Hello vose!
Nhasi ndinoda kutaura nezve mhinduro yegore yekutsvaga nekuongorora kusagadzikana Qualys Vulnerability Management, pane yedu .
Pazasi ini ndicharatidza kuti iyo scanning pachayo yakarongeka sei uye ndeupi ruzivo rwekusagadzikana runogona kuwanikwa zvichienderana nemhedzisiro.
Chii chinogona kuongororwa
Mabasa ekunze. Kuti titarise masevhisi ane mukana weInternet, mutengi anotipa IP kero uye zvitupa (kana scan ine huchokwadi ichidikanwa). Isu tinoongorora masevhisi tichishandisa iyo Qualys gore uye tinotumira mushumo zvichienderana nemhedzisiro.
Mabasa emukati. Muchiitiko ichi, scanner inotarisa kusasimba mumaseva emukati uye network network. Uchishandisa scan yakadai, unogona kuverenga shanduro dzemashandisirwo ehurongwa, maapplication, madoko akavhurika uye masevhisi kumashure kwavo.
Qualys scanner inoiswa kuti itarise mukati mezvivakwa zvemutengi. Iyo Qualys gore rinoshanda senzvimbo yekuraira yeiyi scanner pano.
Pamusoro peiyo yemukati sevha neQualys, vamiririri (Cloud Agent) vanogona kuisirwa pane zvakaongororwa zvinhu. Ivo vanounganidza ruzivo nezve sisitimu munharaunda uye vanogadzira zvisingaite mutoro panetiweki kana mauto avanoshanda nawo. Ruzivo rwakagamuchirwa runotumirwa kune gore.
Pane matatu mapoinzi akakosha pano: chokwadi uye kusarudzwa kwezvinhu zvekuongorora.
- Kushandisa Authentication. Vamwe vatengi vanokumbira kutariswa kwebhokisi dema, kunyanya kune masevhisi ekunze: vanotipa kero dzakasiyana dzeIP pasina kutsanangura sisitimu uye voti "ita kunge mubiki." Asi hackers havawanzoita nemapofu. Kana zvasvika pakurwisa (kwete reconnaissance), ivo vanoziva zvavari kubira.
Nehupofu, maQualy anogona kugumburwa pamabhena ekunyengedza uye oatarisisa panzvimbo yeiyo inotarirwa system. Uye pasina kunzwisisa kuti chii chaizvo chichaongororwa, zviri nyore kupotsa zvigadziriso zve scanner uye "batanidza" sevhisi iri kuongororwa.
Kuongorora kuchanyanya kubatsira kana iwe ukaita cheki chechokwadi pamberi pemasystem ari kuongororwa (whitebox). Nenzira iyi scanner inonzwisisa kwayakabva, uye iwe unogashira yakazara data nezve kusasimba kweiyo inotangwa system.
Qualys ine akawanda echokwadi sarudzo. - Group assets. Kana iwe ukatanga kuongorora zvese kamwechete uye nekusarura, zvinotora nguva yakareba uye kugadzira mutoro usingakoshi pane masisitimu. Zviri nani kuunganidza mauto nemasevhisi mumapoka zvichienderana nekukosha, nzvimbo, OS vhezheni, kutsoropodza kwezvivakwa uye humwe hunhu (muQualys vanonzi Asset Groups uye Asset Tags) uye sarudza rimwe boka kana uchitarisa.
- Sarudza hwindo rehunyanzvi kuti utarise. Kunyangwe iwe wakafunga uye wakagadzirira, kuongorora kunogadzira kuwedzera kushushikana pane system. Izvo hazvizokonzerese kushatiswa kwesevhisi, asi zviri nani kusarudza imwe nguva yayo, senge backup kana rollover yezvigadziriso.
Chii chaungadzidze kubva mumishumo?
Zvichienderana nemhedzisiro ye scan, mutengi anogashira mushumo uchange uine kwete chete runyoro rwezvese kusasimba kwakawanikwa, asiwo zvakakosha kurudziro yekuzvibvisa: zvigadziriso, zvigamba, nezvimwe. Qualys ine mishumo yakawanda: kune default templates, uye. unogona kugadzira yako. Kuti urege kuvhiringika mukusiyana kwese, zviri nani kutanga wazvisarudzira pane zvinotevera pfungwa:
- Ndiani achaona chirevo ichi: maneja kana nyanzvi yehunyanzvi?
- Ndeupi ruzivo rwaunoda kuwana kubva kune zvakabuda mu scan? Semuyenzaniso, kana iwe uchida kuona kuti ese mapeche anodiwa akaiswa uye kuti basa riri kuitwa sei kubvisa kusakanganiswa kwakambowanikwa, saka iyi ishumo imwe chete. Kana iwe uchingoda kutora inventory yevose mauto, ipapo imwe.
Kana basa rako riri kuratidza mupfupi asi wakajeka mufananidzo kune maneja, saka iwe unogona kuumba Executive Report. Kusagadzikana kwese kuchagadziriswa mumasherufu, mazinga ekutsoropodza, magirafu uye madhayagiramu. Semuyenzaniso, 10 yepamusoro-soro kusashanda zvakanaka kana kusazvibata kwakanyanya.
Kune technician iripo Technical Report nemashoko ose nemashoko. Mishumo inotevera inogona kugadzirwa:
Hosts report. Chinhu chinobatsira kana iwe uchifanira kutora hesera yezvivakwa zvako uye uwane mufananidzo wakazara wekunetseka kwevaenzi.
Izvi ndizvo zvinoita rondedzero yeanoongororwa mauto anotaridzika, achiratidza iyo OS iri kushanda pavari.
Ngativhurei muenzi wekufarira uye tione runyorwa rwe219 kusasimba kwakawanikwa, kutanga kubva kune yakanyanya kuoma, nhanho yechishanu:
Ipapo iwe unogona kuona ruzivo rwekusagadzikana kwega kwega. Pano tinoona:
- apo kusagadzikana kwakaonekwa kekutanga uye kekupedzisira,
- nhamba dzekusagadzikana kwemaindasitiri,
- chigamba kubvisa kusagadzikana,
- pane matambudziko nekutevedzera PCI DSS, NIST, nezvimwewo,
- pane kubiridzira uye malware yekusagadzikana uku,
- Kusagadzikana kunoonekwa kana uchitarisa ne/pasina huchokwadi muhurongwa, nezvimwe.
Kana iyi isiri yekutanga scan - hongu, iwe unofanirwa kuongorora nguva nenguva π - ipapo nerubatsiro Trend Report Iwe unogona kuronda madhiraivha ekushanda nekusagadzikana. Mamiriro ekushaya simba acharatidzwa mukuenzanisa neyakapfuura scan: kusasimba kwakawanikwa kare uye kwakavharwa kuchaiswa chiratidzo seyakagadziriswa, isina kuvharwa - inoshanda, itsva - nyowani.
Mushumo wenjodzi. Mumushumo uyu, Qualys ichavaka runyorwa rwekusagadzikana, kutanga nekunyanya kuomarara, zvichiratidza kuti ndeupi muenzi wekubata kusazvibata uku. Chirevo chinozobatsira kana ukafunga kukurumidza kunzwisisa, semuenzaniso, zvese zvipingamupinyi zvechikamu chechishanu.
Iwe unogona zvakare kuita chirevo chakasiyana chete pamusoro pekusagadzikana kwechikamu chechina uye chechishanu.
Patch report. Pano iwe unogona kuona runyoro rwakakwana rwezvigamba zvinoda kuiswa kuti ubvise kusasimba kunowanikwa. Pachigamba chega chega pane tsananguro yekuti ndezvipi zvinokanganisa zvazvinogadzirisa, pane iyo host / system yainoda kuisirwa, uye yakananga yekurodha link.
PCI DSS Compliance Report. Iyo PCI DSS chiyero inoda kuongorora masisitimu eruzivo uye maapplication anowanikwa kubva paInternet mazuva makumi mapfumbamwe ega ega. Mushure me scan, unogona kuburitsa chirevo chinoratidza izvo zvivakwa zvisingaenderane nezvinodiwa zvechiyero.
Vulnerability Remediation Reports. Qualys inogona kusanganiswa nedhesiki rebasa, uyezve zvese zvakawanikwa kusagadzikana zvinozoshandurirwa otomatiki mumatikiti. Uchishandisa chirevo ichi, unogona kuteedzera kufambira mberi pamatikiti akapedzwa uye kusagadziriswa kwakagadziriswa.
Open port report. Pano iwe unogona kuwana ruzivo pane yakavhurika ports uye masevhisi ari kushanda paari:
kana kugadzira rondedzero pamusoro pekusagadzikana pachiteshi chega chega:
Aya angori akajairwa matemplate matemplate. Iwe unogona kugadzira yako wega kune chaiwo mabasa, semuenzaniso, ratidza kusasimba chete kwete kuderera pane yechishanu nhanho yekutsoropodza. Mishumo yese iripo. Chirevo chimiro: CSV, XML, HTML, PDF uye docx.
Uye yeuka: Kuchengetedzeka hakusi mhedzisiro, asi maitiro. Kuongorora-kamwe chete kunobatsira kuona matambudziko panguva iyoyo, asi izvi hazvisi nezve yakazara-yakazara kuchengetedzwa kwenjodzi maitiro.
Kuti zvive nyore kwauri kusarudza pabasa iri renguva dzose, takagadzira sevhisi yakavakirwa paQualys Vulnerability Management.
Pane kukwidziridzwa kune vese vaverengi veHabr: Paunoodha sevhisi yekuongorora kwegore, mwedzi miviri yema scans ndeyemahara. Zvikumbiro zvinogona kusiiwa , mundima yakanzi βCommentβ nyora Habr.
Source: www.habr.com