{"id":35754,"date":"2019-10-31T22:06:09","date_gmt":"2019-10-31T19:06:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys\/"},"modified":"2019-10-31T22:06:09","modified_gmt":"2019-10-31T19:06:09","slug":"kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","title":{"rendered":"Si u b\u00ebra i preksh\u00ebm: skanimi i infrastruktur\u00ebs IT me ndihm\u00ebn e Qualys","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve!<\/p>\n

Sot dita e sotme do t\u00eb flas p\u00ebr zgjidhjen cloud p\u00ebr k\u00ebrkimin dhe analizimin e dob\u00ebsive Qualys Vulnerability Management, mbi t\u00eb cil\u00ebn \u00ebsht\u00eb nd\u00ebrtuar nj\u00eb nga sh\u00ebrbimet<\/a><\/noindex>.<\/p>\n

M\u00eb posht\u00eb do t\u00eb tregoj se si organizohet vet\u00eb skanimi dhe cilat informacione mbi dob\u00ebsit\u00eb mund t\u00eb m\u00ebsohen nga rezultatet.<\/p>\n

\"Si
\n<\/a><\/noindex><\/p>\n

\u00c7far\u00eb mund t\u00eb skanohet<\/h3>\n

\nSh\u00ebrbimet e jashtme. <\/b>P\u00ebr t\u00eb skanuar sh\u00ebrbimet q\u00eb kan\u00eb qasje n\u00eb internet, klienti na jep adresat IP dhe t\u00eb dh\u00ebnat e autentikimit (n\u00ebse k\u00ebrkohet nj\u00eb skanim me autentikim). Ne skanojm\u00eb sh\u00ebrbimet p\u00ebrmes cloud-it Qualys dhe si rezultat d\u00ebrgojm\u00eb nj\u00eb raport.<\/p>\n

\"Si
\n
\nSh\u00ebrbimet e brendshme.<\/b> N\u00eb k\u00ebt\u00eb rast, skaneri k\u00ebrkon dob\u00ebsi n\u00eb server\u00ebt e brendsh\u00ebm dhe infrastruktur\u00ebn rrjetore. Me an\u00eb t\u00eb k\u00ebsaj skanimi, mund t\u00eb kryhet nj\u00eb inventarizim i versioneve t\u00eb sistemeve operative, aplikacioneve, porteve t\u00eb hapura dhe sh\u00ebrbimeve q\u00eb ndodhen pas tyre. <\/p>\n

P\u00ebr skanimin brenda infrastruktur\u00ebs s\u00eb klientit, instalohet skaneri Qualys. Cloud-i Qualys funksionon si qend\u00ebr komande p\u00ebr k\u00ebt\u00eb skaner. <\/p>\n

P\u00ebrve\u00e7 serverit t\u00eb brendsh\u00ebm me Qualys, n\u00eb objektet e skanimit mund t\u00eb instalohen agjent\u00eb (Cloud Agent). Ata mbledhin informacion mbi sistemin lokal, praktikisht nuk krijojn\u00eb ngarkes\u00eb n\u00eb rrjet dhe n\u00eb host-et ku punojn\u00eb. Informacioni i marr\u00eb d\u00ebrgohet n\u00eb cloud.<\/p>\n

\"Si
\n
\nK\u00ebtu jan\u00eb tre pika t\u00eb r\u00ebnd\u00ebsishme: autentikimi dhe zgjedhja e objekteve p\u00ebr skanim.<\/p>\n

    \n
  1. P\u00ebrdorimi i autentikimit<\/b>. Disa klient\u00eb k\u00ebrkojn\u00eb t\u00eb kryejn\u00eb skanimin blackbox, ve\u00e7an\u00ebrisht p\u00ebr sh\u00ebrbimet e jashtme: na japin nj\u00eb gam\u00eb adresash IP pa informacion mbi sistemin dhe thon\u00eb \u00absillu si haker\u00bb. Por haker\u00ebt rrall\u00eb veprojn\u00eb n\u00eb verb\u00ebri. Kur vjen puna p\u00ebr nj\u00eb sulm (jo p\u00ebr k\u00ebrkimin), ata din\u00eb se \u00e7far\u00eb po duhet t\u00eb shp\u00ebrthejn\u00eb.\u00a0\n

    N\u00eb verb\u00ebri, Qualys mund t\u00eb has\u00eb n\u00eb baner\u00eb mashtrues dhe t\u00eb skanoj\u00eb ata n\u00eb vend t\u00eb sistemit t\u00eb synuar. Po ashtu, pa kuptuar se \u00e7far\u00eb do t\u00eb skanohet, \u00ebsht\u00eb e leht\u00eb t\u00eb gabosh me konfigurimet e skanerit dhe t\u00eb \"aplikosh\" sh\u00ebrbimin q\u00eb po kontrollohet.\u00a0<\/p>\n

    Skanimi do t\u00eb sjell\u00eb m\u00eb shum\u00eb dobi n\u00ebse kontrollet kryhen me autentikim p\u00ebrpara sistemeve t\u00eb skanuara (whitebox). K\u00ebshtu, skaneri do t\u00eb kuptoj\u00eb se ku ka ardhur, dhe ju do t\u00eb merrni t\u00eb dh\u00ebna t\u00eb plota mbi dob\u00ebsit\u00eb e sistemit t\u00eb synuar.<\/p>\n

    \"Si
    \nQualys ka shum\u00eb opsione p\u00ebr autentikimin.<\/i><\/li>\n

  2. Grupimi i aktiveve<\/b>. N\u00ebse e nisni skanimin p\u00ebr gjith\u00eb at\u00eb nj\u00ebher\u00ebsh dhe pa e p\u00ebrzgjedhur, kjo do t\u00eb zgjas\u00eb dhe do t\u00eb krijoj\u00eb nj\u00eb ngarkes\u00eb t\u00eb panevojshme n\u00eb sistemet. Host-et dhe sh\u00ebrbimet \u00ebsht\u00eb m\u00eb mir\u00eb t'i bashkoni n\u00eb grupe sipas r\u00ebnd\u00ebsis\u00eb, vendndodhjes, versionit t\u00eb SO-s\u00eb, kritikalitetit t\u00eb infrastruktur\u00ebs dhe karakteristikave t\u00eb tjera (n\u00eb Qualys ato quhen Asset Groups dhe Asset Tags) dhe t\u00eb zgjidhni nj\u00eb grup specifik p\u00ebr skanim.<\/li>\n
  3. Zgjedhja e nj\u00eb kohe teknike p\u00ebr skanim.<\/b> Edhe n\u00ebse keni parashikuar gjith\u00e7ka dhe jeni p\u00ebrgatitur, skanimi krijon ngarkes\u00eb shtes\u00eb n\u00eb sistem. Nuk \u00ebsht\u00eb e nevojshme q\u00eb t\u00eb shkaktoj\u00eb degradim t\u00eb sh\u00ebrbimit, por \u00ebsht\u00eb m\u00eb mir\u00eb p\u00ebr t\u00eb zgjedhur nj\u00eb koh\u00eb t\u00eb caktuar, si\u00e7 \u00ebsht\u00eb p\u00ebr kopjimin rezerv\u00eb apo aplikimin e azhurnimeve.<\/li>\n<\/ol>\n

    <\/p>\n

    \u00c7far\u00eb mund t\u00eb m\u00ebsohet nga raportet?<\/h3>\n

    \nPas p\u00ebrfundimit t\u00eb skanimit, klienti merr nj\u00eb raport, n\u00eb t\u00eb cilin do t\u00eb jet\u00eb jo vet\u00ebm nj\u00eb list\u00eb e t\u00eb gjitha dob\u00ebsive t\u00eb gjetura, por edhe rekomandime bazike p\u00ebr eliminimin e tyre: azhurnime, patches dhe t\u00eb tjera. Raportet nga Qualys jan\u00eb t\u00eb shumta: ka \u0448\u0430\u0431\u043b\u043e\u043d\u0438 t\u00eb paracaktuar, dhe mund t\u00eb krijoni t\u00eb tuajat. Q\u00eb t\u00eb mos humbni n\u00eb gjith\u00eb shum\u00ebllojshm\u00ebrin\u00eb, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrcaktoni fillimisht p\u00ebr veten tuaj n\u00eb lidhje me k\u00ebto pika:\u00a0<\/p>\n