Uyazi ukuthi yini a ukuqapha inethiwekhi? Hhayi-ke, ukuso okuthunyelwe okukhonjisiwe! Uzokwazi ngokuningiliziwe incazelo yayo, uhlelo lokusebenza, izibonelo nokunye okuningi. Amanethiwekhi angenye yezinto ezibaluleke kakhulu okufanele azinake ngoba uma iyeka ukusebenza, inkampani okukhulunywa ngayo iyeka ukunikeza insizakalo yayo.
Ukuqapha kwenethiwekhi
Yize uhlelo lokuphazanyiswa kokungenelela lulawula inethiwekhi, ibheka izinsongo ezivela ngaphandle (ngaphandle kwenethiwekhi), indlela eyilawulayo ibheka izinkinga ezibangelwe ukungena kwabantu kanye / noma ukwehluleka kweseva nezinkinga zengqalasizinda yenethiwekhi noma elinye iqembu. Isibonelo, ukusungula isimo se-web server, isoftware yokuqapha ingathumela ngezikhathi ezithile izicelo ezihambelana ne-HTTP (Hypertext Transfer Protocol) ukuthola amakhasi.
Kumaseva we-imeyili, sebenzisa i-SMTP (i-Simple Mail Transfer Protocol) ukuthumela i-imeyili, bese usebenzisa i-IMAP (Internet Mail Access Protocol) noma i-POP3 (Post Office Protocol) ukulungisa leyo imeyili.
Ukuqapha okuhle kwenethiwekhi kuvame ukufakwa kalula, futhi kubasebenzisi abangaqeqeshiwe, kulula ukuyisebenzisa, ngakho-ke iseluleko sangaphandle noma ukuqeqeshwa kuncane noma akudingekile. Ngakho-ke inhloso yokwakha amathuluzi nezinhlelo zokuqapha inethiwekhi ukwenza kube lula kubantu abajwayele iWindows nokusetshenziswa kokuqhafaza. Ngale ndlela, ungabeka kuqala isibonisi ukuqapha ithrafikhi yenethiwekhi.
Ezinye izidingo uMnu okufanele abe nazo yilezi:
- Ukuphathwa kwesilawuli kude ngokusebenzisa isiphequluli sewebhu, iklayenti lePocketPC noma iWindows.
- Isaziso semininingwane yokuphumula nge-imeyili, i-ICQ, usesho / i-SMS, njll.
- Qedela ukukhethwa kohlobo lwenzwa.
- Ukuqapha izindawo eziningi.
Yini eyenzayo?
Omunye wemisebenzi eyenziwa yi-MR ukulandelela ukuthi ikhompyutha ngayinye efakwe kunethiwekhi isetshenziswa kanjani, ekhombisa isikhathi nesikhathi sokuxhuma, ikheli le-IP elisetshenzisiwe kanye nohlobo lwesicelo esisetshenzisiwe. Ufinyelele kwinethiwekhi futhi wasungula ukuxhumana.
Lokhu kanye nezinye izinhlelo zokuqapha inethiwekhi kuzuzisa kakhulu ukuthola ukuxhumana okungahambi kahle, okungavunyelwe noma okungagunyaziwe, nokuvikela izinkinga zokuxhumeka ngesikhathi somthwalo omkhulu noma ukugeleza kolwazi (amahora aphezulu).
Khumbula, ukuqapha kuphela kubonisa imininingwane: ukulawula ukufinyelela kwenethiwekhi, i-firewall noma uhlelo olufanayo luyadingeka.
Yiziphi izidingo okufanele ithrafikhi yokuhlaziya inethiwekhi ibe nazo?
Izidingo eziyisisekelo umhlaziyi womgwaqo ngamunye okufanele abe nazo kufanele zicatshangelwe. Kungakho kudingekile ukuqonda imiqondo yamalogi wesistimu nokulawulwa komkhawulokudonsa (AB).
I-Syslog
Yizimpawu ezithunyelwa uhlelo lokuxhumana futhi zithunyelwe kuseva emaphakathi (CS) ezibhalisayo noma ezizigcinayo. Ukuqashwa kwalezi zimpawu noma imilayezo kusekelwe ekuqoqweni kwalolu lwazi ku-CS efanayo, ngakho-ke kuyasebenza kakhulu futhi kuyashesha ukuhlaziya nokulungisa ama-alamu akhishwa uhlelo lwe-MR.
I-Broadband
Ngokuhamba kwesikhathi, ubukhulu bethrafikhi yedatha (TD) edluliswa ngaphezulu kwesixhumanisi senethiwekhi ibizwa nge-AB, okungaba yisiteshi somzimba (esinentambo) noma somoya (WIFI). Ithrafikhi ilinganiswa ngamayunithi wamabhithi ngomzuzwana, futhi ukuqapha kwe-AB kuvumela isimo se-TD saziwe kuyo yonke inethiwekhi.
Ezinye izici okufanele zicatshangelwe lolu hlobo lwesoftware:
- Sula isignali ye-alamu.
- Ukuhlanganiswa namaseva angaphandle.
- Amandla wokusebenza kwamadivayisi amaningi.
- Ukutholakala kokubukwa kwedatha kuphaneli yokulawula.
- Vumelana nokuguquguquka kwamathuluzi athile noma isoftware.
- Ukuthuthuka (ukukhubazeka).
- Idivayisi itholwa ngokuzenzakalela.
- Hlanganisa ne-database.
- Ingasekela izivumelwano eziningi zokuqoqa idatha ngangokunokwenzeka.
- Ukuhlanganiswa nemishini ebonakalayo.
- I-Hardware ne-software yokusungula.
- Indawo
- Ukuqapha efwini.
Izibonelo zohlelo lokuqapha inethiwekhi
Ama-MRs asetshenziswa kakhulu abhalwe ngezansi, futhi izinhlelo zawo zokusebenza zikhonjiswa kubakaki: I-Microsoft Network Monitor (Windows), iNetWorx (Windows), i-PRTG Network Monitor (Windows), iCucusoft Net Guard (Windows), iWireshark (Windows, Mac) , ILinux Rubbernet (Mac), i-Visual NetTools (Mac), i-PrivateEye (Mac).
Abahlaziyi be-MR
- I-Wireshark (iWindows neLinux)
- I-Microsoft Message Analyzer Windows)
- I-Tcpdump (Linux)
- I-Windump (Windows)
Inethiwekhi ibhekwa kanjani?
Uhlelo lokuqapha inethiwekhi lubheka izinkinga ezibangelwa ukulayishwa ngokweqile kanye / noma ukwehluleka kweseva, kanye nezinkinga ngengqalasizinda yenethiwekhi (noma enye imishini). Cela ukuthola ikhasi. Kumaseva we-imeyili, sebenzisa i-SMTP (i-Simple Mail Transfer Protocol) ukuthumela i-imeyili, bese usebenzisa i-IMAP (Internet Mail Access Protocol) noma i-POP3 (Post Office Protocol) ukuyisusa.
Ukuphathwa okufanele kwenethiwekhi
- Ubukhulu obuthathu bokuphathwa kwenethiwekhi • a) ubukhulu obusebenzayo • b) ubukhulu besikhathi • c) ubukhulu besisombululo.
- Ukuhlelwa nenethiwekhi: Ukukhethwa kwengqalasizinda yenethiwekhi, ukufakwa nokuphathwa kweSoftware, Ukuphathwa kweSoftware, Ukuphathwa kokusebenza.
- Ukuphathwa kokusebenza kwehlukaniswe izigaba ezimbili: ukuqapha nokuhlaziya, ukuqapha, ukuhlaziywa, ukuphathwa kwamaphutha.
- Ukuqapha i-alamu: Ama-alamu angahlukaniswa okungenani ezintweni ezimbili: uhlobo nobukhulu be-alamu.
- Uhlobo lwe-alamu: I-alamu yokuxhumana, i-alamu yenqubo, i-alamu yemishini, i-alamu yezemvelo, i-alamu yesevisi.
- Ubukhulu be-alamu: Bukhulu, bukhulu, buncane, abuchazwanga.
- Ukuthungatha inkinga: Ukulungiswa Kwamaphutha, Ukuphathwa Kombiko, Ukudalwa Kombiko
Umbiko kufanele okungenani ube nemininingwane elandelayo: Igama lomuntu obika inkinga, igama lomuntu obandakanyekayo enkingeni, owadala lo mbiko, thola imininingwane yezobuchwepheshe endaweni yenkinga, amanothi ngenkinga, usuku nesikhathi yombiko.
Umbiko wokuqapha: Ukuphathwa kombiko, ukuqedwa kombiko, ukuphathwa kwe-Accounting, ukuphathwa kwezokuphepha, ukuvimbela ukuhlasela, ukutholwa kokungena.
- Ukuthola Ukungena: Ukuphendula Kwesehlakalo, Isu Lokuphepha.
Inhloso eyinhloko yecebo lezokuphepha ukusungula izidingo ezinconyiwe zokuvikela ngokugcwele ingqalasizinda ye-IT nolwazi oluqukethe.
Phakathi kwazo, amanye amasu adingekayo afaka phakathi: Isu Lokusetshenziswa Elamukelekayo, Isu Lama-Akhawunti Womsebenzisi, Isu Lokumiswa Kwezindlela, Isu Lokuhlela Ukufinyelela, Isu Lokufinyelela Ekude, Isu Lephasiwedi, Inqubomgomo Yokulondoloza.
Izinsizakalo zokuphepha: Ukwakhiwa kwezokuphepha kwe-OSI kukhomba izinhlobo ezinhlanu zezinsizakalo zokuphepha:
- Ubumfihlo
- Ukuqinisekiswa kobunikazi
- Ubuqotho
- Ukulawula ukungena
- Angilahli.
Izinqubo zezindlela zokuphepha ukufeza izinjongo ezilandelwe, okungenani kumele kwenziwe lokhu okulandelayo:
- Lungisa isu lokuphepha elichaza imithetho esetshenzisiwe ukuphatha ingqalasizinda yenethiwekhi.
- Chaza okulindelwe yinethiwekhi ngokusetshenziswa okuhle kwenethiwekhi nokuvimbela nokuphendula ezehlakalweni zokuphepha.
Ngokwenqubomgomo yezokuphepha, kuchazwa izinsizakalo ezidingekayo kanye nezinsizakalo ezinganikezwa futhi zisetshenziswe kwingqalasizinda yenethiwekhi: Sebenzisa inqubomgomo yezokuphepha ngezindlela ezifanele.
Ukuziphendukela kwemvelo namathrendi
Enye yezinselelo abaphathi be-IT ababhekana nazo yindlela abaphathi bezinhlangano zabo abanezici ezanele zokubona imininingwane yabo yokusebenza, nokwenza ngcono ukubaluleka kobuchwepheshe njengengxenye yokusekelwa kwebhizinisi. Ukuthuthukiswa kwamathuluzi wokuqapha nakho kuqhutshwa ukufika kwezinhlelo ezithuthukisiwe zokubonisa ithrafikhi (njengeNetflow, Jflow, Cflow, sflow, IPFIX noma iNetstream).
Inhloso yanamuhla ukuhlukanisa yonke into ngokubuka komhlaba wonke ukuhlukanisa kahle imicimbi ethinta ukusebenza kwezinsizakalo noma izinqubo zebhizinisi ezithintekayo. Ngokuthuthuka kobuchwepheshe, ukuthuthuka kwayo kudlule ezigabeni ezihlukene, sikubhala ngale ndlela elandelayo:
Isizukulwane sokuqala: Izinhlelo zokusebenza zobunikazi bokuqapha amadivayisi asebenzayo noma angasebenzi
Imboni isungule amathuluzi amaningi ngomzamo wokwethula izinsiza ngendlela enobungane nesikhathi sangempela. Lapho, ibhokisi libomvu, okukhombisa ukuthi i-router iyekile ukusebenza, ngakho-ke akukho ukuxhumana kwemboni. Lokhu yilokho opharetha wokuqapha owatshela isilawuli asicelile ngaphambilini. Bika ukuthi ulayini womkhiqizo ozothengiswa ulahlekile nini.
Ithuluzi lokuqapha libonisa izinto ngekhodi yombala ejwayelekile:
- Okuhlaza: Konke kujwayelekile.
- Okuphuzi: Kutholwe inkinga yesikhashana futhi ngeke ithikameze ukusetshenziswa, noma kunjalo kufanele kwenziwe izinguquko ezithile ukugwema ukuphazamiseka kwezokuxhumana.
- Orenji: Inkinga isekhona futhi idinga ukunakekelwa ngokushesha ukuze ingathinti ukusetshenziswa.
- Okubomvu: Idivayisi okwamanje ayitholakali futhi kudingeka isenzo esisheshayo ukuyisetha kabusha.
Isizukulwane sesibili: Izinhlelo zokusebenza zokuhlaziya ipharamitha ezijulile
Kulesi sizukulwana samathuluzi, baqhuba ukuhlaziywa okujulile ukuze bakwazi ukuhlola isimo sezinto zedivayisi i-CPU, imemori, isikhala sokugcina, amaphakethe athunyelwe futhi atholiwe, asakazwa, asakazwa kabanzi, njll. Ungaguqula imingcele futhi uhlole izinga lensiza yemishini. Lezi zinhlobo zezinhlelo zokusebenza zisuselwa kubahlaziyi beprotocol noma i- "sniffer" futhi zisatshalaliswa izakhi zomzimba ezibizwa nge- "probes" imisebenzi yazo isetshenziswa ngokukhethekile ukuqoqa izibalo zethrafikhi futhi ngokuvamile ilawulwa yi-central console.
Isizukulwane sesi-3: Izicelo zokuhlaziywa kokuphela kokugxila kusevisi
Ngemininingwane esezingeni eliphakeme mayelana nedivayisi sinezinye izinto zokuhlaziya, kepha kusenamapharamitha anele okwenza izinqumo. Manje inkinga idalwa ukuhlanganiswa kwamadivayisi amaningi abamba iqhaza enkonzweni efanayo. Manje lesi sizukulwane sezinhlelo zokusebenza sisebenzisa indlela yokuthengiselana sithwebule “ukugeleza” kwezimoto, sabona izithiyo kanye nokubambezeleka ekuxhumaneni phakathi kwezinsiza, futhi kwanikeza ulwazi ngesimo sazo.
Kulesi sizukulwane semikhiqizo, zonke izingxenye zingaxhunywa ngendlela esebenza kahle lapho idivayisi ngayinye yazi ukuthi kufanele yazise nini amanye amadivayisi ngaphandle kokuthinta imisebenzi eyenzayo, engabangeli ukuba ulwazi luthwale ngokweqile. Ngale ndlela, ungenza izinqumo usebenzisa izindlela zomthelela webhizinisi.
Isizukulwane sesine: Ukwenza ngezifiso izinkomba zokusebenza zezinqubo zebhizinisi
Ukwenza amandla okukhula kwezixazululo zobuchwepheshe nokuhlangabezana nezidingo zezinhlangano zanamuhla, size emibonweni "yedeshibhodi", okuyizinkomba amakhasimende angazakha futhi azenze ngokwezifiso zawo, kanye nokukhetha okuguqukayo okufanele kuhlobene nabo . Ngeso elibonakalayo ngeso lengqondo izinga lokuthobela elilethwa umenzi wesinqumo kunqubo yebhizinisi. Kulesi sizukulwana sezixazululo, kunezinye izixazululo zokuqapha ukusebenza kohlelo lokusebenza.
Ama-technical element ("back-end") ahlanganiswe nohlelo akulo, futhi lezi zinto zixhunywe nezinhlelo zakho zokusebenza ezihlanganisiwe zokwenza ukuthengiselana okuqhuba izinqubo zebhizinisi ("front-end"). Ngamanye amagama, lokhu ukuhlaziywa kokuphela kokuphela.
Amandla ala mathuluzi anganikeza imininingwane evumelanisiwe ku:
- Umphumela wokubikezela.
- Isimo sokumodela (ukulingisa nokulingisa).
- Ukuhlaziywa kwamandla nokuhlela.
- Setha umsebenzi wokulungisa.
- Ukulinganiswa komthelela webhizinisi (ikhwalithi, impilo kanye nobungozi kumasevisi ahlinzekiwe).
- Okuhlangenwe nakho komsebenzisi.
Isaziso senkinga
Ukwazi kusengaphambili ukubaluleka kwanoma iyiphi inkinga kuseva, uhlelo luvame ukubika lesi sigameko ngokushesha ngezindlela ezahlukahlukene (ngokwesibonelo, nge-imeyili, i-SMS, ucingo, ifeksi, njll.).
Amathuluzi wamahhala wokuqapha inethiwekhi encane
Noma ngabe ubukhulu benkampani yakho bunjani, i-Intanethi isibe yinto esemqoka empumelelweni yebhizinisi. Lapho inethiwekhi yehluleka, amakhasimende nabasebenzi abakwazi ukuxhumana, futhi abasebenzi abakwazi ukufinyelela kulwazi olubucayi noma basebenzise izinsizakalo eziyisisekelo zokuphrinta noma ze-imeyili, okuholele ekulahlekelweni komkhiqizo nenzuzo.
Lawa mathuluzi anciphisa ukuphazamiseka kwenethiwekhi, avumela izinkampani ukuthi zisebenze ngokushelela, ngaleyo ndlela zinciphise izindleko futhi zivikele nokulahleka kwezezimali. Kungasebenza ezinkampanini ukuthi ziqale ngemali encane bese ziqala ngohlelo lokulawulwa kwamahhala okuthi zona izindleko zibe zincane, bese kuthi kunciphise isikhathi kunoma yiluphi uhlobo lwabaphathi.
Izakhi zenethiwekhi eziyinhloko ezizoqapha
Ezinye izisekelo eziyisisekelo ezidinga ukuqapha okuqhubekayo yilezi:
- Iseva ye-imeyili:
Yonke inhlangano ineseva ye-imeyili yokusabalalisa imeyili kubo bonke abasebenzisi ku-LAN. Uma ngabe iseva ye-imeyili yehluleka, umsebenzisi uzonqanyulwa emhlabeni wangaphandle futhi imisebenzi ebalulekile, njengokuxhaswa kwamakhasimende, izothinteka. Abaphathi be-IT kufanele babheke ukutholakala kwamaseva wabo we-imeyili, ama-imeyili asemugqeni, ubukhulu bama-imeyili atholiwe, njll.
- Izixhumanisi ze-WAN:
Amabhizinisi amancane angonga imali ngokwenza ngcono izixhumanisi ze-WAN. Uma bebhalisela ngokweqile bazohlangabezana nezindleko eziphezulu, futhi uma kungekho okubhaliselwe okwanele inethiwekhi ingawa. Ngakho-ke, abaphathi be-IT kumele balinganise ngokucophelela ukungena, imininingwane ebekeke engcupheni yolwazi (i-CIR), kanye nesilinganiso sokuqhuma esiminyene, isikhathi sokuphendula, nokushiya ukwenza ngcono ukusetshenziswa kwezixhumanisi. Abaphathi be-IT kumele futhi bathole ukuthi ngubani osebenzisa umkhawulokudonsa omningi ukwenza ukulungisa okudingekayo.
Izicelo zebhizinisi
- Izinsiza: Iseva isebenzisa izinhlelo ezibucayi, ngakho-ke udinga ukuqapha i-CPU, imemori, isikhala sediski, kanye nezinsizakalo ezisebenza kuzo (i-FTP, i-DNS, i-ECHO, i-IMAP, i-LDAP, i-TELNET, i-HTTP, i-POP, njll.) Nesikhathi sayo sokuphendula . Ngaphezu kwalokho, ukuthambekela kokusetshenziswa kwethrafikhi yalawa maseva nakho kufanele kubhekwe.
- Izingodo zeseva: Amabhizinisi amancane asebenzisa i-Windows computer kufanele futhi aqaphe izingodo zeseva ukwehluleka kokungena ngemvume, ukukhiya ama-akhawunti, amaphasiwedi angalungile, imizamo engaphumelelanga yokuthola amafayela aphephile, nokuzama ukwephula izingodo zokuphepha. . Ukuqapha lezi zingodo kungaqonda ngokucacile ubungozi bokuphepha obukhona enhlanganweni.
- Izicelo, yolwazi namawebhusayithi: Amabhizinisi amancane asebenzisa izinhlelo ezahlukahlukene ezibucayi zemishini, amawebhusayithi, kanye nemininingwane edinga ukuqashwa njalo. Ungaqapha ukutholakala kohlelo lokusebenza, isikhathi sokuphendula, njll. Ukutholakala kwe-URL kumele kubhekwe.
- Ingqalasizinda ye-LAN: Okokusebenza kwengqalasizinda yakho ye-LAN, njengokushintshwa, amaphrinta, namadivayisi angenazintambo.
Izidingo ezi-3 eziphezulu ze-Small Network Management
Amabhizinisi amancane anezidingo ezihlukile nokulindelwe ukuphathwa kwenethiwekhi ngenxa yobuchwepheshe babo obulinganiselwe bomuntu nobuchwepheshe. Ngakho-ke zidinga amathuluzi angabizi kakhulu, kulula ukuwafaka futhi uwasebenzise, futhi zinothile.
- Amandla okuthenga aphansi: Uhlelo lokuqapha inethiwekhi kumele lubize.
- Kulula ukufaka nokusebenzisa: Lokhu kufanele kube enembile ngokwanele ukuqala ukukusebenzisa ngaphandle kokufunda imibhalo eyisicefe.
- Imisebenzi eminingi: Kufanele ikwazi ukulawula yonke imithombo yayo: izinsizakusebenza zamanje nezinsiza ezizayo.
Isoftware yomthombo ovulekile yokuqapha inethiwekhi encane
Inhlanganisela ivulekile futhi inikezela ngamathuluzi amaningi ukuze ahambisane nezidingo ezahlukahlukene ze-IT, kufaka phakathi ukuqapha kwenethiwekhi, ukuqapha umkhawulokudonsa, ukutholakala kwenethiwekhi, nokuningi. Amathuluzi wemithombo evulekile athandwa kakhulu wokuphathwa kwenethiwekhi yilawa:
- I-Nagios: Uhlelo lokuqapha Inethiwekhi ye-MRTG:
- Uhlelo lokuqapha Traffic
- I-Kismet: Uhlelo Lokuqapha Okungenantambo
I-Nagios:
INagios® ingumbonisi wokusingathwa nensizakalo eyenzelwe ngqo isistimu yokusebenza yeLinux, kepha futhi ingasetshenziswa ngokuhlukahluka okuningi kweNIX. I-daemon yokuqapha isebenzisa ama-plugins athumela imininingwane yesimo kuma-Nagios ukwenza amasheke ngezikhathi ezithile kubabungazi nezinsizakalo ozicacisayo.
Uma kunezinkinga i-daemon ingathumela izaziso koxhumana nabo bezokuphatha ngezindlela eziningi ezahlukahlukene (i-imeyili, imiyalezo esheshayo, i-SMS, njll.). Yonke imininingwane yesimo samanje, izingodo zomlando nemibiko ingatholakala ngesiphequluli sewebhu.
I-MRTG:
I-Multi Router Traffic Grapher (MRTG) iyithuluzi lokuqapha umthwalo we-traffic kusixhumanisi senethiwekhi. I-MRTG idala amakhasi e-HTML anezithombe ze-PNG ezinikeza ukumelwa okubonakalayo kwesikhathi sangempela kokugeleza kwethrafikhi.
I-Kismet:
IKismet iyi-Layer 802.11 2 wireless detector, sniffer, kanye ne-intrusion detection system. Lokhu kungasetshenziswa nganoma iliphi ikhadi elingenantambo elisekela imodi yokuqapha idatha eluhlaza (i-rfmon) futhi elingathola umgwaqo ongu-802.11b, 802.11a, no-802.11g. ngokungaqoqi iqoqa amaphakethe wedatha futhi ibone amanethiwekhi anamagama ajwayelekile, ithole (futhi ekugcineni ifihle) amanethiwekhi afihliwe, futhi ifaka ubukhona bamanethiwekhi angewona amabhakana ngokusebenzisa ithrafikhi yedatha ukukhomba amanethiwekhi.
Izixazululo zesizukulwane esilandelayo ezihlanganisiwe kepha ezingabizi kusuka kuManageEngine
IManageEngine inikezela ngezinethiwekhi ezahlukahlukene ezingabizi, umkhawulokudonsa, uhlelo lokusebenza, ilog yomcimbi, i-firewall, kanye nesoftware yokuqapha ideski. Amathuluzi ayo amahhala afanele amanethiwekhi amancane. Kulabo abaqala ukusebenzisa amathuluzi wamahhala, iManageEngine ingathutha kalula bese iya enguqulweni yezentengiso.
Uma ufuna ukwazi kabanzi ngama-athikili ethu, iya kusixhumanisi esilandelayo:Izinhlobo zokuhlolwa kwesoftware okukhona