{"id":8290,"date":"2021-05-20T18:00:16","date_gmt":"2021-05-20T10:00:16","guid":{"rendered":"https:\/\/ailog.tw\/lifelog\/?p=8290"},"modified":"2021-06-04T20:44:12","modified_gmt":"2021-06-04T12:44:12","slug":"firewall-analyzer","status":"publish","type":"post","link":"https:\/\/ailog.tw\/lifelog\/2021\/05\/20\/firewall-analyzer\/","title":{"rendered":"\u5b89\u88ddFirewall Analyzer\u4f86\u6536\u96c6Fortigate\u9632\u706b\u7246log"},"content":{"rendered":"

\u8fd1\u671f\u56e0\u70ba\u75ab\u60c5\u7684\u95dc\u4fc2\uff0c\u5f88\u591a\u516c\u53f8\u5df2\u6709\u63a1\u5c45\u5bb6\u4e0a\u73ed\u7684\u72c0\u6cc1\uff0c\u4e26\u900f\u904eVPN\u8b93\u4f7f\u7528\u8005\u53ef\u4ee5\u9023\u7dda\u56de\u516c\u53f8\u5b58\u53d6\u516c\u53f8\u7684\u8cc7\u6e90\uff0c\u4f46\u5230\u5e95\u54ea\u4e9b\u4eba\u6709VPN\u9023\u7dda\u9032\u4f86\u904e\uff0c\u600e\u9ebc\u4fdd\u7559\u9023\u7dda\u7d00\u9304\u5462?\u5f88\u591a\u4e2d\u5c0f\u4f01\u696d\u5728\u88dd\u8a2d\u9632\u706b\u7246\u6642\u662f\u6c92\u6709\u5efa\u7acblog\u6536\u96c6\u7684\u6a5f\u5236\u7684\uff0c\u5c0f\u7de8\u4eca\u5929\u8981\u4ecb\u7d39\u900f\u904eFirewall Analyzer\u4f86\u6536\u96c6\u9632\u706b\u7246\u7684VPN\u8cc7\u8a0a\u3002<\/span><\/p>\n

\u8003\u616e\u5230\u5728\u4f01\u696d\u4f7f\u7528\u76e1\u91cf\u4e0d\u589e\u52a0\u6388\u6b0a\u7684\u6210\u672c\uff0c\u672c\u7bc7\u5c0f\u7de8\u6703\u4ecb\u7d39\u4ee5Linux\u74b0\u5883\u5b89\u88dd\u7684\u65b9\u5f0f\u3002<\/span><\/p>\n

Firewall Analyzer\u5b98\u65b9\u7db2\u9801\u4ecb\u7d39\uff1a<\/span>
\nhttps:\/\/www.manageengine.com\/products\/firewall\/<\/a><\/span><\/p>\n

01\u3001\u5b89\u88dd\u597dLinux<\/span><\/strong>
\n\u5b89\u88dd\u6b65\u9a5f\u53ef\u4ee5\u53c3\u8003\u4e0b\u5217\u6587\u7ae0\uff1a
\nhttps:\/\/ailog.tw\/lifelog\/2021\/05\/15\/ubuntu-20-install\/<\/a>
\n<\/span><\/p>\n

02\u3001\u4e0b\u8f09Firewall Analyzer\u8edf\u9ad4(30\u5929\u514d\u8cbb\u6388\u6b0a)
\n<\/span><\/strong>Linux 32\u4f4d\u5143\u4e0b\u8f09\u7db2\u5740\uff1a
\nhttps:\/\/www.manageengine.com\/products\/firewall\/61794333\/ManageEngine_FirewallAnalyzer.bin<\/a><\/span><\/p>\n

Linux 64\u4f4d\u5143\u4e0b\u8f09\u7db2\u5740\uff1a
\nhttps:\/\/download.manageengine.com\/products\/firewall\/61794333\/ManageEngine_FirewallAnalyzer_64bit.bin<\/a><\/span><\/p>\n

[\u76f4\u63a5\u5728Linux\u7cfb\u7d71\u4e0b\u8f09\u6a94\u6848]
\n\u6307\u4ee4\uff1a
\nsudo wget https:\/\/download.manageengine.com\/products\/firewall\/61794333\/ManageEngine_FirewallAnalyzer_64bit.bin
\n\"\"<\/p>\n

03\u3001\u8a2d\u5b9a\u5b89\u88dd\u6a94\u6210\u53ef\u57f7\u884c\u7684\u6a94\u6848
\n<\/span><\/strong>sudo chmod 755 ManageEngine_FirewallAnalyzer_64bit.bin
\n\"\"<\/span><\/p>\n

04\u3001\u5b89\u88ddFirewall Analyzer\u8edf\u9ad4<\/strong>
\n<\/span><\/strong>sudo .\/ManageEngine_FirewallAnalyzer_64bit.bin<\/span>
\n\"\"
\n<\/span><\/strong><\/p>\n

05\u3001\u540c\u610f\u8edf\u9ad4\u6388\u6b0a<\/span><\/strong>
\n\u6309\u4e0b\u9375\u76e4\u300center\u300d\u9032\u5165\u540c\u610f\u76f8\u95dc\u6388\u6b0a\u6b65\u9a5f
\n\"\"<\/p>\n

\u904e\u7a0b\u6301\u7e8c\u6309\u9375\u76e4\u300center\u300d
\n\"\"<\/p>\n

\u6700\u5f8c\u6309\u4e0b\u300cY\u300d\u63a5\u53d7\u6388\u6b0a
\n\"\"<\/p>\n

06\u3001\u662f\u5426\u8a3b\u518a\u6280\u8853\u652f\u63f4\u670d\u52d9
\n\u672c\u7bc4\u4f8b\u9078\uff1aN
\n\"\"<\/p>\n

07\u3001\u8edf\u9ad4\u5b89\u88dd\u8def\u5f91
\n\u63a1\u7528\u9810\u8a2d\u5b89\u88dd\u8def\u5f91\uff0c\u6309\u4e0bEnter\u5373\u53ef
\n\"\"<\/p>\n

08\u3001\u8a2d\u5b9aweb\u9023\u7dda\u670d\u52d9Port
\n\u672c\u7bc4\u4f8b\u63a1\u7528\u9810\u8a2d\u503c\uff1a8060
\n\"\"<\/p>\n

09\u3001\u78ba\u8a8d\u5b89\u88dd\u8cc7\u8a0a
\n\u6309\u4e0b\u300cENTER\u300d\u7e7c\u7e8c\u5b89\u88dd
\n\"\"
\n\"\"<\/p>\n

10\u3001\u5b89\u88dd\u5b8c\u6210\u756b\u9762
\n\"\"<\/p>\n

11\u3001\u5c07Firewall Analyzer\u5b89\u88dd\u6210Service\u578b\u614b
\n<\/span><\/strong>cd \/opt\/ManageEngine\/OpManager\/bin
\nsudo sh linkAsService.sh
\n\"\"<\/p>\n

12\u3001\u555f\u52d5Firewall Analyzer\u8edf\u9ad4
\n<\/span><\/strong>sudo systemctl start OpManager.service<\/span>
\n\"\"
\n<\/span><\/strong><\/p>\n

13\u3001\u6aa2\u67e5\u670d\u52d9Port\u662f\u5426\u6709\u555f\u52d5
\nss -an | grep 8060
\n\"\"<\/p>\n

14\u3001\u767b\u5165Fortigate\u9632\u706b\u7246\u8a2d\u5b9alog server
\n\u900f\u904eSSH\u6216Console\u767b\u5165\uff0c\u8f38\u5165\u4e0b\u4ee4\u6307\u4ee4\uff1a
\n(1)\u3001\u555f\u52d5syslog\u4e26\u6307\u5b9a\u50b3\u9001\u5230Firewall Analyzer\u4e3b\u6a5f\u4e0a\uff0c\u7bc4\u4f8b\u4e2d\u7684192.168.5.243\u70ba\u5c0f\u7de8\u7684Firewall Analyzer Server IP\uff0c\u8acb\u81ea\u884c\u66f4\u6539\u70ba\u81ea\u5df1\u76f8\u5c0d\u61c9\u7684IP\u3002
\nconfig log syslogd setting
\nset status enable
\nset server 192.168.5.243<\/span>
\nset port 1514
\nend<\/p>\n

(2)\u3001\u8a2d\u5b9a\u8981\u50b3\u9001\u4ec0\u9ebcloh\u5167\u5bb9
\nconfig log syslogd filter
\nset severity information
\nset forward-traffic enable
\nset local-traffic enable
\nset anomaly enable<\/p>\n

15\u3001\u900f\u904e\u700f\u89bd\u5668\u767b\u5165\u7cfb\u7d71
\n\u9810\u8a2d\u5e33\u865f\uff1aadmin
\n\u9810\u8a2d\u5bc6\u78bc\uff1aadmin
\n\"\"<\/p>\n

16\u3001\u9ede\u9078\u300cDashboard\u300d\u2192\u300cVPN\u300d\u5373\u53ef\u770b\u5230\u9632\u706b\u7246\u7684VPN\u76f8\u95dc\u7684\u72c0\u614b
\n\"\"<\/p>\n

\"\"<\/p>\n

17\u3001\u67e5\u770bVPN\u6b77\u53f2\u5831\u8868
\n\u9ede\u9078\u300cReports\u300d \u2192 \u300cVPN Reports\u300d\u5373\u53ef\u89c0\u770bVPN\u7684\u6b77\u53f2\u7d00\u9304
\n\"\"<\/p>\n

18\u3001\u8b8a\u66f4\u7cfb\u7d71\u4ecb\u9762\u8a9e\u7cfb
\n(1)\u3001\u9ede\u9078\u53f3\u4e0a\u89d2\u9f52\u8f2a\u5716\u793a
\n\"\"<\/p>\n

(2)\u3001\u9078\u64c7\u5de6\u908a\u7684\u300cLanguage Selector\u300d\uff0c\u63a5\u8457\u9078\u64c7\u53f3\u908a\u7684\u300cChinese(Traditional)\u7e41\u4f53\u4e2d\u6587\u300d
\n\"\"<\/p>\n

(3)\u3001\u7db2\u9801\u6703\u81ea\u52d5\u91cd\u65b0\u6574\u7406\uff0c\u63a5\u8457\u5c31\u53ef\u4ee5\u770b\u5230\u4e2d\u6587\u7db2\u9801\u4e86\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

\u8fd1\u671f\u56e0\u70ba\u75ab\u60c5\u7684\u95dc\u4fc2\uff0c\u5f88\u591a\u516c\u53f8\u5df2\u6709\u63a1\u5c45\u5bb6\u4e0a\u73ed\u7684\u72c0\u6cc1\uff0c\u4e26\u900f\u904eVPN\u8b93\u4f7f\u7528\u8005\u53ef\u4ee5\u9023\u7dda\u56de\u516c\u53f8\u5b58\u53d6\u516c\u53f8\u7684\u8cc7\u6e90\uff0c\u4f46\u5230\u5e95\u54ea\u4e9b … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5b89\u88ddFirewall Analyzer\u4f86\u6536\u96c6Fortigate\u9632\u706b\u7246log\u3009<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":8313,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,381],"tags":[3772,41,2502,3773,92,3774],"class_list":["post-8290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-itinfo","category-firewall","tag-firewall-analyzer","tag-fortigate","tag-log","tag-report","tag-vpn","tag-firewall-analyzerfortigatelog"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/posts\/8290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/comments?post=8290"}],"version-history":[{"count":13,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/posts\/8290\/revisions"}],"predecessor-version":[{"id":8955,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/posts\/8290\/revisions\/8955"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/media\/8313"}],"wp:attachment":[{"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/media?parent=8290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/categories?post=8290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ailog.tw\/lifelog\/wp-json\/wp\/v2\/tags?post=8290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}