Скачать или смотреть How to mitigate the Log4j vulnerability on Windows servers for Fastvue Reporter (the correct way!)

This short video shows how to mitigate the Log4j vulnerability on Windows servers running Fastvue Reporter.

Fastvue Reporter uses Elasticsearch as its database, which uses Log4j for its own diagnostic logging.

Elastic has since downgraded the issue saying"Elasticsearch is not susceptible to remote code execution with this vulnerability due to our use of the Java Security Manager" which is good news:
https://discuss.elastic.co/t/apache-l...

However, we still recommend adding the LOG4J_FORMAT_MSG_NO_LOOKUPS environment variable to your servers. Especially if you have other services installed that could also be using log4j under the hood. There are many of them out there!

To do this:
1. Log in to the server running Fastvue Reporter
2. Right-click the Start button and select System.
3. In the Settings window that appears, under Related Settings, click System Info.
4. In the System window that appears, on the left side, click Advanced system settings.
5. In the System Properties dialog that appears, under the Advanced tab, click the Environment Variables... button.
In the Environment Variables dialog, under System variables, click New....
6. Set Variable name to LOG4J_FORMAT_MSG_NO_LOOKUPS
Set Variable value to true
7. Click OK on each dialog until you're back to the System window, which can now be closed.
8. Restart the Fastvue Reporter service in services.msc. This in turn restarts the Elasticsearch service and initializes log4j with the new environment variable.

Please follow these steps as soon as possible to avoid the Log4j vulnerability causing issues in your network.

Fastvue helps schools and businesses monitor, alert and report on internet usage issues. Safeguard students, improve online safety, productivity and network security. Find out more at https://www.fastvue.co

To stay updated with Fastvue's product and security updates, subscribe to our mailing list making sure you check the 'Product Updates & News' checkbox.

Subscribe here: http://eepurl.com/fMe-Q