Sawubona bangane! Vuliwe sifunde izisekelo zokusebenza ngamalogi ku-FortiAnalyzer. Namuhla sizoqhubekela phambili futhi sibheke izici eziyinhloko zokusebenza ngemibiko: imiphi imibiko, ukuthi ihlanganisa ini, ungayihlela kanjani imibiko ekhona futhi udale emisha. Njengenjwayelo, okokuqala ithiyori encane, bese sizosebenza nemibiko ngokusebenza. Ngaphansi kokusikwa, kwethulwa ingxenye yethiyori yesifundo, kanye nesifundo sevidiyo esihlanganisa kokubili ithiyori nokwenza.
Inhloso eyinhloko yemibiko ukuhlanganisa amanani amakhulu edatha equkethwe kulogi futhi, ngokusekelwe kuzilungiselelo ezitholakalayo, ukwethula lonke ulwazi olutholiwe ngendlela efundekayo: ngesimo samagrafu, amathebula, amashadi. Isibalo esingezansi sibonisa uhlu lwemibiko efakwe ngaphambilini yamadivayisi we-FortiGate (akuyona yonke imibiko efanelekile kuwo, kodwa ngicabanga ukuthi lolu hlu seluvele lubonisa ukuthi ngisho nangaphandle kwebhokisi ungakha imibiko eminingi ethakazelisayo newusizo).
Kodwa imibiko yethula ulwazi oluceliwe kuphela ngendlela efundekayo - ayiqukethe noma yiziphi izincomo zesinyathelo esiqhubekayo ngezinkinga ezitholiwe.
Izingxenye eziyinhloko zemibiko ngamashadi. Umbiko ngamunye uneshadi elilodwa noma amaningi. Amashadi anquma ukuthi yiluphi ulwazi okufanele lukhishwe kulogi nokuthi kufanele lwethulwe ngayiphi ifomethi. Amasethi edatha anesibopho sokukhipha ulwazi - KHETHA imibuzo kusizindalwazi. Kumasethi edatha lapho kunqunywa khona ngokunembile ukuthi yiluphi uhlobo lolwazi oludinga ukukhishwa. Ngemuva kokuvela kwedatha edingekayo njengomphumela wesicelo, izilungiselelo zefomethi (noma isibonisi) zisetshenziswa kuzo. Ngenxa yalokho, idatha etholiwe idwetshwa kumathebula, amagrafu noma amashadi ezinhlobo ezihlukahlukene.
Umbuzo othi KHETHA usebenzisa imiyalo ehlukahlukene ebeka imibandela ukuze ulwazi lubuyiswe. Okubaluleke kakhulu okufanele kucatshangelwe ukuthi le miyalo kufanele isetshenziswe ngokulandelana okuthile, ngalolo hlelo ibhalwe ngezansi:
FROM ukuphela komyalo odingekayo embuzweni othi KHETHA. Ibonisa uhlobo lwamalogi okumele kukhishwe ulwazi kuwo;
LAPHO - usebenzisa lo myalo, izimo zamalogi zisethiwe (isibonelo, igama elithile lesicelo / ukuhlasela / igciwane);
GROUP BY - lo myalo ikuvumela ukuthi uqoqe imininingwane ngekholomu eyodwa noma ngaphezulu ozithakaselayo;
UKUHLELA NGO - usebenzisa lo myalo, ungakwazi uku-oda ukukhishwa kolwazi ngomugqa;
LIMIT - Ikhawulela inani lamarekhodi abuyiswe umbuzo.
I-FortiAnalyzer iqukethe izifanekiso zombiko ezichazwe ngaphambilini. Izifanekiso ziyilokho okubizwa ngokuthi isakhiwo sombiko β ziqukethe umbhalo wombiko, amashadi awo kanye namamakhro. Usebenzisa izifanekiso, ungakha imibiko emisha uma kudingeka izinguquko ezincane kuleyo echazwe ngaphambilini. Nokho, imibiko efakwe ngaphambilini ayikwazi ukuhlelwa noma ukususwa - ungakwazi ukuyifanisa futhi wenze izinguquko ezidingekayo ekhophini. Kungenzeka futhi ukudala izifanekiso zakho zombiko.
Kwesinye isikhathi ungahlangabezana nalesi simo esilandelayo: umbiko ochazwe ngaphambilini uhambisana nomsebenzi, kodwa hhayi ngokuphelele. Mhlawumbe udinga ukwengeza ulwazi oluthile kuyo, noma, ngokuphambene, uyisuse. Kulokhu, kunezinketho ezimbili: hlanganisa futhi ushintshe isifanekiso, noma umbiko ngokwawo. Lapha udinga ukuncika ezicini eziningana.
Izifanekiso ziyisakhiwo sombiko, aqukethe amashadi nombhalo wombiko, akukho okunye. Imibiko ngokwayo, futhi, ngaphezu kwalokho okubizwa ngokuthi "isakhiwo", iqukethe imingcele yombiko ehlukahlukene: ulimi, ifonti, umbala wombhalo, isikhathi sesizukulwane, ukuhlunga ulwazi, njalonjalo. Ngakho-ke, uma udinga kuphela ukwenza izinguquko kusakhiwo sombiko, ungasebenzisa izifanekiso. Uma ukulungiselelwa okwengeziwe kombiko kudingekile, ungahlela umbiko ngokwawo (ngokunembile, ikhophi yawo).
Ngokusekelwe kuzifanekiso, ungakha imibiko eminingana yohlobo olufanayo, ngakho-ke uma kufanele wenze imibiko eminingi efana nomunye nomunye, khona-ke kungcono ukusebenzisa izifanekiso.
Esimeni lapho izifanekiso ezifakwe ngaphambilini nemibiko ingahambisani nawe, ungakha kokubili isifanekiso esisha nombiko omusha.
Futhi ku-FortiAnalyzer, kungenzeka ukuthi ulungiselele ukuthumela imibiko kubaphathi ngabanye nge-imeyili noma ukuyilayisha kumaseva angaphandle. Lokhu kwenziwa kusetshenziswa indlela yePhrofayela Yokukhipha. Amaphrofayili Okukhiphayo Ahlukene amisiwe kusizinda ngasinye sokuphatha. Lapho ulungiselela Iphrofayili Yokukhiphayo, imingcele elandelayo iyachazwa:
- Amafomethi emibiko ethunyelwe - PDF, HTML, XML noma CSV;
- Indawo lapho kuzothunyelwa khona imibiko. Lena kungaba i-imeyili yomlawuli (kulokhu, udinga ukubopha i-FortiAnalyzer kuseva yemeyili, sikufake esifundweni sokugcina). Kungaba futhi iseva yefayela yangaphandle - FTP, SFTP, SCP;
- Ungakhetha ukugcina noma ukususa imibiko yendawo esele kudivayisi ngemva kokudlulisa.
Uma kunesidingo, kungenzeka ukusheshisa ukukhiqizwa kwemibiko. Ake sicabangele izindlela ezimbili:
Lapho ikhiqiza umbiko, i-FortiAnalyzer yakha amashadi kusuka kudatha yenqolobane ye-SQL ehlanganiswe ngaphambili eyaziwa ngokuthi i-hcache. Uma idatha ye-hcache ingadalwanga lapho umbiko uqhutshwa, isistimu kufanele iqale ukudala i-hcache bese yakhe umbiko. Lokhu kwandisa isikhathi sokukhiqiza umbiko. Kodwa-ke, uma amalogi amasha ombiko engatholakali, lapho umbiko uvuselelwa kabusha, isikhathi sokuwukhiqiza sizoncishiswa kakhulu, njengoba idatha ye-hcache isivele ihlanganisiwe.
Ukuze uthuthukise ukusebenza kokukhiqizwa kombiko, ungavumela ukukhiqizwa kwe-hcache okuzenzakalelayo kuzilungiselelo zombiko. Kulokhu, i-hcache ibuyekezwa ngokuzenzakalelayo lapho amalogi amasha efika. Isibonelo sokusetha sikhonjiswe esithombeni esingezansi.
Le nqubo isebenzisa inani elikhulu lezinsiza zesistimu (ikakhulukazi imibiko edinga isikhathi eside ukuqoqa idatha), ngakho ngemva kokuyivula, udinga ukuqapha isimo se-FortiAnalyzer: kungakhathaliseki ukuthi umthwalo ukhuphuke kakhulu, kungakhathaliseki ukuthi kukhona okubalulekile. ukusetshenziswa kwezinsiza zesistimu. Uma kwenzeka i-FortiAnalyzer ingakwazi ukubhekana nomthwalo, kungcono ukukhubaza le nqubo.
Kufanele futhi kuqashelwe ukuthi ukubuyekezwa okuzenzakalelayo kwedatha ye-hcache kunikwe amandla ngokuzenzakalela kumibiko ehleliwe.
Indlela yesibili yokusheshisa ukwenziwa kombiko ukuhlanganisa:
Uma imibiko efanayo (noma efanayo) yenzelwa amadivayisi ahlukene e-FortiGate (noma amanye ama-Fortinet), ungasheshisa kakhulu inqubo yokukhiqiza ngokuwahlanganisa. Imibiko yokuqoqa inganciphisa inani lamathebula e-hcache futhi isheshise izikhathi zokugcinwa kwesikhashana okuzenzakalelayo, okuholela ekukhiqizeni umbiko ngokushesha.
Esibonelweni esiboniswe emfanekisweni ongezansi, imibiko equkethe iyunithi yezinhlamvu ethi Security_Report emagameni awo iqoqwa ngepharamitha ye-ID Yedivayisi.
Isifundo sevidiyo sethula izinto zethiyori okukhulunywe ngazo ngenhla, kanye nezici ezingokoqobo zokusebenza ngemibiko - kusukela ekudaleni amasethi akho edatha namashadi, izifanekiso nemibiko kuya ekusetheni imibiko kubaphathi. Jabulela ukubuka!
Esifundweni esilandelayo, sizobheka izici ezihlukahlukene zokuphatha i-FortiAnalyzer, kanye nohlelo lwayo lwamalayisense. Ukuze ungaphuthelwa, bhalisela yethu .
Ungaphinda ulandele izibuyekezo ezinsizeni ezilandelayo:
Source: www.habr.com