Kwaziwai! Kugamuchirwa kuchidzidzo chechipfumbamwe chekosi
MuFotiGate, matanda akakamurwa kuita marudzi matatu: matanda emigwagwa, matanda ezviitiko uye matanda ekuchengetedza. Ivo, zvakare, vakakamurwa kuita subtypes.
Traffic logs anorekodha ruzivo rwekuyerera kwetraffic senge zvikumbiro nemhinduro, kana zviripo. Mhando iyi ine subtypes Forward, Local uye Sniffer.
Iyo Forward subtype ine ruzivo nezve traffic iyo FortiGate yakagamuchirwa kana kurambwa zvichibva pamitemo yefirewall.
Iyo Yenharaunda subtype ine ruzivo nezve traffic yakananga kubva kuFortiGate IP kero uye kubva kune IP kero kubva kunoitwa manejimendi. Semuenzaniso, kubatanidza kune FortiGate web interface.
Iyo Sniffer subtype ine matanda etraffic akawanikwa uchishandisa traffic mirroring.
Zviitiko matanda ane sisitimu kana manejimendi zviitiko, sekuwedzera kana kushandura paramita, kumisikidza uye kutyora VPN tunnels, zvine simba routing zviitiko, zvichingodaro. Yese subtypes inoratidzwa mumufananidzo uri pazasi.
Uye rudzi rwechitatu ndeyekuchengetedza matanda. Aya matanda anorekodha zviitiko zvine chekuita nekurwiswa kwehutachiona, kushanya kune zvakarambidzwa zviwanikwa, kushandiswa kwezvakarambidzwa zvikumbiro, zvichingodaro. Rondedzero yakazara inoratidzwawo mumufananidzo uri pazasi.
Unogona kuchengeta matanda munzvimbo dzakasiyana - zvese paFortiGate pachayo uye kunze kwayo. Kuchengeta matanda paFortiGate kunoonekwa sekutema matanda. Zvichienderana nemudziyo wacho pachayo, matanda anogona kuchengetwa mungave mune flash memory memory kana pane hard drive. Sezvo mutemo, mamodheru kubva pakati ane hard drive. Mamodheru ane hard drive ari nyore kusiyanisa - kune iyo unit kumagumo. Semuenzaniso, FortiGate 100E inouya isina hard drive, uye FortiGate 101E inouya nehard drive.
Vadiki nevakuru mhando kazhinji havana hard drive. Muchiitiko ichi, flash memory inoshandiswa kurekodha matanda. Nekudaro, zvakakosha kufunga kuti kugara uchinyora matanda kune flash memory kunogona kuderedza kushanda kwayo uye hupenyu hwebasa. Naizvozvo, kunyora matanda kune flash memory kunovharwa nekusarudzika. Inokurudzirwa kuigonesa chete kune zviitiko zvekutema miti uchigadzirisa matambudziko chaiwo.
Paunenge uchirekodha zvakanyanya matanda, hazvina basa kune hard drive kana flash memory, kuita kwechigadzirwa kunoderera.
Zvakajairika kuchengeta matanda pamaseva ari kure. FortiGate inogona kuchengeta matanda paSyslog maseva, FortiAnalyzer kana FortiManager. Iwe unogona zvakare kushandisa iyo FortiCloud gore sevhisi kuchengetedza matanda.
Syslog iseva yekuchengetedza matanda kubva kunetiweki zvishandiso.
FortiCloud ndeye kunyoreswa-kwakavakirwa kuchengetedza manejimendi uye log yekuchengetedza sevhisi. Nerubatsiro rwayo, unogona kuchengeta matanda kure uye kuvaka mishumo yakakodzera. Kana iwe uine network diki, mhinduro yakanaka inogona kunge iri yekushandisa sevhisi yegore pane kutenga mimwe michina. Iko kune yemahara vhezheni yeFortiCloud iyo inosanganisira vhiki nevhiki log kuchengetedza. Mushure mekutenga kunyoreswa, matanda anogona kuchengetwa kwegore.
FortiAnalyzer uye FortiManager ndeyekunze matanda ekuchengetera midziyo. Nekuda kwekuti vese vane imwechete yekushandisa sisitimu - FortiOS - kubatanidzwa kweFortiGate nemidziyo iyi hakuunze chero matambudziko.
Nekudaro, pane misiyano yekucherechedza pakati peFortiAnalyzer uye FortiManager zvishandiso. Chinangwa chikuru cheFortiManager ndechepakati manejimendi yeakawanda FortiGate zvishandiso - saka, huwandu hwekurangarira kuchengetedza matanda paFortiManager hwakanyanya kushoma pane paFortiAnalyzer (kana, chokwadi, isu tichienzanisa mamodheru kubva muchikamu chimwe chete chemutengo).
Chinangwa chikuru cheFortiAnalyzer ndechekutora uye kuongorora matanda. Naizvozvo, isu tichazofunga nezve kushanda nayo mukuita.
Dzidziso yese, pamwe nechikamu chinoshanda, inoratidzwa muchidzidzo chevhidhiyo ichi:
Muchidzidzo chinotevera, tichabata izvo zvekutanga zvekutungamira FortiGate unit. Kuti usarasikirwe, tevera zvigadziriso pazviteshi zvinotevera:
Source: www.habr.com