{"id":70834,"date":"2020-02-21T14:42:19","date_gmt":"2020-02-21T11:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/9-fortinet-getting-started-v6-0-logirovanie-i-otchetnost"},"modified":"2020-03-03T16:14:45","modified_gmt":"2020-03-03T13:14:45","slug":"9-fortinet-getting-started-v6-0-logirovanie-i-otchetnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/9-fortinet-getting-started-v6-0-logirovanie-i-otchetnost","title":{"rendered":"9. Fortinet Getting Started v6.0. Logjimi dhe raportimi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"9.
\n
\nP\u00ebrsh\u00ebndetje! Mir\u00eb se vini n\u00eb m\u00ebsimin e n\u00ebnt\u00eb t\u00eb kursit. Fortinet Getting Started<\/a><\/noindex>. N\u00eb m\u00ebsimi i kaluar<\/a><\/noindex> Ne kemi shqyrtuar mekanizmat kryesor\u00eb t\u00eb kontrollit t\u00eb aksesit t\u00eb p\u00ebrdoruesve n\u00eb burime t\u00eb ndryshme. Tani para nesh \u00ebsht\u00eb nj\u00eb detyr\u00eb tjet\u00ebr \u2014 duhet t\u00eb analizojm\u00eb sjelljen e p\u00ebrdoruesve n\u00eb internet dhe t\u00eb konfigurojm\u00eb marrjen e t\u00eb dh\u00ebnave, t\u00eb cilat do t\u00eb ndihmojn\u00eb n\u00eb hetimin e incidenteve t\u00eb ndryshme t\u00eb siguris\u00eb. Prandaj, n\u00eb k\u00ebt\u00eb m\u00ebsim do t\u00eb shqyrtojm\u00eb mekanizmin e regjistrimit dhe raporteve. P\u00ebr k\u00ebt\u00eb do na nevojitet FortiAnalyzer, t\u00eb cilin e kemi vendosur n\u00eb fillim t\u00eb kursit. Teoria e nevojshme, si dhe video m\u00ebsimi jan\u00eb n\u00eb dispozicion posht\u00eb.<\/a><\/noindex><\/p>\n

N\u00eb FortiGate, log-\u00ebt ndahen n\u00eb tri lloje: log-\u00ebt e trafikut, log-\u00ebt e ngjarjeve dhe log-\u00ebt e siguris\u00eb. K\u00ebto ndahen gjithashtu n\u00eb lloje t\u00eb n\u00ebnllojshme. <\/p>\n

Log-\u00ebt e trafikut regjistrojn\u00eb informacion mbi rrjedh\u00ebn e trafikut, si\u00e7 jan\u00eb k\u00ebrkesat dhe p\u00ebrgjigjet, n\u00ebse ato ekzistojn\u00eb. Ky tip p\u00ebrfshin n\u00ebnllojrat Forward, Local dhe Sniffer.<\/p>\n

N\u00ebnlloji Forward p\u00ebrmban informacion mbi trafikun q\u00eb FortiGate e ka pranuar ose refuzuar n\u00eb p\u00ebrputhje me politikat e trafikimit.<\/p>\n

N\u00ebnlloji Local p\u00ebrmban informacion mbi trafikun direkt nga adresa IP e FortiGate dhe nga adresat IP nga t\u00eb cilat b\u00ebhet administrimi. P\u00ebr shembull \u2014 lidhjet n\u00eb nd\u00ebrfaqen e uebit t\u00eb FortiGate.<\/p>\n

N\u00ebnlloji Sniffer p\u00ebrmban log-\u00ebt e trafikut q\u00eb jan\u00eb marr\u00eb p\u00ebrmes pasqyrimit t\u00eb trafikimit.<\/p>\n

Log-\u00ebt e ngjarjeve p\u00ebrmbajn\u00eb ngjarje sistemike ose administruese, si\u00e7 jan\u00eb \u2014 shtimi ose ndryshimi i parametrave, krijimi dhe nd\u00ebrprerja e tunelave VPN, ngjarje t\u00eb ruterizimit dinamik etj. T\u00eb gjith\u00eb n\u00ebnllojrat jan\u00eb t\u00eb paraqitur n\u00eb figur\u00ebn m\u00eb posht\u00eb.<\/p>\n

Dhe lloji i tret\u00eb p\u00ebrb\u00ebn log-\u00ebt e siguris\u00eb. N\u00eb k\u00ebto log-e regjistrohen ngjarje t\u00eb lidhura me sulmet virusale, vizitat n\u00eb burime t\u00eb ndaluara, p\u00ebrdorimin e aplikacioneve t\u00eb ndaluara etj. Lista e plot\u00eb gjithashtu \u00ebsht\u00eb p\u00ebrfaq\u00ebsuar n\u00eb figur\u00ebn m\u00eb posht\u00eb. <\/p>\n

\"9.
\n
\nLog-\u00ebt mund t\u00eb ruhen n\u00eb vende t\u00eb ndryshme \u2014 si n\u00eb FortiGate vet\u00eb, ashtu edhe jasht\u00eb tij. Ruajtja e log-\u00ebve n\u00eb FortiGate konsiderohet si regjistrim lokal. N\u00eb var\u00ebsi t\u00eb vet\u00eb pajisjes, log-\u00ebt mund t\u00eb ruhen ose n\u00eb memorjen e brendshme t\u00eb pajisjes, ose n\u00eb diskun e fort\u00eb. N\u00eb rregull, modelet e mesme kan\u00eb nj\u00eb disk t\u00eb fort\u00eb. Modelet me disk t\u00eb fort\u00eb dallohet leht\u00ebsisht \u2014 n\u00eb fund kan\u00eb numrin nj\u00eb. P\u00ebr shembuj \u2014 FortiGate 100E vjen pa disk t\u00eb fort\u00eb, nd\u00ebrsa FortiGate 101E \u2014 me disk t\u00eb fort\u00eb. <\/p>\n

Modelet m\u00eb t\u00eb reja dhe m\u00eb t\u00eb vjetra zakonisht nuk kan\u00eb disk t\u00eb fort\u00eb. N\u00eb k\u00ebt\u00eb rast, memorja e brendshme p\u00ebrdoret p\u00ebr regjistrimin e log-\u00ebve. Megjithat\u00eb, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb merret parasysh se regjistrimi i vazhduesh\u00ebm i log-\u00ebve n\u00eb memorjen e brendshme mund t\u00eb pak\u00ebsoj\u00eb efektivitetin dhe jet\u00ebgjat\u00ebsin\u00eb e saj. Prandaj, regjistrimi i log-\u00ebve n\u00eb memorjen e brendshme \u00ebsht\u00eb ndaluar si fillim. Rekomandohet q\u00eb ta aktivizoni at\u00eb vet\u00ebm p\u00ebr regjistrimin e ngjarjeve gjat\u00eb zgjidhjes s\u00eb problemeve specifike. <\/p>\n

Me regjistrim intensiv log-\u00ebsh, nuk ka r\u00ebnd\u00ebsi, n\u00eb diskun e fort\u00eb ose n\u00eb memorjen e brendshme \u2014 performanca e pajisjes do t\u00eb ulet.<\/p>\n

\"9.
\n
\n\u00cbsht\u00eb mjaft e zakonshme t\u00eb ruhen log-\u00ebt n\u00eb server\u00eb t\u00eb larg\u00ebt. FortiGate mund t\u00eb ruaj\u00eb log-\u00ebt n\u00eb server\u00eb Syslog, n\u00eb FortiAnalyzer ose FortiManager. Gjithashtu, p\u00ebr ruajtjen e log-\u00ebve mund t\u00eb p\u00ebrdoret sh\u00ebrbimi cloud FortiCloud. <\/p>\n

\"9.
\n
\nSyslog \u00ebsht\u00eb nj\u00eb server p\u00ebr ruajtjen qendrore t\u00eb log-\u00ebve nga pajisjet rrjet.
\nFortiCloud \u00ebsht\u00eb nj\u00eb sh\u00ebrbim menaxhimi t\u00eb siguris\u00eb dhe ruajtjeje t\u00eb log-\u00ebve, i bazuar n\u00eb abonim. Me ndihm\u00ebn e tij, mund t\u00eb ruani log-\u00ebt n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt dhe t\u00eb krijoni raporte p\u00ebrkat\u00ebse. N\u00ebse keni nj\u00eb rrjet mjaft t\u00eb vog\u00ebl, nj\u00eb zgjidhje e mir\u00eb mund t\u00eb jet\u00eb pik\u00ebrisht p\u00ebrdorimi i k\u00ebtij sh\u00ebrbimi cloud, n\u00eb vend t\u00eb blerjes s\u00eb pajisjeve t\u00eb tjera. Ekziston nj\u00eb version falas i FortiCloud, i cili parashikon ruajtjen e log-\u00ebve p\u00ebr nj\u00eb jav\u00eb. Pas blerjes s\u00eb abonimit, log-\u00ebt mund t\u00eb ruhen p\u00ebr nj\u00eb vit. <\/p>\n

FortiAnalyzer dhe FortiManager jan\u00eb pajisje t\u00eb jashtme p\u00ebr ruajtjen e log-\u00ebve. Duke qen\u00eb se t\u00eb gjitha ato kan\u00eb t\u00eb nj\u00ebjtin sistem operativ \u2014 FortiOS \u2014 integrimi i FortiGate me k\u00ebto pajisje nuk paraqet asnj\u00eb v\u00ebshtir\u00ebsi. <\/p>\n

Por duhet t\u00eb theksohen diferencat midis pajisjeve FortiAnalyzer dhe FortiManager. Q\u00ebllimi kryesor i FortiManager \u00ebsht\u00eb menaxhimi qendror i shum\u00eb pajisjeve FortiGate \u2014 prandaj volumi i memorie p\u00ebr ruajtjen e log-\u00ebve n\u00eb FortiManager \u00ebsht\u00eb shum\u00eb m\u00eb i vog\u00ebl se n\u00eb FortiAnalyzer (n\u00ebse, natyrisht, krahasojm\u00eb modele nga e nj\u00ebjta kategori \u00e7mimi). <\/p>\n

Q\u00ebllimi kryesor i FortiAnalyzer \u00ebsht\u00eb pik\u00ebrisht mbledhja dhe analiza e log-\u00ebve. Prandaj, p\u00ebr k\u00ebt\u00eb do t\u00eb shqyrtojm\u00eb pun\u00ebn me t\u00eb m\u00eb posht\u00eb n\u00eb praktik\u00eb. <\/p>\n

E gjith\u00eb teoria, si dhe pjesa praktike jan\u00eb p\u00ebrfaq\u00ebsuar n\u00eb k\u00ebt\u00eb video m\u00ebsim:<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\nN\u00eb m\u00ebsimin e ardhsh\u00ebm do t\u00eb shqyrtojm\u00eb pikat kryesore q\u00eb lidhen me administrimin e pajisjes FortiGate. N\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mos e humbisni at\u00eb, ndiqni p\u00ebrdit\u00ebsimet n\u00eb kanalet e ardhshme:<\/p>\n