{"id":258,"title":"Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131","content":"

Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131n\u0131 azaltmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 uygulayabilirsiniz:<\/p>

1. IPS Sens\u00f6r\u00fcn\u00fc Optimize Etme:
- \u201cdiagnose ips memory\u201d komutu ile mevcut IPS bellek kullan\u0131m\u0131n\u0131 kontrol edin
- IPS sens\u00f6r ayarlar\u0131n\u0131 g\u00f6zden ge\u00e7irin ve gereksiz imzalar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n
- Sadece ihtiya\u00e7 duyulan IPS imzalar\u0131n\u0131 aktif tutun<\/p>

2. IPS Politikalar\u0131n\u0131 G\u00f6zden Ge\u00e7irme:
- T\u00fcm trafi\u011fe IPS uygulamak yerine, kritik sistemlere y\u00f6nelik trafi\u011fe IPS uygulay\u0131n
- Her politika i\u00e7in ayr\u0131 IPS profili olu\u015fturmak yerine, ortak profiller kullan\u0131n
- Gereksiz IPS politikalar\u0131n\u0131 kald\u0131r\u0131n<\/p>

3. IPS Engine Ayarlar\u0131n\u0131 D\u00fczenleme:
- \u201cconfig ips settings\u201d alt\u0131nda buffer-size de\u011ferini optimize edin
- Tcp-session-without-syn \u00f6zelli\u011fini kapat\u0131n
- Packet-log-queue-depth de\u011ferini d\u00fc\u015f\u00fcr\u00fcn<\/p>

4. Sistem Kaynaklar\u0131n\u0131n \u0130zlenmesi:<\/p>

diagnose sys top
diagnose hardware sysinfo memory<\/p>

komutlar\u0131yla sistem kaynak kullan\u0131m\u0131n\u0131 d\u00fczenli olarak izleyin<\/p>

5. Firmware G\u00fcncellemesi:
- Cihaz\u0131n\u0131z\u0131n firmware\u2019ini g\u00fcncel tutun
- IPS motorunun optimize edildi\u011fi g\u00fcncel s\u00fcr\u00fcmleri tercih edin<\/p>

6. Hardware Kapasitesi:
- Cihaz\u0131n donan\u0131m kapasitesinin i\u015f y\u00fck\u00fcne uygun oldu\u011fundan emin olun
- Gerekirse daha y\u00fcksek kapasiteli bir model kullanmay\u0131 de\u011ferlendirin<\/p>

7. Flow-Based vs Proxy-Based Se\u00e7imi:
- M\u00fcmk\u00fcnse flow-based IPS kullan\u0131n, bu mod daha az kaynak t\u00fcketir
- Proxy-based IPS sadece gerekli oldu\u011funda kullan\u0131n<\/p>

8. IPS Database Optimizasyonu:<\/p>

diagnose ips db-maintain clean
diagnose ips db-maintain optimize<\/p>

komutlar\u0131yla IPS veritaban\u0131n\u0131 optimize edin<\/p>

Bu \u00f6nlemleri uygulad\u0131ktan sonra RAM kullan\u0131m\u0131nda \u00f6nemli bir d\u00fc\u015f\u00fc\u015f g\u00f6receksiniz. Ancak g\u00fcvenlik ve performans aras\u0131ndaki dengeyi korumaya dikkat edin. \u00c7ok fazla IPS \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rakmak g\u00fcvenlik a\u00e7\u0131klar\u0131na neden olabilir.<\/p>

De\u011fi\u015fikliklerden sonra sistemi bir s\u00fcre izleyerek RAM kullan\u0131m\u0131n\u0131n ve g\u00fcvenlik etkinli\u011finin istenen seviyede oldu\u011fundan emin olun.<\/p>

config ips global
set engine-count 1
set cp-accel-mode none
set exclude-signatures none
end<\/p>

1. config ips global<\/strong>
\u2014 IPS\u2019in global (genel) konfig\u00fcrasyon moduna giri\u015f yap\u0131l\u0131yor<\/p>

2. set engine-count 1<\/strong>
\u2014 IPS motoru say\u0131s\u0131n\u0131 1 olarak ayarlar
\u2014 Bu ayar sistemin ka\u00e7 IPS i\u015flem motoru kullanaca\u011f\u0131n\u0131 belirler
\u2014 Genellikle d\u00fc\u015f\u00fck-orta seviye trafikte 1 motor yeterlidir<\/p>

3. set cp-accel-mode none<\/strong>
\u2014 Content processor acceleration modunu kapat\u0131r
\u2014 none <\/strong>se\u00e7ene\u011fi donan\u0131m h\u0131zland\u0131rmay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r
\u2014 Bu ayar baz\u0131 durumlarda performans\u0131 etkileyebilir<\/p>

4. set exclude-signatures none<\/strong>
\u2014 Hari\u00e7 tutulacak imza olmad\u0131\u011f\u0131n\u0131 belirtir
\u2014 T\u00fcm IPS imzalar\u0131n\u0131n aktif olaca\u011f\u0131n\u0131 g\u00f6sterir<\/p>

5. end<\/strong>
\u2014 Konfig\u00fcrasyon modundan \u00e7\u0131k\u0131\u015f<\/p>

Bu konfig\u00fcrasyon olduk\u00e7a temel bir ayard\u0131r ve baz\u0131 iyile\u015ftirmeler yap\u0131labilir:<\/p>

1. Engine-count ayar\u0131:
\u2014 E\u011fer cihaz\u0131n\u0131z \u00e7ok yo\u011fun trafik al\u0131yorsa ve donan\u0131m destekliyorsa, engine-count de\u011ferini art\u0131rabilirsiniz
\u2014 \u00d6rnek: set engine-count 2<\/strong><\/p>

2. CP-accel-mode:
\u2014 E\u011fer cihaz\u0131n\u0131z destekliyorsa, donan\u0131m h\u0131zland\u0131rmay\u0131 aktif etmek performans\u0131 art\u0131rabilir
\u2014 \u00d6rnek: set cp-accel-mode basic<\/strong><\/p>

3. Exclude-signatures:
\u2014 Gereksiz imzalar\u0131 hari\u00e7 tutarak sistem kaynaklar\u0131n\u0131 optimize edebilirsiniz
\u2014 \u00d6rnek: set exclude-signatures <signature-id1> <signature-id2><\/strong><\/p>

Bu ayarlar\u0131 de\u011fi\u015ftirmeden \u00f6nce \u015funlar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z\u0131 \u00f6neririm:
- Mevcut trafik yo\u011funlu\u011funuz
- Donan\u0131m kapasiteniiz
- G\u00fcvenlik gereksinimleriniz<\/p>

https:\/\/www.linkedin.com\/in\/mustafa-%C3%B6nder-ak%C3%B6z-23174592\/<\/a><\/p>

https:\/\/github.com\/onder7<\/a><\/p>","excerpt":"Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131n\u0131 azaltmak i\u00e7in yaz\u0131daki ad\u0131mlar\u0131 uygulayabilirsiniz","created_at":"2024-12-29 11:36:29","updated_at":"2026-09-06 16:11:06","category_id":6,"view_count":656,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-29 11:36:29","featured_image":"resimyok.jpg","slug":"fortigate-guvenlik-duvarlarinda-ips-intrusion-prevention-system-kaynakli-yuksek-ram-kullanimi","category_name":"Sistem","category_slug":"sistem"}