Sanibonani! Uyemukelwa esifundweni sesishiyagalolunye sesifundo . Kuvuliwe Sihlole izindlela eziyisisekelo zokulawula ukufinyelela kwabasebenzisi ezinsizeni ezahlukahlukene. Manje sinomunye umsebenzi - sidinga ukuhlaziya ukuziphatha kwabasebenzisi kunethiwekhi, futhi silungise ukutholwa kwedatha engasiza ekuphenyweni kwezigameko ezihlukahlukene zokuphepha. Ngakho-ke, kulesi sifundo sizobheka indlela yokugawula nokubika. Kulokhu, sizodinga i-FortiAnalyzer, esiyifake ekuqaleni kwesifundo. Ithiyori edingekayo, kanye nesifundo sevidiyo, siyatholakala ngaphansi kokusikwa.
Ku-FotiGate, amalogi ahlukaniswe abe izinhlobo ezintathu: amalogi ethrafikhi, amalogi omcimbi kanye namalogi okuvikela. Bona-ke, bahlukaniswe ngama-subtypes.
Amalogi ethrafikhi aqopha ulwazi lokugeleza kwethrafikhi njengezicelo nezimpendulo, uma zikhona. Lolu hlobo luqukethe izinhlobo ezincane Phambili, Local kanye ne-Sniffer.
Uhlobo oluncane lwe-FortiGate luqukethe ulwazi olumayelana nethrafikhi i-FortiGate eyamukele noma yaliwe ngokusekelwe kuzinqubomgomo zokuvikela umlilo.
I-subtype yasendaweni iqukethe ulwazi mayelana nethrafikhi ngokuqondile ekhelini le-IP le-FortiGate kanye namakheli e-IP okuphathwa kuwo. Isibonelo, ukuxhumana kusixhumi esibonakalayo sewebhu se-FortiGate.
I-Sniffer subtype iqukethe amalogi ethrafikhi atholwe kusetshenziswa isibuko sethrafikhi.
Amalogi omcimbi aqukethe imicimbi yesistimu noma yokuphatha, njengokwengeza noma ukushintsha amapharamitha, ukusungula nokuphula imigudu ye-VPN, imicimbi yendlela eguquguqukayo, nokunye. Zonke izinhlobo ezincane zivezwe esithombeni esingezansi.
Futhi uhlobo lwesithathu izingodo zokuphepha. Lawa malogi aqopha izehlakalo ezihlobene nokuhlaselwa kwegciwane, ukuvakashela izinsiza ezingavunyelwe, ukusetshenziswa kwezinhlelo zokusebenza ezinqatshelwe, nokunye. Uhlu olugcwele luphinde luvezwe esithombeni esingezansi.
Ungakwazi ukugcina izingodo ezindaweni ezahlukene - kokubili ku-FortiGate ngokwayo nangaphandle kwayo. Ukugcina izingodo ku-FortiGate kuthathwa njengokungena kwasendaweni. Ngokuya ngedivayisi ngokwayo, izingodo zingagcinwa kumemori ye-flash yedivayisi noma ku-hard drive. Njengomthetho, amamodeli avela maphakathi ane-hard drive. Amamodeli ane-hard drive kulula kakhulu ukuwahlukanisa - kukhona iyunithi ekugcineni. Isibonelo, i-FortiGate 100E iza ngaphandle kwe-hard drive, futhi i-FortiGate 101E iza ne-hard drive.
Amamodeli amancane namadala ngokuvamile awanayo i-hard drive. Kulokhu, inkumbulo ye-flash isetshenziselwa ukurekhoda izingodo. Kodwa-ke, kufanelekile ukucabangela ukuthi ukubhala njalo izingodo kwimemori ye-flash kunganciphisa ukusebenza kahle kwayo nokuphila kwesevisi. Ngakho-ke, ukubhala izingodo kwimemori ekhanyayo kukhutshaziwe ngokuzenzakalelayo. Kunconywa ukuthi uyinike amandla emicimbini yokugawula kuphela ngenkathi uxazulula izinkinga ezithile.
Lapho uqopha ngokujulile izingodo, akunandaba ne-hard drive noma inkumbulo ye-flash, ukusebenza kwedivayisi kuzokwehla.
Kuyinto evamile ukugcina izingodo kumaseva akude. I-FortiGate ingagcina izingodo kumaseva e-Syslog, i-FortiAnalyzer noma i-FortiManager. Ungasebenzisa futhi isevisi yefu ye-FortiCloud ukugcina izingodo.
I-Syslog iyiseva yokugcina izingodo ezisuka kumadivayisi enethiwekhi.
I-FortiCloud iwukuphathwa kwezokuphepha okusekelwe kokubhaliselwe kanye nensizakalo yokugcina amalogi. Ngosizo lwayo, ungakwazi ukugcina amalogi ukude futhi wakhe imibiko efanele. Uma unenethiwekhi encane, isisombululo esihle kungaba ukusebenzisa le sevisi yefu kunokuthenga izinto zokusebenza ezengeziwe. Kukhona inguqulo yamahhala ye-FortiCloud efaka isitoreji selogi samasonto onke. Ngemva kokuthenga okubhaliselwe, izingodo zingagcinwa unyaka.
I-FortiAnalyzer ne-FortiManager bangamadivayisi angaphandle okugcina amalogi. Ngenxa yokuthi bonke banesistimu yokusebenza efanayo - i-FortiOS - ukuhlanganiswa kwe-FortiGate nalawa madivayisi alethi ubunzima.
Kodwa-ke, kunomehluko okufanele uqaphele phakathi kwamadivayisi we-FortiAnalyzer kanye ne-FortiManager. Injongo eyinhloko ye-FortiManager ukuphatha okumaphakathi kwamadivayisi amaningi e-FortiGate - ngakho-ke, inani lenkumbulo yokugcina amalogi ku-FortiManager lincane kakhulu kune-FortiAnalyzer (uma, kunjalo, siqhathanisa amamodeli asuka esigabeni samanani esifanayo).
Inhloso eyinhloko ye-FortiAnalyzer ukuqoqa nokuhlaziya izingodo. Ngakho-ke, sizophinde sicabangele ukusebenza nayo ngokusebenza.
Ithiyori yonke, kanye nengxenye esebenzayo, yethulwa kulesi sifundo sevidiyo:
Esifundweni esilandelayo, sizofaka izisekelo zokuphatha iyunithi ye-FortiGate. Ukuze ungaphuthelwa, landela izibuyekezo eziteshini ezilandelayo:
Source: www.habr.com