{"id":35754,"date":"2019-10-31T22:06:09","date_gmt":"2019-10-31T19:06:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys\/"},"modified":"2019-10-31T22:06:09","modified_gmt":"2019-10-31T19:06:09","slug":"kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-ya-stal-uyazvimym-skaniruem-it-infrastrukturu-s-pomoshhyu-qualys","title":{"rendered":"Si u b\u00ebra i dob\u00ebt: skanimi i infrastruktur\u00ebs IT me ndihm\u00ebn e Qualys","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve!<\/p>\n

Sot, sot dua t\u00eb flas p\u00ebr zgjidhjen cloud p\u00ebr k\u00ebrkimin dhe analiz\u00ebn e dob\u00ebsive Qualys Vulnerability Management, mbi t\u00eb cil\u00ebn \u00ebsht\u00eb nd\u00ebrtuar nj\u00eb nga sh\u00ebrbimeve<\/a><\/noindex>.<\/p>\n

M\u00eb posht\u00eb do t\u00eb tregoj si organizohet vet\u00eb skanimi dhe \u00e7far\u00eb informacioni mbi dob\u00ebsit\u00eb mund t\u00eb merret n\u00eb p\u00ebrfundim.<\/p>\n

\"Si
\n<\/a><\/noindex><\/p>\n

\u00c7far\u00eb mund t\u00eb skanohet<\/h3>\n

\nSh\u00ebrbimet e jashtme. <\/b>P\u00ebr t\u00eb skanuar sh\u00ebrbimet q\u00eb kan\u00eb dalje n\u00eb internet, klienti na ofron adresat e tyre IP dhe kredencialet (n\u00ebse k\u00ebrkohet skanimi me autentifikim). Ne skanojm\u00eb sh\u00ebrbimet me ndihm\u00ebn e cloud-it Qualys dhe n\u00eb p\u00ebrfundim d\u00ebrgojm\u00eb nj\u00eb raport.<\/p>\n

\"Si
\n
\nSh\u00ebrbimet e brendshme.<\/b> N\u00eb k\u00ebt\u00eb rast, skeneri p\u00ebrpiqet t\u00eb gjej\u00eb dob\u00ebsi n\u00eb server\u00ebt e brendsh\u00ebm dhe infrastruktur\u00ebn rrjetore. Me ndihm\u00ebn e k\u00ebtij skanimi mund t\u00eb kryhet nj\u00eb inventarizim i versioneve t\u00eb sistemeve operative, aplikacioneve, porteve t\u00eb hapura dhe sh\u00ebrbimeve q\u00eb ndodhen pas tyre. <\/p>\n

P\u00ebr t\u00eb skanuar brenda infrastruktur\u00ebs s\u00eb klientit, instalojm\u00eb skenerin Qualys. Cloud-i Qualys sh\u00ebrben k\u00ebtu si qend\u00ebr komandash p\u00ebr k\u00ebt\u00eb skener. <\/p>\n

N\u00eb p\u00ebrve\u00e7im t\u00eb serverit t\u00eb brendsh\u00ebm me Qualys, n\u00eb objektet e skanimit mund t\u00eb instalohen agent\u00ebt (Cloud Agent). Ata mbledhin informacion mbi sistemin lokalish, praktikisht nuk shkaktojn\u00eb ngarkes\u00eb n\u00eb rrjet dhe n\u00eb hostet ku punojn\u00eb. Informacioni i marr\u00eb d\u00ebrgohet n\u00eb cloud.<\/p>\n

\"Si
\n
\nK\u00ebtu ka tre aspekte t\u00eb r\u00ebnd\u00ebsishme: autentifikimi dhe zgjedhja e objekteve p\u00ebr skanim.<\/p>\n

    \n
  1. P\u00ebrdorimi i autentifikimit<\/b>. Disa klient\u00eb k\u00ebrkojn\u00eb t\u00eb realizohet nj\u00eb skanim blackbox, ve\u00e7an\u00ebrisht p\u00ebr sh\u00ebrbimet e jashtme: na japin nj\u00eb rang IP-sh pa treguar sistemin dhe thon\u00eb \"komportoni si haker\u00eb\". Por haker\u00ebt rrall\u00eb veprojn\u00eb n\u00eb err\u00ebsir\u00eb. Kur b\u00ebhet fjal\u00eb p\u00ebr nj\u00eb sulm (jo p\u00ebr informacion), ata e din\u00eb se \u00e7far\u00eb po sulmojn\u00eb.\u00a0\n

    N\u00eb err\u00ebsir\u00eb, Qualys mund t\u00eb ndeshet me bannera mashtruese dhe t'i skanoj\u00eb ato n\u00eb vend t\u00eb sistemit t\u00eb synuar. Po ashtu, pa kuptuar se \u00e7far\u00eb konkretisht do t\u00eb skanohet, leht\u00eb mund t\u00eb gabosh me cil\u00ebsimet e skenerit dhe \"t\u00eb vendos\u00ebsh\" sh\u00ebrbimin e kontrolluar.\u00a0<\/p>\n

    Skanimi do t\u00eb sjell\u00eb m\u00eb shum\u00eb p\u00ebrfitim n\u00ebse kryhen verifikime me autentifikim para sistemeve t\u00eb skanuara (whitebox). N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb skeneri do t\u00eb kuptoj\u00eb se ku ka shkuar, dhe ju do t\u00eb merrni t\u00eb dh\u00ebna t\u00eb plota mbi dob\u00ebsit\u00eb e sistemit t\u00eb synuar.<\/p>\n

    \"Si
    \nQualys ka shum\u00eb opsione p\u00ebr autentifikim.<\/i><\/li>\n

  2. Grupimi i aktiveve<\/b>. N\u00ebse skanoni gjith\u00e7ka n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb dhe pa ndonj\u00eb ndarje, kjo do t\u00eb zgjas\u00eb dhe do t\u00eb krijoj\u00eb ngarkes\u00eb t\u00eb tepruar n\u00eb sisteme. Hostet dhe sh\u00ebrbimet \u00ebsht\u00eb m\u00eb mir\u00eb t'i bashkoni n\u00eb grupe sipas r\u00ebnd\u00ebsis\u00eb, vendndodhjes, versionit t\u00eb OS-s\u00eb, kritik\u00ebs s\u00eb infrastruktur\u00ebs dhe karakteristikave t\u00eb tjera (n\u00eb Qualys ato quhen Asset Groups dhe Asset Tags) dhe t\u00eb zgjidhni nj\u00eb grup specifik gjat\u00eb skanimit.<\/li>\n
  3. Zgjidhni nj\u00eb dritare teknike p\u00ebr skanimin.<\/b> Edhe n\u00ebse keni parashikuar dhe u p\u00ebrgatit\u00ebt, skanimi krijon nj\u00eb ngarkes\u00eb shtes\u00eb n\u00eb sistem. Nuk \u00ebsht\u00eb domosdoshm\u00ebrisht se do t\u00eb shkaktoj\u00eb degradim t\u00eb sh\u00ebrbimit, por \u00ebsht\u00eb m\u00eb mir\u00eb t'i zgjidhni nj\u00eb koh\u00eb specifike p\u00ebr t\u00eb, si p\u00ebr backupet ose p\u00ebr instalimin e azhurnimeve.<\/li>\n<\/ol>\n

    <\/p>\n

    \u00c7far\u00eb mund t\u00eb m\u00ebsoni nga raportet?<\/h3>\n

    \nPas skanimit, klienti merr nj\u00eb raport, n\u00eb t\u00eb cilin do t\u00eb ket\u00eb jo vet\u00ebm nj\u00eb list\u00eb t\u00eb t\u00eb gjitha dob\u00ebsive t\u00eb gjetura, por edhe rekomandime themelore p\u00ebr eliminimin e tyre: azhurnime, patches, etj. Ka shum\u00eb raporte n\u00eb Qualys: ka shabllone standarde dhe mund t\u00eb krijoni tuajat. P\u00ebr t\u00eb mos u ngat\u00ebrruar n\u00eb gjith\u00eb k\u00ebt\u00eb larmi, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrcaktoni fillimisht disa pika p\u00ebr vete:\u00a0<\/p>\n