Meo thu nhat: Hoa hop voi nha cung cap dich vu
mang (IPS)
Rat nhieu nguoi co tam ly “cai dat roi quen” cac thiet lap he thong. Dieu do
that nguy hiem, tao lo hong cho nhung ke khai thac lien tuc rinh mo xung quanh
mang, cho co hoi tan cong.
Phuong thuc khai thac diem yeu, lo hong bao mat thay doi nhanh den chong mat,
khien phan mem tuong lua, cac ban va loi hay hang rao ngan chan cua nha san xuat
kho co the dap ung kip thoi.
Cac nha quan ly mang can hieu hoat dong khai thac dien ra nhu the nao va hang
cung cap dich vu Internet (ISP) do tim chung ra sao. Dong thoi cung phai nang
cap thuong xuyen chuong trinh bao ve, cap nhat phien ban moi nhat. Tat nhien
khong co phan mem ngan chan nao van nang, nhung lien tuc su dung cac ban moi
nhat se giup tang cuong an toan cho mang o muc toi da.
Meo thu hai: Ban cac hinh thuc bao mat tu loi ich
cua chinh no
Ban loi ich bao mat cho cac nha dau tu cong nghe la cach ma Mandy Andress, chu
tich cua Technologies ArcSec de xuat. Thay vi noi cac virus nguy hiem nhu the
nao, sao ban khong dua ra phuong thuc dem lai loi nhuan cho cac cong ty voi dich
vu danh tieng, nhu hang rao bao ve chong spam chang han. Hay phac hoa cho nguoi
dung hieu hieu qua cu the tang len bao nhieu lan khi them mot tang khac cho dieu
khien chong spam va loi ich cua ho se dat duoc la gi.
Meo
thu ba: Truy cap mang va may de ban tu dong
Cac dau hieu khong day co the rat huu ich cho dieu khien truy cap tu dong may
tinh de ban, thuong duoc chia se boi da nguoi dung o nhung noi nhu cac phong
kiem tra thuoc, kho hang, trung tam tu van (call centre)...
Vi du, mot nhom cac nha vat ly bo nho da tung trien khai XyLoc MD cua Ensure
Technologies, su dung ky thuat tan so radio 900MHz de ma hoa ID nhan vien cho
hoat dong tham dinh. Phuong thuc nay giup tiet kiem thoi gian cho nhan vien
trong khi van dam bao quyen truy cap mang va thong tin nhay cam khong bi xam
pham boi bat ky ai khac.
Meo thu 4: Lien ket truy cap vat ly voi chuong
trinh ung dung doanh nghiep
Cac he thong truy cap cao tang dua tren dia chi IP voi cac server tieu chuan
cong nghiep, su dung mang du lieu da ton tai dem lai hieu qua tot nhat chua tung
co tu truoc den nay. Thanh cong cua dong he thong nay la nho cac san pham kien
truc mo cua chung. Diem nang cao trong cong nghe quan ly server la o cho, cac he
thong khong chi duoc trien khai nho nhan vien mang (tot hon che do bao mat vat
ly), ma con co the quan ly trung tam hoa. Them vao do, chung con tich hop duoc
voi cac chuong trinh ung dung ERP va cac he thong dieu khien truy cap mang.
Georgia Pacific, hang san xuat giay voi tai san 20 ty do la o Atlanta (My), da
phat hanh WebBrix, mot san pham cua cong nghe quan ly tu dong, la he thong truy
cap cao tang dua tren dia chi IP, voi pham vi rong lon tren 400 khu vuc. Cac
nhan vien IT da su dung giao dien ung dung mo cua WebBrix, viet ra mot phan mem
tuy bien khac co ten Mysecurity, tich hop he thong voi SAP. Khi cac nhan vien
theo doi dau hieu mang nham co duoc quyen truy cap, ho cung dong thoi gui du
lieu toi SAP va theo doi nhung nguoi tham du.
Meo thu 5: Giao pho lai cho mot chuyen vien he
dieu hanh
“Cau hinh cac he dieu hanh co the duoc vi nhu mot thu nghe thuat ngam”,
Tom Henderson - chuyen gia nghien cuu cac van de co ban cua ExtremeLabs, hang
kiem tra tinh nang san pham nhan dinh noi. Thiet lap ket noi sai co the gay hau
qua nghiem trong. Nhu khi su dung tuy chon di chuyen khoi bo nho lon co the tac
dong toi dung luong su dung cua Cache, khien he dieu hanh phai ngung hoat dong
khac de xu ly. Neu tuy chon bo_nho/luu_tru khong duoc can bang hop ly, may tinh
co the bi ngung hoat dong. Bang cach uy thac cho mot chuyen gia co trinh do, lam
chu phan huong dan cua nha san xuat, server se de dang hoa hop an toan voi thuc
thi toi uu cho moi ung dung. Cac chuyen vien cung nen lam chu cac tuy chon thiet
lap Web Server va BIOS.
Meo thu 6: Su dung bo nho server thong minh VMware
Neu co dieu kien, ban nen tang cuong dung luong cho bo nho tren cac server vat
ly Windows 2003 duoc ao hoa. Tu do, tang toc do thuc thi cho cac may ao. Neu tat
ca cac may ao tren mot hop vat ly can cung mot ma nguon nam trong bo nho giong
nhau, nhu thu vien lien ket dong (DLL), ban co the tai tung DLL vao bo nho chinh
cua server vat ly roi chia se DLL cho tat ca may ao. Chung ta se tang ich loi
trong su dung bo nho lon bang cach luu tru tren tung hop vat ly thay vi theo muc
su dung.
Meo thu 7: Chuyen cac ung dung sang luoi Linux
Neu
ban co chuong trinh ung dung tinh toan chuyen sau cho may vi tinh lon, dung ngai
chay no tren cac lua chon re tien nhu may tinh luoi, vi cac ung dung nay duoc
viet tren ngon ngu COBOL. Ung dung se phai duoc thiet ke lai mot chut cho phu
hop voi nen tang cua phan cung moi. Cac hang san xuat co the se can them tro
giup, vi ho muon lien ket tren nen cong nghe moi.
Meo thu 8: Cac lien ket WAN co the gay suy bien
VoIP QoS
Day la van de thuc su tren cac khu vuc co co so ha tang cong cong dang lao hoa o
mot so nuoc, Bruce Bartolf - giam doc cong nghe cua hang kien truc Gensler o San
Francisco cho biet. Da tung thuc hien lap dat hoan chinh 7 trong tong so 35 site
VoIP, vi giam doc nay thay rang ty le loi xay ra rat cao va co nhieu loi hoan
thien tren nhieu lien ket. De cung cap dich vu dien thoai dam bao chat luong
cung nhu dam bao thoi gian thi cong, ban can thiet ke voi cac duong khong loi
luan phien tren mang WAN. Cap mang co the khong can tot hon. Metro Ethernet dap
ung duoc yeu cau ban can.
Meo thu 9: Quan ly dia chi IP de dang voi mot cong
cu
Mac du chuc nang cua cac cong cu co the duoc thay the bang san pham cua nha san
xuat, nhung voi nhung hoat dong quan trong nhu quan ly dia chi IP, neu khong
kiem soat tot, ban da tu minh pha hoai 5-9 phan. Ban co the su dung Infoblox,
voi kha nang quan ly vo so hoat dong, nhu nang cap phan mem firmware TFTP
(Trivial File Transfer Protocol). “Thay vi xu ly he thong file phan phoi
Microsoft, toi tai server TFTP len mot server Microsoft, chay DHCP cung tren mot
server Microsoft, chay SMS tren dau va quan ly tat ca, khi do toi co mot cong cu”,
Bartolf cua Gensler cho hay. Ong da tung thuc hien hieu qua phuong thuc nay va
khang dinh mot cach don gian: “Toi chi can dat no vao, va no lam viec”.
Meo thu 10: Bo qua cac hoat dong theo kieu truc
quan
Kinh nghiem cua mot so cong ty nhu VistaPrint o My chi ra rang, khong nen trien
khai cac hoat dong giam sat truc quan. Hang nay tung dua tren hoat dong giam sat
tu xa de quan ly cac trung tam du lieu, trong do mot trung tam o Bermuda. Ho
dung cong cu tu phat trien de theo doi moi hoat dong, tu su dung CPU den tuong
quan su kien. Do hoa truc quan su kien co toc do do tim va phan tich cham,
thuong phai mat tu 5 den 7 phut cho mot su kien. Trong khi cac cong cu su dung
mau sac don gian (do, vang, xanh) chi mat tu 1 den 2 phut.
Va dung quen duy tri su dung cac cong cu giam sat lien tuc 24/7, dong thoi chay
cac hoat dong kiem tra. Loi pho bien nhat thuong xay ra la khong de che do mo
cho cac cong cu nay cho den khi co su kien xuat hien.
Theo Techworld
Article source http://w4rum.com/553.t
|