[{"id":254,"title":"Fortigate\u2019de Security Fabric + Automation ile otomatik backup alma","content":"

Fortigate\u2019de Security Fabric + Automation \u00f6zelli\u011fi ile yapt\u0131\u011f\u0131n\u0131z konfig\u00fcrasyon de\u011fi\u015fikliklerinin otomatik olarak yedeklenmesini sa\u011flayabilirsiniz. Bu sayede hatal\u0131 bir de\u011fi\u015fiklik yapt\u0131\u011f\u0131n\u0131zda son \u00e7al\u0131\u015fan duruma geri d\u00f6nebilirsiniz.<\/p><\/blockquote>

Fortigate\u2019de Security Fabric + Automation \u00f6zelli\u011fi ile yapt\u0131\u011f\u0131n\u0131z konfig\u00fcrasyon de\u011fi\u015fikliklerinin otomatik olarak yedeklenmesini sa\u011flayabilirsiniz. Bu sayede hatal\u0131 bir de\u011fi\u015fiklik yapt\u0131\u011f\u0131n\u0131zda son \u00e7al\u0131\u015fan duruma geri d\u00f6nebilirsiniz.<\/p>

Nas\u0131l yap\u0131l\u0131r?<\/p>

  1. Security Fabric > Automation b\u00f6l\u00fcm\u00fcne gidin<\/li>
  2. Yeni bir \u201cAutomation Stitch\u201d olu\u015fturun<\/li>
  3. Tetikleyici olarak \u201cSchedule\u201d se\u00e7in ve zaman\u0131 belirleyin<\/li>
  4. Eylem olarak \u201cBackup Configuration\u201d se\u00e7in<\/li>
  5. Backup konumunu ve \u015fifreleme ayarlar\u0131n\u0131 yap\u0131n<\/li><\/ol>
    • Security Fabric > Automation b\u00f6l\u00fcm\u00fcne gidin<\/li>
    • Yeni bir \u201cAutomation Stitch\u201d olu\u015fturun<\/li>
    • Tetikleyici olarak \u201cSchedule\u201d se\u00e7in ve zaman\u0131 belirleyin<\/li>
    • Eylem olarak \u201cBackup Configuration\u201d se\u00e7in<\/li>
    • Backup konumunu ve \u015fifreleme ayarlar\u0131n\u0131 yap\u0131n<\/li><\/ul>

      Bu \u015fekilde konfig\u00fcrasyonlar\u0131n\u0131z otomatik olarak yedeklenir ve ihtiya\u00e7 durumunda geri y\u00fckleyebilirsiniz.<\/p>

      Fortigate\u2019de Security Fabric + Automation ile otomatik backup alma \u00f6zelli\u011fini \u015fu \u015fekilde yap\u0131land\u0131rabilirsiniz:<\/h2>
      1. Fortigate Aray\u00fcz\u00fcne Giri\u015f:
        - Web aray\u00fcz\u00fcnden Fortigate\u2019e admin olarak giri\u015f yap\u0131n
        - Security Fabric men\u00fcs\u00fcne gidin<\/li><\/ol>
        • Fortigate Aray\u00fcz\u00fcne Giri\u015f:
          - Web aray\u00fcz\u00fcnden Fortigate\u2019e admin olarak giri\u015f yap\u0131n
          - Security Fabric men\u00fcs\u00fcne gidin<\/li><\/ul>

          2. Automation Stitch Olu\u015fturma:
          - Security Fabric > Automation
          - \u201c+ Create New\u201d veya \u201cCreate Automation Stitch\u201d butonuna t\u0131klay\u0131n
          - Stitche bir isim verin (\u00f6rn: \u201cDaily-Backup\u201d)<\/p>

          3. Trigger (Tetikleyici) Ayarlar\u0131:
          - Trigger olarak \u201cSchedule\u201d se\u00e7in
          - Backup\u2019\u0131n ne s\u0131kl\u0131kta al\u0131nmas\u0131n\u0131 istiyorsan\u0131z (g\u00fcnl\u00fck\/haftal\u0131k) ayarlay\u0131n
          - Zaman\u0131 belirleyin (\u00f6rn: her g\u00fcn saat 00:00)<\/p>

          4. Action (Eylem) Ayarlar\u0131:
          - Action olarak \u201cBackup Configuration\u201d se\u00e7in
          - Backup\u2019\u0131n nereye kaydedilece\u011fini belirleyin:
          * FTP\/SFTP sunucusu
          * USB Bellek
          * FortiManager
          - Backup dosyas\u0131n\u0131n \u015fifrelenmesini istiyorsan\u0131z \u015fifre belirleyin<\/p>

          5. Konfig\u00fcrasyon Do\u011frulama:
          - Settings\u2019den backup\u2019lar\u0131n ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol edebilirsiniz
          - Log & Report men\u00fcs\u00fcnden backup loglar\u0131n\u0131 g\u00f6rebilirsiniz<\/p>

          6. Geri Y\u00fckleme \u0130\u015flemi:
          - System > Dashboard > Configuration > Restore
          - Backup dosyan\u0131z\u0131 se\u00e7in
          - Restore butonuna t\u0131klay\u0131n
          - Cihaz otomatik olarak yeniden ba\u015flayacakt\u0131r<\/p>

          \u00d6nemli Notlar:
          - Backup almadan \u00f6nce mevcut konfig\u00fcrasyonunuzun \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun
          - Kritik de\u011fi\u015fikliklerden \u00f6nce manuel backup alman\u0131z \u00f6nerilir
          - Backup dosyalar\u0131n\u0131 g\u00fcvenli bir yerde saklay\u0131n
          - \u015eifreleme kullan\u0131yorsan\u0131z \u015fifreyi not almay\u0131 unutmay\u0131n
          - Backup\u2019lar\u0131 d\u00fczenli olarak test edin<\/p>

          Bu \u00f6zellik sayesinde herhangi bir hatal\u0131 konfig\u00fcrasyon durumunda son \u00e7al\u0131\u015fan duruma kolayca geri d\u00f6nebilirsiniz.<\/p>","excerpt":"Fortigate\u2019de Security Fabric + Automation \u00f6zelli\u011fi ile yapt\u0131\u011f\u0131n\u0131z konfig\u00fcrasyon de\u011fi\u015fikliklerinin otomatik olarak yedeklenmesini sa\u011flayabilirsiniz. Bu sayede hatal\u0131 bir de\u011fi\u015fiklik yapt\u0131\u011f\u0131n\u0131zda son \u00e7al\u0131\u015fan duruma geri d\u00f6nebilirsiniz.","created_at":"2024-12-29 11:37:50","updated_at":"2026-09-06 06:03:57","category_id":6,"view_count":646,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-29 11:37:50","featured_image":"resimyok.jpg","slug":"fortigate-de-security-fabric-automation-ile-otomatik-backup-alma","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":258,"title":"Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131","content":"

          Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131n\u0131 azaltmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 uygulayabilirsiniz:<\/p>

          1. IPS Sens\u00f6r\u00fcn\u00fc Optimize Etme:
          - \u201cdiagnose ips memory\u201d komutu ile mevcut IPS bellek kullan\u0131m\u0131n\u0131 kontrol edin
          - IPS sens\u00f6r ayarlar\u0131n\u0131 g\u00f6zden ge\u00e7irin ve gereksiz imzalar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n
          - Sadece ihtiya\u00e7 duyulan IPS imzalar\u0131n\u0131 aktif tutun<\/p>

          2. IPS Politikalar\u0131n\u0131 G\u00f6zden Ge\u00e7irme:
          - T\u00fcm trafi\u011fe IPS uygulamak yerine, kritik sistemlere y\u00f6nelik trafi\u011fe IPS uygulay\u0131n
          - Her politika i\u00e7in ayr\u0131 IPS profili olu\u015fturmak yerine, ortak profiller kullan\u0131n
          - Gereksiz IPS politikalar\u0131n\u0131 kald\u0131r\u0131n<\/p>

          3. IPS Engine Ayarlar\u0131n\u0131 D\u00fczenleme:
          - \u201cconfig ips settings\u201d alt\u0131nda buffer-size de\u011ferini optimize edin
          - Tcp-session-without-syn \u00f6zelli\u011fini kapat\u0131n
          - Packet-log-queue-depth de\u011ferini d\u00fc\u015f\u00fcr\u00fcn<\/p>

          4. Sistem Kaynaklar\u0131n\u0131n \u0130zlenmesi:<\/p>

          diagnose sys top
          diagnose hardware sysinfo memory<\/p>

          komutlar\u0131yla sistem kaynak kullan\u0131m\u0131n\u0131 d\u00fczenli olarak izleyin<\/p>

          5. Firmware G\u00fcncellemesi:
          - Cihaz\u0131n\u0131z\u0131n firmware\u2019ini g\u00fcncel tutun
          - IPS motorunun optimize edildi\u011fi g\u00fcncel s\u00fcr\u00fcmleri tercih edin<\/p>

          6. Hardware Kapasitesi:
          - Cihaz\u0131n donan\u0131m kapasitesinin i\u015f y\u00fck\u00fcne uygun oldu\u011fundan emin olun
          - Gerekirse daha y\u00fcksek kapasiteli bir model kullanmay\u0131 de\u011ferlendirin<\/p>

          7. Flow-Based vs Proxy-Based Se\u00e7imi:
          - M\u00fcmk\u00fcnse flow-based IPS kullan\u0131n, bu mod daha az kaynak t\u00fcketir
          - Proxy-based IPS sadece gerekli oldu\u011funda kullan\u0131n<\/p>

          8. IPS Database Optimizasyonu:<\/p>

          diagnose ips db-maintain clean
          diagnose ips db-maintain optimize<\/p>

          komutlar\u0131yla IPS veritaban\u0131n\u0131 optimize edin<\/p>

          Bu \u00f6nlemleri uygulad\u0131ktan sonra RAM kullan\u0131m\u0131nda \u00f6nemli bir d\u00fc\u015f\u00fc\u015f g\u00f6receksiniz. Ancak g\u00fcvenlik ve performans aras\u0131ndaki dengeyi korumaya dikkat edin. \u00c7ok fazla IPS \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rakmak g\u00fcvenlik a\u00e7\u0131klar\u0131na neden olabilir.<\/p>

          De\u011fi\u015fikliklerden sonra sistemi bir s\u00fcre izleyerek RAM kullan\u0131m\u0131n\u0131n ve g\u00fcvenlik etkinli\u011finin istenen seviyede oldu\u011fundan emin olun.<\/p>

          config ips global
          set engine-count 1
          set cp-accel-mode none
          set exclude-signatures none
          end<\/p>

          1. config ips global<\/strong>
          \u2014 IPS\u2019in global (genel) konfig\u00fcrasyon moduna giri\u015f yap\u0131l\u0131yor<\/p>

          2. set engine-count 1<\/strong>
          \u2014 IPS motoru say\u0131s\u0131n\u0131 1 olarak ayarlar
          \u2014 Bu ayar sistemin ka\u00e7 IPS i\u015flem motoru kullanaca\u011f\u0131n\u0131 belirler
          \u2014 Genellikle d\u00fc\u015f\u00fck-orta seviye trafikte 1 motor yeterlidir<\/p>

          3. set cp-accel-mode none<\/strong>
          \u2014 Content processor acceleration modunu kapat\u0131r
          \u2014 none <\/strong>se\u00e7ene\u011fi donan\u0131m h\u0131zland\u0131rmay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r
          \u2014 Bu ayar baz\u0131 durumlarda performans\u0131 etkileyebilir<\/p>

          4. set exclude-signatures none<\/strong>
          \u2014 Hari\u00e7 tutulacak imza olmad\u0131\u011f\u0131n\u0131 belirtir
          \u2014 T\u00fcm IPS imzalar\u0131n\u0131n aktif olaca\u011f\u0131n\u0131 g\u00f6sterir<\/p>

          5. end<\/strong>
          \u2014 Konfig\u00fcrasyon modundan \u00e7\u0131k\u0131\u015f<\/p>

          Bu konfig\u00fcrasyon olduk\u00e7a temel bir ayard\u0131r ve baz\u0131 iyile\u015ftirmeler yap\u0131labilir:<\/p>

          1. Engine-count ayar\u0131:
          \u2014 E\u011fer cihaz\u0131n\u0131z \u00e7ok yo\u011fun trafik al\u0131yorsa ve donan\u0131m destekliyorsa, engine-count de\u011ferini art\u0131rabilirsiniz
          \u2014 \u00d6rnek: set engine-count 2<\/strong><\/p>

          2. CP-accel-mode:
          \u2014 E\u011fer cihaz\u0131n\u0131z destekliyorsa, donan\u0131m h\u0131zland\u0131rmay\u0131 aktif etmek performans\u0131 art\u0131rabilir
          \u2014 \u00d6rnek: set cp-accel-mode basic<\/strong><\/p>

          3. Exclude-signatures:
          \u2014 Gereksiz imzalar\u0131 hari\u00e7 tutarak sistem kaynaklar\u0131n\u0131 optimize edebilirsiniz
          \u2014 \u00d6rnek: set exclude-signatures <signature-id1> <signature-id2><\/strong><\/p>

          Bu ayarlar\u0131 de\u011fi\u015ftirmeden \u00f6nce \u015funlar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z\u0131 \u00f6neririm:
          - Mevcut trafik yo\u011funlu\u011funuz
          - Donan\u0131m kapasiteniiz
          - G\u00fcvenlik gereksinimleriniz<\/p>

          https:\/\/www.linkedin.com\/in\/mustafa-%C3%B6nder-ak%C3%B6z-23174592\/<\/a><\/p>

          https:\/\/github.com\/onder7<\/a><\/p>","excerpt":"Fortigate g\u00fcvenlik duvarlar\u0131nda IPS (Intrusion Prevention System) kaynakl\u0131 y\u00fcksek RAM kullan\u0131m\u0131n\u0131 azaltmak i\u00e7in yaz\u0131daki ad\u0131mlar\u0131 uygulayabilirsiniz","created_at":"2024-12-29 11:36:29","updated_at":"2026-09-06 16:11:06","category_id":6,"view_count":656,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-29 11:36:29","featured_image":"resimyok.jpg","slug":"fortigate-guvenlik-duvarlarinda-ips-intrusion-prevention-system-kaynakli-yuksek-ram-kullanimi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]