cisco Secure Dynamic Attributes Connector User Guide

Ho falla ho tloha DockerHub ho ea Amazon ECR: Litšoantšo tsa Docker bakeng sa Cisco Secure Dynamic Attributes Connector li falla ho tloha Docker Hub ho ea Amazon Elastic Container Registry (Amazon ECR). Ho sebelisa liphutheloana tse ncha tsa tšimo, u tlameha ho lumella ho kena ka firewall ea hau kapa proxy ho tse latelang URLs:
- URL 1
- URL 2
- URL 3
Ts'ehetso bakeng sa docker-compose 2.0: Cisco Secure Dynamic Attributes Connector joale e tšehetsa docker-compose 2.0.

Lethathamo la Lihokelo tse Tšehetsoeng

Cisco Secure Dynamic Attributes Connector e tšehetsa lihokelo tse latelang:

Sehokedi 1
Sehokedi 2
Sehokedi 3

Mathata a Lokisitsoe Phatlalatsong Ena

Tokollo ena ea Cisco Secure Dynamic Attributes Connector e lokisa litaba tse latelang:

ID ea Bug	Sehlooho sa litaba
CSCwh89890	Lokisa CVE-2023-44487 - HTTP/2 Reset Rapid
CSCwh92405	E rarollotse bothata ka litlhophiso tsa litlhophiso tsa no_proxy

Litokomane tse Ncha le tse Nchafalitsoeng

Litokomane tse latelang tsa Firepower li ntlafalitsoe kapa li sa tsoa fumaneha bakeng sa tokollo ena:

Litokomane 1
Litokomane 2
Litokomane 3

Ikopanye le Cisco

Bakeng sa thuso e eketsehileng kapa lipotso, ka kopo ikopanye le Cisco:
Tlhahisoleseding ea Bohokahanyi: [Lintlha tsa Khokahano]

Litaelo tsa Tšebeliso ea Sehlahisoa

Mohato oa 1: Sebopeho sa Firewall le Proxy
E le hore u sebelise Cisco Secure Dynamic Attributes Connector, u lokela ho lumella ho kena ka firewall kapa proxy ea hau ho tse latelang. URLs:

URL 1
URL 2
URL 3

Mohato oa 2: Ho kenya le ho seta
Latela mehato e ka tlase ho kenya le ho theha Cisco Secure Dynamic Attributes Connector:

Mohato oa 1: Khoasolla mofuta oa morao-rao oa sehokelo ho Cisco websebaka.
Mohato oa 2: Kenya sehokelo mochining oa hau kapa seva.

Mohato oa 3: Lokisa sehokelo ka ho fana ka lintlha le litlhophiso tse hlokahalang.

Mohato oa 3: Tlhophiso ea Sehokelo
Kamora ho kenya le ho seta, o hloka ho lokisa sehokelo ka ho etsa mehato e latelang:

Mohato oa 1: Bula tlhophiso ea sehokelo file.
Mohato oa 2: Fetola litlhophiso tse hlokahalang joalo ka mofuta oa sehokelo, lintlha tsa netefatso, le litlhophiso tse ikhethileng tsa sehokelo.
Mohato oa 3: Boloka tlhophiso file.

Mohato oa 4: Ho qala Sehokelo
Hang ha tlhophiso e phethiloe, o ka qala CiscoSecure Dynamic Attributes Connector ka ho etsa taelo e latelang:
[Laela ho qala sehokelo]

Mohato oa 5: Ho rarolla mathata
Haeba u kopana le mathata leha e le afe nakong ea ho kenya, ho seta, kapa ho sebelisoa ha Cisco Secure Dynamic Attributes Connector, sheba litokomane tsa sehlahisoa kapa u ikopanye le tšehetso ea Cisco bakeng sa thuso.

LBH

P: Lihokelo tse tšehelitsoeng ke life?
A: Cisco Secure Dynamic Attributes Connector e tšehetsa Connector 1, Connector 2, le Connector 3.

P: Nka khoasolla mofuta oa morao-rao oa sehokelo joang?
A: U ka khoasolla mofuta oa morao-rao oa sehokelo ho Cisco websebaka.
P: Ke lokela ho etsa eng haeba sehokelo se hloleha ho qala?
A: Netefatsa hore o kentse metjhini ea hau e nepahetseng hantle le hore e fihlela litlhoko tsa sistimi. Tekanyo e sa nepahalang e ka etsa hore sehokelo sa litšobotsi tse matla se hlolehe kapa se se qale.

Litlhaloso tsa Phatlalatso ea Cisco Dynamic Attributes Connector

Kea leboha ha u khethile Firepower. Tsena ke Lintlha tsa Release tsa Cisco Secure Dynamic Attributes Connector.

Likarolo Tse Ncha Khatisong Ena

Ho falla ho tloha DockerHub ho ea Amazon ECR
Litšoantšo tsa Docker bakeng sa Cisco Secure Dynamic Attributes Connector li fallisoa ho tloha Docker Hub ho ea Amazon Elastic Container Registry (Amazon ECR).
Ho sebelisa liphutheloana tse ncha tsa tšimo, u tlameha ho lumella ho kena ka firewall ea hau kapa proxy ho tse latelang URLs:

https://public.ecr.aws
Ho khoasolla liphutheloana tsa tšimo ka bomong, batla setsi sa pokello ea nalane ea Amazon ECR bakeng sa muster
https://csdac-cosign.s3.us-west-1.amazonaws.com

Ts'ehetso bakeng sa docker-compose 2.0
Hona joale re tšehetsa docker-compose 2.0.

Li-platform tse tšehelitsoeng

Ubuntu 18.04 ho 22.04.2
CentOS 7 Linux
Red Hat Enterprise Linux (RHEL) 7 kapa 8
Python 3.6.x kapa hamorao
Ansible 2.9 kapa hamorao

Bonyane litlhokahalo tsa sistimi eohle ea ts'ebetso:

4 CPUs
8GB RAM
Bakeng sa lisebelisoa tse ncha, 100GB e fumaneha sebaka sa disk

Re u khothalletsa hore u ntlafatse mechine ea hau ka tsela e latelang:

Lihokelo tse 50, ho nka li-filters tse 5 ka sehokelo ka seng le meroalo e 20,000 ea mosebetsi: li-CPU tse 4; 8GB RAM; 100GB sebaka sa disk se fumanehang

Lihokelo tse 125, ho nka li-filters tse 5 ka sehokelo ka seng le meroalo e mengata ea 50,000: li-CPU tse 8, 16 GBRAM, 100GB sebaka se fumanehang sa disk.

Hlokomela Ho hloleha ho boholo ba mechini ea hau e nepahetseng hantle ho ka etsa hore sehokelo sa litšobotsi tse matla se hlolehe kapa se se qale.

Haeba u lakatsa ho sebelisa litšobotsi tsa vCenter, re boetse re hloka:

vCenter 6.7
Lisebelisoa tsa VMware li tlameha ho kenngoa mochining oa sebele

Lihokelo tse tšehelitsoeng mofuta ona:

Amazon Web Litšebeletso (AWS)

Bakeng sa tlhaiso-leseling e batsi, bona mohloli o kang Tagho kenya lisebelisoa tsa AWS sebakeng sa litokomane tsa Amazon.

GitHub
Google Cloud

Ho fumana lintlha tse ling, sheba ho Seta Tikoloho ea Hau ho litokomane tsa Google Cloud.

Microsoft Azure

Bakeng sa tlhaiso-leseling e batsi, bona leqephe lena sebakeng sa litokomane tsa Azure.

Tšebeletso ea Microsoft Azure tags

Ho fumana lintlha tse ling, sheba sesebelisoa se kang Virtual network service tags ho Microsoft TechNet.

Liaterese tsa IP tsa Office 365

Ho fumana lintlha tse ling, sheba Office 365 URLs le liaterese tsa IP lia fumaneha docs.microsoft.com.

Lihlopha tsa VMware le tags e laoloang ke vCenter le NSX-T

Bakeng sa tlhaiso-leseling e batsi, bona sesebelisoa se joalo ka vSphere Tags le Litšobotsi sebakeng sa litokomane tsa VMware.

Webex liaterese tsa IP
Atolosa liaterese tsa IP

Lethathamo la likhokahanyo tse tšehetsoeng ke Cisco Secure Dynamic Attributes Connector.

Lethathamo la 1: Lethathamo la lihokelo tse tšehelitsoeng ke mofuta oa Cisco Secure Dynamic Attributes Connector le sethala

CSDAC phetolelo/ sethala	AWS	GitHub	Google Leru	Azure	Azure Tshebeletso Tags	Microsoft Ofisi ea 365	vCenter	Webex	Atometsa
Mofuta oa 1.1 (ka har'a meaho)	Ee	Che	Che	Ee	Ee	Ee	Ee	Che	Che
Mofuta oa 2.0 (ka har'a meaho)	Ee	Che	Ee	Ee	Ee	Ee	Ee	Che	Che
Mofuta oa 2.2 (ka har'a meaho)	Ee	Ee	Ee	Ee	Ee	Ee	Ee	Che	Che
Mofuta oa 2.3 (ka har'a meaho)	Ee	Ee	Ee	Ee	Ee	Ee	Ee	Ee	Ee

Mathata a Lokisitsoe Phatlalatsong Ena

Version 2.3.0 Mathata a Tsitsitseng
Lethathamo la 2: Version 2.3.0 Mathata a Tsitsitseng

ID ea Bug	Sehlooho sa litaba
CSCwh89890	Lokisa CVE-2023-44487 - HTTP/2 Reset Rapid.
CSCwh92405	E rarollotse bothata le no_proxy tlhophiso ya tlhophiso.

Litokomane tse Ncha le tse Nchafalitsoeng

Litokomane tse latelang tsa Firepower li ntlafalitsoe kapa li sa tsoa fumaneha bakeng sa tokollo ena.
Litataiso tsa Tlhophiso ea Mollo le Thuso ea Marang-rang

Cisco Secure Dynamic Attributes Connector Configuration Guide
Tataiso ea Tlhophiso ea Setsi sa Taolo ea Mollo, Phetolelo ea 7.3

Lisebelisoa tsa Tšehetso ea Inthaneteng

Cisco e fana ka lisebelisoa tsa marang-rang ho khoasolla litokomane, software, le lisebelisoa, ho botsa likokoana-hloko, le ho bula likopo tsa lits'ebeletso. Sebelisa lisebelisoa tsena ho kenya le ho lokisa software ea Firepower le ho rarolla mathata le ho rarolla mathata a tekheniki
Cisco e fana ka lisebelisoa tsa marang-rang ho khoasolla litokomane, software, le lisebelisoa, ho botsa likokoana-hloko, le ho bula likopo tsa lits'ebeletso. Sebelisa lisebelisoa tsena ho kenya le ho lokisa software ea Firepower le ho rarolla mathata le ho rarolla mathata a tekheniki.
https://www.cisco.com/c/en/us/support/index.html
Cisco Bug Search Tool: https://tools.cisco.com/bugsearch/
Tšebeletso ea Tsebiso ea Cisco: https://www.cisco.com/cisco/support/notifications.html
Ho fihlella lisebelisoa tse ngata ho Cisco Support & Download ho hloka ID le password ea Cisco.com

Ikopanye le Cisco

Haeba u sa khone ho rarolla bothata u sebelisa lisebelisoa tsa marang-rang tse thathamisitsoeng ka holimo, ikopanye le Cisco TAC:

Email Cisco TAC: tac@cisco.com
Letsetsa Cisco TAC (Amerika Leboya): 1.408.526.7209 kapa 1.800.553.2447
Letsetsa Cisco TAC (lefatšeng ka bophara): Mabitso a Tšehetso a Cisco Lefatšeng Lohle

Lintlha tsa Phallo ea Sehokelo sa Cisco Sireletsehile Matla a Matla a 2.3

Litokomane / Lisebelisoa

cisco Secure Dynamic Attributes Connector [pdf] Bukana ea Mosebelisi
Sireletsehile Sehokelo sa Litšobotsi tse Matla, Sehokelo sa Litšobotsi tse Matla, Sehokelo sa Litšobotsi, Sehokelo

Litšupiso

Bukana ea Mosebelisi

cisco Secure Dynamic Attributes Connector

Tlhahisoleseding ya Sehlahiswa