{"id":2222,"date":"2024-10-01T16:48:02","date_gmt":"2024-10-01T14:48:02","guid":{"rendered":"https:\/\/logmanager.com\/?post_type=case_studies&p=2222"},"modified":"2024-10-15T11:51:03","modified_gmt":"2024-10-15T09:51:03","slug":"univerzita-konstantina-filozofa","status":"publish","type":"case_studies","link":"https:\/\/logmanager.com\/cs\/case-studies\/univerzita-konstantina-filozofa\/","title":{"rendered":"Logmanager chr\u00e1n\u00ed UKF: Rychlej\u0161\u00ed \u0159e\u0161en\u00ed incident\u016f a v\u011bt\u0161\u00ed bezpe\u010dnost"},"content":{"rendered":"\n

IT odd\u011blen\u00ed Univerzity Kon\u0161tant\u00edna Filozofa v Nit\u0159e d\u00edky Logmanageru efektivn\u011b vyhled\u00e1v\u00e1 informace v p\u0159\u00edpad\u011b incidentu, br\u00e1n\u00ed ne\u017e\u00e1douc\u00edm \u010dinnostem a v\u00fdpadk\u016fm.<\/strong><\/p>\n\n\n\n

V\u00fdchoz\u00ed situace<\/h2>\n\n\n\n

Univerzita Kon\u0161tant\u00edna Filozofa v Nit\u0159e je ve\u0159ejn\u00e1 vysok\u00e1 \u0161kola, jej\u00edm\u017e posl\u00e1n\u00edm je p\u0159isp\u00edvat k rozvoji vzd\u011blanosti, v\u011bdy, kultury a zdrav\u00ed ve prosp\u011bch cel\u00e9 spole\u010dnosti. Skl\u00e1d\u00e1 se z p\u011bti fakult a jako instituce je rozm\u00edst\u011bna ve 12 objektech v r\u016fzn\u00fdch \u010d\u00e1stech Nitry.<\/p>\n\n\n\n

Krom\u011b v\u00fdchovy vlastn\u00edch student\u016f univerzita participuje na vzd\u011bl\u00e1v\u00e1n\u00ed a p\u0159\u00edprav\u011b u\u010ditel\u016f slovensk\u00e9 n\u00e1rodnosti \u017eij\u00edc\u00ed v zahrani\u010d\u00ed, poskytuje doktorsk\u00e9 studium v akreditovan\u00fdch studijn\u00edch programech, ud\u011bluje akademick\u00e9 a v\u011bdecko-pedagogick\u00e9 tituly a zaji\u0161\u0165uje dal\u0161\u00ed vzd\u011bl\u00e1v\u00e1n\u00ed.<\/p>\n\n\n\n

D\u016fvody nasazen\u00ed Logmanageru<\/h2>\n\n\n\n

P\u0159i spr\u00e1v\u011b rozs\u00e1hl\u00e9ho a slo\u017eit\u00e9ho IT prost\u0159ed\u00ed, jak\u00e9 m\u00e1 ve sv\u00e9 p\u016fsobnosti IT odd\u011blen\u00ed UKF, je nej\u010dast\u011bj\u0161\u00edm probl\u00e9mem rychlost a slo\u017eitost z\u00edsk\u00e1n\u00ed pot\u0159ebn\u00fdch informac\u00ed.<\/p>\n\n\n\n

Je t\u0159eba nezapom\u00ednat na fakt, \u017ee v prost\u0159ed\u00ed, kde se pohybuje n\u011bkolik tis\u00edc u\u017eivatel\u016f (profesor\u016f, student\u016f a dal\u0161\u00edho person\u00e1lu), se bezpe\u010dnostn\u00ed incidenty objevuj\u00ed velmi \u010dasto. Pokud incident nen\u00ed ihned vy\u0159e\u0161en, m\u016f\u017ee ohrozit vzd\u011bl\u00e1vac\u00ed a v\u00fdzkumn\u00fd proces na univerzit\u011b. <\/p>\n\n\n\n

UKF se proto rozhodla pro kritickou infrastrukturu zav\u00e9st centr\u00e1ln\u00ed logovac\u00ed platformu, d\u00edky kter\u00e9 budou pracovn\u00edci IT odd\u011blen\u00ed schopni rychle a efektivn\u011b vyhledat po\u017eadovan\u00e9 informace a n\u00e1sledn\u011b zabr\u00e1nit ne\u017e\u00e1douc\u00ed \u010dinnosti, v\u00fdpadk\u016fm \u010di dokonce kr\u00e1de\u017e\u00edm \u010d\u00e1sti infrastruktury.<\/p>\n\n\n\n

Implementace<\/h2>\n\n\n\n

Univerzita Logmanager vyzkou\u0161ela v r\u00e1mci PoC, d\u00edky \u010demu\u017e bylo z\u0159ejm\u00e9, co v\u0161echno mohou pracovn\u00edci IT odd\u011blen\u00ed v re\u00e1ln\u00e9m provozu o\u010dek\u00e1vat a kde v\u0161ude budou moci ve sv\u00e9m prost\u0159ed\u00ed vyu\u017e\u00edt jeho potenci\u00e1l.<\/p>\n\n\n\n

Proto\u017ee m\u00e1 univerzita svou infrastrukturu instalovanou i ve ve\u0159ejn\u00fdch prostor\u00e1ch, nap\u0159\u00edklad ve studentsk\u00fdch kolej\u00edch, m\u011bli administr\u00e1to\u0159i \u010das od \u010dasu probl\u00e9m s jej\u00edm \u201emizen\u00edm\u201c. D\u00edky Logmanageru maj\u00ed nyn\u00ed nastaven\u00e1 upozorn\u011bn\u00ed, kter\u00e1 informuj\u00ed zodpov\u011bdn\u00e9 techniky. V p\u0159\u00edpad\u011b \u201ezmizen\u00ed\u201c za\u0159\u00edzen\u00ed pak technici ov\u011b\u0159\u00ed, zda se jedn\u00e1 o poruchu nebo o kr\u00e1de\u017e. D\u00edky Logmanageru se o t\u011bchto situac\u00edch dozv\u00ed okam\u017eit\u011b.<\/p>\n\n\n\n

UKF si jako \u010dlen akademick\u00e9 obce nem\u016f\u017ee dovolit tolerovat jakoukoli nez\u00e1konnou \u010dinnost sv\u00fdch u\u017eivatel\u016f. M\u00e1 pro to nastaven\u00e9 r\u016fzn\u00e9 ochrann\u00e9 mechanismy. P\u0159esto se v\u0161ak ob\u010das stane, \u017ee se n\u011bkter\u00fdm u\u017eivatel\u016fm poda\u0159\u00ed n\u011bco \u201eprov\u00e9st\u201c. <\/p>\n\n\n\n

Je potom povinnost\u00ed IT odd\u011blen\u00ed tuto \u010dinnost vyp\u00e1trat a zabr\u00e1nit j\u00ed. Operace, kter\u00e1 d\u0159\u00edve trvala des\u00edtky minut pracn\u00e9ho prohled\u00e1v\u00e1n\u00ed textov\u00fdch log\u016f, je nyn\u00ed ot\u00e1zkou n\u011bkolika sekund. Logmanager v jednom zobrazen\u00ed spojuje logy ze t\u0159\u00ed syst\u00e9m\u016f \u2013 firewallu, DHCP serveru a FreeRadius serveru. Tyto slu\u017eby b\u011b\u017e\u00ed na samostatn\u00fdch Linux serverech.<\/p>\n\n\n\n

K nalezen\u00ed u\u017eivatele, kter\u00fd poru\u0161uje univerzitn\u00ed pravidla, sta\u010d\u00ed obvykle vybrat v logu firewallu c\u00edlovou IP adresu, pro kterou je hl\u00e1\u0161eno poru\u0161en\u00ed pravidel. Logmanager b\u011bhem n\u011bkolika sekund zobraz\u00ed p\u0159\u00edslu\u0161n\u00e9 logy z firewallu a asociovan\u00e9 logy z DHCP. V\u00fdb\u011brem zdrojov\u00e9 MAC adresy identifikovan\u00e9ho \u00fato\u010dn\u00edka v logu DHCP serveru se administr\u00e1tor okam\u017eit\u011b dostane k identit\u011b u\u017eivatele ve FreeRadius serveru.<\/p>\n\n\n\n

P\u0159\u00ednosy pro z\u00e1kazn\u00edka<\/h2>\n\n\n\n

Logmanager s u\u017eivatelsky p\u0159\u00edv\u011btiv\u00fdm rozhran\u00edm \u0161et\u0159\u00ed \u010das spr\u00e1vc\u016fm a oper\u00e1tor\u016fm IT odd\u011blen\u00ed UKF Nitra a pom\u00e1h\u00e1 jim rychleji a efektivn\u011bji zpracov\u00e1vat IT incidenty.<\/p>\n\n\n\n

\u201cD\u00edky Logmanageru nemus\u00edme pracn\u011b manu\u00e1ln\u011b prohled\u00e1vat n\u011bkolik syst\u00e9m\u016f a log\u016f. Ve\u0161ker\u00e9 pot\u0159ebn\u00e9 informace jsou na jednom centr\u00e1ln\u00edm m\u00edst\u011b v Logmanageru, kde se d\u00edky p\u00e1r kliknut\u00edm dok\u00e1\u017eeme velmi rychle dopracujeme k pot\u0159ebn\u00e9 informaci.\u201d<\/em><\/p>\n\n\n\n

Milan Oravec, Spr\u00e1vce s\u00edt\u011b, Centrum informa\u010dn\u00edch a komunika\u010dn\u00edch technologi\u00ed, UKF Nitra<\/p>\n\n\n\n

Z\u00e1kazn\u00edk ocenil mo\u017enost vyzkou\u0161et \u0159e\u0161en\u00ed ve sv\u00e9 infrastruktu\u0159e je\u0161t\u011b p\u0159ed nasazen\u00edm a n\u00e1sledn\u00fd snadn\u00fd p\u0159echod do ostr\u00e9ho provozu.<\/p>\n\n\n\n

Univerzita nav\u00edc nemus\u00ed \u0159e\u0161it \u017e\u00e1dn\u00e9 dodate\u010dn\u00e9 n\u00e1klady p\u0159i n\u00e1r\u016fstu zalogovan\u00fdch ud\u00e1lost\u00ed, proto\u017ee Logmanager nem\u00e1 \u017e\u00e1dn\u00e9 licen\u010dn\u00ed omezen\u00ed na po\u010det zalogovan\u00fdch ud\u00e1lost\u00ed.
Pokud se chcete o Logmanageru dozv\u011bd\u011bt v\u00edce, nev\u00e1hejte n\u00e1s kontaktovat<\/a> nebo si zarezervujte nez\u00e1vaznou konzultaci<\/a> s na\u0161\u00edm expertem.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

IT odd\u011blen\u00ed Univerzity Kon\u0161tant\u00edna Filozofa d\u00edky Logmanageru efektivn\u011b vyhled\u00e1v\u00e1 informace v p\u0159\u00edpad\u011b incidentu, br\u00e1n\u00ed ne\u017e\u00e1douc\u00edm \u010dinnostem a v\u00fdpadk\u016fm.<\/p>\n","protected":false},"featured_media":2223,"parent":0,"template":"","class_list":["post-2222","case_studies","type-case_studies","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/case_studies\/2222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/case_studies"}],"about":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/types\/case_studies"}],"version-history":[{"count":2,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/case_studies\/2222\/revisions"}],"predecessor-version":[{"id":2235,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/case_studies\/2222\/revisions\/2235"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/media\/2223"}],"wp:attachment":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/media?parent=2222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}