{"id":96036,"date":"2020-10-07T01:42:11","date_gmt":"2020-10-06T23:42:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa"},"modified":"2020-10-07T01:42:11","modified_gmt":"2020-10-06T23:42:11","slug":"2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","title":{"rendered":"2. FortiAnalyzer Komma ig\u00e5ng v6.4. F\u00f6rberedelse av layout","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"2.
\n
\nV\u00e4lkommen till den andra lektionen i kursen FortiAnalyzer Kom ig\u00e5ng<\/a><\/noindex>. I dag kommer vi att diskutera mekanismen f\u00f6r administrativa dom\u00e4ner p\u00e5 FortiAnalyzer<\/a><\/noindex>, och \u00e4ven g\u00e5 igenom processen f\u00f6r logghantering \u2013 att f\u00f6rst\u00e5 principerna f\u00f6r hur dessa mekanismer fungerar \u00e4r n\u00f6dv\u00e4ndigt f\u00f6r de initiala inst\u00e4llningarna FortiAnalyzer<\/a><\/noindex>. Efter det kommer vi att diskutera layouten som vi kommer att anv\u00e4nda under kursen, samt genomf\u00f6ra en f\u00f6rsta konfiguration FortiAnalyzer<\/a><\/noindex>. Den teoretiska delen samt den fullst\u00e4ndiga inspelningen av lektionen finns under l\u00e4nken. <\/a><\/noindex><\/p>\n

Till att b\u00f6rja med, l\u00e5t oss en g\u00e5ng till diskutera administrativa dom\u00e4ner. Det finns n\u00e5gra saker som \u00e4r viktiga att veta om dem innan vi b\u00f6rjar anv\u00e4nda: <\/p>\n

    \n
  1. M\u00f6jligheten att skapa administrativa dom\u00e4ner aktiveras och avaktiveras centralt.<\/li>\n
  2. F\u00f6r att registrera n\u00e5gra enheter, f\u00f6rutom FortiGate, kr\u00e4vs en separat administrativ dom\u00e4n. Det vill s\u00e4ga, om du vill registrera flera FortiMail-enheter p\u00e5 en enhet beh\u00f6ver du en separat administrativ dom\u00e4n f\u00f6r detta. Men detta utesluter inte att du kan skapa olika administrativa dom\u00e4ner f\u00f6r att gruppera FortiGate-enheter. <\/li>\n
  3. Det maximala antalet st\u00f6d f\u00f6r administrativa dom\u00e4ner beror p\u00e5 modellen av FortiAnalyzer-enheten. <\/li>\n
  4. N\u00e4r m\u00f6jligheten att skapa administrativa dom\u00e4ner aktiveras m\u00e5ste en arbetsl\u00e4gen v\u00e4ljas \u2013 Normal eller Avancerad. I Normal-l\u00e4get kan olika virtuella dom\u00e4ner (eller VDOM:ar) fr\u00e5n en FortiGate inte l\u00e4ggas till i olika administrativa dom\u00e4ner p\u00e5 FortiAnalyzer-enheten. I Avancerad-l\u00e4get \u00e4r detta m\u00f6jligt. Avancerad-l\u00e4get till\u00e5ter att hantera data fr\u00e5n olika virtuella dom\u00e4ner och f\u00e5 separata rapporter om dem. Om du har gl\u00f6mt vad virtuella dom\u00e4ner \u00e4r, titta p\u00e5 den andra lektionen i kursen Fortinet Kom ig\u00e5ng<\/a><\/noindex>, d\u00e4r det f\u00f6rklaras ganska ing\u00e5ende. <\/li>\n<\/ol>\n

    \nVi kommer att titta p\u00e5 skapandet av administrativa dom\u00e4ner och f\u00f6rdelning av resurser mellan dem lite senare i den praktiska delen av lektionen. <\/p>\n

    Nu ska vi prata om mekanismen f\u00f6r loggning och bearbetning av loggar som kommer till FortiAnalyzer.
    \nLoggarna som kommer till FortiAnalyzer komprimeras och sparas i en loggfil. N\u00e4r denna fil n\u00e5r en viss storlek \u00f6verskrivs den och arkiveras. Dessa loggar kallas arkiverade. De anses vara offline-loggar, eftersom de inte kan analyseras i realtid. F\u00f6r att visa dem \u00e4r de endast tillg\u00e4ngliga i r\u00e5format. Policyn f\u00f6r datalagring inom det administrativa dom\u00e4nen avg\u00f6r hur l\u00e4nge dessa loggar kommer att lagras i enhetens minne.
    \nSamtidigt indexeras loggarna i en SQL-databas. Dessa loggar anv\u00e4nds f\u00f6r datanalys med hj\u00e4lp av mekanismerna Log View, FortiView och Rapportering. Policyn f\u00f6r datalagring inom det administrativa dom\u00e4nen avg\u00f6r hur l\u00e4nge dessa loggar kommer att lagras i enhetens minne. Efter att loggarna har tagits bort fr\u00e5n enhetens minne kan de finnas kvar som arkiverade loggar, men detta beror p\u00e5 policyn f\u00f6r datalagring inom det administrativa dom\u00e4nen. <\/p>\n

    F\u00f6r att f\u00f6rst\u00e5 de ursprungliga inst\u00e4llningarna av denna kunskap r\u00e4cker det med detta. L\u00e5t oss nu diskutera v\u00e5r layout:<\/p>\n

    \"2.
    \n
    \nP\u00e5 den ser du 6 enheter \u2014 FortiGate, FortiMail, FortiAnalyzer, dom\u00e4nkontroller, dator f\u00f6r extern anv\u00e4ndare och dator f\u00f6r intern anv\u00e4ndare. FortiGate och FortiMail beh\u00f6vs f\u00f6r att generera loggar fr\u00e5n olika Fortinet-enheter, f\u00f6r att exemplifiera arbetet med olika administrativa dom\u00e4ner. Interna och externa anv\u00e4ndare samt dom\u00e4nkontroller beh\u00f6vs f\u00f6r att generera olika trafik. Den interna anv\u00e4ndardatorn har Windows OS installerat, medan den externa datorn har Kali Linux.
    \nI detta exempel fungerar FortiMail i Server-l\u00e4ge, vilket inneb\u00e4r att den \u00e4r en separat e-postserver som g\u00f6r att interna och externa anv\u00e4ndare kan byta e-postmeddelanden. N\u00f6dv\u00e4ndiga inst\u00e4llningar, s\u00e5som MX-poster, \u00e4r konfigurerade p\u00e5 dom\u00e4nkontrollern. F\u00f6r den externa anv\u00e4ndaren \u00e4r DNS-servern den interna dom\u00e4nkontrollern \u2014 detta har genomf\u00f6rts med hj\u00e4lp av portvidarebefordran (eller med en annan teknologi som kallas Virtual IP) p\u00e5 FortiGate.
    \nDessa inst\u00e4llningar behandlas inte under lektionen, eftersom de inte relaterar till kursens \u00e4mne. Distributionen och initial konfiguration av enheten FortiAnalyzer kommer att behandlas. \u00d6vriga komponenter av den aktuella layouten har f\u00f6rberetts i f\u00f6rv\u00e4g. <\/p>\n

    Systemkraven f\u00f6r olika enheter presenteras nedan. Jag har denna layout som fungerar p\u00e5 en f\u00f6rberedd maskin i den virtuella milj\u00f6n VMWare Workstation. Specifikationerna f\u00f6r denna maskin anges ocks\u00e5 nedan. <\/p>\n

    Enheten
    \nRAM, GB
    \nvCPU
    \nHDD, GB<\/p>\n

    Dom\u00e4nkontroller
    \n6
    \n3
    \n40<\/p>\n

    Intern anv\u00e4ndare
    \n4
    \n2
    \n32<\/p>\n

    Extern anv\u00e4ndare
    \n2
    \n2
    \n8<\/p>\n

    FortiGate
    \n2
    \n2
    \n30<\/p>\n

    FortiAnalyzer
    \n8
    \n4
    \n80<\/p>\n

    FortiMail
    \n2
    \n4
    \n50<\/p>\n

    Maskin f\u00f6r layout
    \n28
    \n19
    \n280<\/p>\n

    Systemkraven som anges i denna tabell \u00e4r minimala \u2014 i praktiken kr\u00e4vs oftast mer resurser. Mer information om systemkrav finns p\u00e5 denna webbplats<\/a><\/noindex>. <\/p>\n

    I videolektionen presenteras det teoretiska materialet som behandlats ovan samt en praktisk del \u2014 med den initiala konfigurationen av enheten FortiAnalyzer. Trevlig titt!<\/p>\n

    \r\n \"Spela\r\n
    <\/div>\r\n <\/div><\/center>
    \nI n\u00e4sta lektion kommer vi att g\u00e5 igenom aspekter av loggar. F\u00f6r att inte missa den, f\u00f6lj v\u00e5rt     Youtube-kanal<\/a><\/noindex>.<\/p>\n

    Du kan ocks\u00e5 f\u00f6lja uppdateringar p\u00e5 f\u00f6ljande resurser:<\/p>\n

    Grupp p\u00e5 Vkontakte<\/a><\/noindex>
    \n    Yandex Zen <\/a><\/noindex>
    \n    V\u00e5r webbplats<\/a><\/noindex>
    \n    Telegram-kanal<\/a><\/noindex>
    \n
    K\u00e4lla:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u0443\u0440\u043e\u043a\u0435 \u043a\u0443\u0440\u0441\u0430 FortiAnalyzer Getting Started. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043f\u0440\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u043d\u0430 FortiAnalyzer, \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a FortiAnalyzer. \u0418 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u043c\u0430\u043a\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0445\u043e\u0434\u0435 \u043a\u0443\u0440\u0441\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043c \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e FortiAnalyzer. \u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96037,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-96036","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd472. FortiAnalyzer Kom ig\u00e5ng v6.4. F\u00f6rberedelse av layout | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. FortiAnalyzer Getting Started v6.4. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043c\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/2-fortianalyzer-getting-started-v6-4-podgotovka-maketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-06T23:42:11+00:00","article:modified_time":"2020-10-06T23:42:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96036","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:52:25","updated":"2022-10-03 07:29:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/96036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=96036"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/96036\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/96037"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=96036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=96036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=96036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}