================================================================================
                                                                  2014N1031
                                             NEC\[VCmx[^
                                                                ITVXeƕ

               wyGUARDIANzAbvf[gW[ 20141031x
                Abvf[g[Xm[g

================================================================================

--------------------------------------------------------------------------------

  GUARDIANiɑ΂CAbvf[g
  wyGUARDIANzAbvf[gW[ 20141031x[Xv܂B
  {Abvf[g(pb`)́AGUARDIANWALL V7.5.00 / 
  WEBGUARDIAN V3.7.00 pƂȂ܂B
  Abvf[gsVXe̐ĩo[WƂmFĂB
  Kp̍ۂɂ́A{̋Lqɏ]Đ菇œKpĂB

--------------------------------------------------------------------------------

1.{Abvf[gKp\OSƐi

 {Abvf[ǵALOSEiCXg[Ă}Vɑ΂
 Kp܂B

 <ΏOSo[W>
 ERed Hat Enterprise Linux Ver 5
 ERed Hat Enterprise Linux Ver 6

 <Ώېio[W>
 EGUARDIANWALL V7.5.00
   (GUARDIANǗT[o V4.6.00AGUARDIANWALLT[o V7.5.00)

 EWEBGUARDIAN V3.7.00
   (GUARDIANǗT[o V4.6.00AWEBGUARDIANT[o V3.7.00)


2.g̃o[WmF@

 Ǘ҂܂̓VXeǗ҂ŊǗʂ胍OCAL̃j[mF
 邱Ƃł܂Bڂ͂g̐ĩ}jAQƂB

 EGUARDIANǗT[o(GUARDIANSUITE)̃o[W

  uʁvuǗT[o[Ǘvu󋵊mFvIсA
  yo[Wz^uI܂B

 EGUARDIANWALLT[oAWEBGUARDIANT[õo[W

  uʁvuT[o[Ǘvu󋵊mFvIсA
  eT[óyڍׁz{^āyo[Wz^uI܂B


3.{Abvf[g̋@\ǉ

 {Abvf[gKp܂ƁAL(1)`(4)̋@\ǉs܂B

 (1) ۗ[ǗʂɃX}[gtHp̊Ǘʂp\

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yڍדez
   ۗ[̊ǗX}[gtH̃uEUsƂł悤
   Ȃ܂B
   X}[gtHőł@\͈ȉ̂ƂłB
   
      Eۗ[̉{
      Eۗ[̑o
      Eۗ[̍폜

   QlF
   t́wGUARDIANSUITEǗT[o[p̎
   `GUARDIANWALLX}[gtHUIҁ`x(User-ST_SP-7_5_01.pdf)

 (2) M[Bcc]@\ǉ

  yΏېiz
   GUARDIANWALL

  yڍדez
   []ۂɁABccɒǉăIWi[]邱Ƃ
   ł悤ɂȂ܂B
   MimeFormatForwardݒɁubccvƂݒlǉ܂B
   ftHg̐ݒĺutruevłB

   ǗT[o[Ɉȉ̐ݒsƂŁA{@\𗘗p邱Ƃł܂B

   ǗT[o[
   /opt/Guardian/Admin/etc/wall/mss.conf
   ----------------------
   [NoticeMessage]
   MimeFormatForward = bcc
   ----------------------

   ǗT[o[ɏL̐ݒsA
   ȉ̃XNvgsA[T[o[ɐݒ𓯊܂B
   XNvgsA[T[o[̃T[rXċN܂̂
     ӂB

   /opt/Guardian/Admin/support/pushMailWall -r all

   ܂AMimeFormatForward = bccݒ肵ꍇA
   ȉ̃IvV@\pł܂B
   S[NoticeMessage]zɋLڂIvVłB

   ForwardSubjectSignature = gCӂ̕h
      ]郁[̌̐擪ɁAw肵}܂B

   Forward_option = 0x0001
     uForwardSubjectSignaturevŎw肵̖ɑ}܂B

   Forward_option = 0x0100
      [ɁuReturn-Receipt-Towb_[vt^ĂꍇA
      폜ē]܂B
      [T[o[瑗M҂֔zmF𑗐M܂B

   Forward_option = 0x0200
      [ɁuDisposition-Notification-Towb_[vt^ĂꍇA
      폜ē]܂B
      Bcc][̎M҂瑗M҂֊JmF𑗐M܂B

   QlF
   wGUARDIANSUITET[o[p̎`GUARDIANWALLV7.5([)`x
   uT[o[ݒt@Cv-u[NoticeMessage]ZNVv-uMimeFormatForwardv

 (3) oBOXƍ폜BOX1y[Wɕ\郁[sύX\

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yڍדez
   ۗ[Ǘʂ̑oBOXE폜BOXɕ\1y[W̃[̍s
   ύXł悤ɂȂ܂B
   QueueLinesݒ̓Kp͈͂AoBOXƍ폜BOX܂Ŋgꂽ߁A
   GUARDIANǗT[öȉ̍ڂ̒lύX邱ƂŁA
   1y[Wɕ\郁[̍sύX邱Ƃ\ɂȂ܂B
   ftHgł͉L̋Lڂ̂ƂuQueueLines = 30vŐݒ肳Ă܂̂ŁA
   1y[W30s̃[\܂B
   ۗBOXAoBOXA폜BOXSĂɓlKp܂B

   ǗT[o[
   /opt/Guardian/Admin/etc/admin/admin.conf
   ----------------------
   [CGI]
   QueueLines = 30
   ----------------------

   QlF
   wGUARDIANSUITEǗT[o[p̎ `GUARDIANWALLAWEBGUARDIANʁ`x
   uT[o[ݒt@Cv-u[CGI]ZNVv-uQueueLinesv

 (4) T|[gɕKvȏ擾XNvg

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yڍדez
   GUARDIANT|[gɂ⍇ہA⍇e̒ɕKvȏ
   擾邽߂̃XNvgǉ܂B
   XNvgsƁAVXeOݒobNAbṽt@C
   u.tar.gzv`ňkĕۑ܂B
   XNvg͈ȉ̃fBNgɕۑĂ܂B

   ǗT[o[
   /opt/Guardian/Admin/support
   XNvgFget_support_info

   IvV\@

   ȉ̂ƂR}hs邱ƂŁA{XNvg̃IvV
   \܂B
   /opt/Guardian/Admin/support/get_support_info

   f[^擾

   ǗT[o[A[T[o[AEFuT[o[2014/9/1
   VXeOt@CAݒobNAbvt@CWꍇ
   R}h͈ȉ̂ƂłB

   /opt/Guardian/Admin/support/get_support_info --adm --mail --web --log 20140901 --back

   Wt@ĆAȉ̃fBNgɕۑ܂B
   u--dvIvVŕۑfBNgw肷邱Ƃ\łB

   /opt/Guardian/Admin/tmp


4.{Abvf[g̏Ce

 {Abvf[gKp܂ƁAL(1)`(8)̖Cs܂B

 (1) L[[hŎۂ̃[ɂ͊܂܂ĂȂL[[hoĂ܂

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   ̕R[hƔ肳ꂤ镶ɑ΂ăL[[hsꍇA
   ۂ̃[ɂ͊܂܂ĂȂL[[hoĂ܂C܂B

 (2) VXeOEUCȊO̕񂪂ꍇɊǗʏŕ\łȂ

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   VXeÕt@CEUCȊO̕R[h܂܂ꍇA
   ǗʏŃVXeO\ȂC܂B

 (3) IgnoreScreeningFail=falseݒ莞Ɍʂ肳Ȃꍇ

  yΏېiz
   GUARDIANWALL

  yCez
   [̃IvVƂIgnoreScreeningFail=falseݒ肵A
   pX[htZIPt@CꍇAʂ肳Ȃ
   C܂B

   ǗT[o[̐ݒӏ͈ȉƂłB

   ǗT[o[
   /opt/Guardian/Admin/etc/wall/mss.conf
   ----------------------
   [Screening]
   IgnoreScreeningFail = false
   ----------------------

   ǗT[o[ɏL̐ݒsAȉ̃XNvgsA[T[o[ɐݒ𓯊܂B
   XNvgsA[T[o[̃T[rXċN܂̂łӂB

   /opt/Guardian/Admin/support/pushMailWall -r all

   QlF
   wGUARDIANSUITET[o[p̎`GUARDIANWALL V7.5([)`x
   uT[o[ݒt@Cv-u[Screening]ZNVv-uIgnoreScreeningFailv

 (4) Internet Explorer̃o[W8ȍ~̏ꍇAǗʂ\ƈꕔʂ
     fUC

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   Internet Explorer̃o[W8ȍ~̏ꍇAǗʂ\ƈꕔʂ
   fUCsC܂B

   Ỷӏ͈ȉ̂ƂłB

   EWEBGUARDIANƎF؋@\pɁAƎF؃pX[h̕ύXʂ\
     ʂ̑\ȂB
   Euʁv-uT[o[Ǘv-uʐݒv-uݒvɂĕ\^u
     \B
   Eȉ̉ʂɂāAE[̓t{bNX݂̂sɕ\B
     uʁv-u^pčv-uL^v-uڍ׌v
     uʁv-u^pčv-uXgAL^v-uڍ׌v
     u[v-uۑ[Ǘv-u[{v-uڍ׌v
     u[v-uۑ[Ǘv-uXgA[{v-uڍ׌v

 (5) OpenSSL̐Ǝ㐫iCVE-2014-0224jɑΉ

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   OpenSSL̐Ǝ㐫iCVE-2014-0224jɑΉ܂B
   {Ǝ㐫GUARDIANi𗘗pł̉e͂܂񂪁A
   ZLeB̋łOpenSSLɃo[WAbvs܂B

 (6) ۑ[{̃Gx[vTO\Ȃ

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   [ۑѕۗǗʂ烁[mFہA
   Gx[vAwb_[Aۗ̏񂪕\ȂsC܂B
   Gx[vAwb_[UTF-8ȊÕ}`oCgꍇɔ܂B

   Ỷӏ͈ȉ̂ƂłB

   Eu[v-uۑ[Ǘv-u[{v
   Eu[v-uۑ[Ǘv-uXgA[{v
   Eu[v-uۗ[Ǘv
   Euꎞۗ[v-u{{ʁv

 (7) ƎF؋@\pɐ݂̂̃pX[hݒłȂ

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   WEBGUARDIANƎF؋@\pɁẪ݂pX[hݒłȂs
   C܂B

   Ỷӏ͈ȉ̂ƂłB

   EuEFuv-uVXeǗv-u[U[Fؐݒv-u[U[Ǘʂցv-
     uVKo^v-upX[hv
   EuEFuv-uVXeǗv-u[U[Fؐݒv-u[U[Ǘʂցv-
     uҏWv-uVKpX[hv
   EpX[hL؂ꎞяpX[hύXɂApX[hύX

 (8) ZLeB̋{

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   ZLeB̋s܂B


5.{Abvf[g̎dlύXe

 {Abvf[gKp܂ƁAL(1)̎dlύXs܂B

 (1) ̕R[hɔ\ȕ͂ɑ΂L[[hł̌ox

  yΏېiz
   GUARDIANWALL
   WEBGUARDIAN

  yCez
   ̕R[hƂĉ߂镶͂ɑ΂L[[hɂāA
   L[[hoȂꍇ܂B
   ̂悤ȏꍇłoxシ悤dľs܂B


6.zz

 {Abvf[gɂ͈ȉ̃t@C܂܂܂B

 README.txt                      : {t@C
 update_P140701.sh               : KpXNvg


7.OKppb`ꗗ

 {Abvf[gKpOɁAߋɃ[XL̃Abvf[g
 炩ߓKpĂKv܂B
 eAbvf[gɕt̃[Xm[gQƂAAbvf[g
 KpĂB

 GUARDIANǗT[oƌT[o𓯈}VɃCXg[Ăꍇ
   eŕKvȃpb`SēKpĂB

 EGUARDIANǗT[o(GUARDIANSUITE) V4.6.00 ̏ꍇ
    (1)wyGUARDIANzAbvf[gW[ 20140418x
        (t@C: update_P140101.sh)
    (2)wyGUARDIANzAbvf[gW[ 20140521x
        (t@C: update_P140401.sh)

 EGUARDIANWALLT[o V7.5.00 ̏ꍇ
    (1)wyGUARDIANzAbvf[gW[ 20140418x
        (t@C: update_P140101.sh)
    (2)wyGUARDIANzAbvf[gW[ 20140521x
        (t@C: update_P140401.sh)

 EWEBGUARDIANT[o V3.7.00 ̏ꍇ
    (1)wyGUARDIANzAbvf[gW[ 20140418x
        (t@C: update_P140101.sh)
    (2)wyGUARDIANzAbvf[gW[ 20140521x
        (t@C: update_P140401.sh)


8.pb`Kp菇

 {Abvf[g̓Kp菇ƂȂ܂B
 K{菇ɏ]Ď{肢܂B

   1) pb`Kp}VrootAJEgŃOC܂B

   2) CXg[ĂpbP[W̃o[WmF܂B
      p̊ɂCXg[ĂpbP[W̃o[W
      mFĂB

      GUARDIANǗT[oCXg[ĂꍇɎs

      # rpm -q GRDNadmin
      GRDNadmin-4.6.00-000

      GUARDIANWALLT[oCXg[ĂꍇɎs

      # rpm -q MGWall
      MGWall-7.5.00-000

      WEBGUARDIANT[oCXg[ĂꍇɎs

      # rpm -q GRDNwg
      GRDNwg-3.7.00-000

   3) Ήgs-update-20141031.tarCӂ̃fBNgɃRs[܂B

   4) ΉWJ܂B
      (ȉ/tmp zɃRs[ꍇł)

      # cd /tmp
      # tar xvf /tmp/gs-update-20141031.tar

      KA/opt/GuardianzȊÕfBNg֓WJĂB

   5) T[rX~܂B
      p̊ɂ茻݋ÑT[rX~ĂB

      GUARDIANǗT[oAGUARDIANWALLT[oAWEBGUARDIANT[o
      ʂŎs

      # /etc/init.d/Guardian.admin stop

      GUARDIANǗT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.pub stop

      GUARDIANWALLT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.mail stop

      WEBGUARDIANT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.web stop

   6) KpXNvgsĂB
      (ȉ/tmp zɃRs[ꍇł)

      # cd /tmp/gs-update-20141031
      # sh update_P140701.sh

      KA/opt/GuardianzȊÕfBNgŎsĂB

   7) "Do you agree with Upgrading Modules?[yes or no]"Əo͂܂̂ŁA
      "yes"Ɠ͂ĂB
      "no"Ɠ͂ƎsLZ܂B
      sIƁu<pbP[W>: Upgrading done.vƏo͂܂B

      ̃bZ[W\ꂽAAbvf[głB

      GUARDIANǗT[oCXg[Ăꍇ
        GRDNlocal: Upgrading done.
        GRDNcore: Upgrading done.
        GRDNadmin: Upgrading done.

      GUARDIANWALLT[oCXg[Ăꍇ
        GRDNlocal: Upgrading done.
        GRDNcore: Upgrading done.
        MGWall: Upgrading done.

      WEBGUARDIANT[oCXg[Ăꍇ
        GRDNlocal: Upgrading done.
        GRDNcore: Upgrading done.

      GUARDIANǗT[oAT[o}VɃCXg[ĂꍇA
        LY郁bZ[WSĕ\܂B
        ȂAʂpbP[W̃Abvf[gbZ[W2dŕ\܂B

      āApb`̓KpmF{܂B
      ŏ̊mFƂn܂ƁuChecking files...vƏo͂A
      Ȃ΁uOKvo͂܂B

      ɁÅmFƂn܂ƁuChecking check sums..vƏo͂A
      Ȃ΁uOKvo͂܂B

      pb`KpmF̌ʂɖ肪ꍇɂ́Ât@Cɑ
      uFAILEDvo͂܂B
      Kp̖肪l܂̂ŁAOSt@CVXeɈُ킪Ȃ
      ĂApb`Kp̖A
      菇 6) ēx{ĂB

   8) T[rXN܂B
      菇 5) Œ~T[rXN܂B

      GUARDIANǗT[oAGUARDIANWALLT[oAWEBGUARDIANT[o
      ʂŎs

      # /etc/init.d/Guardian.admin start

      GUARDIANǗT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.pub start

      GUARDIANWALLT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.mail start

      WEBGUARDIANT[oCXg[ĂꍇɎs

      # /etc/init.d/Guardian.web start

   ȏŃpb`KpƂ͏IłB


9.ӎEQl

 9-1. {Abvf[ǵAGUARDIANǗT[o(GUARDIANSUITE)A
      GUARDIANWALLT[oAWEBGUARDIANT[o
      CXg[ĂSẴ}VɓKpKv܂B

 9-2. {Abvf[gɂAKpÕt@Cȉ̃fBNg
      obNAbv܂BobNAbvꂽt@C̓[obN
      KvƂȂ܂̂ŃfBNgƂ̔z̃t@C폜AύXȂ悤
      肢܂B

      EGUARDIANǗT[ȍꍇ
        /opt/Guardian/backup/GRDNlocal-2.1.04_P140701/
        /opt/Guardian/backup/GRDNcore-4.6.00_P140701/
        /opt/Guardian/backup/GRDNadmin-4.6.00_P140701/

      EGUARDIANWALLT[ȍꍇ
        /opt/Guardian/backup/GRDNlocal-2.1.04_P140701/
        /opt/Guardian/backup/GRDNcore-4.6.00_P140701/
        /opt/Guardian/backup/MGWall-7.5.00_P140701/

      EWEBGUARDIANT[ȍꍇ
        /opt/Guardian/backup/GRDNlocal-2.1.04_P140701/
        /opt/Guardian/backup/GRDNcore-4.6.00_P140701/

 9-3. {Abvf[gKp̎ȉ̃t@CɋL^܂B
      ̃Abvf[gŕKvɂȂ\܂̂ŁA
      ̃t@C폜AύXȂ悤肢܂B

        /opt/Guardian/.GSIHistory

      GUARDIANiɊ܂܂epbP[Wpb`CXg[A܂
        ACXg[L^Ăt@CłB

      Kp/opt/Guardian/.GSIHistoryɋL^e͈ȉ̂ƂłB

      EGUARDIANǗT[ȍꍇ
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNlocal P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNcore  P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNadmin P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01

      EGUARDIANWALLT[ȍꍇ
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNlocal P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNcore  P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01
        <YYYY.MM.DD-hh:mm:ss> (PAT) MGWall    P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01

      EWEBGUARDIANT[ȍꍇ
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNlocal P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01
        <YYYY.MM.DD-hh:mm:ss> (PAT) GRDNcore  P140701 GUARDIANSUITE P140701 Linux/intel 2014.08.01

      YYYY.MM.DD-hh:mm:ssF pb`Kp

 9-4. GUARDIANACXg[̒ӎɂċLڂ܂B
      GUARDIANi𐻕ĩCXg[păACXg[ہA
      Õf[^cAcȂɊւ炸A
      pb`ɂĐVɒǉꂽt@C/opt/Guardian/GSIHistoryA
      /opt/Guardian/backupt@C͍폜ꂸɎc܂B
      ̂߁AGUARDIANiSɃACXg[ۂɂ́A
      ȉ̃fBNg݂ꍇA蓮ɂč폜
      悤肢܂B
      (f[^x[Xi[fBNgCӂŎw肵ꍇ́A
      ̃fBNg폜Ă)

        /opt/Guardian/
        /var/opt/Guardian/

      ܂AGUARDIANĩpb`Kp󋵂́A/opt/Guardian/backup 
      fBNgɂĔʂĂ܂B
      ̂߁A/opt/Guardian/backup 폜GUARDIANi
      ăCXg[ꍇAVXepb`KpꂽԂ
      FĂ܂܂B
      GUARDIANiACXg[ɍăCXg[ۂɂ́A
      /opt/Guardian/backup fBNg̍폜{悤
      肢܂B

 9-5. pb`̓KpƎGUARDIANǗT[õT[rXA
      GUARDIANWALL^WEBGUARDIANT[õT[rX~KvA
      L̂悤ȉe܂B

      EGUARDIANǗT[õT[rX~̉e
        T[rX~́AǗʂւ̃ANZXł܂B

      EGUARDIANWALLT[o̊ǗvZX~̉e
        T[rX~́A[Mł܂B

      EWEBGUARDIANT[o̊ǗvZX~̉e
        T[rX~́AC^[lbgANZXł܂B


ȏ
