inopa inomiririra inomiririra yetiweki zviitiko, kuchengetedza zviitiko, uye akasiyana zviitiko zvinoitika pamidziyo inotsigirwa. Iyo nzira yekubika inounganidza iyo data inodiwa kubva mumatanda aripo uye inoaisa mufomu iri nyore kuverenga nekuongorora. Uchishandisa mishumo, unogona kukurumidza kuwana ruzivo rwakakosha nezvekuita kwechigadzirwa, kuchengetedzwa kwetiweki, zviwanikwa zvakashanyirwa zvakanyanya, zvichingodaro. Pane zvakawanda zvingasarudzwa. Mishumo inogona zvakare kushandiswa kuongorora mamiriro etiweki uye zvishandiso zvinotsigirwa kwenguva yakareba. Kazhinji ivo vanonyanya kukosha pakuferefeta akasiyana ekuchengetedza zviitiko.
Nyevero inokutendera iwe kuti upindure nekukurumidza kune dzakasiyana siyana kutyisidzira kunoitika pane network. Iyo sisitimu inoburitsa yambiro kana matanda achionekwa anogutsa pre-yakagadzirirwa mamiriro - kuona hutachiona, kushandiswa kwehutera hwakasiyana, zvichingodaro. Aya chenjedzo anogona kuoneka muFortiAnalyzer web interface, uye iwe unogona kugadzirisa yavo kutumira kuburikidza neSNMP protocol, kune syslog server, uye zvakare kune chaiyo email kero.
Kuchengetedza kunobvumidza iwe kuchengetedza makopi ezvakasiyana zvemukati zvinoyerera pane network paFortiAnalyzer. Izvi zvinowanzoshandiswa pamwe chete neDLP injini kuchengetedza mafaira akasiyana-siyana anowira pasi pemitemo yakasiyana yejini. Inogonawo kubatsira pakuongorora zvakasiyana-siyana zvekuchengetedza zviitiko.
Chimwe chinhu chinonakidza kugona kushandisa administrative domains. Iyi tekinoroji inobvumidza iwe kugadzira mapoka ezvishandiso zvinoenderana neakasiyana maitiro - mhando dzemidziyo, nzvimbo yenzvimbo, zvichingodaro. Kugadzirwa kwemapoka emidziyo yakadaro kunoshanda zvinotevera zvinangwa:
- Zvishandiso zvemapoka zvinoenderana nemaitiro akafanana kuti zvive nyore kutarisa uye manejimendi - semuenzaniso, zvishandiso zvinoiswa mumapoka zvichienderana nenzvimbo. Iwe unofanirwa kutsvaga rumwe ruzivo mumatanda emidziyo iri muboka rimwe chete. Panzvimbo yekunyatso kusefa matanda, iwe unongotarisa matanda eiyo inodiwa administrative domain uye tsvaga ruzivo rwakakosha.
- Kusiyanisa kuwana kwekutonga - yega yega dhairekitori inogona kuva nemutungamiriri mumwe chete kana vanopfuura vanongokwanisa kuwana iyi domain rekutonga.
- Kunyatso gadzirisa nzvimbo yedhisiki uye mitemo yekuchengetera data remudziyo - Panzvimbo pekugadzira imwe chete yekuchengetedza zvigadziriso kune ese maturusi, manejimendi ekutonga anokutendera iwe kuti uise mamwe akakodzera masisitimu ega ega emidziyo. Izvi zvinogona kubatsira kana uine michina yakawanda, uye kubva kune rimwe boka rezvishandiso unoda kuchengetedza data kwegore, uye kubva kune imwe - makore matatu. Saizvozvo, iwe unogona kugovera yakakodzera dhisiki nzvimbo yeboka rimwe nerimwe - kune boka rinogadzira nhamba huru yematanda, kugovera nzvimbo yakawanda, uye kune rimwe boka - shoma nzvimbo.
FortiAnalyzer inogona kushanda mumamodhi maviri - Analyzer uye Collector. Iyo yekushandisa mode inosarudzwa zvichienderana nezvinodiwa nemunhu uye network topology.
Kana FortiAnalyzer ichishanda muAnalyzer modhi, inoita seyekutanga aggregator yematanda kubva kune mumwe kana anopfuura anounganidza matanda. Vanounganidza matanda ese ari maviri FortiAnalyzer muCollector modhi uye zvimwe zvishandiso zvinotsigirwa neFortiAnalyzer (rondedzero yavo yakaratidzwa pamusoro pamufananidzo). Iyi nzira yekushandisa inoshandiswa nekusingaperi.
Kana FortiAnalyzer ichimhanya muCollector modhi, inounganidza matanda kubva kune mamwe maturusi uye yozoaendesa kune chimwe chishandiso, chakadai seFortiAnalyzer muAnalyzer kana Syslog modhi. MuCollector mode, FortiAnalyzer haigone kushandisa akawanda maficha, akadai sekubika uye chenjedzo, sezvo chinangwa chayo chikuru chiri chekuunganidza nekuendesa matanda.
Kushandisa akawanda FortiAnalyzer zvishandiso nenzira dzakasiyana kunogona kuwedzera chibereko - FortiAnalyzer muCollector modhi inounganidza matanda kubva kune ese maturusi uye inoatumira kuAnalyzer kuti iongororwe inotevera, iyo inobvumira FortiAnalyzer muAnalyzer modhi kuchengetedza zviwanikwa zvakashandiswa mukugamuchira matanda kubva kune akawanda maturusi uye kutarisa zvachose pa. log processing.
FortiAnalyzer inotsigira inozivisa SQL yemubvunzo mutauro wekutema matanda uye kushuma. Nekubatsira kwayo, matanda anoratidzwa muchimiro chinoverengwa. Zvakare, uchishandisa mutauro wemubvunzo uyu, mishumo yakasiyana inovakwa. Humwe hunyanzvi hwekuzivisa hunoda imwe SQL uye ruzivo rwedatabase, asi FortiAnalyzer yakavakirwa-mukati kugona kazhinji inobvisa ruzivo urwu. Tichasangana neizvi zvakare kana tafunga nezve nzira yekubika.
FortiAnalyzer pachayo inouya mune akati wandei flavour. Ichi chinogona kunge chiri chakasiyana chemuviri mudziyo, chaiwo muchina - akasiyana hypervisors anotsigirwa, yavo yakazara runyorwa inogona kuwanikwa mukati . Inogona zvakare kuiswa mune akasarudzika zvivakwa - AWS. Azure, Google Cloud nevamwe. Uye yekupedzisira sarudzo ndeye FortiAnalyzer Cloud, gore sevhisi inopihwa neFortinet.
Muchidzidzo chinotevera tichagadzira marongero erimwe basa rinoshanda. Kuti urege kuipotsa, nyorera kune yedu .
Iwe unogona zvakare kutevedzera zvigadziriso pane zvinotevera zviwanikwa:
Source: www.habr.com