CISCO FC 4210 Network Visibility Module

Selelekela

Fetileview
Sebelisa tataiso ena ho lokisa Cisco Secure Network Analytics ka Ponahalo ea Marang-rang

Mojule (NVM) ho thusa:

• Ho boloka le viewtlhahiso ea masimo a NVM
• Melao e teng ea tlolo ea molao ho qala ho tsoa ho phallo ea NVM
• Liphuputso tsa NetFlow tse ipapisitseng le sephethephethe sa NVM
• Ho theha Liketsahalo tsa Ts'ireletso ea Tloaelo ho latela likhokahano tsa pheletso

Litlhoko

• Secure Client (ho kenyeletsoa AnyConnect) v4.7 le hamorao
• Sireletsehile Network Analytics v7.5.3

Ha u sa hloka ho reka lengolo la Endpoint bakeng sa telemetry ea NVM. Sephethephethe sa NVM se kenyelelitsoe hammoho le NetFlow ha ho baloa litlhoko tsa laesense ea Flow Rate (FPS). Ho fumana lesedi le fetang lena mabapi le ho fana ka laesense, sheba ho Smart Software Licensing Guide 7.5.3.

Bokhoni ba Lebenkele la Boitsebiso
Cisco Secure Network Analytics Data Store e fana ka:

• Ponahalo e felletseng ho fihlela qetellong, ho kenyeletsoa le marang-rang le data ea kantle ho marang-rang
• Ponahalo ho mafapha afe kapa afe a NVM ho tsoa tlalehong ea Endpoint Traffic (NVM) ho Report Builder
• Bonyane matsatsi a 30 a polokelo ea data ea NVM
• Ts'ebetso e ntlafalitsoeng le ts'ebetso ea ho botsa
• Liphuputso tsa NetFlow tse ipapisitseng le sephethephethe sa NVM
• Ho theha Liketsahalo tsa Ts'ireletso ea Tloaelo ho latela likhokahano tsa pheletso

Tafole e latelang e fana ka likhakanyo tsa ts'ebetso bakeng sa setsebi se tloaelehileng sa sephethephethe sa khoebofile (boholo ba bareki):

• Ho na le lintlha tse 'maloa tse ka amang ts'ebetso ea hau e ikhethileng, joalo ka palo ea ba amohelang baeti, boholo ba palo ea phallo, le tse ling. Leha re etsa sohle se matleng a rona ho emela lintlha ka nepo le ka nepo kamoo ho ka khonehang, tikoloho ea hau e ka ba le meeli e fapaneng.

Tlhophiso

Lokisa NVM Pro ea haufile
The Secure Client Profile Editor e fumaneha ka Cisco Adaptive Security Device Manager (ASDM) kapa e le nyehelo e ikemetseng. Bakeng sa tlhaiso-leseling e batsi mabapi le mokhoa oa ho sebelisa Secure Client Profile Mohlophisi, bua ka Secure Client (ho kenyeletsoa AnyConnect) Administrator Guide.

1. Netefatsa hore o kentse Network Visibility Module.
2. Bula NVM Profile lebokose la pontšo.
3. Karolong ea Configuration ea Collector, kenya Aterese ea IP le Port ea Moqokeleli oa Phallo ea hau.
   • Re khothaletsa hore o sebelise Port 2030. Haeba boema-kepe ba 2030 bo se bo ntse bo sebelisoa, u ka sebelisa boema-kepe bofe kapa bofe bo sa bolokehang. U tla sebelisa boema-kepe bona ho Configure the Flow Collector karolo.
   • Re khothaletsa hore o se sebelise Ports 514, 2055, 8514, 8515, kapa 9514.
   • Etsa bonnete ba hore u siea lebokose la ho hlahloba Sireletsehile le sa hlahlojoe.
4. Khetha File > Boloka, ebe o koala NVM Profile lebokose la pontšo ea mohlophisi.

Lokisa Phallo Collector ho Kena NVM Traffic

Ho Sebelisa Nako ea Pele ea ho Seta (Lebenkele la Boitsebiso Feela)

Ho nolofalletsa ho kenngoa ha sephethephethe sa NVM ho Moqokeleli o mocha oa Phallo e nang le Lebenkele la Boitsebiso, tlatsa mehato e latelang:

1. Latela litaelo tse ho tataiso e sebetsang ea ho kenya lisebelisoa bakeng sa Flow Collector ea hau. Ebe, sebelisa Tataiso ea Tlhophiso ea Sistimi bakeng sa litaelo tse qaqileng haholoanyane mabapi le tlhophiso ea lisebelisoa tsa mefuta e mengata ea telemetry.
2. Fumana virtual machine console. Dumella sesebediswa sa sebele hore se qete ho qala.
3. Kena ka console.
   • Ho kena: sysadmin
   • Lekunutu la kamehla: lan1cope
     • Etsa bonnete ba hore u fetola phasewete ea kamehla ha u hlophisa sistimi ea hau.
4. Review lintlha tse hlōlehileng tsa liteko tsa ho kena. Kgetha OK ho tswela pele.
5. Review kenyelletso ea Lekhetlo la Pele. Kgetha OK ho tswela pele.
6. Khetha Network Visibility Module - NVM lethathamong la mefuta ea telemetry. Kgetha Ee ho tswelapele. Mefuta eohle ea telemetry e khethoa ka mokhoa o ikhethileng.
7. Kenya boema-kepe ba UDP bakeng sa Network Visibility Module - NVM. Kgetha OK. Re khothaletsa hore o sebelise Port 2030. Haeba boema-kepe ba 2030 bo se bo ntse bo sebelisoa, u ka sebelisa boema-kepe bofe kapa bofe bo sa bolokehang. U tla sebelisa boema-kepe bona ho Configure the Flow Collector karolo. Beha boleng boema-kepeng bo boletsoeng mohatong oa 2 oa Configure NVM profile karolong ea AnyConnect. Re khothaletsa hore o se sebelise Ports 514, 2055, 8514, 8515, kapa 9514. Netefatsa hore likou tsa hau tsa telemetry lia ikhetha. Haeba u lokisa likopi tsa li-port tsa telemetry, likou li tla khutlisetsoa ho li-default tsa tsona tsa kahare ho qoba tahlehelo ea data ea phallo. Bakeng sa mohlalaample, haeba NetFlow le NVM li romelloa boema-kepeng bo le bong ba telemetry, sesebelisoa se seng le se seng se romellang data ea NVM se tla etsa morekisi ho Flow Collector mme se felise lisebelisoa tsa kantle ho enjene ea Flow Collector, e leng se tla fella ka tahlehelo ea data ea phallo.
8. Netefatsa litlhophiso tsa hau. Kgetha Ee ho tswelapele.
9. Latela litaelo tse skrineng ho phethela tikoloho ea sebele le ho qala sesebelisoa bocha.

Ho Sebelisa Litlhophiso tse Tsoetseng Pele tsa Collector
Etsa bonnete ba hore o kenya patch ea morao-rao ea Flow Collector NetFlow rollup pele o qala ts'ebetso ena.
Ho etsa hore sephethephethe sa NVM se kenelle ho Phallo Collector se seng se lokiselitsoe, tlatsa mehato e latelang:

1. Kena ho Motsamaisi oa hau.
2. Ho tsoa ho menu e kholo, khetha Configure > Global > Central Management.
3. Leqepheng la Inventory, tobetsa letšoao la ... (Ellipsis) bakeng sa Phallo ea hau ea Phallo, ebe u khetha View Lipalopalo tsa Lisebelisoa. Sebopeho sa Phallo Collector Admin sea bula.
4. Kgetha Tshehetso > Di-setting tse tsoetseng pele.
   • Haeba tšimo e sa bontšoa, tobetsa sebaka sa Eketsa Khetho e Ncha. Bakeng sa tlhahisoleseling e eketsehileng mabapi le ho hlophisa litlhophiso tse tsoetseng pele ho Moqokeleli oa Phallo, sheba sehlooho sa Thuso ea Litlhophiso tse Tsoetseng Pele.
5. Lefapheng la enable_nvm, beha boleng ho 1. Sebaka sena se fetoha 0.
6. Sebakeng sa nvm_netflow_port, beha boleng boema-kepeng bo boletsoeng mohatong oa 2 oa Configure NVM pro.file karolong ea AnyConnect. Re khothaletsa Port 2030. Etsa bonnete ba hore likou tsa hau tsa telemetry li ikhethile. Haeba u lokisa likopi tsa li-port tsa telemetry, likou li tla khutlisetsoa ho li-default tsa tsona tsa kahare ho qoba tahlehelo ea data ea phallo. Re khothaletsa hore o se sebelise Ports 514, 2055, 8514, 8515, kapa 9514. Mohlalaample, haeba NetFlow le NVM li romelloa boema-kepeng bo le bong ba telemetry, sesebelisoa se seng le se seng se romellang data ea NVM se tla etsa morekisi ho Flow Collector mme se felise lisebelisoa tsa kantle ho enjene ea Flow Collector, e leng se tla fella ka tahlehelo ea data ea phallo.
7. Lefapheng la nvm_to_flow_cache, beha boleng ho 1 ho hapa lits'oants'o tse thehiloeng marang-rang tsa phallo ea NVM. Sebaka sena se fetotsoe ho 0.
8. Tšimong ea nvm_filter_untrusted_flows, beha boleng ho 1. Ha o kenya ts'ebetso ena, e hloekisa sephethephethe se sa tšepahaleng ho tsoa lits'ebetsong tse thehiloeng marang-rang le ho thibela litaba tse ka khonehang tse kang liaterese tsa IP tse hanyetsanang. Sebaka sena se fetotsoe ho 0.
   Haeba u na le Lebenkele la Boitsebiso 'me u beha boleng ba tšimo ea nvm_filter_untrusted_flows ho 1, sephethephethe se sa tšepahaleng se sefshoa empa se sala se bolokiloe litafoleng tsa NVM tse sebelisetsoang ho haha ​​​​tlaleho ea Endpoint Traffic (NVM). Haeba u sena Lebenkele la Boitsebiso, sephethephethe se sa tšepahaleng ha se bolokehe.
9. Tobetsa Etsa kopo.
10. Ha molaetsa wa netefatso o hlaha, tobetsa OK.

Hlophisa Phallo Collector bakeng sa Off-Network Cached Flows (Boikhethelo)
Sebelisa litaelo tse latelang ho hlophisa cache flow processing bakeng sa ho bokella sephethephethe sa NVM se kantle ho marang-rang. Ho bokella sephethephethe sa NVM ntle le marang-rang ho ama ts'ebetso ea sistimi. Se ke oa lumella tlhophiso ena haeba u sa hloke ho bokella kapa ho sekaseka lintlha tsena. Haeba o nolofalletsa tlhophiso mme ts'ebetso ea sistimi ea hau e ameha, fetola sekhahla sa throttle (bona Tataiso ea Tsamaiso ea AnyConnect) le/kapa fokotsa nvm_age_limit_days (sheba litaelo tse karolong ena).

1. Kena ho Motsamaisi oa hau.
2. Ho tsoa ho menu e kholo, khetha Configure > Global > Central Management.
3. Leqepheng la Inventory, tobetsa letšoao la (Ellipsis) bakeng sa Phallo ea hau ea Phallo, ebe u khetha View Lipalopalo tsa Lisebelisoa. Sebopeho sa Phallo Collector Admin sea bula.
4. Kgetha Tshehetso > Di-setting tse tsoetseng pele.
5. Ntlafatsa likarolo tse latelang:
   • process_old_nvm_flows: Kenya 1 ho nolofalletsa phallo ea cache hore e sebetsoe ke Moqokeleli oa Phallo.
   • nvm_age_limit_days: Kenya boholo ba lilemo (palo ea matsatsi) ho bokella phallo e bolokiloeng ke Flow Collector. Bakeng sa mohlalaample, haeba u kenya 7, cached e phalla ho fihlela matsatsi a 7 e tla sebetsoa. Haeba u kenya 0 (zero), liphaello tsohle tse bolokiloeng li tla sebetsoa. Bakeng sa tshebetso e ntle ka ho fetisisa, beha matsatsi a lekanyeditsweng.
   • Haeba tšimo e sa bontšoa, tobetsa sebaka sa Eketsa Khetho e Ncha. Bakeng sa tlhahisoleseling e eketsehileng mabapi le ho hlophisa litlhophiso tse tsoetseng pele ho Moqokeleli oa Phallo, sheba sehlooho sa Thuso ea Litlhophiso tse Tsoetseng Pele.
6. Tobetsa Etsa kopo.
7. Ha molaetsa wa netefatso o bontshwa, tobetsa OK.

Netefatso

Ho ipapisitse le ts'ebeliso ea hau ea Secure Network Analytics, u tla bona data ea NVM ho Phatlalatso ea Phallo kapa Sehahi sa Tlaleho.

Ho Tsamaisa Phallo Batla NVM Data (Non Data Store Feela)

1. Kena ho Motsamaisi oa hau.
2. Ho tsoa ho menu e kholo, khetha Batlisisa > Phatlalatso ea Phallo.
3. Etsa Phatlalatso ea Phallo.
4. Ho Liphetho tsa Phallo ea Phallo, sefa tafole ka Lebitso la Ts'ebetso ea Sehlooho ho netefatsa hore o fumana phallo ea NVM.

Ho fihlella Litlaleho tsa NVM (Lebenkele la Boitsebiso Feela)
Report Builder e fana ka litlaleho tse tharo tse amanang le NVM bakeng sa Secure Network Analytics ka Lebenkele la Boitsebiso:

• NVM Database Ingest Trend e fana ka tsebiso ha data ea hau e fihlile ka katleho polokelong ea polokelo
• NVM Pokello Trend e bonts'a sekhahla sa phallo ea ho fihla ho Moqokeleli oa Phallo ho tsoa NVM
• Endpoint Traffic (NVM), e bonts'a lirekoto tsa morao-rao tse 300 ho latela nako ea ho qetela
  • Ho fumana lintlha tse ling mabapi le litlaleho tsena, tlanya ho ? (Thuso) letšoao la ho fumana Thuso bakeng sa Sehahi sa Tlaleho.

Bakeng sa mohlalaample, ho view tlaleho ea Endpoint Traffic (NVM):

1. Kena ho Motsamaisi oa hau.
2. Ho tsoa ho menu e kholo, khetha Tlaleho > Sehahi sa Tlaleho.
3. Tobetsa Theha Tlaleho e Ncha ebe u khetha Endpoint Traffic (NVM).
4. Tobetsa Matha.
5. Review tlaleho ho view lintlha tsa NVM.

Ho ikopanya le Tšehetso
Haeba o hloka tšehetso ea tekheniki, ka kopo etsa e 'ngoe ea tse latelang:

• Ikopanye le Cisco Partner ea hau ea lehae
• Ikopanye le Cisco Support
• Ho bula nyeoe ka web: http://www.cisco.com/c/en/us/support/index.html
• Bakeng sa tšehetso ea mohala: 1-800-553-2447 (US)
• Bakeng sa linomoro tsa tšehetso lefatšeng ka bophara: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Fetola Histori

Litaba tsa Copyright

Cisco le logo ea Cisco ke matšoao a khoebo kapa matšoao a ngolisitsoeng a Cisco le/kapa mafapha a eona a US le linaheng tse ling. Ho view lethathamo la matšoao a khoebo a Cisco, e ea ho sena URL: https://www.cisco.com/go/trademarks. Matshwao a kgwebo a motho wa boraro a boletsweng ke thepa ya beng ba ona. Tšebeliso ea lentsoe molekane ha e bolele kamano ea tšebelisano pakeng tsa Cisco le k'hamphani efe kapa efe. (1721R)

• 2025 Cisco Systems, Inc. le/kapa litho tsa eona. Litokelo tsohle li sirelelitsoe.

Litokomane / Lisebelisoa

CISCO FC 4210 Network Visibility Module [pdf] Bukana ea Mosebelisi FC 4210, DS 6200, FC 4210 Network Visibility Module, FC 4210, Network Visibility Module, Visibility Module, Module

Litšupiso

• Bukana ea Mosebelisi