ืืืจ ืืืืกื Solarwinds ืืขืืื ื ืืื ืืึธืื ืฉืืื ืืจืืขืื ืืื ืขืก ืคึฟืึทืจ ืึท ืืึทื ื ืฆืืึทื; ืคืืืข ืืืื ืืืืกื ืืืืขืจ ืคึผืจืึธืืืงืื ืคึฟืึทืจ ื ืขืฅ (ืืื ืื ืืขืจืข) ืืึธื ืืืึธืจืื ื. ืึธืืขืจ ืขืก ืืื ื ืืฉื ืึทืืื ืืืืืืื ืืึทืืืืกื ืึทื ืืื ืืึธืื ืืืจ ืฆื ืึธืคึผืืึธืืืจื ืคืื ืืืืขืจ ืืืขืืืืืื ืึท ืืื ืคืืจ ืืืฅ ืคืจืื ืืืืืืึทืืื ืืืึธืก ืืืขื ืืขืืคึฟื ืืืจ ืงืึธื ืืจืึธืืืจื ื ืขืฅ ืืขืืืืกืขืก, ืคืืจื ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ, ืืึทืืึทืืืืกืื ืืื ืืคืืื ืฉืขืคึผื ืื ืกืึทืืึทื ืฅ. ืืื ืคืึทืงื, ืืขื ืืืืืืืืืจื ืืื ืืึทืืื ืืขืจ ืคืจืึทืืืึทื ืฅ ืคืื ืืืืขืจ ืืึทืฆืึธืื ืคึผืจืึธืืืงืื. ืื ืืืืืืึทืืื ืืขื ืขื 100% ืคืจืื, ื ืืฉื ืคึผืจืึธืฆืขืก ืืืขืจืกืืขืก. ืื ืืขืจ ืืขืจ ืืืจืืฉื ืื ืืขื ืขื ืืื ืงืก ืฆื ืืึทืฉืจืืึทืืื ื ืืื ืืจืืคืงืืคืืข.
ืืื ืืขื ืจืขืฆืขื ืืืข ืคืื โโืืืืืืึทืืื ืคึฟืึทืจ:
- ื ืขืฅ ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืคืึทืจืืืึทืืืื ื;
- IT ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืคืึทืจืืืึทืืืื ื;
- IT ืืืืขืจืืืึทื ืคืึทืจืืืึทืืืื ื;
- ืืืืืึทืืืืก ืคืึทืจืืืึทืืืื ื;
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืื ืืืืฃ ืืขืกืง ืืื ืกื.
ื ืขืฅ ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืืึทื ืึทืืขืืขื ื
ื ืคึผืฉืื ืืขืฆืืึทื. ื ืงืืื ืคืื ืึทืืจืขืกืขืก ืืื ืกืคึผืขืกืืคืืขื ืืื ืื ืฆืืืื ื, ืขืก ืงืืืืจืื ืืื ืืื ืจืฉืืืืช ื ืึธืืื ืื ืืืฆื ืคึฟืึทืจ ืืืืึทื ืืึธื ืืืึธืจืื ื. ืืขืืืขื ืืึธื ืืืึธืจืื ื ืืืฉืืจืื: ืคึผืื ื, WMI, SSH. ืืืืฃ ืกืขืจืืืขืจืก ืขืก ืงืขื ืขื ืืืจืืคืืจื ื ืึธืจืืึทื ืืฉืขืงืก ืึทืืึท ืืื ืงืคึผื, ืืึผืจืื, ืืืกืง. ืืึธืก ืืื ืึท ืคืจืื ืืืขืจืกืืข ืคืื โโืืืื ืขืืืขืจืข ืืจืืืขืจ ืืคึผืืึธื ืืืึธืจ (ืึธื ืคืจืื) ืืื ืฉืืืฆื ืึทืจืืืฃ ืฆื 50 ื ืึธืืื. ืคึฟืึทืจ ืึท ืงืืืื ืึธืคืืก ืึธืืขืจ ืคึผืจืืืืจื ืืึทืกืงืก, ืืึธืก ืืื ืืึทื ืฅ ืึธืืงืื. ืขืกื .
ืจืขืคึผืืึทืงืืืฉืึทื, ืืขืกืืื ื ืืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืคืื ืืขืืืืกืขืก ืคึฟืึทืจ ืฉืืงื ืืืืคื ืคืึทืจืงืขืจ. ืื ืืขืฆืืึทื ืืืฉืืืื ืคืื ืืจืืึท ืืืืื: ืึท ืจืขืคึผืืืงืึทืืึธืจ, ืึท ืืขื ืขืจืึทืืึธืจ ืืื ืึท ืงืึธื ืคืืืืจืึทืืึธืจ. ืืขืจ ืจืขืคึผืืืงืึทืืึธืจ ืงืขื ืขื ืืึทืงืืืขื ืืื ืคืึธืจืืืก ื ืขืืคืืึธืื ืคืึทืจืงืขืจ ืฆื ืืืื ืขืจ ืึธืืขืจ ืืขืจ ืจืืกืืืืขืจื. ืืขื ืขืจืึทืืึธืจ - ืืืฉืขื ืขืจืืืฅ ื ืขืืคืืึธืื ืคึฟืึทืจ ืืขืกืืื ื, ืงืึธื ืืจืึธืืืจืื ื ืคืืจืขืืืึทืื ืกืขืืืื ืืก ืืื ืื ืืขืจืข ืฆืืืขืงื. ืืขืจ ืงืึธื ืคืืืืจืึทืืึธืจ ืืืืืึธืืึทืืืฉ ืงืึทื ืคืืืืขืจ ื ืขืฅ ืืขืืืืกืขืก ืฆื ืฉืืงื ื ืขืืคืืึธืื ืฆื ืื ืฆืื ืืืื. ืขืกื .
ืืขื ื ืืฆื ืืื ืึทื ืึทืืืฉืึทื ืฆื ืื ืกืืกืืขื ืืจืึทืกืขืจื. ืคึผืขืจืคืึธืจืื ืึทื ืึทืืืกืืก ืคืื ื ืขืฅ ืจืืฅ ืืื ืงืขื ืขื ืงืึทืืขืจ ืคึผืึทืงืืฅ ื ืืฆื ืื TCP ืืื ICMP ืคึผืจืึธืืึธืงืึธืืก. ืขืกื .
ืืืฉืขื ืขืจืืืฅ ืึท ืจืฉืืื ืคืื ืขืคืขื ืขื, ืคึฟืึทืจืืึทืื ืืื ืคืืืืขืจื ืคึผืึธืจืฅ ืคึฟืึทืจ ืืขืืขืจ ืกืงืึทื ื IP ืึทืืจืขืก. ืขืก ืงืขื ืขื ืืืขืจืงืืงื ื ืืฆื TCP ืืื UDP ืคึผืจืึธืืึธืงืึธืืก, ืืื ื ืึธื ืกืงืึทื ืื ื ืืืจ ืงืขื ืขื ืฆืืคึฟืขืืืงืขืจ ืึทืืข ืืขืืืืื ืืึทืื ืฆื ืึท ืืขืงืข. ืขืก ืืืื ืึทืจืืขื ืืืจื ืื ืืึทืคึฟืขืื ืฉืืจื.
ืขืก ืื ืคืึทืจืึทื .
ืืึธื ืืืึธืจืื ื ื ืขืฅ ืืขืืืืกืขืก. ืื ื ืืฆื ืงืืื ืืื ืคืืืข ืคืึทืจืฉืืืขื ืข ืืขืืคึผืืึทืืขืก ืคึฟืึทืจ ืืึธื ืืืึธืจืื ื ืืืจื SNMP; ืืืจ ืงืขื ืขื ืงืึทืกืืึทืืืื ืจืืคึผืึธืจืฅ ืืื ืึทืืขืจืฅ. ืืืขืจ ืขืก ืืื ืึท ืืึทืืจืขื ืขืฆืื ื: ืืึธื ืืืึธืจืื ื ืคืื ืืืืื ืืืื ืืืื ืืื ืืขืฉืืืฆื. .
ื ืขืฅ ืกืืืืืืข ืขืืืืึทืืึธืจ. ืื ื ืืฆื ืึทืจืืขื ืืืืฃ Windows, Mac ืืื Linux. ืืขืจ ืืื 20 ืืืขื ืืึธืจืก ืคืื ื ืขืฅ ืืืกืจืืื ืืขื ืขื ืืขืฉืืืฆื. ืืืจ ืงืขื ืขื ืขืืืึทืืืื ืคืึทืจืฉืืื ื ืขืฅ ืืึธืคึผืึธืืึธืืืขืก ืืื ืืขื ืืื ืืึธืก ืึทืืข ืึทืจืืขื. ืขืกื .
ืึทื ืึทืืืฉืึทื ืคึฟืึทืจ Wireshark ืคึฟืึทืจ ืืจืื ื ืคึผืึทืงืึทื ืึทื ืึทืืืกืืก ืืืืืจื ืืืืฃ ืขื ืืคืขืจ ืฆืืื. ืืืืขืงืฅ ืคืึทืจืงืขืจ ืคึฟืื ืืขืขืจืขื 1200 ืึทืคึผืืึทืงืืืฉืึทื ื. ืึทืจืืขื ืืื ืึท ืงืึทืืงืืืึทืืึธืจ ืคึฟืึทืจ ืึทืคึผืืึทืงืืืฉืึทื ืขื ืืคืขืจ ืฆืืื. ืขืกื .
ืื ื ืืฆื ืืื ืืืืืื ื ืฆื ืืึธื ืืืึธืจ NetFlow, J-Flow ืืื sFlow ืคืึทืจืงืขืจ. ืื ืฆืืืื ื ืืื ืงืืงื ืืื ืื ืคืึธืจืขื ืคืื ืคืึทืจืฉืืื ืกืขืงืฉืึทื ื: ืืืจื ืื ืืขืจืึทืงืฉืึทื ืฆืืืืฉื ืืขืืืืกืขืก, ืืืจื ืึทืคึผืืึทืงืืืฉืึทื ื, ืืืจื ืืึธืืืืื ื ืืื ืกืืฃ ืืขืืืืกืขืก. ืืื ืืขืจืฆื, ืขืก ืืื ืืขืืืขื ืฆื ืจืขืงืึธืจืืืจื ืืึทืื ืคึฟืึทืจ ืึทืจืืืฃ ืฆื 60 ืืื ืื.
TFTP ืกืขืจืืืขืจ ืืื ืืจืึทืคืืงืึทื ืฆืืืื ื. ืืืืคื ืืืืฃ Windows ืืื ืึท ืืื ืกื. ืขืกื .
ืกืงืึทื ืื ื, ืจืขืงืึธืจืืื ื ืขื ืืขืจืื ืืขื, ืืืขื ืืืคืืฆืืจื ืงืึทื ืคืืืงืฅ ืคืื IP ืึทืืจืขืก. ืืึธืก ืืื ืืขืจ ืืื ืืขืจ ืืจืืืขืจ ืคืื ืื ืขืืืขืจืข IP ืึทืืจืขืก ืืึทื ืึทืืขืจ - ืขืก ืงืขื ืขื ืคืืจื ืึทืจืืืฃ ืฆื 254 ืึทืืจืขืกืขืก, ืงืขืื 2 ืืืืืึธื ืืื ืื ืืึทืฆืึธืื ืืืืืื ื.
ื ืขืืืืึธืจืง ืฆืืืื ื ืืจืืคึผืื ืืึธื ืืืึธืจืื ื ืืื ืืขืืจืืง ืืืืืฉืืืึทืืึทืืืืฉืึทื. ืืืื ืึท ืืื ืืขืจ ืืืืืื ื ืคึฟืึทืจ ื ืขืืืืึธืจืง ืคึผืขืจืคืึธืจืืึทื ืกืข ืืึธื ืืืึธืจ (ื ืคึผื).
ืืืื, ืคืืืืขืจ ืืื ืกืึธืจื CCM CDR ืืึธืืก.
ืืึทืืืื ื ืคืื IP SLA ืืึทืื ืคืื ืกืืกืงืึธ ืืขืืืืกืขืก ืืื ืืืืขืจ ืืืืืฉืืืึทืืึทืืืืฉืึทื.
IP ืงืึทืืงืืืึทืืึธืจ ืคึฟืึทืจ ืึทืืจืขืก ืคึผืืึทืฅ ืคึผืืึทื.
ืึทื ืึทืืืกืืก, ืึธืคึผืืจืึธื ืืื ืึทืจืงืืืืืื ื ืคืื ืกืืกืืึธื ืืื SNMP. ืขืกื .
ืึทืืืึทื ืกืืจืืข ืคืืคึผ ืงืืืขื ื ืคึฟืึทืจ ืืืื ืืึธืื. ืฉืืืฆื FTP, FTPS ืืื SFTP ืคึผืจืึธืืึธืงืึธืืก. ืืืจื ืืขื ืงืืืขื ื ืืืจ ืงืขื ืขื ืึทืจืืืขืจืคืืจื ืืขืงืขืก ืืืืฃ ืึท ืคึผืืึทื.
ืื ื ืืฆื ืึทืคึผืขืจืืืฅ ืืื ืึท Windows ืืื ืกื ืืื ืฉืืืฆื ืกืืืืึทืืืืื ืืึทืก ืืขืงืข ืึทืจืืืขืจืคืืจื ืฆื ืงืืืคื ืืขืืืืกืขืก.
IT ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืคืึทืจืืืึทืืืื ื
ืื ื ืืฆื ืงืขื ืขื ืึทืจืืืกืืืืึทืื ืคืื ืึทื ืฆืืขื ืืื ืคึฟืึธืจืืึทืฆืืข ืคึฟืึทืจ ืขืืืขืืข ืึทืงืึทืื ืฅ ืกืืืืึทืืืืื ืืึทืกืื. ืื ืฆืืืื ื ืืื ืึท ืืจืืืงืืึทืื ืคืื ืงืึธืก ืคึฟืึทืจ ืื ืืึธืจ, ืคืขืจืื, ืืืืฉ ืืื ืืื ืึทืืืฉืึทื ืืืืืื ืืึทืฆืึธืื ืจืขืกืืจืกื ืืืึธืก ืืขื ืขื ื ืืฉื ืืขื ืืฆื. ืึทืจืืขื ืืืืฃ ืืืื ืืึธืื ืืื ืืขืง ืคึผืืึทืืคืึธืจืืก.
ืคึผืึทืงืืืืฉืื events ืคึฟืื ืื Windows ืงืืึธืฅ ืืื ืกืขื ืื ืืื ืืื ืกืืกืืึธื ืืื ื ืึธืจ ืืืจ ืืืืื. ืขืก ืืื ืคืืขืงืกืึทืืึทื ืคืืืืจืืืฉืึทื.
ืึทืืืึทื ืกืืจืืข ืคึผืึทืื. ืขืก ืืื ืึท ืืืืื-ืงืืืืื ืฆืืืื ื ืืื ืืึทืงืืืขื ืืืื ืคึฟืึทืจ ืืขืจืืืขืืืขื ืกืขืฉืึทื ื. ืขืกื .
VMware ืืื Hyper-V ืคืึธืจืฉืืขืืื ื ืืึธื ืืืึธืจืื ื. ืื ืฆืืืื ื ืืืกืคึผืืืื ืฉืืืกื ืคืึธืจืฉืืขืืื ื ืืขืืจืืงืก ืืื ืื ืกืืึทืืืก ืคืื ืืืืจืืืึทื ืืืฉืื ืขื.
ืืืืืื ื ืคึฟืึทืจ ืืึธื ืืืึธืจืื ื ืืฉืืืืช ืกืขืจืืืขืจืก. ืืืืก ืคืื ืื ืงืขืกืื ืขืก ืงืขื ืขื ืึทืจืืขืื ืืื Dell PowerEdge, HP ProLiant, IBM eServer xSeries ืกืขืจืืืขืจืก ืืื VMware ESX/ESXi ืืืืคึผืขืจืืืืืืขืจื. ืฉืืืฆื SNMP, WMI ืืื CIM ืงืึธืืื ืืงืึทืฆืืข ืคึผืจืึธืืึธืงืึธืืก.
ืืึธื ืืืึธืจืื ื ืคืื ืืึทืื ืขืจืืื Dell EMC, NetApp, IBM, Pure Storage. ืขืกื .
ืืึธื ืืืึธืจืื ื ืฉืืืกื ืขืงืกืืฉืึทื ืืข ืืึทืืื ืื ืืก. ืขืกื .
ื ื ืืฆื ืคึฟืึทืจ ืืืืืึธืืึทืืืฉ ืงืึทื ืคืืืืขืจืื ื ืืืืข ืืื ืืืืึทื ืืืื ืจื ืืึทืืื ืื ืืก.
ื ืคึผืขืงื ืคืื ืืจืื ืืืืืืึทืืื ืคึฟืึทืจ: ืืืืขืงืืื ื ืึทื ืืืื ืึทืงืึทืื ืฅ, ืืืืขืงืืื ื ืึทื ืืืื ืืืขืจืงืกืืืืฉืึทื ื ืืื ืืืคึผืึธืจืืื ื ืืึทื ืืฆืขืจ ืึทืงืึทืื ืฅ ืืื AD. ืขืกื .
ื ื ืืฆื ืคึฟืึทืจ ืงืึธื ืืจืึธืืืจืื ื ืื ืึทืืืืืืึทืืืืึทืื ืคืื Windows Update ืืึทืืื ืื ืืก (WSUS) ืืืืฃ ืืืืึทื ืกืขืจืืืขืจืก.
ื ื ืืฆื ืคึฟืึทืจ ืคืืืกื ืืืง ืกืื ืืขืืืฉ ืืขืกืฅ. ืืืื ืืจืึทื ืกืึทืงืืืึธื ืืื ืืขืฉืืืฆื ืคึฟืึทืจ ืืืขื ืึทืคึผืืึทืงืืืฉืึทื ื.
ื ื ืืฆื ืคึฟืึทืจ ืงืึทื ืืจืึธืืืื ื ืึท Windows ืกืขืจืืืขืจ ืืืจื WMI. ื ืืืืื ืืขืจ ืกืขืจืืืขืจ, ืืืืึทื ืืืืื ืืืื ืืืื ืืื ืืขืฉืืืฆื.
ืงืึทื ืคืืืืขืจ SNMP ืงืึธืื ืืขืจืก ืืืืฃ ืืืืึทื Windows ืกืขืจืืืขืจืก.
IT Security Management
Windows ืงืืึธืฅ ืงืึธื ืกืึธืืืืึทืืึธืจ ืืื ืืึทืงืืืขื ืืืื ืืืจื ืืขืฉืขืขื ืืฉื ืืื ืื ืคืืืืงืืื ืฆื ืงืึทื ืคืืืืขืจ ืึทืืขืจืืื ื ืืืจื ืฆืืฉืืึทื ื. ืขืกื .
ื ื ืืฆื ืคึฟืึทืจ ืืขืกืืื ื ืคืืืจืืืึทื ืึผืืืื. ืฉืืืฆื ืึทืจืืึทื ืคืืจ ืคืื ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืคึฟืื Cisco, Check Point ืืื NetScreen ืืขืืืืกืขืก.
ืึทื ืึทืืืืขืจ ืคืื ืึทืงืกืขืก ืจืขืื ืคืื ืืืืขืจื, ืืจืืคึผืข ืืืืืืืืขืจ ืืื ืจืขืื ืฆื ืคืืจื ื ืขืฅ ืฉืึทืจืขืก.
ืืึทืืึทืืึทืกืข ืคืึทืจืืืึทืืืื ื
ืคืึทืงืืืฉ-ืฆืืื ืึธื ืคึฟืจืขื ืึทื ืึทืืืืขืจ ืคึฟืึทืจ SQL Server, Oracle, DB2 ืืื SAP ASE ืืึทืืึทืืืืกืื. ืืืืืื ืคึผืึทืืขืืขื ืงืืืืจืื. ืขืกื .
ื ื ืืฆื ืคึฟืึทืจ ืึทื ืึทืืืืืื ื ืืืจืืคืืจืื ื ืคึผืืึทื ืืื SQL Server. ืืึธื ืืืึธืจืก ืื ืืืืึทืืึทืืืืฉืึทื ืคืื ืจืขืกืืจืกื ืืื ืืขืจ ืคึผืืึทื ืคึผืจืึธืืจืขืกืื. ืขืกื .
ืึธืจืืึทื ืืืึทืฆืืข ืืืืฃ ืืขืกืง
ืื ืกืืืขื ื, ืคึผืจืึธืืืขื ืืื ืืื ืกื ืืืจืื ืคืึทืจืืืึทืืืื ื. ืขืก ืืื ืื ืืึทืืจืืืฉืึทื ืืื AD ืืื ืจืืคึผืึธืจืฅ. ืืึธืก ืืื ืืขืจ ืืื ืืขืจ ืืจืืืขืจ ืคืื ืื ืคืื-ืคืืืฉืขืจื ืืืขืจืกืืข.
ืจืืึฟ ืคืื ืื ืืืืืืึทืืื ืืขื ืขื ืคึผืึทืกืืง ืคึฟืึทืจ ืกืึทืืืืื ื ืืืืข ืคึผืจืึธืืืขืืก, ืขืืืขืืข ืงืขื ืขื ืืืื ืืขืืืืื ื ืืื ืคึผืจืึธืืืงืฆืืข ืกืืกืืขืืขื. ืืื ืื ืืขืฆืืข 2-3 ืืึธืจ, Solarwinds ืืื ืึทืงืืืืืื ืืขืืืขืืึธืคึผืื ื ืืืึทื ืคึผืจืึธืืืงืื ืืื ืืืฆื ืืื ืงืขื ืขื ืืืื ืงืึทื ืกืืืขืจื ืืื ืึท ืื ืืืืขืจืกืึทื ืึธืจืืึทื ืึทืืืืฉืึทื ืึทื ืืึธื ืืืึธืจืื ื ืกืืกืืขื. ืืืื ืืืจ ืืืื ืคึฟืึทืจ ืึท ืืึธื ืืืึธืจืื ื ืกืืกืืขื ืคึฟืึทืจ ืืขื ืจืึธืืข, ืืึทืืจืึทืืื Solarwinds.
ืืงืืจ: www.habr.com
