Khipha Amanothi
I-JSA 7.5.0 Buyekeza Iphakheji 7 ISO
Ishicilelwe
2023-11-02
Ubulula bobunjiniyela

Amanothi omlawuli

Mayelana nalokhu kufakwa
Le miyalo ihloselwe ukusiza abalawuli lapho befaka i-JSA 7.5.0 Update Package 7 ngokusebenzisa i-ISO. file. Le ISO ingafaka i-JSA, i-JSA Risk Manager, imikhiqizo ye-JSA Vulnerability Manager ibe inguqulo ye-JSA 7.5.0 Update Package 7.

Yini Okusha ku-JSA 7.5.0 Update Package 7

Ukuze uthole ulwazi olwengeziwe mayelana nokuthi yini entsha ku-JSA 7.5.0 Update Package 7, bona Yini Umhlahlandlela Omusha.

Ukufaka i-JSA 7.5.0 Update Package 7

Ukufaka isofthiwe ye-JSA:

• Izidingo Zesistimu - Ukuze uthole ulwazi mayelana nehadiwe ne-software ehambisanayo, bheka izidingo zesistimu ezinemininingwane ku Umhlahlandlela wokufaka we-Juniper Secure Analytics.
• Ukuthuthukela ku-JSA 7.5.0 Update Package 7 — Ukuze uthuthukele ku-JSA 7.5.0 Update Package 7, bheka Ukuthuthukisa i-Juniper Secure Analytics kuya ku-7.5.0 Guide.
• Ukufaka i-JSA - Ukuze uthole imiyalelo yokufaka, bheka i Umhlahlandlela wokufaka we-Juniper Secure Analytics.

Ukufaka i-JSA 7.5.0 Update Package 7 ISO:

1. Landa i-7.5.0.UP7.iso ku-Juniper Customer Support webindawo. https://support.juniper.net/support/downloads/
2. Usebenzisa i-SSH, ngena ku-Console njengomsebenzisi wempande.
3. Ukuze usebenzise isifaki se-ISO ku-Console, thayipha umyalo olandelayo: /media/cdrom/setup
   QAPHELA: Ukufaka i-JSA 7.5.0 kufanele kuthathe cishe amahora angu-2 kusisetshenziswa se-Console.
4. Linda isibuyekezo esiyinhloko se-Console ukuthi siqede.
   

Ukusonga Ukufakwa

1. Ngemuva kokuthi bonke ababungazi sebebuyekeziwe, kufanele usule inqolobane yesiphequluli sakho ngaphambi kokungena ngemvume ku-JSA Console.
2. Ukwehlisa umkhombandlela we-/media/cdrom kubo bonke ababungazi, thayipha: /opt/qradar/support/all_servers.sh -C -k “umount /media/cdrom”
3. Susa i-ISO file kuzo zonke izinto zikagesi.
4. Uma usebenzisa i-WinCollect agents version 7.2.6 noma yakamuva, kufanele ufake kabusha i-SFS file ku-JSA Console. Lokhu kungenxa yezinkinga lapho i-ISO ingena esikhundleni se-SFS kukhonsoli ngo-WinCollect 7.2.5.
5. Review noma yimiphi imizila emile noma umzila owenziwe ngezifiso. Njengoba kushiwo kumanothi omlawuli, yonke imizila isusiwe futhi izodinga ukulungiswa kabusha ngemva kokuqedwa kokuthuthukiswa.
6. Review noma yimiphi imithetho ye-iptable elungiselelwe ukubona ukuthi amagama esixhumi esibonakalayo ashintshile ku-JSA 7.5.0 ngenxa yezibuyekezo zesistimu yokusebenza ye-Red Hat Enterprise 7 ayabathinta yini. Buyekeza noma yimiphi imithetho ye-iptables esebenzisa izivumelwano zokuqamba amagama esixhumi esibonakalayo se-Red Hat 6.

Ukusula Inqolobane

Ngemva kokufaka isichibi, kufanele usule inqolobane yakho ye-Java kanye neyakho web i-browser cache ngaphambi kokuthi ungene ku-JSA appliance.

Ngaphambi kokuthi uqale

Qinisekisa ukuthi unesenzakalo esisodwa kuphela sesiphequluli sakho esivuliwe. Uma unezinguqulo eziningi zesiphequluli sakho ezivuliwe, inqolobane ingase yehluleke ukusula.
Qinisekisa ukuthi i-Java Runtime Environment ifakiwe kusistimu yedeskithophu oyisebenzisayo view interface yomsebenzisi. Ungalanda inguqulo ye-Java 1.7 ku-Java webindawo: http://java.com/.

Mayelana nalo msebenzi
Uma usebenzisa isistimu yokusebenza ye-Microsoft Windows 7, isithonjana se-Java ngokuvamile sitholakala ngaphansi kwefasitelana lezinhlelo.
Ukusula inqolobane:

1. Sula inqolobane yakho ye-Java:
   a. Kudeskithophu yakho, khetha okuthi Qala > Iphaneli yokulawula.
   b. Chofoza kabili isithonjana se-Java.
   c. Ku-inthanethi Yesikhashana Files ifasitelana, chofoza View.
   d. Ku-Cache ye-Java Viewefasiteleni, khetha konke okufakiwe kwe-Deployment Editor.
   e. Chofoza isithonjana esithi Susa.
   f. Chofoza Vala.
   g. Chofoza okuthi KULUNGILE.
2. Vula eyakho web isiphequluli.
3. Sula inqolobane yakho web isiphequluli. Uma usebenzisa iMozilla Firefox web kusiphequluli, kufanele usule inqolobane kuMicrosoft Internet Explorer kanye neMozilla Firefox web iziphequluli.
4. Ngena ngemvume ku-JSA.

Izinkinga Ezaziwayo Nemikhawulo

Izinkinga ezaziwayo okukhulunywa ngazo ku-JSA 7.5.0 Update Package 7 zibalwe ngezansi:

• Ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 5, abenzeli be-WinCollect 7.X bangathola amaphutha okuphatha noma okushintsha ukuhlela.
• Kungenzeka ukuthi izibuyekezo ezizenzakalelayo zibuyele enguqulweni yangaphambilini yezibuyekezo ezizenzakalelayo ngemva kokuthuthukiswa. Lokhu kuzodala ukuthi ukubuyekeza okuzenzakalelayo kungasebenzi njengoba kuhlosiwe.
  Ngemva kokuthuthukela ku-JSA 7.5.0 noma kamuva, thayipha umyalo olandelayo ukuze uhlole inguqulo yakho yokubuyekeza okuzenzakalelayo: /opt/qradar/bin/UpdateConfs.pl -v
• Ngemva kokufaka i-JSA 7.5.0, izinhlelo zakho zokusebenza zingase zehle okwesikhashana ngenkathi zithuthukelwa esithombeni sakamuva.
• Ngemva kokuthuthukisa ezinye izinhlelo zokusebenza zihlala zisesimweni "sephutha" ekusetshenzisweni ngezinhlelo zokusebenza ezingaphezu kuka-30. Qala kabusha izinhlelo zokusebenza ngokusebenzisa i-qappmanager: /opt/qradar/support/qappmanager.
• Lapho ungeza i-Data Node kuqoqo, kufanele zonke zibethelwe, noma zonke zingabhalwa phansi. Awukwazi ukwengeza kokubili amaNodes edatha abethelwe nangabhaliwe kuqoqo elifanayo.

Izinkinga Ezixazululiwe

Izinkinga ezixazululiwe okukhulunywa ngazo ku-JSA 7.5.0 Update Package 7 zibalwe ngezansi:

• Izinsizakalo ze-Docker ziyehluleka ukuqala ezintweni ze-JSA ezazifakwe ekuqaleni ekukhishweni kwe-JSA ngo-2014.8 noma ngaphambi kwalokho, zase zithuthukela ku-7.5.0 Update Package 2 Interim Fix 02 noma 7.5.0 Update Package 3.
  Ngaphambi kokuthi uthuthukele ku-JSA 7.5.0 Buyekeza Iphakheji 2 Ukulungiswa Kwesikhashana 02, sebenzisa umyalo olandelayo ku-JSA Console: xfs_info /store | grep ftype
  Review okukhiphayo ukuze uqinisekise isilungiselelo se-ftype. Uma isilungiselelo sokukhiphayo sibonisa okuthi “ftype=0”, ungaqhubeki nokuthuthukela ku-7.5.0 Update Package 2 Interim Fix 02 noma 7.5.0 Update Package 3.
  Bona i-KB69793 ukuze uthole imininingwane eyengeziwe.
• Imibiko ikhiqiza idatha yeshadi engalungile kanye negama lekholomu ngokusesha okuthuthukile (AQL).
• Imithombo yelogi esusiwe phakathi kwamaqembu omthombo welogi isengavela kusixhumi esibonakalayo somsebenzisi we-JSA.
• “Kube nenkinga ekulondolozeni ukulungiselelwa kohlobo lomthombo welogi” ngemva kokuchofoza londoloza ekhasini lomhleli we-DSM.
• Iphekhi yokuqukethwe ye-JSA ingabangela amacala ukuthi acushwe ku-IP yomthombo esikhundleni sempahla yomcimbi wangokwezifiso emiswe ngokomthetho.
• Imibiko ingathunyelwa kumakheli omsebenzisi ngenketho "yemibiko eminingi" uma "inketho yombiko owodwa" ikhethwa.
• Iphutha elilungile elifana nalokhu okulandelayo liyabonakala ku-patches.log file ingabonwa ngesikhathi noma ngemva kwesiqephu se-JSA noma ukuthuthukiswa.
  Iphutha: ukubonisa ukuphinda ukushayela kuhlulekile: i-codec ye-'ascii' ayikwazi ukubhala uhlamvu u'\u2018′ endaweni 0: i-ordinal engekho ebangeni.
• Ukupeyishwa kwe-JSA kungahluleka ngenxa yezidingo zesikhala sediski lapho isikhala esanele sitholakala.
• Umthetho womzila ubonisa ikhasi elingenalutho lapho ukufakwa kuwumshini wesofthiwe ku-JSA 7.5.0 Update Package 1.
• Izinkinga zokusebenza zingenzeka uma i-JSA izama ukuphinda ilayishe amadivayisi ezinzwa lapho imithombo yelogi idlula izigidi ezi-2.
• Imibiko ehleliwe yamasonto onke noma yanyanga zonke ibonisa “ayikho idatha yeshadi” ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 5.
• Ukufakwa kohlelo lokusebenza kuyahluleka ngesikhathi sokwakhiwa kwedokha “okuhlukile kwenzekile ngesikhathi kulindwe ukuthi umsebenzi uqedelwe”.
• Ukuhlunga ngekholomu kuthebhu yamacala kususa izihlungi zosesho.
• I-Tomcat ingase ilahlekelwe yinkumbulo ngesikhathi sokuthunyelwa lapho umsebenzisi enezigidi zemithombo yelogi.
• Isaziso sesistimu sibonisa umlayezo ongalungile uma isitifiketi se-tomcat sizophelelwa yisikhathi.
• Ukukhula okungekuhle kunqolobane yedatha yereferensi okuholela ekusebenzeni kokusesha okwehlisa isithunzi uma usebenzisa izihlungi nokuhlola.
• Abasebenzisi abakwazi ukuthekelisa ulwazi lwelayisensi kusuka ku-JSA console gui.
• Imicimbi yokudalwa kwempahla ye-JSA ingabonisa ubunikazi obujwayelekile:0 endaweni edalwe yinkambu ye-asset profiler imicimbi.
• Ukuthuthukisa kungaqedela futhi kubonise iphutha mayelana neskripthi sezakhiwo zangokwezifiso esizama ukufaka noma ukubuyekeza ithebula.
• Ukusesha icala kungangeza izihlungi ezingalindelekile kumapharamitha okusesha amanje ngemuva kokuvala icala.
• Amasevisi angahlangabezana nezinkinga zenkumbulo ngenxa yohlu olukhulu lokuhoxiswa kwezitifiketi (CLRS).
• Ithebhu yemibiko ingaboniswa njengengenalutho uma isifanekiso file ngoba umsebenzisi osusiwe akekho.
• Iwizadi yomthetho ayikwazi ukudlulela ekhasini elilandelayo kahle uma impendulo yomthetho ibuyekeza ithebula lesithenjwa.
• Imithetho ye-JSA system anomaly discovery engine (ADE) ingakhiqiza imithetho eyengeziwe uma ilungiswa izikhathi eziningi.
• Isimiso esingaqondakali esivumela “ukuhlola [lesi sakhiwo esinqwabelene] ivelu lomthombo ngamunye welogi ngokuhlukene” sibonisa iphutha lohlelo lokusebenza.
• Isifinyezo secala semithetho yokubala okufanayo asibuyiseli yonke imiphumela yenkambu yokubala umcimbi/ukugeleza.
• Ukuhlolwa kwemithetho enamanani amaningi esethi yereferensi kungabonisa "kube nephutha ekulondolozeni umthetho wakho".
• Amaphrosesa agelezayo ezizindeni ezihlukene angaba nezinkinga zokuxhuma.
• Ukuthuthukisa into esebenza njengosokhaya yohlelo lokusebenza ehlukanisiwe kwehluleke njengoba ukuthuthukiswa kulindile kumasevisi e-docker kanye ne-consman.
• Imishini ye-HA elindile ingasebenzisa isiqinisekisi sesitifiketi sesitolo sokhiye kubabungazi abangasebenzi okubangela imilayezo yelogi engalungile.
• Ithebhu yomsebenzi welogu ingabonisa i-ID yomcimbi kanye nesigaba njenge-N/A lapho okulayishiwe kudluliswa futhi kumephuzwe ngendlela efanele.
• Abasebenzisi abakwazi ukuvula iwizadi yemithetho kuthebhu yamacala ku-JSA 7.5.0 Update Package 6.
• Izinhlelo zokusebenza zingase zehluleke ukuqalisa kabusha ngemva kokuba i-apphost ithuthukisiwe isuka ku-JSA 7.5.0 Update Package 5 ukuya ku-JSA 7.5.0 Update Package 6.
• Izehlakalo ezingaziwa noma ezigciniwe zingangena ngendlela engalungile kumthombo welogi we-sim generic ku-JSA 7.5.0 Buyekeza Iphakheji 4 nakamuva.
• Ukungeniswa kwedatha eyisithenjwa kwehluleka ngaphandle kwefomethi yenombolo ngenxa yesiguquli senombolo esingavumelekile.
• Ithebhu yezingozi ingase ingalayishi ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 6.
• Imicimbi ingamisa ukucutshungulwa lapho isiqaphi sediski sephayiphi sithola ukuthi umkhawulo wedisk spillover weqiwe.
• Imibiko esebenzisa okuthi “faka idethi esihlokweni se-imeyili kuphela” ayiziphathi ngendlela elindelekile.
• Izinqubo ze-Ariel zingase zinganikezeli inkumbulo eyanele yokusebenza kanzima kwenkumbulo, okubangela ukusesha okuhamba kancane.
• Usesho oluthuthukisiwe (AQL) olusebenzisa isisebenzisi esithi “in” alusebenzisi izinkomba njengoba kulindelekile.
• Iwizadi yomthetho yemithetho ye-ADE ayisilondolozi isimo sebhokisi likaqhwishi "lokuhlola ngokwehlukana".
• Imibiko yansuku zonke ehleliwe ayikhiqizi ngempelasonto njengoba kulindelekile.
• I-JSA ayikwazi ukungena ngenkathi iseva ye-LDAP ingaphenduli, okungaholela kumaphutha e-tomcat.
• Idatha ye-PCAP ayigcinwanga ku-Ariel noma iboniswa ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 2 noma kamuva.
• Izinhlelo zokusebenza ze-JSA zingabhajwa esimweni sephutha ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 6.
• Imithetho ye-tzdata DST yase-America/Santiago iphelelwe yisikhathi futhi inedethi engalungile yokushintshela ku-DST.
• Amasevisi we-Flow processor angaba nezinkinga zokuqalwa kwesevisi noma aqale kabusha ngenxa yesibuyekezo se-libpcap samaphrosesa amadala we-avx2.
• Iwindi lokuphatha lomsebenzisi alibonisi njengoba kulindelekile kuthebhu ethi Admin uma okuthandwayo kolimi kungesona isiNgisi.

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso.
Copyright © 2023 Juniper Networks, Inc. Wonke amalungelo agodliwe.

Amadokhumenti / Izinsiza

Juniper NETWORKS JSA 7.5.0 Buyekeza Iphakheji 7 ISO [pdf] Umhlahlandlela Womsebenzisi I-JSA 7.5.0 Buyekeza Iphakheji 7 ISO, Buyekeza Iphakheji 7 ISO, Iphakheji 7 ISO

Izithenjwa

• Imaniwali yosebenzisayo