Ubulula bobuNjineli

Khupha amanqaku
JSA 7.5.0 Hlaziya iPhakeji 5 qcow2
Ipapashiwe
2023-06-25

Amanqaku oMlawuli

Esi sikhokelo sibandakanya imiba yokuhlohla, ukuphuculwa kunye nokusebenza kwe-vJSA (i-virtual Juniper Secure Analytics) isixhobo phezu kwe-Kernel Virtual Machine (KVM) okanye i-Open Stack bume. Kucingelwa ukuba umfundi uqhelene ne-KVM, kunye ne-virtualization kunye ne-Ubuntu Linux, okanye i-Open Stack bume. ExampOkulandelayo kwesi sikhokelo kwenziwa ngolu hlobo lulandelayo:

• Ukufakwa kokuqala kunye nokwandiswa kokugcinwa komfanekiso we-vJSA ku-Ubuntu 18.04 ukusasazwa kwe-KVM.
• Ukusasazwa kwe-OpenStack kusetyenziswa itemplates zobushushu.

Izinto ezifunekayo zokuFakela i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2

Sicebisa ngezisetingi zenkqubo zilandelayo phambi kokuba unyukele kwi-JSA Release 7.5.0 Hlaziya iPhakeji 5 qcow2:

• Qinisekisa oomatshini benyani be-JSA kunikezelo lwenkumbulo olungafaniyo (NUMA) njengomlawuli wedisk okanye umlawuli we-RAID kwindlela yokusingatha. Oku kwandisa imisebenzi yediski ye-I/O kwaye inqanda ukuwela i-QuickPath Interconnect (QPI).
• Misela umgaqo-nkqubo we-NUMA njengongqongqo kumatshini we-kernel-based virtual machine (KVM) ukwenzela ukuba imemori kunye nezibonelelo ze-CPU zabiwe zonke zisuka kwi-NUMA enye.
• Ngowona msebenzi we-I/O ogqwesileyo, ukwabiwa kwangaphambili kwemetadata kuyacetyiswa njengobuncinci. Ulwabiwo olupheleleyo lwediski luyafuneka ekusebenzeni okuphezulu kwaye kuyacetyiswa kulo lonke ukufakwa kwi-KVM.
• Yandisa ubungakanani bogcino olwabelwe isahlulelo esithile kumfanekiso wedisk.

PHAWULA: I-Juniper Networks ayiboneleli nayiphi na inkxaso yokufaka kunye nokuqwalasela iseva ye-KVM. Kufuneka ufakele umfanekiso wesixhobo esibonakalayo kwaye uwumise ngokwemigaqo ecetyiswayo yesixhobo esibonakalayo. I-Juniper Networks iya kunika inkxaso kuphela emva kokuba i-Juniper Secure Analytics iqalile ngempumelelo.
Izinto ezifunekayo zokuthumela iJuniper Secure Analytics kwiseva ye-KVM zezi zilandelayo:

• Ulwazi malunga nokuqwalasela kunye nokufaka iseva ye-KVM.
• Iseva ye-KVM kunye neepakethe ezixhaswayo kufuneka zifakwe kwindlela yakho esekwe kwiLinux. Qhagamshelana nomthengisi wakho weLinux okanye amaxwebhu olwazi malunga nokufaka i-KVM.
• Isicelo okanye indlela yoku view indlela ekude esweni enenyani, enje nge Virtual Machine
  Umphathi (VMM), iNethiwekhi yeKhompyutha yeNgcaciso (VNC) Viewer, okanye nasiphi na esinye isicelo.
• Ujongano Lwebhulorho luqwalaselwe ngokwemeko-bume yakho kunye nokuba zimbini iidilesi ze-IP ezisimahla.

Ubuncinane beeMfuno zeSoftwe yokuFakela i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2
Ezona mfuno zisezantsi zesoftware yokufakela i-JSA 7.5.0 Update Package 5 qcow2 zezi zilandelayo:

• 32-GB RAM
• 16 CPU cores
• 512 GB indawo yedisk

I-Prerequisite Hardware Accessories for JSA 7.5.0 Update Package 5 qcow2

Phambi kokuba ufake iimveliso ze-JSA, qinisekisa ukuba uyafikelela kwizincedisi zehardware ezifunekayo kunye nesoftware yedesktop.

Izixhobo zeHardware

Qinisekisa ukuba unofikelelo kula malungu e-hardware alandelayo:

• Ukubeka iliso kunye nekhibhodi, okanye i-serial console
• Unikezelo lwaMandla olungaphazamisekiyo (UPS) kuzo zonke iinkqubo ezigcina idatha, njenge-console ye-JSA, amacandelo eProsesa yoMnyhadala, okanye amacandelo omqhubekisi wokuqukuqela we-JSA
• Null intambo yemodem ukuba ufuna ukudibanisa isixokelelwano kwi-serial console

PHAWULA: Iimveliso ze-JSA zixhasa i-hardware-based Redundant Array ye-Independent Disks (RAID) ukuphunyezwa, kodwa azixhasi ufakelo lwe-RAID olusekwe kwisoftware okanye ufakelo lwe-RAID oluncedisiweyo.

Ukufakela i-JSA kumatshini obonakalayo

Yenza umatshini wenyani. Ngolwazi oluthe kratya, bona Akukho Isihloko sekhonkco.
PHAWULA: Imenyu yokuhlohla isoftwe ayizukubonakala kwiwizadi yokuhlohla ngokungagqibekanga. Ukuba ufuna ukwenza ufakelo lwesoftware ye-JSA, bhekisa kwi-JSA Software kuphela uFakelo.
Emva kokuba udale umatshini wakho wenyani, kufuneka ufake isoftware yeJSA kumatshini obonakalayo.

1. Ngena kumatshini wenyani ngokuchwetheza ingcambu yegama lomsebenzisi. Igama lomsebenzisi linobuzaza.
2. Yamkela isiVumelwano seLayisensi yomsebenzisi wokugqibela.
   ICEBISO: Cofa iqhosha le-Spacebar ukuya phambili kuxwebhu.
3. Khetha uhlobo lwesixhobo:
   · UFakelo lwesiXhobo (sithengwe njengesixhobo)
   · IsiXhobo sokuFumaneka okuphezulu
   · IsiXhobo soMamkeli we-App
   · IsiXhobo sokuHlalutya kwelog
   PHAWULA: Unokukhetha uhlobo lwesixhobo ngokusekwe kusetyenziso olucetywayo lwesixhobo.
4. Ukuba ukhethe isixhobo sokufumaneka okuphezulu (HA), khetha ukuba isixhobo siyiconsole.
5. Ukuba ukhethe isixhobo kwi-Log Analytics Appliance, khetha i-LA (Log Analytics "All-In-One" okanye iConsole 8099).
6. Kuhlobo lokuseta, khetha uSeto oluQhelekileyo (olumiselweyo) okanye uSeto loBuyiselo loBuyiselo, uze ukhethe Okulandelayo.
7. Iphepha lokuSeta uMhla/iXesha liyavela. Ngenisa umhla wangoku kuMhla waNgoku (YYYY/MM/DD) kwindawo ngendlela ebonisiweyo. Umhla uyaboniswa kwireferensi yakho. Faka ixesha kwifomati yeeyure ezingama-24 kwi-24h Clock Time (HH: MM: SS) indawo. Kungenjalo, ungangenisa igama okanye idilesi ye-IP yomncedisi wexesha apho ixesha linokudityaniswa khona kwindawo yomncedisi wexesha. Emva kokufaka umhla kunye neenkcukacha zexesha, khetha Okulandelayo.
8. Khetha ilizwekazi/iNdawo iphepha liyavela. Khetha i-Time Zone Continent okanye iNdawo njengoko ifunwa kwaye ukhethe Okulandelayo. Ixabiso elimiselweyo yiMelika.
9. Iphepha loKhetho lweNdawo yeXesha liyavela. Khetha iNdawo yeXesha leSixeko okanye iNgingqi njengoko kufuneka kwaye ukhethe Okulandelayo. Ixabiso elimiselweyo yiNew York.
10. Ukuba ukhethe i-HA yoBuyiselo loBuyiselo, ngenisa idilesi ye-IP yeqela.
11. Khetha uhlobo lweProtocol ye-Intanethi: · Khetha ipv4 okanye ipv6.
12. Ukuba ukhethe i-ipv6, khetha i-manual okanye i-auto yohlobo loLungiselelo.
13. Khetha ulungiselelo oludityanisiweyo lojongano.
14. Khetha ujongano lolawulo.
    PHAWULA: Ukuba ujongano lunekhonkco (intambo eqhagamshelwe), uphawu lokudibanisa (+) luboniswa phambi kwenkcazelo.
15. Kwifestile yoSeto lweNgcaciso yeNethiwekhi, qwalasela useto lwenethiwekhi elandelayo kwaye ukhethe Okulandelayo.
    · Igama lomamkeli: Ngenisa igama le-domain elifaneleke ngokupheleleyo njengegama lomamkeli wenkqubo
    · Idilesi ye-IP: Faka idilesi ye-IP yesixokelelwano
    · IMaski yeNethiwekhi: Faka imaski yenethiwekhi yenkqubo
    · Isango: Ngena isango elimiselweyo lenkqubo
    · I-DNS yokuqala: Faka idilesi yokuqala yeseva ye-DNS
    · I-DNS yesibini: (Ngokuzithandela) Chwetheza idilesi yesibini yeseva ye-DNS
    · I-IP kawonke-wonke: (Ngokhetho) Faka idilesi kawonke-wonke ye-IP yomncedisi
    PHAWULA: Ukuba uqwalasela le nginginya njengenginginya ephambili yokufumaneka okuphezulu (HA) cluster, kwaye ukhethe Ewe ukulungiselela uqwalaselo oluzenzekelayo, kufuneka urekhode idilesi ye-IP eyenziwe ngokuzenzekelayo. Idilesi ye-IP eyenziweyo ifakwe ngexesha lokucwangciswa kwe-HA. Ukufumana ulwazi oluthe kratya, jonga iJuniper Secure Analytics iSikhokelo sokuFumana okuPhezulu.
16. Ukuba ufaka i-Console, faka igama eliyimfihlo lomlawuli elihlangabezana nezi ndlela zilandelayo:
    · Iqulathe ubuncinci amagama asi-8
    · Iqulathe ubuncinane unobumba omnye omkhulu
    · Inonobumba omnye ubuncinane omnye
    · Iqulethe ubuncinane idijithi enye
    · Iqulathe ubuncinci umbhalo omnye: @, #, ^, okanye *.
17. Ngenisa igama lokugqithisa eliyingcambu elihlangabezana nezi ndlela zilandelayo:
    · Iqulathe ubuncinci amagama asi-5
    · Ayinazithuba
    · Inokuquka abalinganiswa abalandelayo: @, #, ^, kunye *.
18. Cofa Okulandelayo.
19. Faka isitshixo sakho selayisensi.
    a. Ngena kwi-JSA. Igama lomsebenzisi elihlala likhona ngu admin. Igama lokugqitha ligama lokugqitha leakhawunti yomsebenzisi yomlawuli oyibeke ngexesha lofakelo.
    b. Cofa Ngena kwi-JSA.
    c. Cofa ithebhu yoMlawuli.
    d. Kwipheyini yokukhangela, cofa uBumbeko lweSixokelelwano.
    e. Cofa i icon yeNkqubo kunye noLawulo lweLayisensi.
    f. Ukusuka kwiDisplay list box, khetha iiLayisensi, kwaye ulayishe isitshixo sakho selayisensi.
    g. Khetha ilayisensi engabiwanga kwaye ucofe i-Allocate System to License.
    h. Kuluhlu lweenkqubo, khetha inkqubo, kwaye nqakraza kuNika iNkqubo kwiLayisensi.
    i. Cofa i-Deploy License Changes.

Ukufakela i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2 kwiseva ye-KVM usebenzisa i-VMM

Sebenzisa umthengi womatshini wenyani we-VMM ukufaka i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2 kwiseva ye-KVM.
Ukufakela iPhakeji yoHlaziyo ye-JSA 7.5.0 5 qcow2 kwiseva ye-KVM ngokusebenzisa i-VMM:

1. Khuphela i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2 umfanekiso ukusuka https://support.juniper.net/support/downloads/ kwindlela yakho yendawo.
   PHAWULA: Musa ukutshintsha igama le-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2 umfanekiso file ukuba ukhuphele kwi Juniper Networks inkxaso indawo. Ukuba utshintsha igama lomfanekiso file, ukudalwa kwe-JSA 7.5.0 Update Package 5 qcow2 inokusilela.
2. Qalisa umxhasi weVMM.
3. Khetha File > Umatshini oMtsha weVirtual kwibar yemenyu yeVMM ukufaka umatshini omtsha wenyani kwiseva ye-KVM. Ibhokisi yencoko yababini eNtsha yeVM iyavela kwaye iyabonisa. Inyathelo loku-1 lesi-4 lofakelo olutsha lweVM.
4. Ngaphantsi Khetha indlela ongathanda ukuyihlohla ngayo inkqubo yokusebenza, cofa Ngenisa umfanekiso okhoyo wedisk.
5. Cofa Phambili ukuya kwinyathelo elilandelayo. Inyathelo lesi-2 lesi-4 libonisiwe.
6. Ngaphantsi Nikeza umendo okhoyo wogcino, cofa Khangela.
7. Ngaphantsi Khetha umthamo wogcino , cofa Khangela iNdawo yeNdawo ezantsi kwebhokisi yencoko yababini ukuze ufumane kwaye ukhethe i JSA 7.5.0 Hlaziya iPhakeji 5 qcow2 umfanekiso file (.qcow2) igcinwe kwindlela yakho.
8. Phantsi Khetha uhlobo lwenkqubo yokusebenza kunye noguqulelo, khetha i-Linux yohlobo lwe-OS kunye nenombolo yenguqulo ye-Red Hat ye-Linux yoguqulelo.
   PHAWULA: Sicebisa ukuba usebenzise inguqulo ye-Linux efana ne-JSA 7.5.0 yoHlaziyo yePhakeji 5 qcow2 esetyenziswayo.
9. Cofa Phambili ukuya kwinyathelo elilandelayo.
   Inyathelo lesi-3 lesi-4 libonisiwe.
10. Ngaphantsi kokuKhetha iMemori kunye neseto lwe-CPU, qinisekisa ukuba i-4 isetelwe ii-CPU kwaye ukhethe okanye ufake eli xabiso lilandelayo leMemori (RAM):
    · 32768 MBUkwenzela i-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2 ukuba imiselwe njengeJunos Space node okanye njengenodi ye-FPMM
11. Cofa Phambili ukuya kwinyathelo elilandelayo.
    Inyathelo lesi-4 libonisiwe.
12. Ngaphantsi koKhetho lweNethiwekhi, khetha ukhetho olusekwe kwindlela ofuna ukulumisa ngayo unxibelelwano lwenethiwekhi kwi-JSA 7.5.0 yokumisela iPhakeji ye-5 qcow2.
13. Ngaphantsi koLungelo ukuqalisa ukufakela, kwindawo yeGama, faka igama le-JSA 7.5.0 iPhakeji yoHlaziyo 5 qcow2.

Ukucoca iCache

Emva kokugqiba ukufakela, kufuneka ucime i-cache yeJava kunye neyakho web i-browser cache phambi kokuba ungene kwisixhobo se-JSA.
Ngaphambi kokuba uqale
Qinisekisa ukuba unomzekelo omnye kuphela wokuvula isikhangeli sakho. Ukuba uneenguqulelo ezininzi zesikhangeli sakho esivulekileyo, i-cache inokusilela ukucima.
Qinisekisa ukuba iJava Runtime Environment ifakelwe kwindlela yedesktop oyisebenzisayo view ujongano lomsebenzisi. Unakho ukukhuphela uguqulelo lweJava 1.7 kwiJava webindawo: http://java.com/.
Malunga nalo msebenzi
Ukuba usebenzisa iMicrosoft Windows 7 inkqubo yokusebenza, i-ayikhoni yeJava ihlala ibekwe phantsi kwepheyini yeeNkqubo.
Ukucima i-cache:

1. Cima i-cache yeJava yakho:
   a. Kwidesktop yakho, khetha Qala > Iphaneli yokulawula.
   b. Cofa kabini i icon yeJava.
   c. Kwi-Intanethi yeThutyana Files ipayini, cofa View.
   d. KwiCache yeJava Viewer window, khetha onke amangeno oMhleli woBebelo.
   e. Cofa i icon ethi Cima.
   f. Cofa Vala. g. Cofa u-Kulungile.
2. Vula eyakho web umkhangeli zincwadi.
3. Susa i-cache yakho web umkhangeli zincwadi.
   Ukuba usebenzisa iMozilla Firefox web Umkhangeli zincwadi, kufuneka ucime i-cache kwiMicrosoft Internet Explorer kunye neMozilla Firefox web izikhangeli.
4. Ngena kwi-JSA.

Imiba eyaziwayo kunye neMida

• Ukuba Ukujonga ukuba i-tomcat iyasebenza kwaye ilungile (umzamo we-0/30) idlula (umzamo we-10/30), kufuneka usebenzise enye iseshoni ye-SSH ukungena kwidilesi ye-IP yenkqubo ngexesha lofakelo, kwaye ususe i-imqbroker lock. file. Qala kwakhona inkonzo ye-imqbroker ngolu hlobo lulandelayo:
  i-systemctl iqalisa kwakhona i-imqbroker
  PHAWULA: Ukuba ukufakela kuphelile, qalisa kwakhona inkqubo kwaye wenze ukuseta okwesibini.
• Igama lokugqithisa lomlawuli alimiselwanga ngokufanelekileyo zizikripthi zokumisela.
  Emva kokufaka ikhonsoli, tshintsha igama eligqithisiweyo lomlawuli nge-CLI ngokusebenzisa la manyathelo alandelayo:

1. Qhagamshela kwi-console yakho usebenzisa i-SSH njengomsebenzisi weengcambu.
   2. Seta igama eligqithisiweyo ngokusebenzisa lo myalelo ulandelayo: /opt/qradar/support/changePasswd.sh -a
2. Ngenisa igama lokugqithisa elitsha xa ucelwa.
3. Phinda ufake igama lokugqithisa elitsha xa ucelwa.
4. Qala kwakhona inkonzo ye-UI ngalo myalelo ulandelayo: inkonzo tomcat qala kwakhona
5. Ngena kwi-UI ngeakhawunti yomlawuli kunye negama eligqithisiweyo elitsha.
6. Yenza utshintsho lokuthumela. Igama lokugqitha leakhawunti yomlawuli litshintshiwe ngoku.

Imiba Esonjululweyo

Akukho nanye.
I-Juniper Networks, i-logo ye-Juniper Networks, i-Juniper, kunye ne-Junos ziimpawu zorhwebo ezibhalisiweyo ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye iimpawu zorhwebo, amanqaku eenkonzo, amanqaku abhalisiweyo, okanye amanqaku eenkonzo abhalisiweyo yipropati yabanini bazo. I-Juniper Networks ayithathi xanduva kuyo nayiphi na into engachanekanga kolu xwebhu. I-Juniper Networks inelungelo lokutshintsha, ukuguqula, ukutshintshela, okanye ukuhlaziya olu papasho ngaphandle kwesaziso. Copyright © 2023 Juniper Networks, Inc. Onke amalungelo agciniwe.

Amaxwebhu / Izibonelelo

JUNIPER NETWORKS JSA Juniper Secure Analytics [pdf] Isikhokelo somsebenzisi I-JSA Juniper Secure Analytics, i-JSA, iJuniper Secure Analytics, i-Secure Analytics, i-Analytics

Iimbekiselo

• Incwadi yokusebenzisa