CISCO malitere site na ọkụ ọkụ na-arụ ọrụ mbido mbụ
Nkọwapụta
- Aha ngwaahịa: Cisco Firepower
- Ụdị ngwaahịa: Nchekwa netwọkụ na njikwa okporo ụzọ
- Nhọrọ nkenye: Nzube ejiri rụọ ọrụ ma ọ bụ ngwọta ngwanrọ
- Interface njikwa: Ihe nlere anya ihe osise
Ntuziaka ojiji ngwaahịa
Ịwụnye ma na-eme ntọala mbụ na ngwa anụ ahụ:
Soro usoro ndị a ka ịtọlite ebe a na-ahụ maka njikwa ọkụ na ngwa anụ ahụ:
- Rụtụ aka na ntuziaka mmalite maka ntuziaka nwụnye zuru ezu.
Na-ebunye ngwa ngwa mebere
Ọ bụrụ na ibugharị ngwa ngwa, soro usoro ndị a:
- Kpebie nyiwe mebere akwadoro maka ebe njikwa na ngwaọrụ.
- Nyefee ụlọ ọrụ njikwa ọkụ ọkụ na gburugburu igwe ojii na nkeonwe.
- Nyefee ngwaọrụ mebere maka ngwa gị na gburugburu igwe ojii akwadoro.
Ịbanye na nke mbụ:
N'ime usoro nbanye mbụ maka ebe njikwa ọkụ ọkụ:
- Jiri nzere ndabara wee banye (admin/Admin123).
- Gbanwee paswọọdụ wee tọọ mpaghara oge.
- Tinye akwụkwọ ikike ma debanye aha ngwaọrụ ejirila.
Ịtọlite Atumatu na Nhazi:
Iji view data dị na dashboard, hazie amụma ndị bụ isi:
- Hazie amụma ndị bụ isi maka nchekwa netwọkụ.
- Maka nhazi dị elu, rụtụ aka na ntuziaka onye ọrụ zuru oke.
Ajụjụ:
Ajụjụ: Kedu ka m ga-esi nweta ebe njikwa ọkụ ọkụ web interface?
A: Ị nwere ike ịnweta web interface site na itinye adreesị IP nke Management Center na gị web ihe nchọgharị.
Na-amalite na Firepower
Cisco Firepower bụ ngwa mgbakwunye nke nchekwa netwọkụ yana ngwaahịa njikwa okporo ụzọ, ebusara ma ọ bụ n'elu ikpo okwu ejiri rụọ ọrụ ma ọ bụ dịka ngwọta ngwanrọ. Emebere sistemụ ahụ ka ọ nyere gị aka ijikwa okporo ụzọ netwọkụ n'ụzọ kwekọrọ na amụma nchekwa nke nzukọ gị — ntuziaka gị maka ichekwa netwọkụ gị.
N'ime mbugharị a na-ahụkarị, ọtụtụ ngwaọrụ ejiri njikwa okporo ụzọ arụnyere na ngalaba netwọk na-enyocha okporo ụzọ maka nyocha wee kọọrọ onye njikwa:
- Ebe njikwa ọkụ ọkụ
- Onye njikwa ngwaọrụ ọkụ
Njikwa Ngwaọrụ Nchekwa Ada Ada (ASDM)
Ndị njikwa na-enye njikwa njikwa etiti nwere interface onye ọrụ eserese nke ị nwere ike iji rụọ ọrụ nhazi, njikwa, nyocha na ịkọ akụkọ.
Ntuziaka a na-elekwasị anya na Ụlọ Ọrụ Njikwa ọkụ ọkụ na-ahụ maka ngwa. Maka ozi gbasara Njikwa Ngwaọrụ Firepower ma ọ bụ ASA nwere Ọrụ FirePOWER ejiri ASDM mee ihe, hụ ntuziaka maka ụzọ njikwa ndị ahụ.
- Cisco Firepower Threat Defence Guide Configuration Guide for Firepower Device Manager
- ASA nwere ntuziaka nhazi njikwa mpaghara ọrụ FirePOWER
- Mmalite ngwa ngwa: Ntọala ntọala, na ibe 2
- Ngwaọrụ ọkụ, na ibe 5
- Atụmatụ ike ọkụ, na ibe 6
- Ịgbanwe ngalaba na ebe njikwa ọkụ ọkụ, na ibe 10
- NchNhr Okwu, na ibe 11
- Ịkekọrịta data na Cisco, na ibe 13
- Enyemaka Ọnlaịnụ Firepower, Otu esi eme, na akwụkwọ, na ibe 13
- Mgbakọ adreesị IP sistemụ ọkụ, na ibe 16
- Ihe mgbakwunye, na ibe 16
Ngwa ngwa ngwa: Ntọala ntọala
Ntọala njirimara Firepower dị ike ma na-agbanwe agbanwe iji kwado nhazi ntọala na nke dị elu. Jiri ngalaba ndị a ka ịtọlite ebe a na-ahụ maka njikwa ọkụ ngwa ngwa yana ngwaọrụ ejiri ya malite ịchịkwa na nyochaa okporo ụzọ.
Ịwụnye ma na-eme ntọala mbụ na ngwa anụ ahụ
Usoro
Wụnye ma rụọ nhazi mbụ na ngwa anụ ahụ niile site na iji akwụkwọ maka ngwa gị:
- Ebe njikwa ọkụ ọkụ
Cisco Firepower Center Ntuziaka mmalite maka ụdị ngwaike gị, dị na ya http://www.cisco.com/go/firepower-mc-install - Ngwaọrụ ejisiri ike egwu egwu egwu
Ihe dị mkpa Gbaghara akwụkwọ njikwa ngwaọrụ ọkụ na ibe ndị a.
- Cisco Firepower 2100 Series mmalite Guide
- Cisco Firepower 4100 Ntuziaka mmalite
- Cisco Firepower 9300 Ntuziaka mmalite
- Cisco Firepower Threat Defense maka ASA 5508-X na ASA 5516-X Iji Firepower Management Center Ntuziaka mmalite ngwa ngwa.
- Cisco Firepower Threat Defense maka ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, na ASA 5555-X Iji Firepower Management Center Ntuziaka mmalite ngwa ngwa.
- Cisco Firepower Threat Defense maka ISA 3000 Iji Firepower Management Center Ndenye mmalite mmalite
Ngwa ndị ejisiri ike nke ọma
- Cisco ASA Firepower Module Ntuziaka mmalite ngwa ngwa
- Cisco Firepower 8000 Series mmalite Guide
- Cisco Firepower 7000 Series mmalite Guide
Na-ebunye ngwa ngwa mebere
Soro usoro ndị a ma ọ bụrụ na ibunye gị gụnyere ngwa ngwa mebere. Jiri ụzọ akwụkwọ wee chọta
akwụkwọ ndị e depụtara n'okpuru: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/ firepower-roadmap.html.
Usoro
- Kwụpụ 1 Kpebie nyiwe mebere akwadoro ị ga-eji maka ebe njikwa na ngwaọrụ (ndị a nwere ike ọ gaghị abụ otu). Hụ ntuziaka ndakọrịta ọkụ ọkụ Cisco.
- Nzọụkwụ 2 Nyefee ụlọ ọrụ njikwa ọkụ ọkụ na gburugburu igwe ojii na-akwado ọha na nkeonwe. Hụ, Cisco Secure Firewall Management Center Virtual Mmalite Ntuziaka.
- Kwụpụ 3 Nyefee ngwaọrụ mebere maka ngwa gị na gburugburu igwe ojii nke Ọha na nkeonwe akwadoro. Maka nkọwa, lee akwụkwọ ndị a.
- NGIPSv na-agba ọsọ na VMware: Cisco Firepower NGIPSv Ntuziaka mmalite ngwa ngwa maka VMware
- Cisco Firepower Egwu Nchekwa maka ASA 5508-X na ASA 5516-X Iji Njikwa ọkụ
Ntuziaka mmalite ngwa ngwa etiti
- Firepower Threat Defence Virtual na-agba ọsọ na gburugburu igwe ojii na nkeonwe, hụ Cisco Secure Firewall Threat Defence Virtual Start Start Guide, Version 7.3.
Ịbanye maka oge mbụ
Tupu ịmalite
- Kwadebe ngwa ngwa gị dị ka akọwara na Ịwụnye na Ịrụ Mbido Mbido na Ngwa Anụ ahụ, na ibe 2 ma ọ bụ Deploying Virtual Appliances, na ibe 3.
Usoro
- Nzọụkwụ 1 Banye na ebe njikwa ọkụ ọkụ web interface na admin dị ka aha njirimara na Admin123 dị ka paswọọdụ. Gbanwee paswọọdụ maka akaụntụ a dịka akọwara na Ntuziaka mmalite ngwa ngwa maka ngwa ngwa gị.
- Kwụpụ 2 Tọọ mpaghara oge maka akaụntụ a dị ka akọwara na Ịtọ Mpaghara Oge Akpọpụtara Gị.
- Kwụpụ 3 Tinye akwụkwọ ikike dị ka akọwara na Inye ikike Sistemụ ike ọkụ.
- Kwụpụ 4 Debanye aha ngwaọrụ ejisiri dị ka akọwara na Tinye ngwaọrụ na FMC.
- Nzọụkwụ 5 Hazie ngwaọrụ gị jisiri dị ka akọwara na:
- Okwu Mmalite na ntinye na nhazi ngwaọrụ IPS, iji hazie oghere ma ọ bụ inline interface na 7000 Series ma ọ bụ 8000 Series ngwaọrụ.
- Ihe Ntụgharịview maka Firepower Threat Defence, ka hazie ụzọ transperent ma ọ bụ chụpụrụ na ngwaọrụ Firepower Threat Defense
- Ihe Ntụgharịview maka Firepower Threat Defense, ka hazie interfaces na Firepower Threat Defence ngwaọrụ
Ihe a ga-eme ọzọ
- Malite ịchịkwa na nyochaa okporo ụzọ site n'ịhazi usoro iwu ndị bụ isi dị ka akọwara na Setting Up Basic Policy and Configuration, na ibe 4.
Ịtọlite ụkpụrụ na nhazi ntọala
Ị ga-ahazi ma bufee amụma ndị bụ isi ka ị hụ data na dashboard, Context Explorer, na tebụl mmemme.
Nke a abụghị mkparịta ụka zuru oke nke amụma ma ọ bụ ikike njirimara. Maka ntụzịaka maka njirimara ndị ọzọ yana nhazi ndị ka dị elu, lee ntuziaka ndị ọzọ.
Rịba ama
Tupu ịmalite
- Banye n'ime web interface, tọọ mpaghara oge gị, tinye akwụkwọ ikike, debanye aha ngwaọrụ, ma hazie ngwaọrụ dịka akọwara na Nbanye maka oge mbụ, na ibe 3.
Usoro
- Kwụpụ 1 Hazie amụma njikwa ohere dị ka akọwara na Ịmepụta Amụma Njikwa Nweta Basic.
- N'ọtụtụ oge, Cisco na-atụ aro ka ịtọba amụma ntinye nchekwa na Njikọta dị ka ihe ndabara gị. Maka ozi ndị ọzọ, lee Amụma Amụma Akaụntụ Nweta yana nyocha netwọkụ na-enye usoro na amụma mbubata.
- N'ọtụtụ oge, Cisco na-atụ aro ịme ndekọ njikọ iji gboo mkpa nchekwa na nnabata nke nzukọ gị. Tụlee okporo ụzọ dị na netwọk gị mgbe ị na-ekpebi njikọ ndị ị ga-abanye ka ị ghara ịkwanye ihe ngosi gị ma ọ bụ mebie usoro gị. Maka ozi ọzọ, hụ Banyere Njikọ njikọ.
- Nzọụkwụ 2 Tinye atumatu ahụike ndabara nke sistemụ wetara dị ka akọwara na itinye amụma ahụike.
- Nzọụkwụ 3 Hazie ụfọdụ ntọala nhazi sistemụ gị:
- Ọ bụrụ na ịchọrọ ịhapụ njikọ mbata maka ọrụ (maka example, SNMP ma ọ bụ syslog), gbanwee ọdụ ụgbọ mmiri dị na ndepụta nnweta dị ka akọwara na Hazie Ndepụta Nweta.
- Ghọta ma tụlee ịdezi oke mmemme nchekwa data gị dị ka akọwara na Ịhazi Oke Ihe Omume Database.
- Ọ bụrụ na ịchọrọ ịgbanwe asụsụ ngosi, dezie ntọala asụsụ dị ka akọwara na Tọọ Asụsụ maka Web Interface.
- Ọ bụrụ na nzukọ gị na-amachibido ohere netwọk site na iji ihe nkesa proxy ma ị hazieghị ntọala proxy n'oge nhazi mbụ, dezie ntọala proxy gị dịka akọwara na Megharịa FMC Management Interfaces.
- Kwụpụ 4 Hazie amụma nchọpụta netwọkụ gị dịka akọwara na Configuring the Network Discovery Policy. Na ndabara, amụma nchọpụta netwọkụ na-enyocha okporo ụzọ niile dị na netwọkụ gị. N'ọtụtụ oge, Cisco na-atụ aro igbochi nchọpụta na adreesị ndị dị na RFC 1918.
- Nzọụkwụ 5 Tụlee ịhazi ntọala ndị ọzọ a na-ahụkarị:
- Ọ bụrụ na ịchọghị igosipụta mmapụta etiti ozi, gbanyụọ amamọkwa dịka akọwara na Omume Ịhazi ọkwa.
- Ọ bụrụ na ịchọrọ ịhazi ụkpụrụ ndabara maka mgbanwe sistemụ, ghọta ojiji ha dị ka akọwara na Ngbanwe agbanwe.
- Ọ bụrụ na ịchọrọ imelite ọdụ data Geolocation, jiri aka gị kwalite ma ọ bụ n'usoro ahaziri dịka akọwara na Melite Database Geolocation.
- Ọ bụrụ na ịchọrọ ịmepụta akaụntụ njirimara agbakwunyere na mpaghara iji nweta FMC, lee Tinye onye ọrụ ime na Web Interface.
- Ọ bụrụ na ịchọrọ iji LDAP ma ọ bụ RADIUS nkwenye mpụga iji nye ohere ịnweta FMC, hụ Hazie ENyocha xternal.
- Nzọụkwụ 6 Tinye mgbanwe nhazi; hụ Deploy nhazi mgbanwe.
Ihe a ga-eme ọzọ
- Review ma tulee ịhazi atụmatụ ndị ọzọ akọwara na njirimara ọkụ ọkụ, na ibe 6 na akwụkwọ ntuziaka ndị ọzọ.
Ngwaọrụ ọkụ
N'ebe a na-ebunye ya, ọtụtụ ngwaọrụ na-ejizi okporo ụzọ na-akọ na otu Firepower Management Center, nke ị na-eji arụ ọrụ nhazi, njikwa, nyocha na ịkọ akụkọ.
Ngwa kpochapụwo
Ngwa kpochapụwo na-arụ ngwanrọ IPS (NGIPS) na-esote ọgbọ. Ha gụnyere:
- Firepower 7000 usoro na Firepower 8000 usoro anụ ahụ ngwaọrụ.
- NGIPSv, kwadoro na VMware.
- ASA nwere Ọrụ FirePOWER, dị na ngwaọrụ usoro ASA 5500-X họrọ (gụnyekwara ISA 3000). ASA na-enye usoro usoro ahịrị mbụ, wee nyefee okporo ụzọ gaa na modul ASA FirePOWER maka nchọpụta na njikwa ohere.
Rịba ama na ị ga-eji ASA CLI ma ọ bụ ASDM hazie atụmatụ dabere na ASA na ngwaọrụ ASA FirePOWER. Nke a na-agụnye nnweta dị elu nke ngwaọrụ, ịgbanwee, ntụgharị, VPN, NAT, na ndị ọzọ.
Ị nweghị ike iji FMC hazie ASA FirePOWER interfaces, na FMC GUI anaghị egosipụta ASA interfaces mgbe ASA FirePOWER na-ebugharị na ọnọdụ ọdụ ụgbọ mmiri SPAN. Ọzọkwa, ịnweghị ike iji FMC mechie, malitegharịa, ma ọ bụ jikwaa usoro ASA FirePOWER.
Ngwa nchekwa ihe iyi egwu ọkụ
Ngwa nchekwa egwu ọkụ ọkụ (FTD) bụ firewall ọgbọ na-abịa (NGFW) nwekwara ikike NGIPS. NGFW na njiri mara ikpo okwu gụnyere saịtị na saịtị na ohere VPN, ụzọ siri ike, NAT, nchịkọta, yana nkwalite ndị ọzọ na nyocha ngwa na njikwa ohere.
FTD dị n'ụdị ikpo okwu anụ ahụ na nke mebere.
Ndakọrịta
Maka nkọwa gbasara ndakọrịta njikwa-ngwaọrụ, gụnyere sọftụwia dakọtara na ụdị ngwaọrụ akọwapụtara, gburugburu ebe nnabata mebere, sistemụ arụmọrụ, na ihe ndị ọzọ, lee Cisco Firepower Release Notes na Cisco Firepower Compatibility Guide.
Njirimara ọkụ ọkụ
Tebụl ndị a depụtara ụfọdụ atụmatụ ọkụ ọkụ na-ejikarị.
Ngwa na njikwa sistemụ
Ka ịchọta akwụkwọ ndị ị na-amaghị, hụ: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ọ bụrụ na ị chọrọ… | Hazie… | Dị ka akọwara na… |
Jikwaa akaụntụ onye ọrụ maka ịbanye na ngwa ọkụ ọkụ gị | Nyochaa ike ọkụ | Banyere Akaụntụ Onye ọrụ |
Nyochaa ahụike nke ngwaike sistemụ na ngwanrọ | Amụma nlekota ahụike | Banyere nlekọta ahụike |
Kwado data na ngwa gị | Ndabere ma weghachite | Ndabere na weghachi |
Nweta nkwalite gaa na ụdị ọkụ ọkụ ọhụrụ | Mmelite sistemụ | Cisco Firepower Management Ntuziaka nkwalite etiti, ụdị 6.0–7.0 |
Tọọ ntọala ngwa ngwa gị | Weghachite na ndabara ụlọ ọrụ (nlegharị anya) | Nke Cisco Firepower nkwalite Center Management Ntuziaka, Ụdị 6.0–7.0, maka ndepụta njikọ ntuziaka maka ịrụ nrụnye ọhụrụ. |
Melite VDB, mmelite iwu ntinye, ma ọ bụ GeoDB na ngwa gị | Mmelite nchekwa data adịghị ike (VDB), mmelite iwu intrusion, ma ọ bụ mmelite Geolocation Database (GeoDB) | Mmelite sistemụ |
Ọ bụrụ na ị chọrọ… | Hazie… | Dị ka akọwara na… |
Tinye akwụkwọ ikike iji were advantage nke ọrụ na-achịkwa ikike | Omuma ma ọ bụ Smart ikikere | Banyere ikikere ọkụ ọkụ |
Gbaa mbọ hụ na arụ ọrụ ngwa na-aga n'ihu | Ngwa dị elu na/ma ọ bụ ụlọ ọrụ njikwa ọkụ dị elu dị elu | Ihe dị ka 7000 na 8000 Series Device High Nnweta
Banyere Firepower Threat Defence High Availability Ihe gbasara Ebe njikwa ọkụ ọkụ dị elu |
Jikọta akụrụngwa nhazi nke ọtụtụ ngwaọrụ 8000 Series | Ngwunye ngwaọrụ | Banyere ngwugwu ngwaọrụ |
Hazie ngwaọrụ ị ga-esi na-ebugharị okporo ụzọ n'etiti oghere abụọ ma ọ bụ karịa | Ntugharị | Virtual Routers
Ntugharị gafereview maka nchekwa nchekwa egwu ọkụ ọkụ |
Hazie mgbanwe ngwungwu n'etiti netwọk abụọ ma ọ bụ karịa | Ịgbanwe ngwaọrụ | Mgbanwe nke ọma
Hazie Njikọ Njikọ Bridge |
Tụgharịa asụsụ nkeonwe ka ọ bụrụ adreesị ọha maka njikọ ịntanetị | Ntụgharị asụsụ netwọkụ (NAT) | Nhazi amụma NAT
Ntụgharị asụsụ netwọkụ (NAT) maka nchekwa egwu egwu ọkụ |
Mepụta ọwara echekwara n'etiti Firepower Threat Defense ma ọ bụ ngwaọrụ 7000/8000 Series | Saịtị-na-saịtị mebere netwọọdụ nzuzo (VPN) | VPN gafereview maka nchekwa nchekwa egwu ọkụ ọkụ |
Mepụta ọwara echedoro n'etiti ndị ọrụ dịpụrụ adịpụ yana iyi egwu ọkụ ọkụ ejirila
Ngwa nchekwa |
Nnweta VPN dị anya | VPN gafereview maka nchekwa nchekwa egwu ọkụ ọkụ |
Oghere onye ọrụ na ngwaọrụ ejisiri, nhazi na mmemme | Multitenancy iji ngalaba | Okwu Mmalite nke Multitenancy Iji ngalaba |
View ma jikwaa ngwa
nhazi site na iji onye ahịa API REST |
API REST na REST API
Explorer |
Mmasị API REST
Ọkụ ọkụ REST API Ntuziaka mmalite ngwa ngwa |
dozie nsogbu | N/A | Ịchọpụta nsogbu Sistemu |
Nnweta dị elu yana njirimara scalability site na ikpo okwu
Nhazi dị elu (mgbe ụfọdụ a na-akpọ failover) na-eme ka arụmọrụ na-aga n'ihu. Nhazi kpọkọtara na kpọkọtara ọnụ na-achịkọta ọtụtụ ngwaọrụ ọnụ dị ka otu ngwaọrụ ezi uche dị na ya, na-enweta mmụba na ntinye aka.
Platform | Nnweta dị elu | Ịchịkọta | Nkwakọba |
Ebe njikwa ọkụ ọkụ | Ee
Ewezuga MC750 |
— | — |
Ebe njikwa ọkụ ọkụ mebere | — | — | — |
|
Ee | — | — |
Nchekwa iyi egwu ọkụ:
|
Ee | Ee | — |
Nchekwa iyi egwu ọkụ ọkụ:
|
Ee | — | — |
Ihe nchekwa nchekwa ọkụ ọkụ (igwe ojii ọha):
|
— | — | — |
|
Ee | — | — |
|
Ee | — | Ee |
ASA Ọkụ | — | — | — |
NGIPSv | — | — | — |
Isiokwu ndị emetụtara
Ihe dị ka 7000 na 8000 Series Device High Nnweta
Banyere Firepower Threat Defence High Availability
Ihe gbasara Ebe njikwa ọkụ ọkụ dị elu
Atụmatụ maka ịchọpụta, igbochi na ịhazi ihe egwu nwere ike ime
Ka ịchọta akwụkwọ ndị ị na-amaghị, hụ: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ọ bụrụ na ị chọrọ… | Hazie… | Dị ka akọwara na… |
Nyochaa, banye ma mee ihe na okporo ụzọ netwọkụ | Amụma njikwa ohere, nne na nna nke ọtụtụ amụma ndị ọzọ | Okwu mmalite na njikwa nnweta |
Gbochie ma ọ bụ nyochaa njikọ na ma ọ bụ site na adreesị IP, URLs, na/ma ọ bụ aha ngalaba | Ọgụgụ isi nchekwa n'ime amụma njikwa ohere gị | Banyere ọgụgụ isi nchekwa |
Jikwaa websaịtị ndị ọrụ na netwọk gị nwere ike ịnweta | URL nzacha n'ime iwu amụma gị | URL Nzacha |
Nyochaa okporo ụzọ ọjọọ na mbanye na netwọk gị | Amụma mbubata | Usoro iwu mbubata |
Gbochie okporo ụzọ ezoro ezo na-enweghị nyocha
Nyochaa okporo ụzọ ezoro ezo ma ọ bụ mebie |
Amụma SSL | Amụma SSL agwụlaview |
Hazie nyocha miri emi ka okporo ụzọ kpuchiri ekpuchi ma kwalite arụmọrụ site na iji ụzọ ọsọ ọsọ | Amụma prefilter | Banyere prefiltering |
Ọnụọ machita okporo ụzọ netwọkụ nke enyere ma ọ bụ ntụkwasị obi site na njikwa ohere | Iwu Ogo nke Ọrụ (QoS). | Banyere amụma QoS |
Kwe ka ma ọ bụ gbochie files (gụnyere malware) na netwọk gị | File/ amụma malware | File Amụma na Nchekwa Malware |
Hazie data sitere na isi mmalite ọgụgụ isi iyi egwu | Onye nduzi ọgụgụ isi nke Cisco (TID) | Onye isi ọgụgụ isi iyi egwuview |
Hazie njirimara na-agafe agafe ma ọ bụ na-arụsi ọrụ ike iji mee ka onye ọrụ mara na njikwa onye ọrụ | Mmata onye ọrụ, njirimara onye ọrụ, amụma njirimara | Banyere isi mmalite njirimara onye ọrụ gbasara amụma njirimara |
Chịkọta ndị ọbịa, ngwa na data onye ọrụ site na okporo ụzọ na netwọkụ gị iji mee ka onye ọrụ mara | Amụma nchọpụta netwọkụ | gafereview: Atumatu nchọpụta netwọkụ |
Jiri ngwaọrụ gafere sistemu ọkụ ọkụ gị iji nakọta na nyochaa data gbasara okporo ụzọ netwọkụ yana ihe egwu nwere ike ime | Njikọ na ngwaọrụ mpụga | Nyocha mmemme Iji Ngwa Mpụga |
Mee nchọpụta na njikwa ngwa | Ihe nchọpụta ngwa | gafereview: Nchọpụta ngwa |
dozie nsogbu | N/A | Ịchọpụta nsogbu Sistemu |
Njikota na Ngwa Mpụga
Ka ịchọta akwụkwọ ndị ị na-amaghị, hụ: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ọ bụrụ na ị chọrọ… | Hazie… | Dị ka akọwara na… |
Bido mmezi na-akpaghị aka mgbe ọnọdụ dị na netwọk gị mebiri iwu emetụtara | Ndozigharị | Okwu Mmalite na Ndozigharị
Ntuziaka API Mgbanwe Sistemu Ọkụ |
Nyefee data mmemme sitere na ebe njikwa ọkụ ọkụ gaa na a
ngwa ahịa mepere emepe |
eStreamer ntinye | EStreamer Server gụgharia
Ntuziaka njikọ eStreamer Sistemụ ọkụ ọkụ |
Tebụl nchekwa data ajụjụ na ebe njikwa ọkụ ọkụ na-eji onye ahịa nke atọ | Nweta nchekwa data mpụga | Ntọala nnweta nchekwa data mpụga
Ntuziaka nnweta nchekwa data Sistemu ọkụ |
Melite data nchoputa site na ibubata data sitere na isi mmalite ndị ọzọ | Ntinye nnabata | Data ntinye nnabata
Ntuziaka API ntinye ndị ọbịa Sistemu ọkụ |
Nyochaa mmemme site na iji ngwaọrụ nchekwa data ihe omume mpụga yana data ndị ọzọ
akụrụngwa |
Mmekọrịta na ngwaọrụ nyocha ihe omume mpụga | Nyocha mmemme Iji Ngwa Mpụga |
dozie nsogbu | N/A | Ịchọpụta nsogbu Sistemu |
Ịgbanwe ngalaba na Ebe njikwa ọkụ ọkụ
N'ime ntinye multidomain, ohere ọrụ onye ọrụ na-ekpebi ngalaba ndị ọrụ nwere ike ịnweta yana ohere ndị onye ọrụ nwere n'ime ngalaba ndị ahụ ọ bụla. Ị nwere ike ijikọ otu akaụntụ onye ọrụ na ọtụtụ ngalaba wee kenye ohere dị iche iche maka onye ọrụ ahụ na ngalaba ọ bụla. Maka example, ị nwere ike ekenye onye ọrụ
ohere ịgụ naanị na ngalaba zuru ụwa ọnụ, mana ikike onye nchịkwa na ngalaba agbụrụ.
Ndị ọrụ jikọtara ya na ọtụtụ ngalaba nwere ike ịgbanwe n'etiti ngalaba n'ime otu web interface nnọkọ.
N'okpuru aha njirimara gị na toolbar, sistemụ na-egosiputa osisi nke ngalaba dị. Osisi:
- Na-egosiputa ngalaba nna ochie, mana ọ nwere ike gbanyụọ ohere ịnweta ha dabere na ohere enyere na akaụntụ onye ọrụ gị.
- Na-ezobe ngalaba ọ bụla ọzọ akaụntụ onye ọrụ gị enweghị ike ịnweta, gụnyere nwanne na ngalaba ụmụ.
Mgbe ịgbanwere gaa na ngalaba, sistemụ na-egosipụta:
- Data nke dabara na ngalaba ahụ naanị.
- Nhọrọ menu kpebisiri ike site na ọrụ onye ọrụ ekenyere gị maka ngalaba ahụ.
Usoro
Site na ndetu ndọpụta n'okpuru aha njirimara gị, họrọ ngalaba ịchọrọ ịnweta.
NchNhr Okwu
Ụfọdụ ibe dị na Sistemụ ọkụ ọkụ web interface na-akwado ọpịpị aka nri (nke a na-ahụkarị) ma ọ bụ pịa aka ekpe nke gbara gburugburu nke ị nwere ike iji dị ka ụzọ mkpirisi maka ịnweta atụmatụ ndị ọzọ na Sistemụ ọkụ ọkụ. Ọdịnaya dị na menu onodu ya dabere na ebe ị nwetara ya—ọ bụghị naanị na ibe kamakwa data akọwapụtara.
Maka exampLe:
- Ebe nchekwa adreesị IP na-enye ozi gbasara onye ọbịa metụtara adreesị ahụ, gụnyere whois ọ bụla dị na pro nnabatafile ozi.
- SHA-256 hash uru hotspot na-enye gị ohere itinye a file's SHA-256 hash uru na ndepụta dị ọcha ma ọ bụ ndepụta nchọpụta omenala, ma ọ bụ view uru hash niile maka iṅomi. N'ibe ma ọ bụ ebe anaghị akwado menu onodu sistemu ọkụ ọkụ, menu ọnọdụ ọnọdụ ihe nchọgharị gị na-egosi.
Ndị ndezi amụma
Ọtụtụ ndị ndezi amụma nwere oghere maka iwu ọ bụla. Ị nwere ike itinye iwu ọhụrụ na edemede; bee, detuo, na mado iwu; tọọ ala iwu; ma dezie iwu.
Editọ Iwu Mbanye
Onye na-edezi iwu mbuso agha nwere oghere n'elu iwu ntinye ọ bụla. Ị nwere ike dezie iwu, tọọ steeti iwu, hazie oke ọnụ na nhọrọ nkwụsị, yana view akwụkwọ iwu. Nhọrọ, mgbe ịpịrị akwụkwọ iwu na menu onodu, ị nwere ike pịa akwụkwọ ikike na windo mmapụta akwụkwọ ka. view nkọwa iwu kapịrị ọnụ.
Ihe omume Viewer
Ibe mmemme (ibe akwụkwọ na tebụl views dị n'okpuru menu Analysis) nwere ebe dị ọkụ karịa ihe omume ọ bụla, adreesị IP, URL, ajụjụ DNS, na ụfọdụ files'SHA-256 ụkpụrụ hash. Mgbe viewN'ime ọtụtụ ụdị mmemme, ị nwere ike:
- View ozi metụtara na Context Explorer.
- Gbanye ozi mmemme na mpio ọhụrụ.
- View ederede zuru oke na ebe mpaghara mmemme nwere ederede ogologo oge iji gosipụta nke ọma na mmemme ahụ view, dị ka a file's SHA-256 hash uru, nkọwa adịghị ike, ma ọ bụ a URL.
- Mepee a web mpio ihe nchọgharị nwere ozi zuru ezu gbasara mmewere sitere na isi iyi dị na mpụga ọkụ ọkụ, na-eji njirimara Mwepụta Contextual Cross-Launch. Maka ozi ndị ọzọ, hụ Iji Nyocha Omume Web-Akụkụ dabere.
- (Ọ bụrụ na nzukọ gị ebula Cisco Security Packet Analyzer) nyochaa ngwugwu metụtara mmemme ahụ. Maka nkọwa, hụ Nnyocha mmemme Iji Cisco Nche Packet Analyzer.
Mgbe viewN'ime mmemme njikọ, ịnwere ike ịgbakwunye ihe na ndetu nchekwa ọgụgụ isi nke ndabara yana egbochila:
- Adreesị IP, sitere na ebe adreesị IP.
- A URL ma ọ bụ aha ngalaba, site na a URL ebe a na-ekpo ọkụ.
- Ajụjụ DNS, sitere na ebe a na-ajụ ajụjụ DNS.
Mgbe viewing jidere files, file mmemme na mmemme malware, ị nwere ike:
- Tinye a file ka ma ọ bụ wepụ a file site na listi dị ọcha ma ọ bụ ndepụta nchọpụta omenala.
- Budata nnomi nke file.
- View akwu files n'ime ebe nchekwa file.
- Budata ebe nchekwa nne na nna file maka akwu file.
- View nke file mejupụtara.
- Nyefee na file maka malware mpaghara na nyocha ike.
Mgbe viewN'ime mmemme mbubata, ị nwere ike ịrụ ọrụ ndị yiri ya na ndị na-edezi iwu intrusion ma ọ bụ amụma intrusion:
- Dezie iwu na-akpalite.
- Tọọ steeti iwu, gụnyere gbanyụọ iwu.
- Hazie ọnụ ụzọ na mbelata nhọrọ.
- View akwụkwọ iwu. Nhọrọ, mgbe ịpịrị akwụkwọ iwu na menu onodu, ị nwere ike pịa akwụkwọ ikike na windo mmapụta akwụkwọ ka. view nkọwa iwu kapịrị ọnụ.
Ngwungwu mmemme mbubata View
ngwugwu mmemme mbubata views nwere oghere adreesị IP. Ihe ngwugwu view na-eji menu onodu akuku aka ekpe.
Dashboard
Ọtụtụ wijetị dashboard nwere oghere maka view ozi metụtara na Context Explorer. Dashboard
wijetị nwekwara ike ịnwe adreesị IP yana ọnụ ahịa SHA-256 hash.
Ihe Explorer
Ihe Explorer Context nwere oghere n'elu eserese ya, tebụl na eserese ya. Ọ bụrụ na ịchọrọ inyocha data sitere na eserese ma ọ bụ ndepụta n'ụzọ zuru ezu karịa ka Context Explorer na-enye ohere, ị nwere ike gbadaa na tebụl. views nke mkpa data. Ị nwekwara ike view onye ọbịa metụtara, onye ọrụ, ngwa, file, na ozi iwu ntinye.
Ihe Explorer Context na-eji menu onodu pịa aka ekpe, nke nwekwara nzacha yana nhọrọ ndị ọzọ pụrụ iche na Explorer Context.
Isiokwu ndị emetụtara
Ndepụta ọgụgụ isi nche yana ndepụta nri
Ịkekọrịta data na Cisco
Ị nwere ike ịhọrọ ịkekọrịta data na Cisco site na iji atụmatụ ndị a:
- Cisco Success Network
Hụ Cisco Success Network - Web nyocha
Hụ (Nhọrọ) Wepụ Web Nyocha nyocha
Enyemaka ọnlaịnụ Firepower, Otu esi eme, yana akwụkwọ ị nwere ike nweta enyemaka ịntanetị site na web interface:
- Site na ịpị njikọ enyemaka nwere mmetụta na ibe ọ bụla
- Site na ịhọrọ Enyemaka > Ọnlaịnụ
Otu esi esi bụrụ wijetị na-enye ihe nlegharị anya iji wee rụọ ọrụ na ebe njikwa ọkụ ọkụ.
Ihe nlegharị anya na-eduzi gị ka ịme usoro achọrọ iji nweta ọrụ site n'itinye gị usoro nke ọ bụla, otu n'otu n'otu n'agbanyeghị ụdị ihuenyo UI dị iche iche ị nwere ike ịnyagharịa, iji rụchaa ọrụ ahụ.
A na-akwado otu esi eme wijetị na ndabara. Iji gbanyụọ wijetị, họrọ Mmasị onye ọrụ site na ndetu adadata n'okpuru aha njirimara gị, wee pịa akara ngosi Kwado How-Tos n'igbe dị na Ntọala Otu esi aga.
Usoro ihe omume a na-adịkarị maka ibe UI niile, ọ bụghịkwa ndị ọrụ nwere mmetụta. Agbanyeghị, dabere na ikike onye ọrụ, ụfọdụ ihe nchịkọta nhọrọ agaghị apụta na interface Firepower Management Center. N'ihi ya, ihe omume ahụ agaghị eme na ibe ndị dị otú ahụ.
Rịba ama
Usoro ihe omume ndị a dị na Firepower Management Center:
- Debanye aha FMC na Akaụntụ Smart Sisiko: Ntugharị a na-eduzi gị ka ịdebanye aha ebe njikwa ọkụ ọkụ na Akaụntụ Cisco Smart.
- Hazie ngwaọrụ ma tinye ya na FMC: Usoro ihe omume a na-eduzi gị ka ịtọlite ngwaọrụ na ịgbakwunye ngwaọrụ ahụ na ebe njikwa ọkụ ọkụ.
- Hazie Ụbọchị na Oge: Usoro a na-eduzi gị ịhazi ụbọchị na oge nke Firepower
- Ngwa agbachitere egwu na-eji amụma ntọala ikpo okwu.
- Hazie nhazi ihu igwe: Usoro ihe omume a na-eduzi gị ka ịhazi oghere na ngwaọrụ Firepower Threat Defence.
- Mepụta amụma njikwa nnweta: Amụma njikwa ohere nwere usoro iwu enyere, nke a na-enyocha site n'elu ruo ala. Usoro a na-eduzi gị ka ịmepụta usoro njikwa ohere. Tinye iwu njikwa nnweta - Usoro njiri mara: Ngagharị a na-akọwa akụkụ nke
iwu njikwa ohere, yana otu ị ga-esi jiri ha na ebe njikwa ọkụ ọkụ. - Hazie ntọala ụzọ: Firepower Threat Defence na-akwado ụkpụrụ ngagharị ụzọ dị iche iche. Ụzọ kwụ ọtọ na-akọwapụta ebe ezipụ okporo ụzọ maka netwọk ebe aga. Usoro ihe omume a na-eduzi gị ka ịhazigharị ụzọ kwụ ọtọ maka ngwaọrụ ndị ahụ.
- Mepụta amụma NAT - Ngagharị njiri mara: Ntugharị a na-eduzi gị ịmepụta amụma NAT ma na-ejegharị gị n'ụdị dị iche iche nke iwu NAT.
Ị nwere ike ịchọta akwụkwọ ndị ọzọ metụtara usoro ọkụ ọkụ site na iji ụzọ akwụkwọ: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ibe ndepụta akwụkwọ ọkwa dị elu maka ntinye FMC
Akwụkwọ ndị a nwere ike inye aka mgbe ị na-ahazi ebe a ga-ebuga ebe njikwa ọkụ ọkụ, Ụdị 6.0+.
Ụfọdụ akwụkwọ ejikọrọ anaghị etinye aka na ebe a na-ebuga ebe njikwa ọkụ ọkụ. Maka exampLee, ụfọdụ njikọ dị na Firepower Threat Defence ibe bụ kpọmkwem maka ntinye aka nke Onye njikwa ngwaọrụ Firepower na-achịkwa, yana njikọ ụfọdụ na ibe ngwaike enweghị njikọ na FMC. Iji zere ọgba aghara, kpachara anya na aha akwụkwọ. Ọzọkwa, ụfọdụ akwụkwọ na-ekpuchi ọtụtụ ngwaahịa ma yabụ nwere ike ịpụta n'ọtụtụ ibe ngwaahịa.
Ebe njikwa ọkụ ọkụ
- Ngwa ngwa ụlọ njikwa ọkụ ọkụ: http://www.cisco.com/c/en/us/support/security/defense-center/tsd-products-support-series-home.html
- Ngwa mebere ụlọ ọrụ njikwa ọkụ: • http://www.cisco.com/c/en/us/support/security/defense-center-virtual-appliance/tsd-products-support-series-home.html • http://www.cisco.com/c/en/us/support/security/defense-center/tsd-products-support-series-home.html
- Firepower Threat Defence, nke a na-akpọkwa NGFW (Ọgbọ Firewall ọzọ).
- Ngwanrọ nchekwa egwu ọkụ ọkụ: http://www.cisco.com/c/en/us/support/security/firepower-ngfw/tsd-products-support-series-home.html
- Nchekwa iyi egwu ọkụ ọkụ: http://www.cisco.com/c/en/us/support/security/firepower-ngfw-virtual/tsd-products-support-series-home.html
- Firepower 4100 usoro: https://www.cisco.com/c/en/us/support/security/firepower-4100-series/tsd-products-support-series-home.html
- Ike ọkụ 9300: https://www.cisco.com/c/en/us/support/security/firepower-9000-series/tsd-products-support-series-home.html
- Isa 3000: https://www.cisco.com/c/en/us/support/security/industrial-security-appliance-isa/tsd-products-support-series-home.html
Ngwa kpochapụwo, nke a na-akpọkwa NGIPS (Sistemụ Mgbochi Mgbochi Mgbochi Ọgbọ Na-abịa).
- ASA nwere ọrụ Firepower:
- ASA 5500-X nwere ọrụ FirePOWER: • https://www.cisco.com/c/en/us/support/security/asa-firepower-services/tsd-products-support-series-home.html https://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/tsd-products-support-series-home.html
- ISA 3000 nwere ọrụ FirePOWER: https://www.cisco.com/c/en/us/support/security/industrial-security-appliance-isa/tsd-products-support-series-home.html
- Firepower 8000 usoro: https://www.cisco.com/c/en/us/support/security/firepower-8000-series-appliances/tsd-products-support-series-home.html
- Firepower 7000 usoro: https://www.cisco.com/c/en/us/support/security/firepower-7000-series-appliances/tsd-products-support-series-home.html
- AMP maka netwọk: https://www.cisco.com/c/en/us/support/security/amp-appliances/tsd-products-support-series-home.html
- NGIPSv (ngwaọrụ mebere): https://www.cisco.com/c/en/us/support/security/ngips-virtual-appliance/tsd-products-support-series-home.html
Nkwupụta ikike na akwụkwọ
Nkwupụta ikike na mmalite nke ngalaba na-egosi ikike nke Classic ma ọ bụ Smart ị ga-ekenye na ngwaọrụ ejisiri na Sistemụ ọkụ iji mee ka njirimara akọwara na ngalaba ahụ.
N'ihi na ikike ikike na-enwekarị mgbakwunye, nkwupụta ikike na-enye naanị ikike kachasị achọrọ maka njirimara ọ bụla.
Nkwupụta “ma ọ bụ” dị na nkwupụta ikike na-egosi na ị ga-ekenye otu ikike na ngwaọrụ ejirila iji mee ka njirimara akọwara na ngalaba ahụ, mana ikike mgbakwunye nwere ike ịgbakwunye ọrụ. Maka example, n'ime a file amụma, ụfọdụ file Omume iwu chọrọ ka ị kenye ikike nchekwa na ngwaọrụ ahụ ebe ndị ọzọ chọrọ ka ị kenye ikike Malware.
Maka ozi ndị ọzọ gbasara ikikere, hụ Banyere ikikere ọkụ ọkụ.
Isiokwu ndị emetụtara
Banyere ikikere ọkụ ọkụ
Nkwupụta ngwaọrụ akwadoro na akwụkwọ
Nkwupụta ngwaọrụ akwadoro na mmalite nke isiakwụkwọ ma ọ bụ isiokwu na-egosi na a na-akwado atụmatụ naanị na nsonso ngwaọrụ, ezinụlọ, ma ọ bụ ụdị akọwapụtara. Maka exampYa mere, a na-akwado ọtụtụ atụmatụ naanị na ngwaọrụ nchekwa egwu Firepower.
Maka ozi ndị ọzọ na nyiwe nke ntọhapụ a kwadoro, hụ ndetu ntọhapụ.
Nweta nkwupụta na Documentation
Nkwupụta Access na mmalite nke usoro ọ bụla dị na akwụkwọ a na-egosi ọrụ onye ọrụ eburu ụzọ chọọ iji rụọ usoro a. Ọrụ ọ bụla edepụtara nwere ike ịrụ usoro ahụ.
Ndị ọrụ nwere ọrụ ọpụrụiche nwere ike ịnwe usoro ikike dị iche na nke ọrụ eburu ụzọ kọwaa. Mgbe a na-eji ọrụ akọwara ụzọ gosipụta ihe achọrọ maka usoro, ọrụ omenala nwere ikike yiri ya nwekwara ohere. Ụfọdụ ndị ọrụ nwere ọrụ omenala nwere ike iji ụzọ nchịkọta dịtụ iche iji ruo ibe nhazi. Maka exampLe, ndị ọrụ nwere ọrụ omenala nwere naanị ohere iwu intrusion na-enweta amụma nyocha netwọkụ site na amụma intrusion kama ụzọ ọkọlọtọ site na iwu njikwa ohere.
Maka ozi ndị ọzọ gbasara ọrụ onye ọrụ, hụ Ọrụ onye ọrụ na hazie ọrụ onye ọrụ maka ndị Web Interface.
Mgbakọ adreesị IP sistemụ ọkụ
Ị nwere ike iji akara IPv4 Classless Inter-Domain Routing (CIDR) yana akara nrịbama ogologo prefix IPv6 yiri ya iji kọwaa ngọngọ adreesị n'ọtụtụ ebe na Sistemụ ọkụ ọkụ.
Mgbe ị na-eji CIDR ma ọ bụ nrịbama ogologo nrịbama iji kọwapụta ngọngọ nke adreesị IP, Sistemụ ọkụ ọkụ na-eji naanị akụkụ nke adreesị IP netwọk akọwapụtara site na nkpuchi ma ọ bụ ogologo prefix. Maka example, ọ bụrụ na ị pịnye 10.1.2.3/8, na Firepower System na-eji 10.0.0.0/8.
N'ikwu ya n'ụzọ ọzọ, ọ bụ ezie na Cisco na-akwado usoro ọkọlọtọ nke iji adreesị IP netwọk na oke ntakịrị mgbe ị na-eji CIDR ma ọ bụ akara nrịbama ogologo oge, Firepower System anaghị achọ ya.
Ngwa ndị ọzọ
Ogbe Firewalls bụ ebe nchekwa ihe nrụtụ aka nke na-emeju akwụkwọ anyị buru ibu. Nke a gụnyere njikọ na ụdị 3D nke ngwaike anyị, onye na-ahọrọ nhazi ngwaike, nkwekọrịta ngwaahịa, nhazi examples, ndetu nchọpụta nsogbu, vidiyo ọzụzụ, ụlọ nyocha na oge Cisco Live, ọwa mgbasa ozi mmekọrịta, blọọgụ Cisco na akwụkwọ niile nke otu Technical Publications bipụtara.
Ụfọdụ ndị mmadụ na-eziga na saịtị obodo ma ọ bụ saịtị nkesa vidiyo, gụnyere ndị nhazi, na-arụ ọrụ maka Sistemụ Sistemụ Sistemụ. Echiche ndị e gosipụtara na saịtị ndị ahụ yana n'okwu ọ bụla kwekọrọ bụ echiche nke ndị mbụ dere, ọ bụghị nke Cisco. Enyere ọdịnaya a maka ebumnuche ozi naanị, ọbụghị ka ọ bụrụ nkwado ma ọ bụ nnọchite anya Cisco ma ọ bụ otu ọ bụla.
Rịba ama
Ụfọdụ vidiyo, ndetu nka na ihe ntụaka dị na Firewalls Community na-atụ aka na ụdị FMC ochie. Ụdị FMC gị na ụdị a kpọtụrụ aha na vidiyo ma ọ bụ ndetu ọrụ aka nwere ike inwe ọdịiche dị na interface onye ọrụ nke na-eme ka usoro ahụ ghara ịbụ otu.
Na-amalite na Firepower
Akwụkwọ / akụrụngwa
![]() |
CISCO malitere site na ọkụ ọkụ na-arụ ọrụ mbido mbụ [pdf] Ntuziaka onye ọrụ Malite na Ọkụ Na-eme Ntọlite Mbụ, Ike Ọkụ Na-eme Ntọlite Mmalite, Na-eme Ntọlite Mmalite, Ntọala Mmalite, Ntọlite. |