{"id":2077,"date":"2024-10-10T11:14:05","date_gmt":"2024-10-10T09:14:05","guid":{"rendered":"https:\/\/logmanager.com\/?post_type=case_studies&#038;p=2077"},"modified":"2024-10-14T10:33:57","modified_gmt":"2024-10-14T08:33:57","slug":"dr-max","status":"publish","type":"resource_centre","link":"https:\/\/staging.logmanager.com\/cs\/pripadove-studie\/dr-max\/","title":{"rendered":"Sjednocen\u00edm ukl\u00e1d\u00e1n\u00ed log\u016f Dr. Max pos\u00edlil bezpe\u010dnost a zrychlil reakci na incidenty"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>\u200b\u200bSkupina Dr. Max s Logmanagerem z\u00edskala vysoce v\u00fdkonn\u00e9 \u0159e\u0161en\u00ed, kter\u00e9 pom\u00e1h\u00e1 s \u0159e\u0161en\u00edm probl\u00e9m\u016f bezpe\u010dnostn\u00edm specialist\u016fm, technik\u016fm IT podpory i administr\u00e1tor\u016fm jednotliv\u00fdch aplikac\u00ed \u010di syst\u00e9m\u016f.<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">V\u00fdchoz\u00ed situace<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dr. Max provozuje s\u00ed\u0165 v\u00edce jak 400 l\u00e9k\u00e1ren se 3000 zam\u011bstnanci. Mimo \u010cesk\u00e9 republiky p\u016fsob\u00ed i v dal\u0161\u00edch 7 evropsk\u00fdch zem\u00edch. Skupina provozuje a spravuje velmi r\u016fznorod\u00e9 IT syst\u00e9my ur\u010den\u00e9 pro chod nejen l\u00e9k\u00e1ren, ale i sklad\u016f, distribuce l\u00e9\u010div, jejich v\u00fdvoj a v\u00fdrobu. To v\u0161e vy\u017eaduje \u0159adu datab\u00e1zov\u00fdch syst\u00e9m\u016f a velmi rozs\u00e1hlou po\u010d\u00edta\u010dovou s\u00ed\u0165.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ka\u017ed\u00fd ze syst\u00e9m\u016f generuje velk\u00e9 mno\u017estv\u00ed d\u016fle\u017eit\u00fdch strojov\u00fdch dat o sv\u00e9 \u010dinnosti, stavu a aktivit\u00e1ch administr\u00e1tor\u016f a u\u017eivatel\u016f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0159edchoz\u00ed decentralizace ukl\u00e1d\u00e1n\u00ed log\u016f zp\u016fsobovala jejich slo\u017eitou identifikaci a v\u00fdznamn\u011b prodlu\u017eovala dobu nutnou k jejich vy\u0159e\u0161en\u00ed. A to i p\u0159i podez\u0159en\u00ed na bezpe\u010dnostn\u00ed incidenty.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">D\u016fvody pro nasazen\u00ed Logmanageru<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00edlem z\u00e1kazn\u00edka bylo sjednocen\u00ed ukl\u00e1d\u00e1n\u00ed log\u016f na extern\u00edm zabezpe\u010den\u00e9m syst\u00e9mu a z\u00edsk\u00e1n\u00ed ucelen\u00e9ho p\u0159ehledu o bezpe\u010dnosti a provozu informa\u010dn\u00edch syst\u00e9m\u016f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dalo\u017ei\u0161t\u011b m\u011blo zaji\u0161\u0165ovat dlouhodob\u00e9 uchov\u00e1v\u00e1n\u00ed informac\u00ed v nezm\u011bniteln\u00e9 podob\u011b pro z\u00edsk\u00e1n\u00ed p\u0159ehledu o stavu provozovan\u00fdch syst\u00e9m\u016f, p\u0159\u00edstupech k jednotliv\u00fdm aplikac\u00edm nebo p\u0159esn\u00e9 zmapov\u00e1n\u00ed \u010dinnosti privilegovan\u00fdch \u00fa\u010dt\u016f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dalo\u017ei\u0161t\u011b muselo b\u00fdt zabezpe\u010den\u00e9 tak, aby nemohlo doj\u00edt k maz\u00e1n\u00ed \u010di jin\u00e9 \u00faprav\u011b nasb\u00edran\u00fdch dat. Zvolen\u00e9 \u0159e\u0161en\u00ed nem\u011blo b\u00fdt licen\u010dn\u011b omezeno maxim\u00e1ln\u00edm po\u010dtem zpracov\u00e1van\u00fdch ud\u00e1lost\u00ed za \u010dasovou jednotku ani maxim\u00e1ln\u00edm po\u010dtem sledovan\u00fdch za\u0159\u00edzen\u00ed a m\u011blo umo\u017enit zpracov\u00e1n\u00ed velk\u00e9ho po\u010dtu ud\u00e1lost\u00ed za vte\u0159inu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vybran\u00e9 \u0159e\u0161en\u00ed Logmanager XL t\u011bmto pot\u0159eb\u00e1m pln\u011b vyhov\u011blo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Implementace<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">V prvn\u00ed f\u00e1zi bylo c\u00edlem ov\u011b\u0159it technick\u00e9 mo\u017enosti Logmanageru a p\u0159izp\u016fsobit prost\u0159ed\u00ed pro anal\u00fdzu dat. Z\u00e1kazn\u00edkovi tedy byla dod\u00e1na testovac\u00ed appliance Logmanager M s kapacitou \u00falo\u017ei\u0161t\u011b 12 TB. V r\u00e1mci \u00favodn\u00ed instalace do\u0161lo k napojen\u00ed autentizace u\u017eivatel\u016f Logmanageru p\u0159es Active Directory. Pro sb\u011br ud\u00e1lost\u00ed byla vytipov\u00e1na referen\u010dn\u00ed za\u0159\u00edzen\u00ed, kter\u00e1 m\u011bla prov\u011b\u0159it v\u00fdkon syst\u00e9mu, schopnost zpracov\u00e1n\u00ed a anal\u00fdzy ulo\u017een\u00fdch dat.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V druh\u00e9 f\u00e1zi byla dod\u00e1na appliance Logmanager XL s kapacitou \u00falo\u017ei\u0161t\u011b 100 TB. Tato appliance byla nainstalov\u00e1na v datov\u00e9m centru spole\u010dnosti. Byla provedena konfigurace do clusteru se za\u0159\u00edzen\u00edm dodan\u00e9m v prvn\u00ed f\u00e1zi. Po p\u0159enesen\u00ed konfigurace a replikaci v\u0161ech dat byla odpojena appliance Logmanager M a za\u0159\u00edzen\u00ed um\u00edst\u011bn\u00e9 v datov\u00e9m centru bylo p\u0159evedeno do produk\u010dn\u00edho re\u017eimu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u00e1sledn\u011b byly nakonfigurov\u00e1ny vybran\u00e9 aplikace a servery tak, aby zas\u00edlaly logy do Logmanageru. Jakmile byly logy&nbsp; v Logmanageru dostupn\u00e9, do\u0161lo k vytvo\u0159en\u00ed specifick\u00fdch parser\u016f. Vzhledem k velmi vysok\u00e9mu po\u010dtu ud\u00e1lost\u00ed, generovan\u00fdch zejm\u00e9na intern\u00edmi bezpe\u010dnostn\u00edmi prvky, byla provedena optimalizace zpracov\u00e1n\u00ed dat.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V r\u00e1mci implementace byli pro pr\u00e1ci s Logmanagerem pro\u0161koleni administr\u00e1to\u0159i, technici IT podpory a bezpe\u010dnostn\u00ed pracovn\u00edci. Prob\u011bhlo tak\u00e9 n\u011bkolik workshop\u016f zam\u011b\u0159en\u00fdch na \u0159e\u0161en\u00ed specifick\u00fdch pot\u0159eb jednotliv\u00fdch odd\u011blen\u00ed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">P\u0159\u00ednosy pro z\u00e1kazn\u00edka<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Logmanager aktu\u00e1ln\u011b p\u0159ij\u00edm\u00e1 a vyhodnocuje 10 000 ud\u00e1lost\u00ed za vte\u0159inu. V dob\u011b \u0161pi\u010dky, kter\u00e1 trv\u00e1 mnohdy i n\u011bkolik hodin, platforma zpracov\u00e1v\u00e1 a\u017e 25 000 ud\u00e1lost\u00ed za vte\u0159inu, co\u017e odpov\u00edd\u00e1 250 &#8211; 350 GB dat denn\u011b.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Spolu s profesion\u00e1ln\u00edm nasazen\u00edm a n\u00e1slednou podporou certifikovan\u00e9ho partnera BIT SERVIS do\u0161lo k jednoduch\u00e9mu a rychl\u00e9mu nasazen\u00ed z testovac\u00edho re\u017eimu p\u0159\u00edmo do produk\u010dn\u00edho prost\u0159ed\u00ed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Syst\u00e9m slou\u017e\u00ed p\u0159edev\u0161\u00edm bezpe\u010dnostn\u00edmu managementu pro dohled.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Provozn\u00ed zku\u0161enosti uk\u00e1zaly, \u017ee \u0159e\u0161en\u00ed m\u016f\u017ee b\u00fdt tak\u00e9 velmi efektivn\u00edm n\u00e1strojem pro pr\u00e1ci technik\u016f IT podpory i administr\u00e1tor\u016f jednotliv\u00fdch aplikac\u00ed \u010di syst\u00e9m\u016f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mezi nej\u010dast\u011bj\u0161\u00ed operace pat\u0159\u00ed kompletn\u00ed vy\u010d\u00edt\u00e1n\u00ed a zpracov\u00e1n\u00ed log\u016f o p\u0159ihl\u00e1\u0161en\u00ed a p\u0159\u00edstupech u\u017eivatel\u016f do syst\u00e9mu, rychl\u00e9 dohled\u00e1n\u00ed a filtrace pot\u0159ebn\u00fdch informac\u00ed z log\u016f, pou\u017e\u00edv\u00e1n\u00ed automatick\u00fdch upozorn\u011bn\u00ed na nestandardn\u00ed stavy a vy\u010d\u00edt\u00e1n\u00ed log\u016f z provozovan\u00e9 s\u00ed\u0165ov\u00e9 infrastruktury, v\u010detn\u011b bezpe\u010dnostn\u00edch za\u0159\u00edzen\u00ed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logmanager sv\u00fdm sjednocen\u00edm ukl\u00e1d\u00e1n\u00ed log\u016f a jejich zabezpe\u010den\u00edm splnil v\u0161echny o\u010dek\u00e1van\u00e9 c\u00edle. Z\u00e1kazn\u00edk p\u0159itom nejv\u00edce oce\u0148uje:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Rychl\u00e9 nasazen\u00ed v\u010detn\u011b \u00favodn\u00edho ov\u011b\u0159en\u00ed vlastnost\u00ed b\u011bhem test\u016f p\u0159ed koup\u00ed a mo\u017enost okam\u017eit\u00e9ho vyu\u017e\u00edv\u00e1n\u00ed,<\/li>\n\n\n\n<li>korelaci logon\/logoff operac\u00ed nap\u0159\u00ed\u010d celou s\u00ed\u0165ovou infrastrukturou,<\/li>\n\n\n\n<li>vyhodnocov\u00e1n\u00ed p\u0159\u00edstupu u\u017eivatel\u016f k soubor\u016fm a syst\u00e9mov\u00fdm prost\u0159edk\u016fm,<\/li>\n\n\n\n<li>sledov\u00e1n\u00ed konfigura\u010dn\u00edch zm\u011bn prov\u00e1d\u011bn\u00fdch administr\u00e1tory a oper\u00e1tory syst\u00e9mu,<\/li>\n\n\n\n<li>rychlou diagnostiku a \u0159e\u0161en\u00ed bezpe\u010dnostn\u00edch incident\u016f,<\/li>\n\n\n\n<li>podklady pro forenzn\u00ed anal\u00fdzu p\u0159i vy\u0161et\u0159ov\u00e1n\u00ed bezpe\u010dnostn\u00edch incident\u016f,<\/li>\n\n\n\n<li>zrychlen\u00ed p\u0159i odstra\u0148ov\u00e1n\u00ed technick\u00fdch probl\u00e9m\u016f syst\u00e9m\u016f,<\/li>\n\n\n\n<li>mo\u017enost postupn\u00e9ho \u0161k\u00e1lov\u00e1n\u00ed v r\u00e1mci zem\u00ed z centr\u00e1ln\u00edho na distribuovan\u00e9 \u0159e\u0161en\u00ed,<\/li>\n\n\n\n<li>otev\u0159en\u00e9 \u0159e\u0161en\u00ed pro snadnou integraci syst\u00e9m\u016f, kter\u00e9 nejsou podporov\u00e1ny p\u0159\u00edmo v\u00fdrobcem,<\/li>\n\n\n\n<li>unifikovan\u00e9 a snadn\u00e9 vyhled\u00e1v\u00e1n\u00ed nap\u0159\u00ed\u010d v\u0161emi typy dat a za\u0159\u00edzen\u00ed,<\/li>\n\n\n\n<li>p\u0159ehlednost a minim\u00e1ln\u00ed n\u00e1roky na operativu,<\/li>\n\n\n\n<li>vysok\u00fd v\u00fdkon,<\/li>\n\n\n\n<li>detailn\u00ed nastaven\u00ed p\u0159\u00edstupov\u00fdch pr\u00e1v k ukl\u00e1dan\u00fdm dat\u016fm i syst\u00e9mov\u00fdm opr\u00e1vn\u011bn\u00edm.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pokud se chcete o Logmanageru dozv\u011bd\u011bt v\u00edce, nev\u00e1hejte n\u00e1s <a href=\"https:\/\/staging.logmanager.com\/cs\/kontaktujte-nas\/\">kontaktovat<\/a> nebo si zarezervujte <a href=\"https:\/\/staging.logmanager.com\/cs\/demo\/\">nez\u00e1vaznou konzultaci<\/a> s na\u0161\u00edm expertem. P\u0159\u00edpadov\u00e1 studie byla realizov\u00e1na ve spolupr\u00e1ci se spole\u010dnost\u00ed BIT SERVIS s.r.o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bezpe\u010dnostn\u00ed specialist\u00e9, IT podpora i administr\u00e1to\u0159i s pomoc\u00ed Logmanageru zaji\u0161\u0165uj\u00ed hladk\u00fd chod l\u00e9k\u00e1ren, sklad\u016f, distribuce l\u00e9\u010div, i jejich v\u00fdvoje a v\u00fdroby.<\/p>\n","protected":false},"author":4,"featured_media":2056,"parent":0,"template":"","resource_category":[],"resource_tag":[],"class_list":["post-2077","resource_centre","type-resource_centre","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_centre\/2077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_centre"}],"about":[{"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/types\/resource_centre"}],"author":[{"embeddable":true,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/users\/4"}],"version-history":[{"count":2,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_centre\/2077\/revisions"}],"predecessor-version":[{"id":2170,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_centre\/2077\/revisions\/2170"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/media\/2056"}],"wp:attachment":[{"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/media?parent=2077"}],"wp:term":[{"taxonomy":"resource_category","embeddable":true,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_category?post=2077"},{"taxonomy":"resource_tag","embeddable":true,"href":"https:\/\/staging.logmanager.com\/cs\/wp-json\/wp\/v2\/resource_tag?post=2077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}