Managing IT assets with Ossim
Ocs Server is integrated in Ossim. OCS is used to help network or system administrators track computer configuration and software installation in the network. Collect hardware and system information. OCS Inventory can also be used to discover all active devices in your network, such as switches, routers, and network printers. The agent must be installed on the client computer. In the Windwos system, OCS Inventory NG provides a tool, this allows you to easily deploy the agent through the Active Directory GPO or login script ). In Linux, you can only manually install the agent ).
The Management Server contains four components:
Data Server is used to store the hardware and software information of the collected client.
Communication server is used to support http Communication between the database server and the proxy.
The Deployment server is used to store all the package Deployment configuration information, which must be supported by https !)
The Administration console allows administrators to query the inventory information of database servers in their favorite browsers. Note: The Installation Method for windows clients is relatively simple and will not be described here .)
These components can be installed on a computer or on different computers to achieve load. If the number of clients in the network exceeds 10000, it is best to use two or more different servers, one for database servers + Communication servers, the other is used for database copy SERVER + Management Server + Deployment Server.
650) this. width = 650; "title =" clip_image006 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image006 "src =" http://www.bkjia.com/uploads/allimg/140110/0421461C5-0.jpg "height =" 297 "/>
Figure 1 OCS Inventory NG architecture component
OCS Inventory NG collects all hardware information and software installation information by running an agent on the client. The Management Server is used to centrally process, view inventory list results, and create deployment packages. The Management Server and agent communicate with each other through http/https. All the communication data is compressed into xml format using zlib, to reduce the average network traffic.
System Configuration: to enable IT Asset Management, you must first start the OCS service.
To start the Ocs service, you need to run the following two scripts to view the distribution of system components.
# Cd/usr/share/ossim-installer/ocs/
#./Install_ocs.sh
#./OCS_Linux_server_1.01.OSSIM/setup. sh
650) this. width = 650; "title =" clip_image002 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; margin: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image002 "src =" http://www.bkjia.com/uploads/allimg/140110/0421461020-1.jpg "height =" 233 "/>
Figure 2 Distribution of software on a linux Server
Operation Method: Select OCS Inventory from the asset sub-menu on the left, provided that the client plug-in needs to be configured. 650) this. width = 650; "title =" 1-77.jpg "alt =" wKiom1LLwYzhknvrAACA0RNf6V4513.jpg "src =" http://www.bkjia.com/uploads/allimg/140110/0421463N3-2.jpg "/>
650) this. width = 650; "title =" 1-6-test.jpg "alt =" wKiom1LKMPzjl22LAAEU8o71GCs151.jpg "src =" http://www.bkjia.com/uploads/allimg/140110/0421461524-3.jpg "/>
Figure 3 hardware configurations of Linux servers
Of course, the device cannot remain unchanged. We need to set a regular scan to keep the latest list.
650) this. width = 650; "title =" 1-777.jpg "alt =" wKioL1LLwe-iL2cXAABXbECUC6E743.jpg "src =" http://www.bkjia.com/uploads/allimg/140110/04214A506-4.jpg "/>
Video: http://www.tudou.com/programs/view/hQRJ4DIAgQY/
Note: The vulnerabilities in ossim 4.3 and 4.4 have not been fixed. This feature is temporarily disabled, but may be available in later versions.
I will share with you the application http://chenguang.blog.51cto.com/350944/1349749 of ossim vulnerability scan.
This article from the "Li chenguang Original Technology blog" blog, please be sure to keep this source http://chenguang.blog.51cto.com/350944/1348894