Engineeing Simplicity

Release Notes
JSA 7.5.0 Gadziridza Package 5 qcow2
Rakabudiswa
2023-06-25

Administrator Notes

Gwaro iri rinobata zvinhu zvekuisa, kusimudzira nekushandisa vJSA (virtual Juniper Secure Analytics) mudziyo pamusoro peKernel Virtual Machine (KVM) kana Open Stack nharaunda. Zvinofungidzirwa kuti muverengi anojairana neKVM, uye virtualization uye Ubuntu Linux, kana Open Stack nharaunda. The exampLes mugwaro iri riri kuitwa sezvinotevera:

• Kutanga Kuisa uye kuwedzera kwekuchengetedza kwevJSA mufananidzo paUbuntu 18.04 kutumirwa kweKVM.
• OpenStack deployment leveraging heat templates.

Zvinodiwa zvekuisa JSA 7.5.0 Update Package 5 qcow2

Isu tinokurudzira anotevera masisitimu eseti usati wasimudzira kuJSA Release 7.5.0 Gadziridza Package 5 qcow2:

• Isa iyo JSA chaiyo michina pane imwechete isina-uniform memory yekuwana (NUMA) sedhisiki controller kana RAID controller pane iyo host system. Izvi zvinogonesa dhisiki I / O mashandiro uye inodzivirira kuyambuka iyo QuickPath Interconnect (QPI).
• Gadzirisa iyo NUMA mutemo wakasimba kune kernel-based virtual muchina (KVM) kuitira kuti ndangariro neCPU zviwanikwa zvese zvakagovaniswa kubva kune imwecheteyo NUMA.
• Kuti uite zvakanakisa I/O, metadata preallocation inokurudzirwa sediki. Kugoverwa kwakazara kwedhisiki kunodiwa pakuita kwakanyanya uye kunokurudzirwa kune ese kuiswa paKVM.
• Wedzera huwandu hwekuchengetedza hwakagoverwa kune imwe chikamu pane dhisiki mufananidzo.

CHERECHEDZA: Juniper Networks haipe chero rutsigiro rwekuisa uye kugadzirisa iyo KVM server. Iwe unofanirwa kuisa iyo chaiyo appliance mufananidzo uye woimisa sekuenderana neyakakurudzirwa maratidziro eiyo chaiyo mudziyo. Juniper Networks ichapa rubatsiro chete mushure mekunge Juniper Secure Analytics yatanga kubudirira.
Izvo zvinodikanwa zvekuisa Juniper Yakachengeteka Analytics pane KVM server ndeaya anotevera:

• Zivo pamusoro pekugadzirisa uye nekuisa KVM server.
• KVM server uye mapakeji anotsigirwa anofanira kuiswa pane yako Linux-based system. Bata Linux mutengesi wako kana zvinyorwa zveruzivo nezve kuisa KVM.
• Chikumbiro kana nzira yeku view iyo iri kure system virtual monitor, yakadai seVirtual Machine
  Maneja (VMM), Virtual Network Computing (VNC) Viewer, kana chero imwe application.
• Bridge Interface yakagadziriswa zvinoenderana nenharaunda yako uye anosvika maviri emahara static IP kero.

Minimum Software Zvinodiwa Pakuisa JSA 7.5.0 Update Package 5 qcow2
Izvo zvishoma zvinoda software yekuisa JSA 7.5.0 Update Package 5 qcow2 ndeiyi:

• 32-GB RAM
• 16 CPU cores
• 512 GB disk nzvimbo

Prerequisite Hardware Accessories for JSA 7.5.0 Update Package 5 qcow2

Usati waisa zvigadzirwa zveJSA, ita shuwa kuti unokwanisa kuwana inodiwa hardware accessories uye desktop software.

Hardware Accessories

Ita shuwa kuti unokwanisa kuwana zvinotevera hardware zvikamu:

• Monitor uye keyboard, kana serial console
• Isingapindirwe Power Supply (UPS) kune ese masisitimu anochengeta data, senge JSA koni, Chiitiko processor zvikamu, kana JSA kuyerera processor zvikamu.
• Null modem tambo kana iwe uchida kubatanidza sisitimu kune serial console

CHERECHEDZA: Zvigadzirwa zveJSA zvinotsigira hardware-yakavakirwa Redundant Array yeYakazvimirira Disks (RAID) kuita, asi haitsigire software-yakavakirwa RAID kumisikidzwa kana Hardware yakabatsirwa RAID kumisikidzwa.

Kuisa JSA paVirtual Machine

Gadzira muchina chaiwo. Kuti uwane rumwe ruzivo, ona No Link Title.
CHERECHEDZA: Iyo software yekuisa menyu haizoonekwe mune yekumisikidza wizard nekukasira. Kana iwe uchida kuita JSA software yekumisikidza, tarisa kuJSA Software chete Installations.
Mushure mekugadzira yako chaiyo muchina, unofanirwa kuisa iyo JSA software pamushini chaiwo.

1. Pinda mukati memuchina chaiwo nekunyora mudzi wezita remushandisi. Zita remushandisi rinonzwa nyaya.
2. Gamuchira iyo Yekupedzisira Mushandisi Rezinesi Chibvumirano.
   ZANO: Dzvanya kiyi yeSpacebar kuti uenderere mberi negwaro.
3. Sarudza rudzi rwemudziyo:
   · Appliance Install (yakatengwa semudziyo)
   · High Kuwanikwa Appliance
   · App Host Appliance
   · Log Analytics Appliance
   CHERECHEDZA: Iwe unogona kusarudza rudzi rwechishandiso zvichienderana nezvinodiwa zvekushandisa.
4. Kana ukasarudza mudziyo wekuwanikwa-yakanyanya (HA), sarudza kana mudziyo wacho uri console.
5. Kana ukasarudza mudziyo weLog Analytics Appliance, sarudza LA (Log Analytics "All-In-One" kana Console 8099).
6. Kune rudzi rwekuseta, sarudza Normal Setup (default) kana HA Recovery Setup, uye sarudza Next.
7. Iyo Date/Nguva Setup peji inobuda. Isa zuva razvino muDate Razvino (YYYY/MM/DD) mundima yaratidzwa. Zuva rinoratidzwawo kune referensi yako. Isa nguva mufomati yeawa makumi maviri nemana mundima ye24h Clock Time (HH:MM: SS). Neimwe nzira, iwe unogona kuisa zita kana IP kero yenguva server iyo iyo nguva inogona kuwiriraniswa mumunda weTime Server. Mushure mekuisa zuva nenguva, sarudza Next.
8. Peji yeSarudza Continent/Nzvimbo inobuda. Sarudza iyo Time Zone Continent kana Nzvimbo sezvinodiwa uye sarudza Next. Iko kukosha kwekutanga iAmerica.
9. Iyo Time Zone Selection peji inooneka. Sarudza iyo Time Zone Guta kana Dunhu sezvinodiwa uye sarudza Next. Iko kukosha kwekutanga iNew York.
10. Kana ukasarudza HA Recovery Setup, isa iyo cluster virtual IP kero.
11. Sarudza iyo Internet Protocol vhezheni: · Sarudza ipv4 kana ipv6.
12. Kana iwe wakasarudza ipv6, sarudza bhuku remanyorero kana otomatiki kune iyo Configuration mhando.
13. Sarudza iyo bonded interface setup.
14. Sarudza iyo manejimendi interface.
    CHERECHEDZA: Kana iyo interface iine chinongedzo (tambo yakabatana), chiratidzo chekuwedzera (+) chinoratidzwa pamberi petsanangudzo.
15. MuNetiweki Information Setup hwindo, gadzirisa anotevera network marongero uye sarudza Next.
    · Zita remugamuchiri: Isa zita rakazara rinonyatsokodzera sezita rehurongwa
    · IP Kero: Isa iyo IP kero ye system
    · Network Mask: Pinda iyo network mask ye system
    · Gedhi: Pinda iyo yakasarudzika gedhi rehurongwa
    · Yekutanga DNS: Isa iyo yekutanga DNS server kero
    · Sekondari DNS: (Sarudzo) Nyora yechipiri DNS server kero
    · Public IP: (Sarudzo) Isa iyo Public IP kero yeserver
    CHERECHEDZA: Kana iwe uchigadzirisa iyi saiti seyekutanga dhizaini yekuwanikwa kwepamusoro (HA) cluster, uye iwe wasarudza Hongu ye auto-configure, unofanirwa kurekodha iyo-inogadzirwa IP kero. Iyo yakagadzirwa IP kero inopindirwa panguva yeHA gadziriso. Kuti uwane rumwe ruzivo, ona iyo Juniper Yakachengeteka Analytics High Availability Guide.
16. Kana iwe uri kuisa Console, isa admin password inosangana neanotevera maitiro:
    · Rine mavara masere
    · Ine rinenge rimwechete mavara makuru
    · Iine mavara mashoma
    · Iine kanenge digit imwe
    · Ine rinenge rakakosha mavara: @, #, ^, kana *.
17. Pinda midzi password inosangana nezvinotevera maitiro:
    · Rine mavara masere
    · Haina nzvimbo
    · Inogona kusanganisira anotevera akakosha mavara: @, #, ^, uye *.
18. Click Next.
19. Isa kiyi yako yerezinesi.
    a. Pinda kuJSA. The default user name is admin. Iyo pasiwedhi ndiyo password ye admin mushandisi account yaunoisa panguva yekuisa.
    b. Dzvanya Login kuJSA.
    c. Dzvanya iyo Admin tab.
    d. Muchikamu chekufamba, tinya System Configuration.
    e. Dzvanya iyo System uye Rezinesi Management icon.
    f. Kubva paRatidza runyoro bhokisi, sarudza Marezenisi, uye rodha rezinesi kiyi yako.
    g. Sarudza rezinesi risina kugoverwa uye tinya Govera System kune Rezinesi.
    h. Kubva pane rondedzero yemasisitimu, sarudza system, uye tinya Govera System kune Rezinesi.
    i. Dzvanya Deploy Rezinesi Shanduko.

Kuisa JSA 7.5.0 Gadziridza Package 5 qcow2 paKVM server uchishandisa VMM

Shandisa VMM virtual muchina mutengi kuisa JSA 7.5.0 Gadziridza Package 5 qcow2 pane KVM server.
Kuisa iyo JSA 7.5.0 Gadziridza Package 5 qcow2 pane KVM server uchishandisa VMM:

1. Dhawunirodha iyo JSA 7.5.0 Gadziridza Package 5 qcow2 mufananidzo kubva https://support.juniper.net/support/downloads/ kuhurongwa hwenzvimbo yako.
   CHERECHEDZA: Usashandura zita reJSA 7.5.0 Gadziridza Package 5 qcow2 mufananidzo file iyo yaunotora kubva kuJuniper Networks inotsigira saiti. Kana iwe ukashandura zita remufananidzo file, kusikwa kweJSA 7.5.0 Update Package 5 qcow2 inogona kukundikana.
2. Tangisa mutengi weVMM.
3. Sarudza File > New Virtual Machine pane menyu bar yeVMM yekuisa mutsva chaiwo muchina pane KVM server. Iyo Nyowani VM dialog box inoonekwa uye inoratidza. Nhanho 1 ye4 yekuiswa kweNew VM.
4. Pazasi Sarudza maitiro aungade kuisa iyo inoshanda sisitimu, tinya Import iripo disk image.
5. Dzvanya Pamberi kuti uende kune nhanho inotevera. Nhanho yechipiri ye2 inoratidzwa.
6. Pazasi Ipa iyo iripo yekuchengetedza nzira, tinya Bhurawuza.
7. Pazasi Sarudza vhoriyamu yekuchengetera, tinya Bhurawuza Local pazasi pebhokisi rekutaura kuti uwane uye sarudza iyo JSA 7.5.0 Gadziridza Package 5 qcow2 mufananidzo. file (.qcow2) yakachengetwa pahurongwa hwako.
8. Pazasi Sarudza mhando yekushandisa system uye vhezheni, sarudza Linux yemhando yeOS uye Red Hat Enterprise Linux nhamba yeshanduro yeVersion.
   CHERECHEDZA: Tinokurudzira kushandisa shanduro yeLinux yakafanana neJSA 7.5.0 Gadziridza Package 5 qcow2 iri kushandisa.
9. Dzvanya Pamberi kuti uende kune nhanho inotevera.
   Nhanho 3 ye4 inoratidzwa.
10. Pasi Sarudza Memory uye CPU marongero, ita shuwa kuti 4 yakagadzirirwa maCPU uye sarudza kana kuisa iyo inotevera kukosha kweMemory (RAM):
    · 32768 MBKuti JSA 7.5.0 Gadziridza Package 5 qcow2 kuti ishandiswe seJunos Space node kana se FMPM node
11. Dzvanya Pamberi kuti uende kune nhanho inotevera.
    Nhanho 4 inoratidzwa.
12. Pasi Kusarudzwa kweNetiweki, sarudza sarudzo zvichienderana nekuti unoda kugadzirisa sei network network paJSA 7.5.0 Update Package 5 qcow2 setup.
13. Under Ready to start the installation, muZita munda, isa zita reJSA 7.5.0 Update Package 5 qcow2.

Kubvisa Cache

Mushure mekupedza kuisirwa, unofanirwa kudzima cache yako yeJava uye yako web browser cache usati wapinda muJSA appliance.
Usati watanga
Ita shuwa kuti unongova nemuenzaniso mumwe chete webrowser yako yakavhurwa. Kana uine akawanda mavhezheni ebrowser yako akavhurwa, cache inogona kutadza kudzima.
Ita shuwa kuti iyo Java Runtime Environment yakaiswa pane desktop system yaunoshandisa view iyo mushandisi interface. Unogona kudhawunirodha Java vhezheni 1.7 kubva kuJava websaiti: http://java.com/.
Pamusoro pebasa iri
Kana ukashandisa Microsoft Windows 7 operating system, Java icon inowanzowanikwa pasi peZvirongwa pane.
Kubvisa cache:

1. Bvisa cache yako yeJava:
   a. Padesktop yako, sarudza Tanga> Control Panel.
   b. Tinya kaviri chiratidzo cheJava.
   c. MuInternet Yenguva pfupi Files pane, tinya View.
   d. PaJava Cache Viewer hwindo, sarudza zvese Deployment Edhita zvinyorwa.
   e. Dzvanya pakanzi Delete.
   f. Click Close. g. Dzvanya OK.
2. Vhura yako web browser.
3. Bvisa cache yako web browser.
   Kana ukashandisa Mozilla Firefox web browser, unofanira kubvisa cache muMicrosoft Internet Explorer uye Mozilla Firefox web mabhurawuza.
4. Pinda kuJSA.

Nyaya Dzinozivikanwa uye Zvisingakwanisi

• Kana iyo Kutarisa kuti tomcat iri kushanda uye yakagadzirira (kuyedza 0/30) chikamu chakapfuura (kuyedza 10/30), iwe unofanirwa kushandisa imwe SSH sesheni kupinda muiyo IP kero panguva yekuisa, uye kubvisa iyo imqbroker kukiya. file. Tangazve iyo imqbroker sevhisi sezvinotevera:
  systemctl restart imqbroker
  CHERECHEDZA: Kana iyo yekuisa yapera, reboot system uye ita setup kechipiri.
• Iyo password yemutungamiriri haina kuisirwa zvakakodzera neiyo setup zvinyorwa.
  Mushure mekuisa koni, shandura password yemutungamiri kuburikidza neCLI uchishandisa matanho anotevera:

1. Batanidza kune yako koni uchishandisa SSH semudzi wemushandisi.
   2. Seta password nekumhanyisa murairo unotevera: /opt/qradar/support/changePasswd.sh -a
2. Isa password itsva kana wakurudzirwa.
3. Pindazve password itsva kana wakurudzirwa.
4. Tangazve iyo UI sevhisi nemurairo unotevera: service tomcat restart
5. Pinda muUI neaccount account uye password nyowani.
6. Ita deploy shanduko. Iyo administrator account password yachinjwa.

Nyaya Dzakagadziriswa

Hapana.
Juniper Networks, iyo Juniper Networks logo, Juniper, uye Junos zviratidzo zvakanyoreswa zveJuniper Networks, Inc. muUnited States nedzimwe nyika. Zvimwe zviratidzo zvese, mamakisi ebasa, mamakisi akanyoreswa, kana mamakisi ebasa akanyoreswa zvinhu zvevaridzi vazvo. Juniper Networks haitore mutoro kune chero zvisiri izvo mugwaro iri. Juniper Networks inochengetera kodzero yekuchinja, kugadzirisa, kuendesa, kana kudzokorora chinyorwa ichi pasina chiziviso. Copyright © 2023 Juniper Networks, Inc. Kodzero dzese dzakachengetwa.

Zvinyorwa / Zvishandiso

JUNIPER NETWORKS JSA Juniper Yakachengeteka Analytics [pdf] Bhuku reMushandisi JSA Juniper Secure Analytics, JSA, Juniper Secure Analytics, Chengetedza Analytics, Analytics

References

• User Manual