I-Juniper 7.5.0 Imiyalo evikelekile yokuhlaziya

Ngemuva kokuthi ukufakwa kwepheshi sekuqediwe futhi usuphumile kusifaki, thayipha:
Finyelela kunqolobane ye-Java Viewer bese ususa konke okufakiwe kwe-Deployment Editor.

Sula inqolobane yakho web isiphequluli.
Uma usebenzisa iMozilla Firefox, sula inqolobane kukho kokubili iFirefox ne-Internet Explorer.
Ngena ngemvume ku-JSA.

QAPHELA: Abalawuli abanezinto zikagesi Ezitholakala Kakhulu (HA) ekusetshenzisweni kwazo kufanele baqedele isinyathelo sangemva kokufakwa. Bheka ku-KB80989 ukuze uthole ulwazi olwengeziwe.

FAQ

Q: Yini okufanele ngiyenze uma iseshini yami ye-SSH inqanyulwa phakathi nokuthuthukiswa?
A: Uma isikhathi sakho se-SSH sinqamuka, vele uvule kabusha iseshini bese uqalisa kabusha isifaki. Ukufakwa kwepheshi kuzoqala kabusha ngokuzenzakalelayo.

Q: Ngingaqinisekisa kanjani ukuthi nginesikhala esanele se-JSA Console?
A: Ngaphambi kokufaka isibuyekezo, qinisekisa ukuthi unesikhala samahhala okungenani esingu-10 GB /store/tmp se-JSA Console ukuze ugweme noma yiziphi izinkinga zokufaka.

Ukufaka i-JSA 7.5.0 Update Package 8 Update Update

I-JSA 7.5.0 Update Package 8 ixazulula izinkinga ezibikiwe ezivela kubasebenzisi nabalawuli abavela ezinguqulweni zangaphambilini ze-JSA. Lesi sibuyekezo sesofthiwe esiqoqiwe silungisa izinkinga zesofthiwe ezaziwayo ekusetshenzisweni kwakho kwe-JSA. Izibuyekezo zesofthiwe ye-JSA zifakwa kusetshenziswa i-SFS file. Isibuyekezo sesofthiwe singabuyekeza zonke izinto ezisetshenziswayo ezinamathiselwe ku-JSA Console.
I-7.5.0.20240302192142.sfs file ingathuthukisa izinguqulo ze-JSA ezilandelayo zibe yi-JSA 7.5.0 Update Package 8:

I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 1
I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 2
I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 3
I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 4
I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 5
I-JSA 7.5.0 Buyekeza Iphakheji 7 Ukulungiswa Kwesikhashana 6

Lo mbhalo awubandakanyi yonke imilayezo yokufaka kanye nezimfuneko, ezifana noshintsho ezidingweni zenkumbulo kagesi noma izimfuneko zesiphequluli ze-JSA. Ukuze uthole ulwazi olwengeziwe, bona iJuniper Secure Analytics Upgrading JSA iye ku-7.5.0.

Qinisekisa ukuthi uthatha izinyathelo zokuphepha ezilandelayo

Yenza isipele idatha yakho ngaphambi kokuba uqale noma yikuphi ukuthuthukiswa kwesofthiwe. Ukuze uthole ulwazi olwengeziwe mayelana nokwenza ikhophi yasenqolobaneni nokululama, bheka I-Juniper Secure Analytics Administration Guide.
Ukuze ugweme amaphutha okufinyelela kulogi yakho file, vala yonke i-JSA evuliwe webIzikhathi ze-UI.

Isibuyekezo sesofthiwe ye-JSA asikwazi ukufakwa kumsingathi ophethwe okunguqulo yesofthiwe ehlukile kusukela ku-Console. Zonke izinto ezisetshenziswayo ekusetshenzisweni kufanele zibe kuhlelo olufanayo lokubuyekezwa kwesofthiwe ukuze kuthuthukiswe konke ukusetshenziswa.
Qinisekisa ukuthi zonke izinguquko zisetshenziswa ezintweni zakho zikagesi. Isibuyekezo asikwazi ukufakwa kuzinto zikagesi ezinezinguquko ezingasetshenzisiwe.

Uma lokhu kuwukufakwa okusha, abalawuli kufanele baphindeview imiyalo eku-Juniper Secure Analytics Installation Guide.

Ukuze ufake isibuyekezo sesofthiwe ye-JSA 7.5.0 Update Package 8:

Landa i-7.5.0.20240302192142.sfs kusukela ku-Juniper Customer Support webindawo. https://support.juniper.net/support/downloads/.
Usebenzisa i-SSH, ngena ohlelweni lwakho njengomsebenzisi wempande.

Ukuze uqinisekise ukuthi unesikhala esanele (10 GB) esitolo/esitolo/tmp se-JSA Console, thayipha umyalo olandelayo: df -h /tmp /startup/store/transient | tee diskchecks.txt
- Inketho yohlu lwemibhalo engcono kakhulu: /startup
- Itholakala kuzo zonke izinhlobo zezinto zikagesi kuzo zonke izinguqulo. Ezinguqulweni ze-JSA 7.5.0 /store/tmp iyisixhumi esihlukanisayo /storetmp.

Ukwakha inkomba yemidiya/yezibuyekezo, thayipha umyalo olandelayo: mkdir -p /media/updates
Usebenzisa i-SCP, kopisha ifayela le- files ku-JSA Console kuhla lwemibhalo/lokuqalisa noma indawo ene-10 GB yesikhala sediski.

Shintshela kuhla lwemibhalo lapho ukopishe khona ipheshi file. Okwesiboneloample, cd /ukuqala
Vula ifayili le- file kumkhombandlela /ukuqalisa usebenzisa insiza ye-gunzip: bunzip2 7.5.0.20240302192142.sfs.bz2

Ukukhweza isichibi file ku-directory /media/updates, thayipha umyalo olandelayo: mount -o loop -t squashfs /startup/7.5.0.20240302192142.sfs /media/updates
Ukuze usebenzise i-Leap preset, thayipha umyalo olandelayo: /media/updates/installer -leap-only

Ukuze usebenzise isifaki se-patch, thayipha umyalo olandelayo: /media/updates/installer
Usebenzisa isifaki sepheshi, khetha konke.

Inketho yonke ibuyekeza isoftware kuzo zonke izinto zikagesi ngendlela elandelayo:

Ikhonsoli
Alikho i-oda elidingekayo ezintweni zikagesi ezisele. Zonke izinto ezisetshenziswayo ezisele zingabuyekezwa nganoma iyiphi indlela umlawuli ayidingayo.
Uma ungayikhethi yonke inketho, kufanele ukhethe umshini wakho wekhonsoli.

Uma iseshini yakho ye-Secure Shell (SSH) inqanyulwa ngenkathi ukuthuthukiswa kuqhubeka, ukuthuthukiswa kuyaqhubeka. Uma uvula kabusha iseshini yakho ye-SSH futhi uqalisa kabusha isifaki, ukufakwa kwesichibi kuyaqala futhi.

Ukusonga Ukufakwa

Ngemuva kokuthi isiqephu sesiqediwe futhi usuphumile kusifaki, thayipha umyalo olandelayo: umount /media/updates
Sula inqolobane yesiphequluli sakho ngaphambi kokungena ngemvume ku-Console.
Susa i-SFS file kuzo zonke izinto zikagesi.

Imiphumela

Isifinyezo sokufakwa kwesibuyekezo sesofthiwe sikweluleka nganoma yibaphi abasingathi abaphethwe abangabuyekeziwe.
Uma isibuyekezo sesofthiwe sihluleka ukubuyekeza umsingathi ophethwe, ungakopisha isibuyekezo sesofthiwe kumsingathi futhi uqalise ukufakwa endaweni.
Ngemva kokuba bonke ababungazi sebebuyekeziwe, abalawuli bangathumela i-imeyili ethimbeni labo ukuze babazise ukuthi bazodinga ukusula inqolobane yesiphequluli sabo ngaphambi kokungena ngemvume ku-JSA.

Ukusula Inqolobane

Ngemva kokufaka isichibi, kufanele usule inqolobane yakho ye-Java kanye neyakho web i-browser cache ngaphambi kokuthi ungene ku-JSA appliance.
Ngaphambi kokuthi uqale
Qinisekisa ukuthi unesenzakalo esisodwa kuphela sesiphequluli sakho esivuliwe. Uma unezinguqulo eziningi zesiphequluli sakho ezivuliwe, inqolobane ingase yehluleke ukusula.
Qinisekisa ukuthi i-Java Runtime Environment ifakiwe kusistimu yedeskithophu oyisebenzisayo view interface yomsebenzisi. Ungalanda inguqulo ye-Java 1.7 ku-Java webindawo: http://java.com/.
Mayelana nalo msebenzi
Uma usebenzisa isistimu yokusebenza ye-Microsoft Windows 7, isithonjana se-Java ngokuvamile sitholakala ngaphansi kwefasitelana lezinhlelo.
Ukusula inqolobane:

Sula inqolobane yakho ye-Java:
- Kudeskithophu yakho, khetha okuthi Qala > Iphaneli yokulawula.
- Chofoza kabili isithonjana se-Java.
- Ku-inthanethi Yesikhashana Files ifasitelana, chofoza View.
- Ku-Cache ye-Java Viewefasiteleni, khetha konke okufakiwe kwe-Deployment Editor.
- Chofoza isithonjana esithi Susa.
- Chofoza Vala.
- Chofoza okuthi KULUNGILE.
Vula eyakho web isiphequluli.
Sula inqolobane yakho web isiphequluli. Uma usebenzisa iMozilla Firefox web kusiphequluli, kufanele usule inqolobane kuMicrosoft Internet Explorer kanye neMozilla Firefox web iziphequluli.
Ngena ngemvume ku-JSA.

Izinkinga Ezaziwayo Nemikhawulo

Izinkinga ezaziwayo okukhulunywa ngazo ku-JSA 7.5.0 Update Package 8 zibalwe ngezansi:

Ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 8 nge-SSH, iseshini ye-CLI iyancipha okwesikhashana.
Ukuthuthukela ku-RHEL-8 kumasistimu anezingxenye ezibethelwe ze-LUKS akusekelwa.
Isimo sokusingatha i-HA asibuyekezi phakathi nenqubo yokuvumelanisa.

QAPHELA: Ku-JSA 7.5.0 Update Package 8, abalawuli abanezinto zikagesi Ezitholakala Kakhulu (HA) ekusetshenzisweni kwazo kufanele baqedele isinyathelo sangemva kokufakwa. Ukuze uthole ulwazi olwengeziwe, bona i-KB80989.

Ukuhlola kuqala kwe-Leapp akuqinisekisi isikhala esanele sediski.
Ukuhlolwa kwangaphambi kwesikhathi kwe-Leapp akusekelwe kumasekondari e-HA.
Ukuhlola kuqala kwe-Leapp akusekelwa ekufakweni kwe-JSA 7.5.0 Buyekeza Iphakheji 7 ye-ISO.
Ukuhlola kuqala kwe-Leapp akusekelwa kukhonsoli ehlanganisiwe HA.
Ukuhlola kuqala kwe-Leapp kwehlulekile ngenxa yokucushwa okuningi okubonakalayo kwenethiwekhi.
Ukuhlola kuqala isichibi kuyahluleka kusitaki esikabili.
Ayikwazi ukuthumela i-syslog ye-udp ku-QRADAR_CONSOLE_IP isuka kusiqukathi sohlelo lokusebenza ku-AppHost.

Okufakiwe kohlelo lokusebenza okuyimpinda ku-Traefik uma ikhonsoli ye-JSA ivaliwe futhi ivuliwe futhi.
Ukufaka kabusha kwasefekthri ku-JSA 7.5.0 Update Package 8 ekuhlukaniseni kokutholwa kwehlulekile.
Ama-ejenti aphethwe we-WinCollect 7 awakwazi ukuthola izibuyekezo ezivela kubasingathi abaphethwe be-JSA abane-7.5.0 Update Package 7 Interim Fix 05 nakamuva.

Imilayezo yephutha ivela ngesikhathi sokuqalisa i-decapper ku-JSA Network Insights.
Isitifiketi file /etc/httpd-qif/tls/httpd-qif.cert yehluleka ukuhlola ukhiye we-modulus ku-JSA 7.5.0 Update Package 8.
I-RHEL 8.8 - iseva ayiqali ngemva kokuqaliswa kabusha kwesistimu.

Ukumataniswa kwe-HA kukhonsoli ye-JSA kwehluleka uma Inethiwekhi File Isistimu (NFS) ilungiselelwe ekufakweni kwe-JSA 7.5.0 Update Package 8.
Ukufakwa kwesichibi akuphelele ngenxa yokulahlwa kwememori ku-/store/jheap.

Indlela yokusebenza
Qalisa umyalo olandelayo ukuze ususe ukulahla files, bese uqalisa ukuthuthukisa futhi. # rm -rf /store/cheap/cup*

Izinkinga Ezixazululiwe

Izinkinga ezixazululiwe okukhulunywa ngazo ku-JSA 7.5.0 Update Package 8 zibalwe ngezansi:
Ihange elingaboshiwe. isevisi ifinyelela esidlangalaleni kumaseva ezimpande ze-DNS.
Amacala anamanga akhiqizwa ngemva kokuqala kabusha kwenqubo ye-ecs-ep.

I-Null Pointer Exception ku-Regex Monitor idala izinkinga zokusebenza ekuhlukaniseni umcimbi.
Ukwengeza kabusha umsingathi ophethwe kungase kubonakale sengathi kulenga esinyathelweni sokugcina ewindini elithi 'Umsingathi Uyengezwa Ekuphakelweni'.
Amacala Amanga Amanga akhiqizwa lapho imithetho isebenzisa ireferensi emisiwe hhayi imibandela.

Icala elingaziwa elidalwe endaweni okuyiwa kuyo i-JSA lapho kudluliselwa idatha ejwayelekile evela ku-Source JSA.
Kwehlisiwe imicimbi kumugqa wephrothokholi yomthombo welogi ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 7.
I-CRE Rule ibonakala ithinta ukuhlukaniswa kwe-ADE AQL Properties.

Ikhasi lemiphumela yosesho eliphethwe lingase lihambe kancane ukulayisha ezindaweni ze-JSA ngenani elikhulu lezibambi zemibuzo ye-Ariel.
I-JSA - Ukutholakala okuphezulu kwe-crossover kunika amandla ukuhluleka nge-SSH StrictHostKeyChecking.
I-JSA 7.5.0 Update Package 7 Interim Fix 03 Ushintsho lwe-Java lubangela i-Amazon Web Uhlobo Lomthombo Welogi Yesevisi ukuze uyeke ukusebenza.

Gcina inketho etholakala kumasistimu Okutholakala Okuphezulu (HA) asanda kufakwa kusukela ekufakweni kabusha kwasembonini.
Iseva yesikhathi isethwe ngesikhathi sokusetha kabusha ukufakwa kokuqala ngemva kokuqalisa ushintsho.
Ukusethwa kwe-HA kwehluleka ngokuthi "yehlulekile ukushintsha iphutha lobunikazi beqembu".

Isevisi yokuqapha umhubhe we-JSA izama ngokungalungile ukudala uxhumano olusuka kumishini elindile ye-HA.
Ukuhlolwa kwesimiso esivamile 'Isehlakalo noma ukugeleza kucutshungulwe injini yemithetho yangokwezifiso' kungabonisa Okuhlukile Kwefomethi Yenombolo.
Uma izakhiwo ze-AQL zidalwe ngaphambi kwe-JSA 7.4.3 zikhona kuphro yokudlulisela phambilifile, ukudlulisa ungaxhunyiwe ku-inthanethi kuhamba kancane.

Ukulandelana kwebhayithi okungavumelekile kombhalo wekhodi othi “UTF8” kuyilapho ufinyelela i-API yedatha yesithenjwa noma umsebenzisi wokungenisa we-UBA.
Ikhasi lesifinyezo secala lokuhlobana elingokomlando lingabonisa 'file iphutha lokufinyelela' nini viewukwenza imicimbi eqoqwe.
Ukuqina kwe-STIG ku-JSA 7.5.0 Update Package 7 kungase kungasethi iphasiwedi yokuqalisa, okuphoqelele ukufakwa kabusha.

Izinkinga zesikhala sediski yesibili ze-HA zingenzeka uma files zezinguqulo ezindala ze-ECS azisuswa.
I-Hostcontext ingadlula isabelo esizenzakalelayo esingu-256MB, okuholela ezinkingeni ezingaphandle kwenkumbulo kubasingathi.
Imithetho yangokwezifiso: Imithetho yokubala okufanayo ayiqalisi njengoba kulindelekile uma isetshenziswa nemithombo yelogi ehlanganisayo.

Ilogi File Iphrothokholi elungiselelwe ukuxhuma ne-SFTP ingayeka ukuqoqa imicimbi kungazelelwe ku-JSA 7.5.0 Update Package 7.
I-Rule Wizard ibonisa i-pop-up engenalutho yokuhlola 'Igama lomthombo wokugeleza lingenye yale mithombo'.
Iwindi lemininingwane yefa alibonisi ikheli le-imeyili lakamuva lapho lishintshwa.

Inani lethebula eliyireferensi alikhonjiswa ngokungalungile ezimpendulweni zemithetho ye-Rule Wizard uma ihlelwa.
Izicelo ze-JSA ziyehluleka ukufaka/ukuvuselela ngemva kokuthuthukela ku-JSA 7.5.0 Update Package 6.
I-Rule Wizard ibonisa 'Inani lempendulo kufanele libe ngu-0 noma ngaphezulu' lapho ivumela imikhawulo yempendulo ngezilimi ze-UI ezingezona ezesiNgisi.

Izipele zasebusuku ziyehluleka uma izinhlelo zokusebenza zisesimweni sephutha.
Umthetho othi “Isisindo somthombo/Indawo okuyiwa kuyo siphansi” singaqalisa lapho isisindo singaphezu kwepharamitha echaziwe.

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2024 Juniper Networks, Inc. Wonke amalungelo agodliwe.

Amadokhumenti / Izinsiza

I-Juniper 7.5.0 Izibalo Ezivikelekile [pdf] Iziyalezo
7.5.0 Izibalo Ezivikelekile, 7.5.0, Izibalo Ezivikelekile, Izibalo

Izithenjwa

Imaniwali yosebenzisayo

I-Juniper 7.5.0 Izibalo Ezivikelekile

Ulwazi Lomkhiqizo

Imiyalo yokusetshenziswa komkhiqizo

FAQ