Khipha Amanothi
I-JSA 7.5.0 Buyekeza Iphakheji 6 Ukulungiswa Kwesikhashana 01 SFS
Ishicilelwe
2023-07-20

I-JSA Secure Analytics

Yini Okusha ku-JSA 7.5.0 Update Package 6

Ukuze uthole ulwazi olwengeziwe mayelana nokuthi yini entsha ku-JSA 7.5.0 Update Package 6, bona Yini Umhlahlandlela Omusha.

Ukufaka i-JSA 7.5.0 Update Package 6 Interim Fix 01 Update Software

I-JSA 7.5.0 Update Package 6 Interim Fix 01 ixazulula izinkinga ezibikiwe ezivela kubasebenzisi nabalawuli abavela ezinguqulweni zangaphambilini ze-JSA. Lesi sibuyekezo sesofthiwe esiqoqiwe silungisa izinkinga zesofthiwe ezaziwayo ekusetshenzisweni kwakho kwe-JSA. Izibuyekezo zesofthiwe ye-JSA zifakwa kusetshenziswa i-SFS file. Isibuyekezo sesofthiwe singabuyekeza zonke izinto ezisetshenziswayo ezinamathiselwe ku-JSA Console.
I-7.5.0.20230612173609INT.sfs file ingathuthukisa inguqulo ye-JSA elandelayo ibe yi-JSA 7.5.0 Buyekeza Iphakheji 6 Ukulungisa Kwesikhashana 01:

• I-JSA 7.5.0 Update Package 6

Lo mbhalo awubandakanyi yonke imilayezo yokufaka kanye nezimfuneko, ezifana noshintsho ezidingweni zenkumbulo kagesi noma izimfuneko zesiphequluli ze-JSA. Ukuze uthole ukwaziswa okwengeziwe, bheka i- I-Juniper Secure Analytics Thuthukisa i-JSA iye ku-7.5.0.
Qiniseka ukuthi uthatha izinyathelo zokuphepha ezilandelayo:

• Yenza isipele idatha yakho ngaphambi kokuba uqale noma yikuphi ukuthuthukiswa kwesofthiwe. Ukuze uthole ulwazi olwengeziwe mayelana nokwenza ikhophi yasenqolobaneni nokuthola, bheka Juniper Secure Analytics Administration Guide.
• Ukuze ugweme amaphutha okufinyelela kulogi yakho file, vala yonke i-JSA evuliwe webIzikhathi ze-UI.
• Isibuyekezo sesofthiwe ye-JSA asikwazi ukufakwa kumsingathi ophethwe okunguqulo yesofthiwe ehlukile kusukela ku-Console. Zonke izinto ezisetshenziswayo ekusetshenzisweni kufanele zibe kuhlelo olufanayo lokubuyekezwa kwesofthiwe ukuze kuthuthukiswe konke ukusetshenziswa.
• Qinisekisa ukuthi zonke izinguquko zisetshenziswa ezintweni zakho zikagesi. Isibuyekezo asikwazi ukufakwa kuzinto zikagesi ezinezinguquko ezingasetshenzisiwe.
• Uma lokhu kuwukufakwa okusha, abalawuli kufanele baphindeview imiyalelo ku Umhlahlandlela wokufaka we-Juniper Secure Analytics.

Ukufaka isibuyekezo sesofthiwe ye-JSA 7.5.0 Update Package 6 Interim Fix 01:

1. Landa i-7.5.0.20230612173609INT.sfs kusukela ku-Juniper Customer Support webindawo. https://support.juniper.net/support/downloads/
2. Usebenzisa i-SSH, ngena ohlelweni lwakho njengomsebenzisi wempande.
3. Ukuqinisekisa ukuthi unesikhala esanele (5 GB) ku/store/tmp se-JSA Console, thayipha umyalo olandelayo:
   df -h /tmp /storetmp /store/transient | tee diskchecks.txt
   • Inketho yohlu lwemibhalo engcono kakhulu: /storetmp
   Itholakala kuzo zonke izinhlobo zezinto zikagesi kuzo zonke izinguqulo. Ezinguqulweni ze-JSA 7.5.0 /store/tmp iyisixhumi esihlukanisayo /storetmp.
   Uma umyalo wokuhlola idiski wehluleka, thayipha kabusha izimpawu zokucaphuna kutheminali yakho, bese uphinda usebenzise umyalo. Lo myalo ubuyisela imininingwane kukho kokubili iwindi lomyalo naku a file kukhonsoli ebizwa nge-diskchecks.txt. Review lokhu file ukuqinisekisa ukuthi zonke izinto zikagesi zinendawo okungenani engu-5 GB etholakala kuhla lwemibhalo ukukopisha i-SFS ngaphambi kokuzama ukuhambisa file kumsingathi ophethwe. Uma kudingeka, khulula isikhala sediski kunoma yimuphi umsingathi ohlulekayo ukuba ngaphansi kuka-5 GB otholakalayo.
   QAPHELA: Ku-JSA 7.3.0 nakamuva, isibuyekezo sesakhiwo senkomba yezinhla zemibhalo ezithobelayo ze-STIG kunciphisa usayizi wezingxenye ezimbalwa. Lokhu kungathinta ukuhamba okukhulu fileku-JSA.
4. Ukwakha inkomba yemidiya/yezibuyekezo, thayipha umyalo olandelayo: mkdir -p /media/updates
5. Usebenzisa i-SCP, kopisha ifayela le- files ku-JSA Console kuhla lwemibhalo/storetmp noma indawo ene-5 GB yesikhala sediski.
6. Shintshela kuhla lwemibhalo lapho ukopishe khona ipheshi file.
   Okwesiboneloample, cd/storetmp
7. Vula ifayili le- file kusiqondisi se-/storetmp usebenzisa i-bunzip utility:
   bunzip2 7.5.0.20230612173609INT.sfs.bz2
8. Ukukhweza isichibi file ku-directory/media/updates, thayipha umyalo olandelayo:
   mount -o loop -t squashfs /storetmp/7.5.0.20230612173609INT.sfs /media/updates
9. Ukuze usebenzise isifaki se-patch, thayipha umyalo olandelayo:
   /media/updates/installer
   QAPHELA: Isikhathi sokuqala lapho uqalisa isibuyekezo sesofthiwe, kungase kube nokubambezeleka ngaphambi kokuthi kuboniswe imenyu yokufaka isibuyekezo sesofthiwe.
10. Usebenzisa isifaki sepheshi, khetha konke.

• Inketho yonke ibuyekeza isoftware kuzo zonke izinto zikagesi ngendlela elandelayo:
• Ikhonsoli
• Alikho i-oda elidingekayo ezintweni zikagesi ezisele. Zonke izinto ezisetshenziswayo ezisele zingabuyekezwa nganoma iyiphi indlela umlawuli ayidingayo.
• Uma ungayikhethi yonke inketho, kufanele ukhethe umshini wakho wekhonsoli.
  Kusukela kusiqephu se-JSA 2014.6.r4 nakamuva, abalawuli banikezwa kuphela inketho yokubuyekeza konke noma ukubuyekeza into esetshenziswayo ye-Console. Abasingathi abaphethwe abavezwa kumenyu yokufaka ukuze kuqinisekiswe ukuthi ikhonsoli iyapeshwa kuqala. Ngemva kokuthi ikhonsoli isipeshiwe, uhlu lwabasingathi abaphethwe olungabuyekezwa luboniswa kumenyu yokufaka. Lolu shintsho lwenziwe kusukela ngesichibi se-JSA 2014.6.r4 ukuze kuqinisekiswe ukuthi umshini wekhonsoli uvuselelwa njalo ngaphambi kwabasingathi abaphethwe ukuze kuvinjelwe izinkinga zokuthuthukisa.

Uma abalawuli befuna ukuchibiyela amasistimu ochungechungeni, bangabuyekeza ikhonsoli kuqala, bese bekopisha ipheshi kuzo zonke ezinye izinto zikagesi futhi basebenzise isifaki sokubuyekeza isofthiwe ngazinye kumsingathi ngamunye ophethwe. Ikhonsoli kufanele ifakwe nezichibiyelo ngaphambi kokuthi usebenzise isifaki kubasingathi abaphethwe.
Lapho ubuyekeza ngokuhambisanayo, alikho i-oda elidingekayo endleleni obuyekeza ngayo izinto zikagesi ngemva kokubuyekezwa kwekhonsoli.
Uma iseshini yakho ye-Secure Shell (SSH) inqanyulwa ngenkathi ukuthuthukiswa kuqhubeka, ukuthuthukiswa kuyaqhubeka. Uma uvula kabusha iseshini yakho ye-SSH futhi uqalisa kabusha isifaki, ukufakwa kwesichibi kuyaqala futhi.

Ukusonga Ukufakwa

1. Ngemuva kokuthi isiqephu sesiqediwe futhi usuphumile kusifaki, thayipha umyalo olandelayo: umount /media/updates
2. Sula inqolobane yesiphequluli sakho ngaphambi kokungena ngemvume ku-Console.
3. Susa i-SFS file kuzo zonke izinto zikagesi.

Imiphumela
Isifinyezo sokufakwa kwesibuyekezo sesofthiwe sikweluleka nganoma yimuphi umsingathi ophethwe ongazange abuyekezwe.
Uma isibuyekezo sesofthiwe sihluleka ukubuyekeza umsingathi ophethwe, ungakopisha isibuyekezo sesofthiwe kumsingathi futhi uqalise ukufakwa endaweni.
Ngemva kokuba bonke ababungazi sebebuyekeziwe, abalawuli bangathumela i-imeyili ethimbeni labo ukuze babazise ukuthi bazodinga ukusula inqolobane yesiphequluli sabo ngaphambi kokungena ngemvume ku-JSA.

Ukusula Inqolobane

Ngemva kokufaka isichibi, kufanele usule inqolobane yakho ye-Java kanye neyakho web i-browser cache ngaphambi kokuthi ungene ku-JSA appliance.
Ngaphambi kokuthi uqale
Qinisekisa ukuthi unesenzakalo esisodwa kuphela sesiphequluli sakho esivuliwe. Uma unezinguqulo eziningi zesiphequluli sakho ezivuliwe, inqolobane ingase yehluleke ukusula.
Qinisekisa ukuthi i-Java Runtime Environment ifakiwe kusistimu yedeskithophu oyisebenzisayo view interface yomsebenzisi. Ungalanda inguqulo ye-Java 1.7 ku-Java webindawo: http://java.com/.
Mayelana nalo msebenzi
Uma usebenzisa isistimu yokusebenza ye-Microsoft Windows 7, isithonjana se-Java ngokuvamile sitholakala ngaphansi kwefasitelana lezinhlelo.
Ukusula inqolobane:

1. Sula inqolobane yakho ye-Java:
   a. Kudeskithophu yakho, khetha okuthi Qala > Iphaneli yokulawula.
   b. Chofoza kabili isithonjana se-Java.
   c. Ku-inthanethi Yesikhashana Files ifasitelana, chofoza View.
   d. Ku-Cache ye-Java Viewefasiteleni, khetha konke okufakiwe kwe-Deployment Editor.
   e. Chofoza isithonjana esithi Susa.
   f. Chofoza Vala.
   g. Chofoza okuthi KULUNGILE.
2. Vula eyakho web isiphequluli.
3. Sula inqolobane yakho web isiphequluli. Uma usebenzisa iMozilla Firefox web kusiphequluli, kufanele usule inqolobane kuMicrosoft Internet Explorer kanye neMozilla Firefox web iziphequluli.
4. Ngena ngemvume ku-JSA.

Izinkinga Ezaziwayo Nemikhawulo

Izinkinga ezaziwayo okukhulunywa ngazo ku-JSA 7.5.0 Update Package 6 Interim Fix 01 zibalwe ngezansi:

• Ukuthuthukela ku-JSA 7.5.0 Update Package 6 kungase kuthathe isikhathi eside ukuqeda ngenxa ye-glusterfs file hlanza. Kufanele uvumele ukuthuthukiswa ukuthi kuqhubeke ngaphandle kokuphazamiseka.
• Ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 5, abenzeli be-WinCollect 7.X bangathola amaphutha okuphatha noma okushintsha ukuhlela.
• Kungenzeka ukuthi izibuyekezo ezizenzakalelayo zibuyele enguqulweni yangaphambilini yezibuyekezo ezizenzakalelayo ngemva kokuthuthukiswa. Lokhu kubangela ukuthi ukubuyekeza okuzenzakalelayo kungasebenzi njengoba kuhlosiwe.
  Ngemva kokuthuthukela ku-QRadar 7.5.0 noma kamuva, thayipha umyalo olandelayo ukuze uhlole inguqulo yakho yokubuyekeza ngokuzenzakalela:
  /opt/qradar/bin/UpdateConfs.pl -v
• Izinsizakalo ze-Docker ziyehluleka ukuqala ezimpahleni zikagesi ze-JSA ezazifakwe ekuqaleni ekukhishweni kwe-JSA ngo-2014.8 noma ngaphambi kwalokho, zase zithuthukiswa zaba 7.5.0 Buyekeza Iphakheji 2 Ukulungiswa Kwesikhashana 02 noma 7.5.0 Iphakheji Yokuvuselela 3. Ngaphambi kokuthuthukela ku-JSA 7.5.0 Buyekeza Iphakheji 2 Yesikhashana Lungisa i-02, sebenzisa umyalo olandelayo kusuka ku-JSA Console:
  xfs_info /store | grep ftype
  Review okukhiphayo ukuze uqinisekise isilungiselelo se-ftype. Uma isilungiselelo sokukhiphayo sibonisa okuthi “ftype=0”, ungaqhubeki nokuthuthukela ku-7.5.0 Update Package 2 Interim Fix 02 noma 7.5.0 Update Package 3.
  Bheka KB69793 ukuze uthole imininingwane eyengeziwe.
• Ngemva kokufaka i-JSA 7.5.0, izinhlelo zakho zokusebenza zingase zehle okwesikhashana ngenkathi zithuthukelwa esithombeni sakamuva.
• Lapho wengeza i-Data Node kuqoqo, kufanele yonke ibethelwe, noma yonke ingabhalwa phansi. Awukwazi ukwengeza kokubili amaNodes edatha abethelwe nangabhaliwe kuqoqo elifanayo.

Izinkinga Ezixazululiwe

Udaba oluxazululiwe okukhulunywa ngalo ku-JSA 7.5.0 Update Package 6 Interim Fix 01 luhlelwe ngezansi:

• Ithebhu yezingozi ingase ingalayishi ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 6.

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2023 Juniper Networks, Inc. Wonke amalungelo agodliwe.

Amadokhumenti / Izinsiza

	JUNIPER NETWORKS JSA Secure Analytics [pdf] Umhlahlandlela Womsebenzisi I-JSA Secure Analytics, i-JSA, i-Secure Analytics, i-Secure Analytics, i-Analytics
	JUNIPER NETWORKS JSA Secure Analytics [pdf] Umhlahlandlela Womsebenzisi I-JSA Secure Analytics, i-JSA, i-Secure Analytics, i-Analytics
	JUNIPER NETWORKS JSA Secure Analytics [pdf] Umhlahlandlela Womsebenzisi I-JSA Secure Analytics, i-JSA, i-Secure Analytics, i-Analytics
	JUNIPER NETWORKS JSA Secure Analytics [pdf] Umhlahlandlela Womsebenzisi I-JSA Secure Analytics, i-JSA, i-Secure Analytics, i-Analytics

Izithenjwa

• Imaniwali yosebenzisayo