I-CISCO iQale ngokuSebenza koMlilo ukwenza uSeko lokuqala
Iinkcukacha
- Igama leMveliso: Cisco Firepower
- Uhlobo lweMveliso: Ukhuseleko lweNethiwekhi kunye noLawulo lwezoThutho
- Iinketho zokusasaza: Iiplatifti ezakhelwe injongo okanye isisombululo sesoftware
- IsiNxulumanisi soLawulo: IsiNxulumanisi soMsebenzisi weMizobo
Imiyalelo yokusetyenziswa kwemveliso
Ukufakela kunye nokwenza uSeto oluQalayo kwiZixhobo zoMzimba:
Landela la manyathelo ukuseta iZiko loLawulo lwaMandla omlilo kwizixhobo eziphathekayo:
- Jonga kwiSikhokelo sokuQalisa ngemiyalelo yokufakela eneenkcukacha.
Ukusasaza iziXhobo zeVirtual
Ukuba usebenzisa izixhobo zombane, landela la manyathelo:
- Ukumisela amaqonga enyani axhaswayo kwiZiko loLawulo kunye nezixhobo.
- Sebenzisa amaZiko oLawulo lwaMandla omlilo kuLuntu kunye neemeko zamafu zaBucala.
- Faka izixhobo ezisebenzayo kwisixhobo sakho kwiindawo ezixhaswayo zamafu.
Ngena okokuqala:
Kwinyathelo lokuqala lokungena kwiZiko loLawulo loMlilo:
- Ngena ngeenkcukacha ezingagqibekanga (admin/Admin123).
- Guqula igama eligqithisiweyo kwaye usete izowuni yexesha.
- Yongeza iilayisensi kwaye ubhalise izixhobo ezilawulwayo.
Ukumisela imiGaqo-nkqubo eSisiseko kunye noLungiselelo:
Ukuya view idatha kwideshbhodi, qwalasela imigaqo-nkqubo esisiseko:
- Qwalasela imigaqo-nkqubo esisiseko yokhuseleko lwenethiwekhi.
- Ngolungelelwaniso oluphambili, jonga kwisikhokelo esipheleleyo somsebenzisi.
FAQ:
Umbuzo: Ndingafikelela njani kwiZiko loLawulo lwaMandla omlilo web ujongano?
A: Ungafikelela kwi web ujongano ngokungenisa idilesi ye IP yeZiko loLawulo kwindawo yakho web umkhangeli zincwadi.
Ukuqalisa ngoFirepower
I-Cisco Firepower yi-suite edibeneyo yokhuseleko lwenethiwekhi kunye neemveliso zolawulo lwetrafikhi, zisetyenziswe mhlawumbi kwiiplatifomu ezakhiwe ngenjongo okanye njengesisombululo sesofthiwe. Inkqubo yenzelwe ukukunceda ukuphatha i-traffic yenethiwekhi ngendlela ehambelana nomgaqo-nkqubo wokhuseleko wombutho wakho-imigaqo yakho yokukhusela inethiwekhi yakho.
Kusasazo oluqhelekileyo, izixhobo ezininzi ezilawulwayo zokubona i-traffic ezifakwe kumacandelo othungelwano zihlola itrafikhi ukuze zihlalutywe kwaye zinike ingxelo kumphathi:
- Iziko loLawulo lwaMandla omlilo
- Umphathi weSixhobo samandla omlilo
Umphathi weSixhobo soKhuseleko oluguqukayo (ASDM)
Abaphathi babonelela ngekhonsoli yolawulo esembindini enomzobo wojongano lomsebenzisi onokulusebenzisa ukwenza ulawulo, ulawulo, uhlalutyo, kunye nemisebenzi yokunika ingxelo.
Esi sikhokelo sigxile kwiZiko loLawulo loMlilo olawula izixhobo zombane. Ngolwazi malunga noMphathi weSixhobo samandla omlilo okanye i-ASA eneenkonzo zeFirePOWER ezilawulwa nge-ASDM, bona izikhokelo zezo ndlela zolawulo.
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager
- I-ASA eneenkonzo zeFirePOWER kwiSikhokelo soLungiselelo loLawulo lweNdawo
- Isiqalo esiKhawulezayo: Umiselo olusisiseko, kwiphepha lesi-2
- Izixhobo zoMlilo, kwiphepha lesi-5
- Iimpawu zamandla omlilo, kwiphepha lesi-6
- Ukutshintsha iDomains kwiZiko loLawulo loMlilo, kwiphepha le-10
- Imenyu Yomxholo, kwiphepha le-11
- Ukwabelana ngeDatha kunye neCisco, kwiphepha le-13
- Uncedo lwe-Firepower kwi-Intanethi, Ukwenziwa njani, kunye noxwebhu, kwiphepha le-13
- IiNdibano zedilesi ye-IP yeNkqubo yoMlilo, kwiphepha le-16
- Izincedisi ezongezelelweyo, kwiphepha le-16
Ukuqalisa ngokukhawuleza: Ukuseta okuSiseko
Iseti yefitsha yeFirepower inamandla kwaye ibhetyebhetye ngokwaneleyo ukuxhasa uqwalaselo olusisiseko noluphambili. Sebenzisa la macandelo alandelayo ukuseta ngokukhawuleza iZiko loLawulo loMlilo kunye nezixhobo zalo ezilawulwayo ukuqala ukulawula nokuhlalutya i-traffic.
Ukufakela kunye nokwenza ukuSeta okuQalayo kwiZixhobo eziNxibelelayo
Inkqubo
Faka kwaye wenze useto lokuqala kuzo zonke izixhobo eziphathekayo usebenzisa amaxwebhu esixhobo sakho:
- Iziko loLawulo lwaMandla omlilo
Cisco Firepower Management Centre Ukuqalisa Isikhokelo imodeli yakho hardware, ekhoyo http://www.cisco.com/go/firepower-mc-install - Izixhobo ezilawulwayo zeFirepower Threat Defense
Kubalulekile ukungahoyi amaxwebhu oMphathi wesiXhobo soMlilo kula maphepha.
- Cisco Firepower 2100 Series Ukuqalisa Guide
- Cisco Firepower 4100 Ukuqalisa Guide
- Cisco Firepower 9300 Ukuqalisa Guide
- I-Cisco Firepower Threat Defense ye-ASA 5508-X kunye ne-ASA 5516-X usebenzisa i-Firepower Management Centre Quick Guide
- Cisco Firepower Threat Defense for ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, kunye ASA 5555-X Ukusebenzisa i-Firepower Management Centre Quick Guide
- Cisco Firepower Threat Defense for ISA 3000 Ukusebenzisa iZiko loLawulo lwaMandla omlilo oKhawulezayo
Izixhobo ezilawulwayo zakudala
- Cisco ASA FirePOWER Modyuli Quick Start Guide
- Cisco Firepower 8000 Series Ukuqalisa Guide
- Cisco Firepower 7000 Series Ukuqalisa Guide
Ukusasaza iziXhobo zeVirtual
Landela la manyathelo ukuba ukuthunyelwa kwakho kubandakanya izixhobo zombane. Sebenzisa imephu yendlela yoxwebhu ukufumana indawo
amaxwebhu adweliswe ngezantsi: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/ firepower-roadmap.html.
Inkqubo
- Inyathelo 1 Gqiba amaqonga enyani axhaswayo oza kuwasebenzisa kwiZiko loLawulo kunye nezixhobo (ezi zisenokungafani). Jonga iSikhokelo sokuhambelana komlilo weCisco.
- INyathelo 2 Sebenzisa amaZiko oLawulo lwaMandla omlilo kwindawo exhaswayo yelifu loLuntu kunye nelaBucala. Jonga, Cisco Secure Firewall Management Centre Virtual Ukuqalisa Guide.
- INyathelo 3 Sebenzisa izixhobo ezizizo kwisixhobo sakho kwindawo yelifu exhaswayo kaRhulumente kunye neyoBucala. Ngeenkcukacha, jonga la maxwebhu alandelayo.
- I-NGIPSv esebenza kwi-VMware: Cisco Firepower NGIPsv Isikhokelo sokuQala esiKhawulezayo seVMware
- Cisco Firepower Threat Defense for ASA 5508-X kunye ASA 5516-X Ukusebenzisa Ulawulo Firepower
IsiKhokelo sokuQalisa ngokukhawuleza
- I-Firepower Threat Defense i-Virtual esebenza kwiindawo zoLuntu kunye nezaBucala zamafu, bona i-Cisco Secure Firewall Threat Defense i-Virtual Getting Guide, Version 7.3.
Ngena Ngena okokuqala
Ngaphambi kokuba uqale
- Lungiselela izixhobo zakho zombane njengoko kuchaziwe kuFakelo kunye nokwenza uLungiselelo lokuqala kwiZixhobo eziQolisayo, kwiphepha lesi-2 okanye ukusasazwa kwezixhobo ezisebenza ngokubonakalayo, kwiphepha lesi-3.
Inkqubo
- Inyathelo loku-1 Ngena kwiZiko loLawulo loMlilo web ujongano kunye nolawulo njengegama lomsebenzisi kunye ne-Admin123 njengegama lokugqitha. Guqula igama lokugqithisa lale akhawunti njengoko kuchaziwe kwiSikhokelo sokuQala ngokukhawuleza kwisixhobo sakho.
- Inyathelo lesi-2 Cwangcisa ummandla wexesha wale akhawunti njengoko kuchaziwe kuCwangciso lweNdawo yexesha eliMiselweyo.
- Inyathelo lesi-3 Yongeza iilayisenisi njengoko kuchaziwe kwiLayisenisi yeNkqubo yoMlilo.
- Inyathelo lesi-4 Bhalisa izixhobo ezilawulwayo njengoko kuchaziwe kuFaka iSixhobo kwiFMC.
- Inyathelo lesi-5 Lungisa izixhobo zakho ezilawulwayo njengoko kuchaziwe ku:
- Intshayelelo kwi-IPS Deployment Deployment and Configuration, ukuqwalasela i-passive or inline interfaces kwi-7000 Series okanye izixhobo ze-8000 Series.
- Ujongano ngaphezuluview kuKhuseleko lweFirepower Threat, ukuqwalasela imowudi engafihliyo okanye ehanjiswayo kwizixhobo zoKhuselo loMlilo
- Ujongano ngaphezuluview kuba Firepower Threat Defense, ukuqwalasela ujongano kwiFirepower Threat Defense izixhobo
Yintoni omawuyenze ngokulandelayo
- Qalisa ukulawula kunye nokuhlalutya i-traffic ngokuqwalasela imigaqo-nkqubo esisiseko njengoko ichazwe kwi-Setting Up Basic Policies kunye noLungiso, kwiphepha lesi-4.
Ukumisela imiGaqo-nkqubo eSisiseko kunye noLungiselelo
Kufuneka uqwalasele kwaye usebenzise imigaqo-nkqubo esisiseko ukuze ubone idatha kwideshibhodi, uMhloli womxholo, kunye neetafile zesiganeko.
Oku akuyongxoxo epheleleyo yomgaqo-nkqubo okanye izakhono zeempawu. Ukufumana isikhokelo kwezinye iifitsha kunye nolungelelwaniso oluphambili, bona sonke esi sikhokelo.
Phawula
Ngaphambi kokuba uqale
- Ngena kwi web ujongano, seta indawo yakho yexesha, yongeza iilayisensi, rejista izixhobo, kwaye uqwalasele izixhobo njengoko kuchaziwe ekuNgeneni Ngemvume okwesihlandlo sokuqala, kwiphepha lesi-3.
Inkqubo
- INyathelo 1 Qwalasela umgaqo-nkqubo wolawulo lofikelelo njengoko uchaziwe ekuyilweni koMgaqo-nkqubo woLawulo lokuFikelela okuSisiseko.
- Kwiimeko ezininzi, iCisco icebisa ukuseta uKhuseleko oluBalanced kunye noQhagamshelwano lomgaqo-nkqubo wokungena njengesenzo sakho esingagqibekanga. Ngolwazi oluthe kratya, jonga iNkqubo yokuFikelela kwiNkqubo eMiselweyo kunye noHlalutyo lweNethiwekhi eNikelwe yiSistim kunye nemiGaqo-nkqubo yokuNgena.
- Kwiimeko ezininzi, iCisco icebisa ukuba uqhagamshelo lungene ukuze luhlangabezane neemfuno zokhuseleko kunye nokuthotyelwa kombutho wakho. Qwalasela itrafikhi kwinethiwekhi yakho xa uthatha isigqibo sokuba loluphi uqhagamshelo oza kulungena ukuze ungadibanisi iziboniso zakho okanye ugqithise inkqubo yakho. Ngolwazi oluthe vetshe, bona malunga nokuLogina koQhagamshelwano.
- Inyathelo lesi-2 Sebenzisa umgaqo-nkqubo wezempilo obonelelwe ngesistim njengoko uchaziwe ekuSebenziseni imiGaqo-nkqubo yezeMpilo.
- Inyathelo lesi-3 Lungiselela iisetingi ezimbalwa zenkqubo yakho:
- Ukuba ufuna ukuvumela udibaniso lwangaphakathi lwenkonzo (ngokomzekeloample, SNMP okanye i-syslog), guqula kancinane amazibuko kuluhlu lofikelelo njengoko kuchaziwe kuBumbeko kuLuhlu loFikelelo.
- Qonda kwaye ucinge ngokuhlela imida yesiganeko sakho sesiseko sedatha njengoko kuchaziwe kuLungiselelo lweMida yoMsitho weDatha.
- Ukuba ufuna ukutshintsha ulwimi olubonisayo, hlela useto lolwimi njengoko luchaziwe kwi Cwangcisa uLwimi lwe Web Ujongano.
- Ukuba umbutho wakho uthintela ufikelelo lwenethiwekhi usebenzisa iseva engummeli kwaye awukhange uqwalasele useto lommeli ngexesha loqwalaselo lokuqala, hlela izicwangciso zakho zommeli njengoko kuchaziwe kwiGuqula uBusebenzi boLawulo lweFMC.
- Inyathelo lesi-4 Lungiselela umgaqo-nkqubo wakho wokufumanisa inethiwekhi njengoko kuchaziwe kuLungiselelo lwePolisi yokuFumana iNethiwekhi. Ngokungagqibekanga, umgaqo-nkqubo wokufunyanwa kwenethiwekhi uhlalutya zonke i-traffic kwinethiwekhi yakho. Kwiimeko ezininzi, uCisco ucebisa ukuba kuthintelwe ukufunyanwa kwiidilesi ezikwi-RFC 1918.
- Inyathelo lesi-5 Qwalasela ukwenza ezi sethingi ziqhelekileyo:
- Ukuba awufuni ukubonisa ii-pop-ups zeziko lomyalezo, khubaza izaziso njengoko kuchaziwe kuLungiselelo lokuziphatha kweSaziso.
- Ukuba ufuna ukwenza amaxabiso angagqibekanga eendlela eziguquguqukayo zesixokelelwano, qonda ukusetyenziswa kwazo njengoko kuchaziwe kwiiSeti eziguquguqukayo.
- Ukuba ufuna ukuhlaziya i-Geolocation Database, hlaziya ngesandla okanye kwisiseko esicwangcisiweyo njengoko kuchaziwe kuHlaziyo lweDatha yeGeolocation.
- Ukuba ufuna ukwenza iiakhawunti ezongezelelweyo eziqinisekisiweyo zasekhaya ukufikelela kwiFMC, bona Yongeza uMsebenzisi waNgaphakathi Web Ujongano.
- Ukuba ufuna ukusebenzisa i-LDAP okanye iRADIUS uqinisekiso lwangaphandle ukuvumela ufikelelo kwiFMC, bona Qwalasela EuQinisekiso lwangaphandle.
- Inyathelo lesi-6 Beka utshintsho kubumbeko; bona i-Deploy Configuration Changes.
Yintoni omawuyenze ngokulandelayo
- Review kwaye ucinge ngokuqwalasela ezinye iimpawu ezichazwe kwiiMpawu zoMlilo, kwiphepha lesi-6 kunye nesi sikhokelo.
Firepower Devices
Kwinkqubo eqhelekileyo yokuthunyelwa, izixhobo ezininzi zokuphatha i-traffic zibika kwiZiko elinye loLawulo lwe-Firepower, olisebenzisayo ukwenza ulawulo, ulawulo, ukuhlalutya, kunye nemisebenzi yokunika ingxelo.
Izixhobo zakudala
Izixhobo ze-Classic zisebenzisa i-software yesizukulwana esilandelayo se-IPS (NGIPS). Ziquka:
- Firepower 7000 series kunye Firepower 8000 series izixhobo eziphathekayo.
- I-NGIPsv, isingathwe kwiVMware.
- I-ASA eneeNkonzo ze-FirePOWER, ekhoyo kwizixhobo ezikhethiweyo ze-ASA 5500-X (ikwaquka i-ISA 3000). I-ASA ibonelela ngomgaqo-nkqubo wenkqubo yomgca wokuqala, kwaye emva koko idlula i-traffic kwimodyuli ye-ASA FirePOWER yokufumanisa kunye nokulawula ukufikelela.
Qaphela ukuba kufuneka usebenzise i-ASA CLI okanye i-ASDM ukulungisa iimpawu ezisekelwe kwi-ASA kwisixhobo se-ASA FirePOWER. Oku kubandakanya ukufumaneka okuphezulu kwesixhobo, ukutshintsha, ukuhambisa, i-VPN, i-NAT, njalo njalo.
Awukwazi ukusebenzisa i-FMC ukuqwalasela i-ASA FirePOWER ujongano, kwaye i-FMC GUI ayibonisi ujongano lwe-ASA xa i-ASA FirePOWER isetyenziswa kwimo yezibuko ye-SPAN. Kwakhona, awukwazi ukusebenzisa i-FMC ukuvala, ukuqala kwakhona, okanye ukulawula iinkqubo ze-ASA FirePOWER.
Izixhobo zoKhuselo zeFirepower
Isixhobo soKhuseleko lwe-Firepower Threat (FTD) sisixhobo somlilo esikwisizukulwana esilandelayo (NGFW) esikwanesakhono se-NGIPS. I-NGFW kunye neempawu zeqonga zibandakanya indawo ukuya kwisayithi kunye nokufikelela kude kwi-VPN, umzila oqinileyo, i-NAT, i-clustering, kunye nezinye izinto ezilungiselelwe ekuhlolweni kwesicelo kunye nolawulo lokufikelela.
I-FTD ifumaneka kuluhlu olubanzi lwamaqonga abonakalayo kunye nenyani.
Ukuhambelana
Ukufumana iinkcukacha ngokuhambelana nomphathi-sixhobo, kuquka isoftware ehambelanayo nemodeli yesixhobo esithile, iimeko zokusingathwa kwenyani, iinkqubo zokusebenza, njalo njalo, bona iCisco Firepower Release Notes kunye neCisco Firepower Compatibility Guide.
Iimpawu zamandla omlilo
Ezi theyibhile dwelisa ezinye izinto ezisetyenziswa ngokuqhelekileyo kwiFirepower.
IsiXhobo kunye neNkqubo yoLawulo lweeMpawu
Ukufumana amaxwebhu angaqhelekanga, bona: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ukuba uyafuna uku… | Qwalasela... | Njengoko kuchaziwe kwi… |
Lawula iiakhawunti zabasebenzisi zokungena kwizixhobo zakho zeFirepower | Uqinisekiso lwamandla omlilo | Malunga neeAkhawunti zoMsebenzisi |
Ukubeka iliso kwimpilo yehardware yenkqubo kunye nesoftware | Umgaqo-nkqubo wokuhlola impilo | Malunga nokuHlolwa kweMpilo |
Gcina idatha kwisixhobo sakho | Gcina kwaye ubuyisele | Gcina kwaye ubuyisele |
Nyukela kwinguqulelo entsha yeFirepower | Uhlaziyo lwenkqubo | Ulawulo lweCisco Firepower Isikhokelo soPhuculo lweZiko, inguqulelo 6.0–7.0 |
Isiseko sesixhobo sakho somzimba | Buyisela kwimizi-mveliso engagqibekanga (umfanekiso kwakhona) | I Cisco Firepower UPhuculo lweZiko loLawulo Isikhokelo, inguqulelo 6.0–7.0, kuluhlu lwamakhonkco kwimiyalelo yokwenza ufakelo olutsha. |
Hlaziya iVDB, uhlaziyo lwemithetho yokungena, okanye iGeoDB kwisixhobo sakho | Uhlaziyo lwe-VDB, uhlaziyo lwemithetho yokungena, okanye uhlaziyo lweGeolocation (GeoDB) | Uhlaziyo lweNkqubo |
Ukuba uyafuna uku… | Qwalasela... | Njengoko kuchaziwe kwi… |
Faka isicelo selayisensi ukuze uthathe i-advantage yokusebenza ngokulawulwa kwelayisensi | Ilayisenisi yeClassic okanye Smart | Malunga neeLayisensi zoMlilo |
Qinisekisa ukuqhubeka nokusebenza kwesixhobo | Ubukho obuphezulu besixhobo esilawulwayo kunye/okanye neZiko loLawulo loMlilo olufumanekayo oluphezulu | Malunga 7000 kunye 8000 Series Device Ukufumaneka High
Malunga Firepower Threat Defense Ubukho High Malunga neZiko loLawulo lwaMandla omlilo oPhezulu |
Dibanisa processing izixhobo ezininzi 8000 Series izixhobo | Ukupakishwa kwesixhobo | Malunga neDevice Stacks |
Qwalasela isixhobo indlela yetrafikhi phakathi kojongano olubini nangaphezulu | Indlela | Iirutha ezibonakalayo
Ukuhambisa ngaphezuluview kuKhuseleko lweSigrogriso soMlilo |
Qwalasela utshintsho lwepakethi phakathi kweenethiwekhi ezimbini nangaphezulu | Ukutshintsha isixhobo | Ukutshintsha okubonakalayo
Qwalasela iBridge Group Interfaces |
Guqulela iidilesi zabucala kwiidilesi zikawonke-wonke zoqhagamshelwano lwe-intanethi | Uguqulo lwedilesi yenethiwekhi (NAT) | Uqwalaselo loMgaqo-nkqubo we-NAT
Uguqulo lweDilesi yeNethiwekhi (NAT) yoKhuseleko lweNgosi yoMlilo |
Misela itonela ekhuselekileyo phakathi kweFirepower Threat Defense elawulwayo okanye izixhobo ezingama-7000/8000 | Isayithi-ukuya-kwiNdawo inethwekhi yabucala enenyani (VPN) | VPN Ngaphezuluview kuKhuseleko lweSigrogriso soMlilo |
Ukuseka iitonela ezikhuselekileyo phakathi kwabasebenzisi abakude kunye neSisongelo soMlilo olawulwayo
Izixhobo zokhuselo |
Ukufikelela kude kwi-VPN | VPN Ngaphezuluview kuKhuseleko lweSigrogriso soMlilo |
Icandelo lokufikelela komsebenzisi kwizixhobo ezilawulwayo, ulungelelwaniso, kunye neziganeko | Ukuphindaphinda usebenzisa imimandla | Intshayelelo kwi-Multitenancy usebenzisa i-Domains |
View kunye nokulawula isixhobo
uqwalaselo usebenzisa REST API umxhasi |
REST API kunye ne-REST API
Umhloli |
REST API Preferences
Firepower REST API Quick Start Guide |
Imiba yokulungisa ingxaki | N / A | Ukulungisa ingxaki kwiNkqubo |
Ubukho obuphezulu kunye neempawu zokuScalability ngePlatform
Ulungelelwaniso oluphezulu lokufumaneka (ngamanye amaxesha lubizwa ngokuba yi-failover) luqinisekisa ukuqhubeka kwemisebenzi. Ulungelelwaniso oludityanisiweyo nolucwangcisiweyo ludibanisa izixhobo ezininzi kunye njengesixhobo esinye esinengqiqo, ukufikelela okongeziweyo kokuphuma kunye nokungafuneki.
Iqonga | Ukufumaneka okuphezulu | Ukudibanisa | Ukupakisha |
Iziko loLawulo lwaMandla omlilo | Ewe
Ngaphandle kwe-MC750 |
— | — |
IZiko loLawulo loMlilo eliSebenzayo | — | — | — |
|
Ewe | — | — |
Ukhuseleko lweNgosi yoMlilo:
|
Ewe | Ewe | — |
Ukhuseleko lweFirepower Ukhuseleko olubonakalayo:
|
Ewe | — | — |
IFirepower Threat Defense Virtual (ilifu likawonke-wonke):
|
— | — | — |
|
Ewe | — | — |
|
Ewe | — | Ewe |
AMANDLA omlilo e-ASA | — | — | — |
NGIPSv | — | — | — |
Izihloko ezinxulumeneyo
Malunga 7000 kunye 8000 Series Device Ukufumaneka High
Malunga Firepower Threat Defense Ubukho High
Malunga neZiko loLawulo lwaMandla omlilo oPhezulu
Iimpawu zokuFumana, uThintelo, kunye noLungiso lwezoyikiso ezinokuthi zibeKho
Ukufumana amaxwebhu angaqhelekanga, bona: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ukuba uyafuna uku… | Qwalasela... | Njengoko kuchaziwe kwi… |
Hlola, ungene, kwaye uthathe inyathelo kwitrafikhi yenethiwekhi | Umgaqo-nkqubo wolawulo lokufikelela, umzali weminye imigaqo-nkqubo emininzi | Intshayelelo yoLawulo lokuFikelela |
Vimba okanye ubeke iliso kunxibelelwano ukuya okanye kwiidilesi ze-IP, URLs, kunye/okanye amagama ommandla | Intelligence yoKhuseleko ngaphakathi komgaqo-nkqubo wakho wokulawula ukufikelela | Malunga noKhuseleko Intelligence |
Lawula i webiisayithi apho abasebenzisi bothungelwano lwakho banokufikelela kuzo | URL ukuhluza ngaphakathi kwemigaqo yepolisi yakho | URL Ukuhluza |
Jonga i-traffic eyingozi kunye nokungena kwinethiwekhi yakho | Umgaqo-nkqubo wokungena | IiNsiseko zoMgaqo-nkqubo woNgenelelo |
Vimba itrafikhi efihliweyo ngaphandle kokuhlolwa
Jonga itrafikhi entsonkothileyo okanye ekhutshiweyo |
Umgaqo-nkqubo we-SSL | Imigaqo-nkqubo ye-SSL iPheleleview |
Yenza ukuhlolwa okunzulu kwi-traffic encapsulated kunye nokuphucula ukusebenza nge-fastpathing | Inkqubo yesihluzi sangaphambili | Malunga nokuFifa kwangaphambili |
Ireyithi yokunciphisa itrafikhi yothungelwano oluvunyelweyo okanye oluthenjiweyo lulawulo lofikelelo | Umgaqo-nkqubo woMgangatho weNkonzo (QoS). | Malunga nemigaqo-nkqubo yeQoS |
Vumela okanye uvimbele files (kubandakanywa malware) kwinethiwekhi yakho | File/umgaqo-nkqubo we-malware | File Imigaqo-nkqubo kunye noKhuseleko lweMalware |
Sebenzisa idatha evela kwimithombo yobuntlola esongelayo | UMlawuli weCisco Threat Intelligence (TID) | Usoyikiso uMlawuli wezobuNtlola ngaphezuluview |
Qwalasela uqinisekiso lokwenziwa okanye olusebenzayo lomsebenzisi ukwenza ulwazi lomsebenzisi kunye nolawulo lomsebenzisi | Ulwazi lomsebenzisi, isazisi somsebenzisi, imigaqo-nkqubo yesazisi | Malunga neMithombo yeSazisi soMsebenzisi malunga neMigaqo yeSazisi |
Qokelela umamkeli, usetyenziso, kunye nedatha yomsebenzisi kwitrafikhi kwinethiwekhi yakho ukwenza ulwazi lomsebenzisi | Imigaqo-nkqubo yokuFumana iNethiwekhi | Ngaphezuluview: Imigaqo-nkqubo yokuFumana iNethiwekhi |
Sebenzisa izixhobo ezingaphaya kwenkqubo yakho yeFirepower ukuqokelela nokuhlalutya idatha malunga nokugcwala kwenethiwekhi kunye nezoyikiso ezinokubakho | Ukudityaniswa nezixhobo zangaphandle | Uhlalutyo loMnyhadala usebenzisa izixhobo zangaphandle |
Yenza uchongo lwesicelo kunye nolawulo | Ii-detectors zesicelo | Ngaphezuluview: Ukufunyanwa kwesicelo |
Imiba yokulungisa ingxaki | N / A | Ukulungisa ingxaki kwiNkqubo |
Ukudityaniswa neZixhobo zangaphandle
Ukufumana amaxwebhu angaqhelekanga, bona: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Ukuba uyafuna uku… | Qwalasela... | Njengoko kuchaziwe kwi… |
Qalisa ngokuzenzekelayo izilungiso xa iimeko kwinethiwekhi yakho zaphula umgaqo-nkqubo onxulumeneyo | Ukulungiswa | Intshayelelo yoLungiso
Firepower System Remediation API Guide |
Ukusasaza idatha yesiganeko ukusuka kwiZiko loLawulo loMlilo ukuya a
isicelo somthengi ophuhliswe ngokwesiko |
indibaniselwano ye-eStreamer | Ukusasazwa kweseva ye-eStreamer
Isikhokelo sokuHlanganisa iNkqubo ye-Firepower eStreamer |
Iitheyibhile zedathabheyisi yombuzo kwiZiko loLawulo loMlilo kusetyenziswa umxhasi womntu wesithathu | Ufikelelo kuluhlu lwangaphandle | Izicwangciso zaNgaphandle zokuFikelela kwiDatabase
Firepower System Database Guide Access |
Yandisa idatha yokufunyanwa ngokungenisa idatha kwimithombo yomntu wesithathu | Igalelo lomamkeli | Idatha yeNgeniso yoMmkeli
ISikhokelo se-API yoMququzeleli weSistim yaMandla omlilo |
Phanda iziganeko usebenzisa izixhobo zokugcina idatha yesiganeko sangaphandle kunye nezinye iinkcukacha
izixhobo |
Ukudityaniswa nezixhobo zokuhlalutya umcimbi wangaphandle | Uhlalutyo loMnyhadala usebenzisa izixhobo zangaphandle |
Imiba yokulungisa ingxaki | N / A | Ukulungisa ingxaki kwiNkqubo |
Ukutshintsha iDomains kwiZiko loLawulo loMlilo
Kwi-multidomain deployment, amalungelo endima yomsebenzisi amisela ukuba yeyiphi imimandla umsebenzisi anokufikelela kuyo kunye namalungelo omsebenzisi anawo ngaphakathi kwendawo nganye. Unokunxulumanisa iakhawunti yomsebenzisi enye kunye nemimandla emininzi kwaye unike amalungelo awohlukileyo alo msebenzisi kwindawo nganye. Umzekeloample, unokwabela umsebenzisi
amalungelo okufunda kuphela kwidomeyini yeGlobal, kodwa amalungelo oMlawuli kwisizinda somzukulwana.
Abasebenzisi abanxulumene nemimandla emininzi banokutshintsha phakathi kwemimandla ngaphakathi kwendawo enye web iseshoni yojongano.
Phantsi kwegama lakho lomsebenzisi kwibar yesixhobo, inkqubo ibonisa umthi wemimandla ekhoyo. Umthi:
- Ibonisa imimandla yezinyanya, kodwa inokuvala ukufikelela kuzo ngokusekelwe kumalungelo anikezelweyo kwiakhawunti yakho yomsebenzisi.
- Ifihla nayiphi na enye idomeyini iakhawunti yakho yomsebenzisi ayinakufikelela kuyo, ukuquka umntakwabo kunye nesizinda somzukulwana.
Xa utshintshela kwindawo, inkqubo ibonisa:
- Idatha ehambelana nelo thambeka kuphela.
- Iinketho zemenyu zimiselwa yindima yomsebenzisi eyabelwe wena kulo thambeka.
Inkqubo
Kuluhlu oluhlayo phantsi kwegama lakho lomsebenzisi, khetha i-domain ofuna ukufikelela kuyo.
Imenyu Yomxholo
Amaphepha athile kwiNkqubo yaMandla omlilo web ujongano luxhasa unqakrazo-ekunene (elona luxhaphakileyo) okanye imenyu yemeko yokucofa-ekhohlo onokuyisebenzisa njengendlela emfutshane yokufikelela kwezinye iimpawu kwiNkqubo yeFirepower. Imixholo yemenyu yomxholo ixhomekeke apho ufikelela khona-kungekhona kuphela iphepha kodwa kunye nedatha ethile.
Umzekeloample:
- IPad idilesi ye-hotspots ibonelela ngolwazi malunga nomninimzi ohambelana naloo dilesi, kuquka nayiphi na i-whois ekhoyo kunye ne-host profile ulwazi.
- I-SHA-256 yexabiso le-hash hotspots ikuvumela ukuba wongeze i file's SHA-256 ixabiso lehash kuluhlu olucocekileyo okanye uluhlu lobhaqo lwesiko, okanye view lonke ixabiso lehashi lokukhuphela. Kumaphepha okanye iindawo ezingayixhasiyo iMenu yemeko yeNkqubo yeFirepower, imenyu yemeko eqhelekileyo yesikhangeli sakho iyavela.
Abahleli boMgaqo-nkqubo
Abahleli bemigaqo-nkqubo abaninzi baqulathe iindawo ezixhaphakileyo kumgaqo ngamnye. Ungafaka imithetho emitsha kunye neendidi; sika, khuphela, kwaye uncamathisele imithetho; misela urhulumente womgaqo; kwaye uhlele umthetho.
Umhleli weMithetho yokuNgena
Umhleli wemithetho yokungena uqulathe iindawo ezixhaphakileyo kumgaqo ngamnye wongenelelo. Ungahlela umgaqo, usete imo yomgaqo, uqwalasele iinketho zomda kunye nocinezelo, kunye view amaxwebhu umthetho. Ngokhetho, emva kokunqakraza Rule uxwebhu kwi menu yomxholo, unganqakraza Rule Uxwebhu kuxwebhu pop-up window ukuze view iinkcukacha zomgaqo othe ngqo.
Isiganeko Viewer
Amaphepha omsitho (amaphepha okrolo-phantsi kunye netheyibhile views ekhoyo phantsi kweMenu yoHlahlelo) iqulathe iindawo ezixhaphakileyo phezu kwesiganeko ngasinye, idilesi ye-IP, URL, umbuzo we-DNS, kwaye ezithile files' SHA-256 amaxabiso ehash. Ngelixa viewngeentlobo ezininzi zeminyhadala, unga:
- View ulwazi olunxulumeneyo kwi-Context Explorer.
- Yila phantsi kulwazi lomnyhadala kwifestile entsha.
- View Okubhaliweyo okupheleleyo kwiindawo apho indawo yesiganeko iqulethe okubhaliweyo okude kakhulu ukuba kungaboniswa ngokupheleleyo kumsitho view, njenge file's SHA-256 ixabiso lehashi, inkcazelo yokuba sesichengeni, okanye a URL.
- Vula a web ifestile yomkhangeli zincwadi eneenkcukacha malunga nesixhobo esisuka kumthombo wangaphandle ukuya kwiFirepower, kusetyenziswa isici soMxholo wokuLahla-Launch. Ngolwazi oluthe vetshe, jonga uPhando loMsitho usebenzisa Web-Izibonelelo eziSekwe.
- (Ukuba umbutho wakho usebenzise i-Cisco Security Packet Analyzer) Phonononga iipakethi ezinxulumene nomsitho. Ukufumana iinkcukacha, bona uPhando loMnyhadala usebenzisa iCisco Security Packet Analyzer.
Ngelixa viewngeziganeko zoqhagamshelo, unokongeza izinto kwibhloko yoBukrelekrele obungagqibekanga kwaye Ungavimbeli uluhlu:
- Idilesi ye-IP, evela kwidilesi ye-IP hotspot.
- A URL okanye igama lesizinda, ukusuka ku-a URL i-hotspot.
- Umbuzo we-DNS, osuka kwi-DNS yombuzo we-hotspot.
Ngelixa viewukubanjwa files, file iziganeko, kunye neziganeko ze-malware, unga:
- Yongeza a file ukuya okanye ukususa a file kuluhlu olucocekileyo okanye uluhlu lobhaqo lwesiko.
- Khuphela ikopi ye file.
- View inendlwane files ngaphakathi kwendawo yokugcina file.
- Khuphela uvimba womzali file kwindlwane file.
- View i file ukwakheka.
- Ngenisa i file kwi-malware yendawo kunye nohlalutyo oluguqukayo.
Ngelixa viewNgeziganeko zongenelelo, ungenza imisebenzi efanayo naleyo ikumhleli wemithetho yokungena okanye umgaqo-nkqubo wongenelelo:
- Hlela umgaqo wokuxhobisa.
- Misela urhulumente womgaqo, kuquka ukukhubaza umgaqo.
- Qwalasela iinketho zomqobo kunye nocinezelo.
- View amaxwebhu umthetho. Ngokhetho, emva kokunqakraza Rule uxwebhu kwi menu yomxholo, unganqakraza Rule Uxwebhu kuxwebhu pop-up window ukuze view iinkcukacha zomgaqo othe ngqo.
Ipakethe yoMnyhadala woNgenelelo View
Ipakethi yesiganeko songenelelo views ziqulathe idilesi ye IP hotspots. Ipakethi view isebenzisa imenyu yemeko yonqakrazo-ekhohlo.
Dashboard
Iwijethi ezininzi zedeshibhodi ziqulathe iindawo ezishushu kuzo view ulwazi olunxulumeneyo kwi-Context Explorer. Dashboard
iiwijethi zinokuqulatha idilesi ye-IP kunye ne-SHA-256 yexabiso le-hash hotspots.
Umhloli womxholo
I-Context Explorer iqulethe ii-hotspots ngaphezulu kweetshathi zayo, iitheyibhile, kunye neegrafu. Ukuba ufuna ukuphonononga idatha esuka kwiigrafu okanye uluhlu kwiinkcukacha ezingaphezulu kunokuvumela uMhloli woMxholo, ungaqhubela ezantsi kwitafile. views yedatha efanelekileyo. Unako kwakhona view umamkeli onxulumeneyo, umsebenzisi, isicelo, file, kunye nolwazi lomgaqo wokungena.
Umhloli womxholo usebenzisa imenyu yokucofa-ekhohlo, equlethe ukuhluza kunye nolunye ukhetho olukhethekileyo kuMxholo woMxholo.
Izihloko ezinxulumeneyo
Uluhlu lwezobuntlola zoKhuseleko kunye neeFidi
Ukwabelana ngeDatha kunye neCisco
Ungakhetha ukwabelana ngedatha neCisco usebenzisa ezi mpawu zilandelayo:
- Cisco Impumelelo Network
Jonga inethiwekhi yeCisco yempumelelo - Web uhlalutyo
Jonga (Ngokhetho) Khetha ukuphuma Web Ukulandelela uHlalutyo
Uncedo lwe-Firepower kwi-Intanethi, Njani, kunye noXwebhu Ungafikelela kuncedo lwe-intanethi oluvela kwi web ujongano:
- Ngokucofa ikhonkco loncedo olunovakalelo kwiphepha ngalinye
- Ngokukhetha Uncedo > Kwi-Intanethi
Uyenza njani iwijethi ebonelela ngee-walkthroughs ukuhamba ngemisetyenzana kwiZiko loLawulo loMlilo.
Iindlela zokuhamba zikhokelela ekubeni wenze amanyathelo afunekayo ukuze ufezekise umsebenzi ngokukuthatha kwinyathelo ngalinye, elinye emva kwelinye kungakhathaliseki ukuba zeziphi izikrini ze-UI onokuthi ujonge kuzo, ukugqiba umsebenzi.
Iwijethi yendlela yokwenza yenziwe ngokuzenzekelayo. Ukukhubaza iwijethi, khetha Ezikhethwayo ZoMsebenzisi kuluhlu oluhlayo phantsi kwegama lakho lomsebenzisi, kwaye ungachongi ibhokisi yokukhangela i-Yenza njani-Tos kwiSetingi zokuSebenza.
I-walkthrough idla ngokufumaneka kuwo onke amaphepha e-UI, kwaye ayikhathaleli indima yomsebenzisi. Nangona kunjalo, kuxhomekeke kumalungelo omsebenzisi, ezinye zezinto zemenyu aziyi kuvela kwi-Firepower Management Center interface. Ngaloo ndlela, i-walkthrough ayizukwenziwa kumaphepha anjalo.
Phawula
Olu hambo lulandelayo luyafumaneka kwiZiko loLawulo loMlilo:
- Bhalisa i-FMC nge-Akhawunti ye-Cisco Smart: Oku kuhamba kukukhokela ukuba ubhalise iZiko loLawulo loMlilo nge-Akhawunti ye-Cisco Smart.
- Cwangcisa iDivaysi kwaye uyongeze kwi-FMC: Le ndlela yokuhamba ikhokela ukuba usete isixhobo kunye nokongeza isixhobo kwiZiko loLawulo loMlilo.
- Qwalasela Umhla kunye nexesha: Oku kuhamba kukukhokela ukuba uqwalasele umhla kunye nexesha loMlilo.
- Izixhobo zoKhuseleko ezisongelayo zisebenzisa umgaqo-nkqubo wokusetha iqonga.
- Qwalasela Useto lwesiNxulumanisi: Oku kuhamba kukukhokela ukuba uqwalasele ujongano kwizixhobo zoKhuselo lweFirepower.
- Yenza uMgaqo-nkqubo woLawulo lokuFikelela: Umgaqo-nkqubo wolawulo lofikelelo uquka isethi yemithetho eyalelweyo, evandlakanywayo ukusuka phezulu ukuya ezantsi. Olu hambo lukhokelela ekubeni wenze umgaqo-nkqubo wolawulo lofikelelo. Yongeza uMthetho woLawulo loFikelelo - Uhambo lweFeature: Le walkthrough ichaza amacandelo
umgaqo wolawulo lofikelelo, kunye nendlela onokuzisebenzisa ngayo kwiZiko loLawulo loMlilo. - Qwalasela iiSetingi zokuJonga: Iiprothokholi ezahlukeneyo zendlela zixhaswa yiFirepower Threat Defense. Indlela engatshintshiyo ichaza apho kufuneka kuthunyelwe itrafikhi kuthungelwano lwendawo ethile. Le walkthrough ikhokela ukuba uqwalasele indlela engatshintshiyo yezixhobo.
- Yenza uMgaqo-nkqubo we-NAT - Ukuhamba kweNgcaciso: Oku kuhamba kukukhokela ukuba wenze umgaqo-nkqubo we-NAT kwaye uhambe nawe kwiinkalo ezahlukeneyo zomgaqo we-NAT.
Ungafumana amaxwebhu ongezelelweyo anxulumene nenkqubo yeFirepower usebenzisa imephu yendlela yoxwebhu: http://www.cisco.com/c/en/us/td/docs/security/firepower/roadmap/firepower-roadmap.html
Amaphepha akwiNqanaba eliPhezulu loLuhlu lwaMaphepha okusasazwa kweFMC
La maxwebhu alandelayo anokuba luncedo xa uqwalasela ukusetyenziswa kweZiko loLawulo loMlilo, uHlelo lwe-6.0+.
Amanye amaxwebhu aqhagamshelweyo awasebenzi kwiZiko loLawulo loMlilo. UmzekeloampLe, ezinye iilinki kumaphepha oKhuseleko lweFirepower Threat zithe ngqo kwiinkqubo ezilawulwa nguMphathi weSixhobo saMandla omlilo, kwaye amanye amakhonkco kumaphepha ehardware awanxulumananga neFMC. Ukuthintela ukubhideka, nikela ingqalelo ngenyameko kwizihloko zamaxwebhu. Kwakhona, amanye amaxwebhu agubungela iimveliso ezininzi kwaye ke anokuvela kumaphepha emveliso amaninzi.
Iziko loLawulo lwaMandla omlilo
- Izixhobo zehardware zeZiko loLawulo loMlilo: http://www.cisco.com/c/en/us/support/security/defense-center/tsd-products-support-series-home.html
- IZiko loLawulo lwaMandla omlilo Izixhobo zeVirtual: • http://www.cisco.com/c/en/us/support/security/defense-center-virtual-appliance/tsd-products-support-series-home.html • http://www.cisco.com/c/en/us/support/security/defense-center/tsd-products-support-series-home.html
- I-Firepower Threat Defense, ekwabizwa ngokuba yi-NGFW (i-Next Generation Firewall) izixhobo
- Isoftware yoKhuseleko lweFirepower Threat: http://www.cisco.com/c/en/us/support/security/firepower-ngfw/tsd-products-support-series-home.html
- Ukhuseleko lweFirepower Ukhuseleko olubonakalayo: http://www.cisco.com/c/en/us/support/security/firepower-ngfw-virtual/tsd-products-support-series-home.html
- Firepower 4100 series: https://www.cisco.com/c/en/us/support/security/firepower-4100-series/tsd-products-support-series-home.html
- I-Firepower 9300: https://www.cisco.com/c/en/us/support/security/firepower-9000-series/tsd-products-support-series-home.html
- ISA 3000: https://www.cisco.com/c/en/us/support/security/industrial-security-appliance-isa/tsd-products-support-series-home.html
Izixhobo ze-Classic, ezikwabizwa ngokuba yi-NGIPS (Inkqubo yokuThintela yesiZukulwana esilandelayo) izixhobo
- I-ASA eneenkonzo ze-FirePOWER:
- I-ASA 5500-X eneenkonzo zaMmandla oMlilo: • https://www.cisco.com/c/en/us/support/security/asa-firepower-services/tsd-products-support-series-home.html https://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/tsd-products-support-series-home.html
- I-ISA 3000 eneNkonzo zaMmandla oMlilo: https://www.cisco.com/c/en/us/support/security/industrial-security-appliance-isa/tsd-products-support-series-home.html
- Firepower 8000 series: https://www.cisco.com/c/en/us/support/security/firepower-8000-series-appliances/tsd-products-support-series-home.html
- Firepower 7000 series: https://www.cisco.com/c/en/us/support/security/firepower-7000-series-appliances/tsd-products-support-series-home.html
- AMP yeNethiwekhi: https://www.cisco.com/c/en/us/support/security/amp-appliances/tsd-products-support-series-home.html
- I-NGIPSv (isixhobo esibonakalayo): https://www.cisco.com/c/en/us/support/security/ngips-virtual-appliance/tsd-products-support-series-home.html
IiNgxelo zeLayisenisi kuXwebhu
Isiteyitimenti seLayisensi ekuqaleni kwecandelo sibonisa ukuba yeyiphi iLayisenisi yakudala okanye eSmart omawunike isixhobo esilawulwayo kwiNkqubo yeFirepower ukwenza uphawu oluchazwe kwicandelo.
Ngenxa yokuba izakhono ezinelayisenisi zihlala zisongeza, isitatimenti selayisensi sibonelela kuphela ngelayisenisi ephezulu efunekayo kuphawu ngalunye.
Isiteyitimenti "okanye" kwisiteyitimenti seLayisensi sibonisa ukuba kufuneka unikeze ilayisenisi ethile kwisixhobo esilawulwayo ukuze uvumele uphawu oluchazwe kwicandelo, kodwa ilayisenisi eyongezelelweyo inokongeza ukusebenza. Umzekeloample, ngaphakathi a file umgaqo-nkqubo, abanye file Izenzo zomthetho zifuna ukuba unikeze ilayisensi yoKhuselo kwisixhobo ngelixa abanye befuna ukuba unikeze ilayisenisi yeMalware.
Ngolwazi oluthe vetshe malunga neelayisensi, bona Malunga neeLayisensi zokuSebenza koMlilo.
Izihloko ezinxulumeneyo
Malunga neeLayisensi zoMlilo
IiNkcazo zeZixhobo ezixhaswayo kuXwebhu
Isiteyitimenti seZixhobo ezixhaswayo ekuqaleni kwesahluko okanye isihloko sibonisa ukuba uphawu luxhaswa kuphela kuthotho lwesixhobo esikhankanyiweyo, usapho, okanye imodeli. UmzekeloampLe, amanqaku amaninzi axhaswa kuphela kwi-Firepower Threat Defense izixhobo.
Ukufumana ulwazi oluthe kratya malunga namaqonga axhaswa koku kukhululwa, bona amanqaku okukhululwa.
IiNgxelo zoFikelelo kuXwebhu
Ingxelo yoFikeleleko ekuqaleni kwenkqubo nganye kolu xwebhu ibonisa iindima zabasebenzisi ezichazwe kwangaphambili ezifunekayo ukwenza inkqubo. Nayiphi na indima edwelisiweyo ingenza inkqubo.
Abasebenzisi abaneendima zesiko banokuba neeseti zemvume ezahlukileyo kwezo zeendima ezichazwe kwangaphambili. Xa indima echazwe kwangaphambili isetyenziselwa ukubonisa iimfuno zofikelelo lwenkqubo, indima yesiko eneemvume ezifanayo nayo inofikelelo. Abanye abasebenzisi abaneendima zesiko banokusebenzisa iindlela ezahlukeneyo zemenyu ukufikelela kumaphepha oqwalaselo. Umzekeloample, abasebenzisi abanendima yesiko kunye namalungelo omgaqo-nkqubo wokungena kuphela ukufikelela kumgaqo-nkqubo wohlalutyo womnatha ngokusebenzisa umgaqo-nkqubo wokungena endaweni yendlela esemgangathweni ngomgaqo-nkqubo wokulawula ukufikelela.
Ukufumana ulwazi oluthe kratya malunga neendima zabasebenzisi, jonga iindima zoMsebenzisi kwaye wenze ngokwezifiso iindima zoMsebenzisi kwi Web Ujongano.
IiNdibano zedilesi ye-IP yeNkqubo yamandla omlilo
Ungasebenzisa i-IPv4 Classless Inter-Domain Routing (CIDR) notation kunye ne-IPv6 efanayo yeprefix ubude benowuthi ukuchaza iibhloko zeedilesi kwiindawo ezininzi kwiNkqubo yoMlilo.
Xa usebenzisa i-CIDR okanye ubhalo lobude be-prefix ukucacisa ibhloko yeedilesi ze-IP, i-Firepower System isebenzisa kuphela inxalenye yedilesi ye-IP yenethiwekhi echazwe yimaski okanye ubude besiqalo. Umzekeloample, ukuba uchwetheza 10.1.2.3/8, Firepower System isebenzisa 10.0.0.0/8.
Ngamanye amazwi, nangona iCisco incoma indlela esemgangathweni yokusebenzisa idilesi ye-IP yenethiwekhi kumda we-bit xa usebenzisa i-CIDR okanye i-prefix ubude be-notation, i-Firepower System ayifuni.
Izibonelelo ezongezelelweyo
Uluntu lweFirewalls luvimba ogcweleyo wemathiriyeli yereferensi ephelelisa amaxwebhu ethu abanzi. Oku kuquka amakhonkco kwiimodeli ze-3D zehardware yethu, isikhethi soqwalaselo lwehardware, isibambiso semveliso, uqwalaselo ex.ampi-les, amanqaku ezobuchwepheshe bokuxazulula iingxaki, iividiyo zoqeqesho, iiseshini ze-lab kunye ne-Cisco Live, amajelo eendaba ezentlalo, iiBlogs ze-Cisco kunye nawo onke amaxwebhu apapashwe liqela le-Technical Publications.
Abanye abantu abathumela kwiindawo zoluntu okanye iisayithi zokwabelana ngevidiyo, kubandakanywa iimodareyitha, basebenzela iCisco Systems. Izimvo ezivakaliswe kwezo ndawo kwaye kuzo naziphi na izimvo ezihambelanayo ziimbono zobuqu zababhali bokuqala, hayi iCisco. Umxholo unikezelwe ngeenjongo zolwazi kuphela kwaye akwenzelwanga ukuba kugqitywe okanye ukumelwa yiCisco okanye naliphi na elinye iqela.
Phawula
Ezinye zeevidiyo, amanqaku obugcisa, kunye nemathiriyeli yereferensi kwiFirewall Community ikhomba kwiinguqulelo ezindala zeFMC. Uguqulelo lwakho lweFMC kunye noguqulelo olukhankanyiweyo kwiividiyo okanye amanqaku obuchule anokuba nomahluko kujongano lomsebenzisi obangela ukuba iinkqubo zingafani.
Ukuqalisa ngoFirepower
Amaxwebhu / Izibonelelo
![]() |
I-CISCO iQale ngokuSebenza koMlilo ukwenza uSeko lokuqala [pdf] Isikhokelo somsebenzisi Kuqalwe ngokuSebenza koMlilo ukwenza uSeto lokuqala, uMlilo wenza uSeko lokuqala, ukwenza uSeto oluQalayo, uSeto lokuQala, ukuSeta |