Sawubona, bangane! Siyajabula ukukwamukela esifundweni sethu esisha se-FortiAnalyzer Getting Started. Kunjalo Sesikubhekile kakade ukusebenza kwe-FortiAnalyzer, kodwa sidlule kukho ngokukha phezulu. Manje ngifuna ukukutshela kabanzi mayelana nalo mkhiqizo, mayelana nemigomo yawo, izinhloso kanye namakhono. Lesi sifundo akumele sibe sikhulu njengesokugcina, kodwa ngithemba ukuthi sizojabulisa futhi sifundise.
Njengoba isifundo sibonakale singenangqondo ngokuphelele, ukuze kube lula kuwe sinqume ukusethula nangefomethi ye-athikili.
Phakathi nalesi sifundo sizohlanganisa amaphuzu alandelayo:
- Ulwazi olujwayelekile mayelana nomkhiqizo, inhloso yawo, imisebenzi kanye nezici ezibalulekile
- Ake silungiselele ukwakheka, ngesikhathi sokulungiselela sizobheka kabanzi ukucushwa kokuqala kwe-FortiAnalyzer.
- Ake sijwayelane nendlela yokugcina, ukucubungula nokuhlunga izingodo ukuze zisesheke kalula, futhi sicabangele indlela ye-FortiView, eveza ulwazi olubukwayo mayelana nesimo senethiwekhi ngendlela yamagrafu ahlukahlukene, imidwebo namanye amawijethi.
- Ake sibheke inqubo yokudala imibiko ekhona, futhi sifunde ukuthi ungayidala kanjani eyakho imibiko futhi uhlele imibiko ekhona
- Ake sidlule ezindabeni ezibalulekile ezihlobene nokuphathwa kwe-FortiAnalyzer
- Ake sixoxe ngohlelo lwamalayisensi futhi - besengivele ngikhulume ngalo esifundweni se-11 sesifundo. , kodwa njengoba besho, ukuphindaphinda kungumama wokufunda.
Injongo eyinhloko ye-FortiAnalyzer ukugcinwa endaweni eyodwa kwamalogi asuka kudivayisi eyodwa noma ngaphezulu ye-Fortinet, kanye nokucutshungulwa nokuhlaziywa kwawo. Lokhu kuvumela abaphathi bezokuphepha ukuthi baqaphe imicimbi ehlukahlukene yenethiwekhi nezokuphepha endaweni eyodwa, bathole ngokushesha ulwazi oludingekayo kumalogi namawijethi, futhi bakhe imibiko kuwo wonke noma kumadivayisi athile.
Uhlu lwamadivayisi lapho i-FortiAnalyzer ingathola khona amalogi futhi iwahlaziye uvezwa esithombeni esingezansi.
I-FortiAnalyzer inezici ezintathu ezibalulekile: ukubika, izexwayiso, nokugcina kungobo yomlando. Ake sibheke ngayinye yazo.
Ukubika - Imibiko inikeza ukumelwa okubonakalayo kwemicimbi yenethiwekhi, imicimbi yezokuphepha, nemisebenzi eyahlukene eyenzekayo kumadivayisi asekelwe. Indlela yokubika iqoqa idatha edingekayo kumalogi akhona futhi iwethule ngendlela elula ukuyifunda nokuyihlaziya. Ngokusebenzisa imibiko, ungathola ngokushesha ulwazi oludingekayo mayelana nokusebenza kwedivayisi, ukuphepha kwenethiwekhi, izinsiza ezivakashelwe kakhulu, nokunye. Kunezinketho eziningi. Imibiko ingase futhi isetshenziselwe ukuhlaziya isimo senethiwekhi namadivayisi asekelwe esikhathini eside. Ikakhulukazi zibalulekile uma kuphenywa izigameko ezehlukene zokuphepha.
Izaziso zikuvumela ukuthi uphendule ngokushesha ezinsongweni ezahlukahlukene ezenzeka kunethiwekhi. Uhlelo lukhiqiza izexwayiso lapho izingodo zivela ezenelisa izimo ezilungiselelwe ngaphambilini - ukutholwa kwegciwane, ukuxhashazwa kobuthakathaka obuhlukahlukene, nokunye. Lezi zixwayiso zingabonakala kusixhumi esibonakalayo sewebhu se-FortiAnalyzer, futhi ungakwazi ukumisa ukuthumela kwazo ngephrothokholi ye-SNMP, kuseva ye-syslog, kanye namakheli e-imeyili athile.
Ukufaka kungobo yomlando kukuvumela ukuthi ugcine amakhophi okuqukethwe okuhlukahlukene okugeleza kunethiwekhi ku-FortiAnalyzer. Lokhu kuvame ukusetshenziswa ngokuhambisana nenjini ye-DLP ukugcina amafayela ahlukahlukene awela ngaphansi kwemithetho ehlukene yenjini. Kungase futhi kube usizo ekuphenyeni izigameko ezihlukahlukene zokuphepha.
Esinye isici esijabulisayo yikhono lokusebenzisa izizinda zokuphatha. Lobu buchwepheshe bukuvumela ukuthi udale amaqembu wamadivayisi ngokusekelwe kumibandela ehlukahlukene - izinhlobo zedivayisi, indawo yendawo, njalonjalo. Ukwakhiwa kwamaqembu anjalo edivayisi kufeza lezi zinhloso ezilandelayo:
- Amadivayisi wokuqoqa asekelwe ezicini ezifanayo ukuze kube lula ukuqapha nokuphathaβisibonelo, amadivayisi aqoqwe ngokwendawo. Udinga ukuthola ulwazi oluthile kulogi lwamadivayisi atholakala eqenjini elifanayo. Esikhundleni sokuhlunga ngokucophelela izingodo, umane ubheke izingodo zesizinda esidingekayo sokuphatha bese ubheka ulwazi oludingekayo.
- Ukuze uhlukanise ukufinyelela kokuphatha - isizinda ngasinye sokuphatha singaba nomlawuli oyedwa noma ngaphezulu abakwazi ukufinyelela lesi sizinda sokuphatha kuphela.
- Phatha kahle isikhala sediski kanye nezinqubomgomo zokugcina zedatha yedivayisi - Esikhundleni sokudala ukulungiselelwa kwesitoreji esisodwa kwawo wonke amadivayisi, izizinda zokulawula zikuvumela ukuthi usethe ukulungiselelwa okufanele kakhulu kweqembu ngalinye lamadivayisi. Lokhu kungaba usizo uma unamadivayisi amaningana, futhi kusuka eqenjini elilodwa lamadivayisi udinga ukugcina idatha unyaka, futhi kusukela kwenye - iminyaka engu-3. Ngokuvumelana nalokho, ungabeka indawo efanelekile yediski yeqembu ngalinye - eqenjini elikhiqiza inani elikhulu lamalogi, linikeze isikhala esiningi, futhi elinye iqembu - isikhala esincane.
I-FortiAnalyzer ingasebenza ngezindlela ezimbili - i-Analyzer ne-Collector. Imodi yokusebenza ikhethwa kuye ngezidingo zomuntu ngamunye kanye ne-topology yenethiwekhi.
Uma i-FortiAnalyzer isebenza ngemodi ye-Analyzer, isebenza njengesihlanganisi esiyinhloko samalogi kusuka kumqoqi welogi oyedwa noma ngaphezulu. Abaqoqi bamalogu bobabili i-FortiAnalyzer kumodi Yokuqoqwa namanye amadivayisi asekelwa i-FortiAnalyzer (uhlu lwabo luboniswe ngenhla emfanekisweni). Le ndlela yokusebenza isetshenziswa ngokuzenzakalelayo.
Uma i-FortiAnalyzer isebenza ngemodi Yokuqoqwa, iqoqa amalogi kwamanye amadivaysi bese iwadlulisela kwenye idivayisi, njenge-FortiAnalyzer kumodi ye-Analyzer noma ye-Syslog. Kumodi Yokuqoqwa, i-FortiAnalyzer ayikwazi ukusebenzisa izici eziningi, njengokubika nezixwayiso, njengoba inhloso yayo enkulu iwukuqoqa nokudlulisa izingodo.
Ukusebenzisa amadivaysi amaningi e-FortiAnalyzer ngezindlela ezihlukene kungakhuphula ukukhiqiza - I-FortiAnalyzer kumodi Yokuqoqa iqoqa amalogi kuwo wonke amadivayisi futhi iwathumele ku-Analyzer ukuze ihlaziywe, okuvumela i-FortiAnalyzer kumodi ye-Analyzer ukuthi ilondoloze izinsiza ezisetshenziswe ekutholeni izingodo ezivela kumadivayisi amaningi futhi igxile ngokuphelele ukucutshungulwa kwelogi.
I-FortiAnalyzer isekela ulimi lwesimemezelo lwe-SQL lokungena nokubika. Ngosizo lwayo, izingodo zethulwa ngendlela efundekayo. Futhi, kusetshenziswa lolu limi lombuzo, kwakhiwa imibiko ehlukahlukene. Amanye amakhono okubika adinga ulwazi oluthile lwe-SQL nolwazi lwesizindalwazi, kodwa amakhono akhelwe ngaphakathi e-FortiAnalyzer avame ukuqeda lolu lwazi. Sizophinde sibhekane nalokhu uma sibheka indlela yokubika.
I-FortiAnalyzer ngokwayo iza ngama-flavour amaningana. Lokhu kungaba idivayisi ehlukile yomzimba, umshini obonakalayo - ama-hypervisors ahlukene asekelwa, uhlu lwawo olugcwele lungatholakala . Ingatshalwa futhi kwingqalasizinda ekhethekile - i-AWS. I-Azure, i-Google Cloud nezinye. Futhi inketho yokugcina yi-FortiAnalyzer Cloud, isevisi yefu ehlinzekwa yi-Fortinet.
Esifundweni esilandelayo sizolungisa isakhiwo somsebenzi oqhubekayo. Ukuze ungaphuthelwa, bhalisela yethu .
Ungaphinda ulandele izibuyekezo ezinsizeni ezilandelayo:
Source: www.habr.com