I-JUNIPER NETWORKS vSRX I-Virtual Firewall Instruction Manual

Okuqukethwe fihla

1 I-JUNIPER NETWORKS vSRX I-Virtual Firewall

2 Ukufaka i-JSA 7.3.3 Fix Pack 11 (Patch 11) Interim Fix 01 Isibuyekezo Sesofthiwe

3 Ukusonga Ukufakwa

4 Ukusula Inqolobane

5 Izinkinga Ezaziwayo Nemikhawulo

6 Izinkinga Ezixazululiwe

7 Amadokhumenti / Izinsiza

7.1 Izithenjwa

8 Okuthunyelwe Okuhlobene

I-JUNIPER NETWORKS vSRX I-Virtual Firewall

Ukufaka i-JSA 7.3.3 Fix Pack 11 (Patch 11) Interim Fix 01 Isibuyekezo Sesofthiwe

I-JSA 7.3.3 Fix Pack 11 (Patch 11) I-Interim Fix 01 ixazulula izinkinga ezibikiwe ezivela kubasebenzisi nabalawuli abavela ezinguqulweni zangaphambilini ze-JSA. Lesi sibuyekezo sesofthiwe esiqoqiwe silungisa izinkinga zesofthiwe ezaziwayo ekusetshenzisweni kwakho kwe-JSA. Izibuyekezo zesofthiwe ye-JSA zifakwa kusetshenziswa i-SFS file. Isibuyekezo sesofthiwe singabuyekeza zonke izinto ezisetshenziswayo ezinamathiselwe ku-JSA Console.
Sebenzisa i-7.3.3.20220318161607-IF01-20220517151911 SFS file ukuze kuthuthukiswe i-JSA 7.3.3 Fix Pack 11 (Patch 11) ibe yi-JSA 7.3.3 Fix Pack 11 (Patch 11) Interim Fix 01.
Lo mbhalo awubandakanyi yonke imilayezo yokufaka kanye nezimfuneko, ezifana noshintsho ezidingweni zenkumbulo kagesi noma izimfuneko zesiphequluli ze-JSA. Ukuze uthole ulwazi olwengeziwe, bona iJuniper Secure Analytics Upgrading JSA iye ku-7.3.3.

Qiniseka ukuthi uthatha izinyathelo zokuphepha ezilandelayo:

Yenza isipele idatha yakho ngaphambi kokuba uqale noma yikuphi ukuthuthukiswa kwesofthiwe. Ukuze uthole ulwazi olwengeziwe mayelana nokwenza ikhophi yasenqolobaneni nokululama, bheka I-Juniper Secure Analytics Administration Guide.
Ukuze ugweme amaphutha okufinyelela kulogi yakho file, vala yonke i-JSA evuliwe webIzikhathi ze-UI.

Isibuyekezo sesofthiwe ye-JSA asikwazi ukufakwa kumsingathi ophethwe okunguqulo yesofthiwe ehlukile kusukela ku-Console. Zonke izinto ezisetshenziswayo ekusetshenzisweni kufanele zibe kuhlelo olufanayo lokubuyekezwa kwesofthiwe ukuze kuthuthukiswe konke ukusetshenziswa.
Qinisekisa ukuthi zonke izinguquko zisetshenziswa ezintweni zakho zikagesi. Isibuyekezo asikwazi ukufakwa kuzinto zikagesi ezinezinguquko ezingasetshenzisiwe.

Uma lokhu kuwukufakwa okusha, abalawuli kufanele baphindeview imiyalo eku-Juniper Secure Analytics Installation Guide.

Ukuze ufake isibuyekezo sesofthiwe ye-JSA 7.3.3 Fix Pack 11 (Patch 11) Interim Fix 01:

Landa i-7.3.3.20220318161607-IF01-20220517151911 SFS kusukela ku-Juniper Customer Support webindawo.
https://support.juniper.net/support/downloads/
Usebenzisa i-SSH, ngena ohlelweni lwakho njengomsebenzisi wempande.

Ukuze uqinisekise ukuthi unesikhala esanele (5 GB) esitolo/esitolo/tmp se-JSA Console, thayipha umyalo olandelayo: df -h /tmp /storetmp /store/transient | tee diskchecks.txt
- Inketho yohla lwemibhalo engcono kakhulu: /storetmp Itholakala kuzo zonke izinhlobo zezinto zikagesi kuzo zonke izinguqulo. Ezinguqulweni ze-JSA 7.3.0 /store/tmp iyisixhumi esihlukanisayo /storetmp.
- Inketho yesibili yohlu lwemibhalo engcono kakhulu: /tmp Lolu hlu lwemibhalo luyatholakala kuzo zonke izinto zikagesi, kodwa ku-2 inguqulo incane kakhulu futhi ihambisa i file lapha kungabangela ukuthi izinsiza zime. Uma ushiya a file ku /tmp izinsuku eziyi-10 ngaphandle kokuqeda isibuyekezo se-SFS, ingahle ihlanzwe umsebenzi we-Red Hat's tmpwatch cron.
- Indlela yesithathu engcono kakhulu: /isitolo/esikhashana Uhlu lwemibhalo lwesitolo/esikhashana lwethulwa ngo-JSA 3 futhi lwabelwa u-2014.1% walo lonke uhla lwemibhalo / lwesitolo. Nokho, lolu hlu lwemibhalo alukho kuzo zonke izinto zikagesi futhi kungenzeka lungabi ingxenye yangempela yazo zonke izinto ezisetshenziswayo. Uma umyalo wokuhlola idiski uhluleka, thayipha kabusha izimpawu zokucaphuna kutheminali yakho, bese uphinda usebenzise umyalo. Lo myalo ubuyisela imininingwane kukho kokubili iwindi lomyalo naku a file kukhonsoli ebizwa nge-diskchecks.txt. Review lokhu file ukuqinisekisa ukuthi zonke izinto zikagesi zinendawo okungenani engu-5 GB etholakala kuhla lwemibhalo ukukopisha i-SFS ngaphambi kokuzama ukuhambisa file kumsingathi ophethwe. Uma kudingeka, khulula isikhala sediski kunoma yimuphi umsingathi ohlulekayo ukuba ngaphansi kuka-5 GB otholakalayo.
  QAPHELA: Ku-JSA 7.3.0 nakamuva, isibuyekezo sesakhiwo senkomba yezinhla zemibhalo ezithobelayo ze-STIG kunciphisa usayizi wezingxenye ezimbalwa. Lokhu kungathinta ukuhamba okukhulu fileku-JSA.

Ukwakha inkomba/yemidiya/yezibuyekezo, thayipha umyalo olandelayo:
mkdir -p /media/updates
Usebenzisa i-SCP, kopisha ifayela le- files ku-JSA Console kuhla lwemibhalo/storetmp noma indawo ene-5 GB yesikhala sediski.
QAPHELA: Uma i-SFS file iku-directory/storetmp futhi awuthuthuki, lapho insiza yasebusuku ye-diskmaintd.pl isebenza, i-SFS file iyasuswa.

Shintshela kuhla lwemibhalo lapho ukopishe khona ipheshi file. Okwesiboneloample, cd/storetmp
Vula ifayili le- file kumkhombandlela we-/storetmp usebenzisa i-bunzip utility: bunzip2 7.3.3.20220318161607-IF01-20220517151911.sfs.bz2

Ukukhweza isichibi file ku-directory /media/updates, thayipha umyalo olandelayo: mount -o loop -t squashfs /storetmp/7.3.3.20220318161607-IF01-20220517151911.sfs /media/updates
Ukuze usebenzise isifaki se-patch, thayipha umyalo olandelayo: /media/updates/installer
QAPHELA: Isikhathi sokuqala lapho uqalisa isibuyekezo sesofthiwe, kungase kube nokubambezeleka ngaphambi kokuthi kuboniswe imenyu yokufaka isibuyekezo sesofthiwe.

Usebenzisa isifaki sepheshi, khetha konke.
- Inketho yonke ibuyekeza isoftware kuzo zonke izinto zikagesi ngendlela elandelayo:
- Ikhonsoli
- Izinto zikagesi ezisele.
- Uma ungakhethi yonke inketho, kufanele ukhethe into esetshenziswayo ye-Console.
  Kusukela kusiqephu se-JSA 2014.6.r4 nakamuva, abalawuli banikezwa kuphela inketho yokubuyekeza konke noma ukubuyekeza into esetshenziswayo ye-Console. Abasingathi abaphethwe abavezwa kumenyu yokufaka ukuze kuqinisekiswe ukuthi ikhonsoli iyapeshwa kuqala. Ngemva kokuthi ikhonsoli isipeshiwe, uhlu lwabasingathi abaphethwe olungabuyekezwa luboniswa kumenyu yokufaka. Lolu shintsho lwenziwe kusukela ngesichibi se-JSA 2014.6.r4 ukuze kuqinisekiswe ukuthi umshini wekhonsoli uvuselelwa njalo ngaphambi kwabasingathi abaphethwe ukuze kuvinjelwe izinkinga zokuthuthukisa.
  Uma abalawuli befuna ukuchibiyela amasistimu ochungechungeni, bangabuyekeza ikhonsoli kuqala, bese bekopisha ipheshi kuzo zonke ezinye izinto zikagesi futhi basebenzise isifaki sokubuyekeza isofthiwe ngazinye kumsingathi ngamunye ophethwe. Ikhonsoli kufanele ifakwe nezichibiyelo ngaphambi kokuthi usebenzise isifaki kubasingathi abaphethwe. Lapho ubuyekeza ngokuhambisanayo, alikho i-oda elidingekayo endleleni obuyekeza ngayo izinto zikagesi ngemva kokubuyekezwa kwekhonsoli. Uma iseshini yakho ye-Secure Shell (SSH) inqanyulwa ngenkathi ukuthuthukiswa kuqhubeka, ukuthuthukiswa kuyaqhubeka. Uma uvula kabusha iseshini yakho ye-SSH futhi uqalisa kabusha isifaki, ukufakwa kwesichibi kuyaqala futhi.

Ukusonga Ukufakwa

Ngemuva kokuthi isiqephu sesiqediwe futhi usuphumile kusifaki, thayipha umyalo olandelayo: umount /media/updates

Sula inqolobane yesiphequluli sakho ngaphambi kokungena ngemvume ku-Console.
Susa i-SFS file kuzo zonke izinto zikagesi.

Isifinyezo sokufakwa kwesibuyekezo sesofthiwe sikweluleka nganoma yimuphi umsingathi ophethwe ongazange abuyekezwe. Uma isibuyekezo sesofthiwe sihluleka ukubuyekeza umsingathi ophethwe, ungakopisha isibuyekezo sesofthiwe kumsingathi futhi uqalise ukufakwa endaweni.
Ngemva kokuba bonke ababungazi sebebuyekeziwe, abalawuli bangathumela i-imeyili ethimbeni labo ukuze babazise ukuthi bazodinga ukusula inqolobane yesiphequluli sabo ngaphambi kokungena ngemvume ku-JSA.

Ukusula Inqolobane

Ngemva kokufaka isichibi, kufanele usule inqolobane yakho ye-Java kanye neyakho web i-browser cache ngaphambi kokuthi ungene ku-JSA appliance.
Ngaphambi kokuthi uqale
Qinisekisa ukuthi unesenzakalo esisodwa kuphela sesiphequluli sakho esivuliwe. Uma unezinguqulo eziningi zesiphequluli sakho ezivuliwe, inqolobane ingase yehluleke ukusula. Qinisekisa ukuthi i-Java Runtime Environment ifakiwe kusistimu yedeskithophu oyisebenzisayo view interface yomsebenzisi. Ungalanda inguqulo ye-Java 1.7 ku-Java webindawo: http://java.com/.

Mayelana nalo msebenzi
Uma usebenzisa isistimu yokusebenza ye-Microsoft Windows 7, isithonjana se-Java ngokuvamile sitholakala ngaphansi kwefasitelana lezinhlelo.

Ukusula inqolobane:

Sula inqolobane yakho ye-Java:
- Kudeskithophu yakho, khetha okuthi Qala > Iphaneli yokulawula.
- Chofoza kabili isithonjana se-Java.
- Ku-inthanethi Yesikhashana Files ifasitelana, chofoza View.
- Ku-Cache ye-Java Viewefasiteleni, khetha konke okufakiwe kwe-Deployment Editor.
- Chofoza isithonjana esithi Susa.
- Chofoza Vala.
- Chofoza okuthi KULUNGILE.

Vula eyakho web isiphequluli.
Sula inqolobane yakho web isiphequluli. Uma usebenzisa iMozilla Firefox web kusiphequluli, kufanele usule inqolobane kuMicrosoft Internet Explorer kanye neMozilla Firefox web iziphequluli.
4. Ngena ngemvume ku-JSA.

Izinkinga Ezaziwayo Nemikhawulo

Lutho

Izinkinga Ezixazululiwe

Izinkinga ezixazululiwe okukhulunywa ngazo ku-JSA 7.3.3 Fix Pack 11 (Patch 11) Interim Fix 01 zibalwe ngezansi:

Kubuyekezwe iNtwasahlobo yaba ngu-5.3.18 ukuze kwehliswe i-CVE-2022-22963 kanye ne-CVE-2022-22965.
Kubuyekezwe iNtwasahlobo yaba ngu-5.3.18 ukuze kwehliswe i-CVE-2022-22963 kanye ne-CVE-2022-22965 ku-Forensics.

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2022 Juniper Networks, Inc. Wonke amalungelo agodliwe.