{"id":36669,"date":"2019-10-31T22:13:01","date_gmt":"2019-10-31T19:13:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\/"},"modified":"2019-10-31T22:13:01","modified_gmt":"2019-10-31T19:13:01","slug":"stealthwatch-razvertyvanie-i-nastrojka-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","title":{"rendered":"StealthWatch: distribution och konfigurering. Del 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/6d2c187b799a2f811e24d36e2ab48c77.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nHej kollegor! N\u00e4r vi har fastst\u00e4llt de minimala kraven f\u00f6r att implementera StealthWatch i <noindex><a rel=\"nofollow\" href=\"http:\/\/habr.com\/ru\/company\/tssolution\/blog\/458626\/\">den f\u00f6reg\u00e5ende delen<\/a><\/noindex>, kan vi b\u00f6rja implementeringen av produkten.<\/p>\n<h3>1. S\u00e4tt att implementera StealthWatch<\/h3>\n<p>\nDet finns flera s\u00e4tt att \"f\u00e5 en k\u00e4nsla f\u00f6r\" StealthWatch: <\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/dcloud.cisco.com\/\">dcloud<\/a><\/noindex> \u2013 molntj\u00e4nst f\u00f6r laboratoriearbete;<\/li>\n<li>Cloud Based: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/stealthwatch\/security-visibility-assessment.html\">Stealthwatch Cloud Free Trial <\/a><\/noindex> \u2013 h\u00e4r kommer Netflow fr\u00e5n din enhet att str\u00f6mma till molnet och analyseras av StealthWatch-programvaran; <\/li>\n<li>On-premise POV (<noindex><a rel=\"nofollow\" href=\"https:\/\/cep.cloudapps.cisco.com\/case\">GVE-f\u00f6rfr\u00e5gan<\/a><\/noindex>) \u2013 den metod som jag valde, d\u00e4r 4 OVF-filer f\u00f6r virtuella maskiner med inbyggda licenser f\u00f6r 90 dagar kommer att skickas, och som kan implementeras p\u00e5 en dedikerad server i det f\u00f6retagsn\u00e4tverket. <\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTrots m\u00e4ngden nedladdade virtuella maskiner \u00e4r det tillr\u00e4ckligt med endast 2 f\u00f6r en minimal fungerande konfiguration: StealthWatch Management Console och FlowCollector. Men om det inte finns n\u00e5gon n\u00e4tverksenhet som kan exportera Netflow till FlowCollector, m\u00e5ste FlowSensor implementeras ocks\u00e5, eftersom den sistn\u00e4mnda kan samla Netflow med hj\u00e4lp av SPAN\/RSPAN-tekniker.<\/p>\n<p>Som labbmilj\u00f6, som jag n\u00e4mnde tidigare, kan ditt n\u00e4tverk fungera, eftersom StealthWatch bara beh\u00f6ver en kopia, eller mer korrekt, ett utdrag av trafikkopian. I bilden nedan visas mitt n\u00e4tverk, d\u00e4r jag kommer att konfigurera Netflow Exporter p\u00e5 s\u00e4kerhetsgatewayen, och som resultat kommer jag att skicka Netflow till samlaren.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/b82e6d6e7b229ebfa3e31b5a47292f25.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nF\u00f6r att f\u00e5 tillg\u00e5ng till framtida VM, b\u00f6r f\u00f6ljande portar till\u00e5tas p\u00e5 din brandv\u00e4gg, om en s\u00e5dan finns:<\/p>\n<p><b> TCP 22 l TCP 25 l TCP 389 l TCP 443 l TCP 2393 l TCP 5222 l UDP 53 l UDP 123 l UDP 161 l UDP 162 l UDP 389 l UDP 514 l UDP 2055 l UDP 6343 <\/b><\/p>\n<p>N\u00e5gra av dem \u00e4r allm\u00e4nt k\u00e4nda tj\u00e4nster, medan andra \u00e4r reserverade f\u00f6r Cisco-tj\u00e4nster.<br \/>\nI mitt fall implementerade jag helt enkelt StealthWatch i samma n\u00e4tverk som Check Point, och jag beh\u00f6vde inte konfigurera n\u00e5gra regler f\u00f6r tillst\u00e5nd.<\/p>\n<h3>2. Installation av FlowCollector med VMware vSphere som exempel<\/h3>\n<p>\n2.1. Klicka p\u00e5 Browse och v\u00e4lj OVF-fil1. N\u00e4r du har kontrollerat resurstillg\u00e5ngen, g\u00e5 till menyn View, Inventory \u2192 Networking (Ctrl+Shift+N).<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/4533c23d8b9b65163f9f426d25ce3215.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.2. I fliken Networking, v\u00e4ljer vi i inst\u00e4llningarna f\u00f6r den virtuella switchen New Distributed port group.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/26bec9aa59a409f6fd58aef93f685d26.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.3. Ange ett namn, l\u00e5t oss kalla det StealthWatchPortGroup, de \u00f6vriga inst\u00e4llningarna kan g\u00f6ras som p\u00e5 sk\u00e4rmdumpen och klicka p\u00e5 Next.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/1b5f9225675eefb37a8be070cb12dbe0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/c24f649de31b1d55cf9ac97d6321a8c1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.4. Avsluta skapandet av Port Group med knappen Finish.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/4dcd93fc9054f908b3ce69d10538e260.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.5. F\u00f6r den skapade Port Group redigerar vi inst\u00e4llningarna genom att h\u00f6gerklicka p\u00e5 portgruppen och v\u00e4lja Edit Settings. I fliken Security m\u00e5ste vi aktivera \"promisku\u00f6st l\u00e4ge\", Promiscuous Mode \u2192 Accept \u2192 OK.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/b7792f5e3c2dad347db252588ae7447e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.6. Som ett exempel importerar vi OVF FlowCollector, en nedladdningsl\u00e4nk f\u00f6r vilken ingenj\u00f6ren fr\u00e5n Cisco skickade efter GVE-f\u00f6rfr\u00e5gan. H\u00f6gerklicka p\u00e5 den v\u00e4rd d\u00e4r du planerar att distribuera VM, v\u00e4lj Deploy OVF Template. Ang\u00e5ende det tilldelade utrymme, kommer det att fungera med 50 GB, men f\u00f6r produktionsf\u00f6rh\u00e5llanden rekommenderas att avs\u00e4tta 200 GB.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/000e3a98673b2577f33c0e5fc2913704.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.7. V\u00e4lj mappen d\u00e4r OVF-filen ligger.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/855a4dfcb92bb41912d059bfedd3e98a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.8. Klicka p\u00e5 \"N\u00e4sta\".<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/adc372dd2e4df3b75724f6146771e800.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.9. Ange namn och server d\u00e4r vi ska distribuera detta.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/abdb25ced5addf714adf07898541b0b6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.10. Resultatet blir f\u00f6ljande och klicka p\u00e5 \"Avsluta\".<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/eef848e4998de5bab0e0dc3845466134.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.11. Utf\u00f6r samma steg f\u00f6r att distribuera StealthWatch Management Console.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/33010b6a604071f68300fb31b951ea71.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n2.12. Nu b\u00f6r du ange de n\u00f6dv\u00e4ndiga n\u00e4tverken i gr\u00e4nssnitten s\u00e5 att FlowCollector kan se b\u00e5de SMC och de enheter fr\u00e5n vilka Netflow kommer att exporteras. <\/p>\n<h3>3. Initiering av StealthWatch Management Console<\/h3>\n<p>\n3.1. N\u00e4r du g\u00e5r till konsolen p\u00e5 den installerade SMCVE-maskinen kommer du se platsen f\u00f6r inloggning och l\u00f6senord, som standard <b>sysadmin\/l\u00e5n1cope<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/898a885324fd1a5542a94fb40e1f79f8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.2. G\u00e5 till Management-avsnittet, ange IP-adress och andra n\u00e4tverksinst\u00e4llningar, bekr\u00e4fta sedan deras \u00e4ndringar. Enheten kommer att starta om.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/5f7d56d1f108afa873aa370f87a55d0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/76a90cf85e51c9aea91d8b738d0de775.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/a9af327e6449932d0f88f05f31f5601e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.3. G\u00e5 till webbgr\u00e4nssnittet (via https till den adress som du angav f\u00f6r SMC) och initiera konsolen, standard inloggning\/l\u00f6senord \u00e4r <b>admin\/l\u00e5n411cope<\/b>. <\/p>\n<p>P.S.: Ibland \u00f6ppnas det inte i Google Chrome, Explorer fungerar alltid.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/a0eb07f52f4080c4fba42df214283dc7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.4. Byt alltid l\u00f6senord, ange DNS, NTP servrar, dom\u00e4n och annat. Inst\u00e4llningarna \u00e4r intuitivt f\u00f6rst\u00e5eliga. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/d3de68f5f828022df4ef493c8ee91fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n3.5. Efter att ha tryckt p\u00e5 knappen \"Till\u00e4mpa\" kommer enheten att starta om igen. Efter 5-7 minuter kan du ansluta igen p\u00e5 denna adress; hanteringen av StealthWatch sker via webbgr\u00e4nssnittet.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/f22752b76ddb46d7262fd3b3999fac2b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>4. Konfiguration av FlowCollector<\/h3>\n<p>\n4.1. Med samlaren \u00e4r allt samma. F\u00f6rst i CLI anger vi IP-adress, mask, dom\u00e4n, sedan startar FC om. Efter det kan du ansluta till webbgr\u00e4nssnittet p\u00e5 den angivna adressen och g\u00f6ra samma grundl\u00e4ggande inst\u00e4llningar. Eftersom inst\u00e4llningarna liknar varandra utel\u00e4mnas detaljerade sk\u00e4rmdumpar. <b>Credentialer<\/b> f\u00f6r inloggning <b>likadana<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/9753ff123a18d6fc7c26a41be71515f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.2. P\u00e5 n\u00e4st sista punkten m\u00e5ste du ange IP-adressen f\u00f6r SMC, p\u00e5 s\u00e5 s\u00e4tt kommer konsolen att se enheten, bekr\u00e4fta denna konfiguration genom att ange autentiseringsuppgifter.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/0c8504533a1f70475fed8e061bc9f584.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n4.3. V\u00e4lj dom\u00e4n f\u00f6r StealthWatch, den angavs tidigare, och port <b>2055 <\/b>\u2013 vanlig Netflow, om du arbetar med sFlow, port <b>6343<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/6ac15c0eaf9097a2d66bbc54769055a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>5. Konfiguration av Netflow Exporter<\/h3>\n<p>\n5.1. F\u00f6r att konfigurera Netflow-export\u00f6ren rekommenderar jag starkt att du v\u00e4nder dig till denna <noindex><a rel=\"nofollow\" href=\"http:\/\/configurenetflow.info\">resurs <\/a><\/noindex>, h\u00e4r \u00e4r de viktigaste guiderna f\u00f6r konfiguration av Netflow-export\u00f6ren f\u00f6r m\u00e5nga enheter: Cisco, Check Point, Fortinet. <\/p>\n<p>5.2. I v\u00e5rt fall, jag upprepar, exporterar vi Netflow fr\u00e5n Check Point-gatewayen. Inst\u00e4llningen av Netflow-export\u00f6ren g\u00f6rs i en liknande flik i webbgr\u00e4nssnittet (Gaia Portal). F\u00f6r detta b\u00f6r du klicka p\u00e5 \"Add\", ange Netflow-versionen och n\u00f6dv\u00e4ndig port. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/d3544d986d85aea336081d3fc207c553.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>6. Analys av StealthWatchs funktion.<\/h3>\n<p>\n6.1. N\u00e4r du g\u00e5r till webbgr\u00e4nssnittet SMC, syns det redan p\u00e5 f\u00f6rsta sidan Dashboards &gt; Network Security att trafiken har b\u00f6rjat fl\u00f6da!<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/8e7d65efd8b212096f447dd2828f68f1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n6.2. Vissa inst\u00e4llningar, till exempel uppdelningen av v\u00e4rdar i grupper, \u00f6vervakning av specifika gr\u00e4nssnitt, deras belastning, hantering av insamlare och annat, kan endast hittas i Java-applikationen StealthWatch. Naturligtvis f\u00f6rflyttar Cisco l\u00e5ngsamt hela funktionaliteten till webbl\u00e4sarversionen och snart kommer vi att \u00f6verge den h\u00e4r skrivbordsappen.<\/p>\n<p>F\u00f6r att installera applikationen b\u00f6r du f\u00f6rst installera <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jre8-downloads-2133155.html\">JRE <\/a><\/noindex>(jag installerade version 8, \u00e4ven om det s\u00e4gs att versioner upp till 10 st\u00f6ds) fr\u00e5n den officiella Oracle-webbplatsen.<\/p>\n<p>I det \u00f6vre h\u00f6gra h\u00f6rnet av webbgr\u00e4nssnittet f\u00f6r kontrollpanelen f\u00f6r nedladdning m\u00e5ste du klicka p\u00e5 knappen \"Desktop Client\".<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/6345b6eb1606d219bbaf65f73b196446.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDu sparar och installerar klienten manuellt; Java kommer troligtvis att klaga p\u00e5 den, och det kan kr\u00e4vas att du l\u00e4gger till v\u00e4rden i Java-undantagen.<\/p>\n<p>Som resultat \u00f6ppnas en ganska begriplig klient d\u00e4r det \u00e4r l\u00e4tt att se belastningen p\u00e5 export\u00f6rerna, gr\u00e4nssnitten, attacker och deras fl\u00f6den.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/d5742de9c3d3792c308f34f2a6c87839.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/ca3c8d53a56d6c0e8fac12eb4c263096.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/56ba3458be8c6f50929a1008d30f4412.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>7. StealthWatch Central Management<\/h3>\n<p>\n7.1. I fliken Central Management finns alla enheter som \u00e4r en del av den distribuerade StealthWatch, s\u00e5som: FlowCollector, FlowSensor, UDP-Director och Endpoint Concenterator. D\u00e4r kan du hantera n\u00e4tverksinst\u00e4llningar och tj\u00e4nster f\u00f6r enheterna, licenser och manuellt st\u00e4nga av enheterna.<\/p>\n<p>Du kan g\u00e5 dit genom att klicka p\u00e5 \"kugghjulet\" i det \u00f6vre h\u00f6gra h\u00f6rnet och v\u00e4lja Central Management. <\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/86c411fef0ec8eb0f1941cd4aa2b8c41.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/1ff2e89817e47ac38fc141f9fe82674a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.2. N\u00e4r du g\u00e5r till Edit Appliance Configuration i FlowCollector, ser du inst\u00e4llningarna f\u00f6r SSH, NTP och andra n\u00e4tverksinst\u00e4llningar som g\u00e4ller direkt f\u00f6r apparaten. F\u00f6r att g\u00e5 dit, v\u00e4lj Actions \u2192 Edit Appliance Configuration f\u00f6r den aktuella enheten.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/1b1d27c3238f47a9fe4e0190ddf4e8a0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/78be8a43bbbefee502fbbf1e398c6f5e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/15a8b2d77ffba34be2d5ae876a20cf61.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n7.3. Hantering av licenser kan ocks\u00e5 hittas i fliken Central Management &gt; Manage Licences. Trial-licenser vid GVE-f\u00f6rfr\u00e5gan erbjuds i <b>90 dagar.<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"StealthWatch: distribution och konfigurering. Del 2\" src=\"\/wp-content\/uploads\/2019\/07\/56b02e7921a94b51b8d2a9a9dea40a16.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nProdukten \u00e4r redo f\u00f6r anv\u00e4ndning! I n\u00e4sta del kommer vi att titta p\u00e5 hur StealthWatch kan uppt\u00e4cka attacker och generera rapporter.<br \/>\n<br \/>K\u00e4lla: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/461831\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0447\u0430\u0441\u0442\u0438, \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. 1. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f StealthWatch \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u00ab\u043f\u043e\u0442\u0440\u043e\u0433\u0430\u0442\u044c\u00bb StealthWatch: dcloud \u2013 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0442; Cloud Based: Stealthwatch Cloud Free Trial \u2013 \u0437\u0434\u0435\u0441\u044c Netflow \u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u044b\u043f\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u043b\u0430\u043a\u043e \u0438 \u0431\u0443\u0434\u0435\u0442 \u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u041f\u041e StealthWatch; On-premise POV [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36669","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:13:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47StealthWatch: distribution och konfiguration. Del 2 | ProHoster","description":"Hej kollegor!","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47StealthWatch: \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:description":"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/stealthwatch-razvertyvanie-i-nastrojka-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:01+00:00","article:modified_time":"2019-10-31T19:13:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36669","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:18:11","updated":"2026-01-22 04:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=36669"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36669\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/27463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=36669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=36669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=36669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}