{"id":53261,"date":"2019-11-27T00:00:00","date_gmt":"2019-11-26T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chto-ostanetsya-v-servernoj"},"modified":"2020-02-18T14:01:09","modified_gmt":"2020-02-18T11:01:09","slug":"chto-ostanetsya-v-servernoj","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","title":{"rendered":"Co z\u016fstane v serverovn\u011b?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/e9c4d6201251ba0691536d345b40d334.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Mnoho organizac\u00ed vyu\u017e\u00edv\u00e1 cloudov\u00e9 slu\u017eby nebo p\u0159esouv\u00e1 za\u0159\u00edzen\u00ed do<br \/>\ndatov\u00e9ho centra. Co m\u00e1 smysl nechat v serverovn\u011b a jak l\u00e9pe organizovat ochranu perimetru kancel\u00e1\u0159sk\u00e9 s\u00edt\u011b v takov\u00e9 situaci?<\/em><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Kdysi bylo v\u0161e na serveru<\/h2>\n<p><\/p>\n<p>Na za\u010d\u00e1tku rozvoje rusk\u00e9ho internetu v\u011bt\u0161ina firem \u0159e\u0161ila ot\u00e1zku IT infrastruktury p\u0159ibli\u017en\u011b podle jedn\u00e9 sch\u00e9my: vy\u010dlenilo se m\u00edstnost, kde byla nainstalov\u00e1na klimatizace a kde se soust\u0159edilo t\u00e9m\u011b\u0159 ve\u0161ker\u00e9 s\u00ed\u0165ov\u00e9 a serverov\u00e9 vybaven\u00ed.<\/p>\n<p><\/p>\n<p>Syst\u00e9mov\u00fd administr\u00e1tor nastavoval jeden nebo n\u011bkolik server\u016f na FreeBSD, Linuxu, nebo OpenSolaris atd. A na tomto \u201emajetku\u201c spou\u0161t\u011bl pot\u0159ebn\u00e9 slu\u017eby: od webov\u00e9ho serveru, firemn\u00ed po\u0161ty a\u017e po sd\u00edlen\u00ed soubor\u016f.<\/p>\n<p><\/p>\n<p>Kdy\u017e firma roste a vyv\u00edj\u00ed se, nevyhnuteln\u011b se setk\u00e1v\u00e1 se situac\u00ed, kdy serverovna ji\u017e nevyhovuje po\u017eadavk\u016fm. Pokud jsou pen\u00edze, lze postavit vlastn\u00ed datov\u00e9 centrum. Mo\u017en\u00e1 bude v\u00fdhodn\u011bj\u0161\u00ed si pronajmout stojany v komer\u010dn\u00edch datov\u00fdch centrech. Kvalitn\u00ed nap\u00e1jen\u00ed na b\u00e1zi DRUPS, pr\u016fmyslov\u00fd klimatiza\u010dn\u00ed syst\u00e9m, pln\u011b kvalifikovan\u00fd person\u00e1l \u2013 tyto v\u011bci jsou pravd\u011bpodobn\u011b nedostupn\u00e9 v p\u0159\u00edpad\u011b kancel\u00e1\u0159sk\u00e9 serverovny.<\/p>\n<p><\/p>\n<p>Spolu s velk\u00fdm byznysem doch\u00e1z\u00ed v my\u0161len\u00ed veden\u00ed st\u0159edn\u00edch a men\u0161\u00edch firem postupn\u011b k p\u0159echodu od mentality \u201ev\u0161echno si nos\u00edm s sebou\u201c a \u201em\u016fj domov \u2014 moje pevnost\u201c k \u201ed\u00e1t to n\u011bkomu jin\u00e9mu a netr\u00e1pit se\u201c.<\/p>\n<p><\/p>\n<p>Pro mal\u00e9 podniky se takov\u00fdmto \u201eodlo\u017een\u00edm\u201c stali cloudov\u00ed poskytovatel\u00e9. Pokud d\u0159\u00edve pro firmu s 40 zam\u011bstnanci bylo samoz\u0159ejmost\u00ed m\u00edt vlastn\u00ed po\u0161tovn\u00ed server, dnes slu\u017eba od stejn\u00e9ho Googlu p\u0159itahuje v\u0161echny, kte\u0159\u00ed d\u0159\u00edve nep\u0159edstavovali pr\u00e1ci bez vlastn\u00edho Sendmailu nebo Postfixu.<\/p>\n<p><\/p>\n<p>Velkou pomoc p\u0159i tomto \u201ep\u0159est\u011bhov\u00e1n\u00ed\u201c poskytly virtu\u00e1ln\u00ed syst\u00e9my. Pokud bylo p\u0159ed jejich vznikem nutn\u00e9 p\u0159epravovat fyzick\u00fd server jako celek, nebo v\u0161e nastavovat na nov\u00e9m \u201e\u017eeleze\u201c, nyn\u00ed sta\u010d\u00ed p\u0159en\u00e9st obraz virtu\u00e1ln\u00edho stroje.<\/p>\n<p><\/p>\n<h2>Co tedy z\u016fstane v t\u00e9 jedin\u00e9 malink\u00e9 m\u00edstnosti s klimatizac\u00ed?<\/h2>\n<p><\/p>\n<p>Na prvn\u00edm m\u00edst\u011b je to s\u00ed\u0165ov\u00e9 vybaven\u00ed. Jak aktivn\u00ed, tak pasivn\u00ed. \u010casto se pod v\u00fdrazem \u201eserverovna\u201c rozum\u00ed krosov\u00e1 s poz\u016fstatky s\u00ed\u0165ov\u00e9ho vybaven\u00ed. A pro takov\u00e9 p\u0159\u00edpady nen\u00ed pot\u0159eba speci\u00e1ln\u00ed m\u00edstnost se siln\u00fdm syst\u00e9mem klimatizace, nap\u00e1jen\u00ed atd.<\/p>\n<p><\/p>\n<p>Druh\u00e1 skupina vybaven\u00ed, kterou zat\u00edm nen\u00ed mo\u017en\u00e9 odstranit ze serverovny \u2014 jsou to br\u00e1ny.<br \/>\nbezpe\u010dnosti.<\/p>\n<p><\/p>\n<p>Ale jak\u00e9 to jsou br\u00e1ny? Jak bylo uvedeno v\u00fd\u0161e, pokud m\u011bl spr\u00e1vce v ned\u00e1vn\u00e9 minulosti k dispozici jeden nebo n\u011bkolik server\u016f, na kter\u00fdch bylo mo\u017en\u00e9 spustit cokoliv, co si du\u0161e \u017e\u00e1dala, te\u010f takov\u00fd luxus nemus\u00ed b\u00fdt.<\/p>\n<p><\/p>\n<p>Ale pot\u0159eba ochrany p\u0159ed vn\u011bj\u0161\u00edmi hrozbami nikam nezmizela. Samoz\u0159ejm\u011b, m\u016f\u017eete v\u0161echny slu\u017eby a pot\u0159ebn\u00e9 vybaven\u00ed p\u0159esunout do datov\u00e9ho centra a pos\u00edlat provoz od takov\u00e9 br\u00e1ny k kancel\u00e1\u0159sk\u00e9mu krosov\u00e9mu p\u0159ipojen\u00ed p\u0159es zabezpe\u010den\u00fd kan\u00e1l, nap\u0159\u00edklad p\u0159es VPN.<br \/>\nTento sch\u00e9ma na prvn\u00ed pohled vypad\u00e1 atraktivn\u011b, kdyby ne zv\u00fd\u0161en\u00ed zat\u00ed\u017een\u00ed na st\u00e1vaj\u00edc\u00edch kan\u00e1lech. Pokud se nechcete platit za v\u00edce \u201etlust\u00fd\u201c kan\u00e1l, nen\u00ed to \u00fapln\u011b to, co pot\u0159ebujete.<\/p>\n<p><\/p>\n<p>Dal\u0161\u00ed variantou je zakoupit specializovan\u00e9 za\u0159\u00edzen\u00ed pro ochranu provozu, jeho\u017e architektura umo\u017e\u0148uje, vzhledem k \u00fazk\u00e9mu zam\u011b\u0159en\u00ed, obej\u00edt se bez v\u00fdkonn\u00fdch energeticky n\u00e1ro\u010dn\u00fdch a teplovodiv\u00fdch komponent\u016f.<\/p>\n<p><\/p>\n<h2>\u201eZoologick\u00e1 zahrada\u201c nebude pot\u0159eba.<\/h2>\n<p><\/p>\n<p>P\u0159i absenci klasick\u00e9 serverovny je mnohem lep\u0161\u00ed m\u00edt hned n\u011bkolik slu\u017eeb \u201ev jedn\u00e9 krabici\u201c, ne\u017e p\u011bstovat \u201ezoologickou zahradu\u201c v mal\u00e9 m\u00edstnosti, ne-li p\u0159\u00edmo v r\u00e1mci mal\u00e9ho krosov\u00e9ho sk\u0159\u00edn\u011b. P\u0159itom by \u0159e\u0161en\u00ed m\u011blo b\u00fdt cenov\u011b dostupn\u00e9, prov\u011b\u0159en\u00e9 a m\u00edt norm\u00e1ln\u00ed podporu v \u010de\u0161tin\u011b. <\/p>\n<p><\/p>\n<p><em>Pozn\u00e1mka. Nyn\u00ed hovo\u0159\u00edme o velmi mal\u00fdch, st\u0159edn\u00edch a v\u011bt\u0161\u00edch kancel\u00e1\u0159\u00edch. Velk\u00e9 spole\u010dnosti, kter\u00e9 buduj\u00ed vlastn\u00ed datov\u00e1 centra, zat\u00edm nezva\u017eujeme \u2014 v jednom \u010dl\u00e1nku \u201enelze obs\u00e1hnout neobs\u00e1hnuteln\u00e9\u201c.<\/em><\/p>\n<p><\/p>\n<p>A pro ka\u017ed\u00fd p\u0159\u00edpad m\u00e1 Zyxel ji\u017e \u0159e\u0161en\u00ed, p\u0159i\u010dem\u017e v r\u00e1mci jedn\u00e9 produktov\u00e9 \u0159ady. Jin\u00fdmi slovy, \u201ezoologick\u00e1 zahrada\u201c nebude pot\u0159eba.<\/p>\n<p><\/p>\n<h2>Bezpe\u010dnostn\u00ed br\u00e1ny ZyWALL ATP<\/h2>\n<p><\/p>\n<p>D\u0159\u00edve jsme ji\u017e hovo\u0159ili o principech fungov\u00e1n\u00ed takov\u00fdch za\u0159\u00edzen\u00ed na p\u0159\u00edkladu <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/426179\/\">ZyWALL ATP200<\/a><\/noindex>, Jej hlavn\u00ed funkc\u00ed je kombinace firewallu s cloudov\u00fdm bezpe\u010dnostn\u00edm slu\u017ebou Zyxel Cloud. D\u00edky tomuto rozd\u011blen\u00ed \u00fakol\u016f ZyWALL ATP \u0159e\u0161\u00ed \u0161irok\u00e9 spektrum ot\u00e1zek zabezpe\u010den\u00ed perimetru, ani\u017e by vy\u017eadoval dal\u0161\u00ed hardwarov\u00e9 zdroje.<\/p>\n<p><\/p>\n<p>Seznam ochrann\u00fdch funkc\u00ed je pom\u011brn\u011b bohat\u00fd (viz tabulka 1), v\u010detn\u011b n\u00e1stroj\u016f analytiky SecuReporter a Sandboxing \u2014 \"p\u00edse\u010dn\u00e9\" prost\u0159ed\u00ed pro p\u0159edb\u011b\u017enou anal\u00fdzu stahovan\u00e9ho obsahu.<\/p>\n<p><\/p>\n<p>Je\u0161t\u011b jednou je t\u0159eba zd\u016fraznit \u2014 v tomto p\u0159\u00edpad\u011b jednodu\u0161e p\u0159esouv\u00e1me slu\u017eby z m\u00edstn\u00ed kancel\u00e1\u0159e do cloudu. V\u0161echno ostatn\u00ed za n\u00e1s d\u011bl\u00e1 Zyxel Cloud v anonymn\u00edm re\u017eimu. Krom\u011b pohodl\u00ed tento p\u0159\u00edstup poskytuje efektivn\u00ed ochranu proti hrozb\u00e1m nult\u00e9ho dne d\u00edky strojov\u00e9mu u\u010den\u00ed a v\u00fdm\u011bn\u011b informac\u00ed mezi br\u00e1nami ATP po cel\u00e9m sv\u011bt\u011b. Pro ochranu je vybudov\u00e1na cel\u00e1 neuronov\u00e1 s\u00ed\u0165.<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP200\/intelligence\">Cit\u00e1t<\/a><\/noindex>: \u201eP\u0159i detekci nezn\u00e1m\u00e9ho souboru Cloud Query rychle (b\u011bhem n\u011bkolika sekund) ov\u011b\u0159\u00ed jeho hash k\u00f3d v cloudov\u00e9 datab\u00e1zi a ur\u010d\u00ed, zda je nebezpe\u010dn\u00fd nebo ne. Pro fungov\u00e1n\u00ed t\u00e9to slu\u017eby je zapot\u0159eb\u00ed minim\u00e1ln\u00ed s\u00ed\u0165ov\u00e9 zdroje, a proto nenaru\u0161uje v\u00fdkon za\u0159\u00edzen\u00ed. \u00da\u010dinnost ochrany p\u0159ed hrozbami zaji\u0161\u0165uje pou\u017e\u00edv\u00e1n\u00ed neust\u00e1le aktualizovan\u00e9 cloudov\u00e9 datab\u00e1ze, kter\u00e1 obsahuje data o miliard\u00e1ch hrozeb. Cloud Query tak\u00e9 zrychluje \u010dinnost inteligentn\u00edch funkc\u00ed detekce nov\u00fdch hrozeb Zyxel Security Cloud, co\u017e posiluje ochranu p\u0159ed malwarem ka\u017ed\u00e9ho firewallu ATP.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/7b7b6732659a849147132e25b07d88bb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Tabulka 1. Technick\u00e9 specifikace \u0159ady ZyWALL ATP<\/em>.<\/p>\n<p><\/p>\n<p><strong><em>Pozn\u00e1mky:<\/em><\/strong><\/p>\n<p><\/p>\n<p><em>(1) Skute\u010dn\u00fd v\u00fdkon velmi z\u00e1vis\u00ed na stavu s\u00edt\u011b a aktivn\u00edch aplikac\u00edch.<\/em><\/p>\n<p><\/p>\n<p><em>(2) Maxim\u00e1ln\u00ed propustnost se zakl\u00e1d\u00e1 na RFC 2544 (1 518-byte UDP pakety).<\/em><\/p>\n<p><\/p>\n<p><em>(3) M\u011b\u0159en\u00e1 propustnost VPN se zakl\u00e1d\u00e1 na RFC 2544 (1 424-byte UDP pakety).<\/em><\/p>\n<p><\/p>\n<p><em>(4) AV a IDP metriky propustnosti pou\u017e\u00edvaj\u00ed pr\u016fmyslov\u00fd standardn\u00ed HTTP test v\u00fdkonu (1 460-byte HTTP pakety). Testov\u00e1n\u00ed prob\u00edhalo v multithreadov\u00e9m re\u017eimu.<\/em><\/p>\n<p><\/p>\n<p><em>(5) P\u0159i m\u011b\u0159en\u00ed maxim\u00e1ln\u00edho mo\u017en\u00e9ho po\u010dtu relac\u00ed byl pou\u017eit pr\u016fmyslov\u00fd standardn\u00ed n\u00e1stroj \u2014 IXIA IxLoad testing tool.<\/em><\/p>\n<p><\/p>\n<p><em>(6) V\u00fdsledky testu rychlosti p\u0159ipojen\u00ed s 1Gbps WAN byly provedeny v re\u00e1ln\u00fdch podm\u00ednk\u00e1ch a mohou m\u00edt mal\u00e9 odchylky v z\u00e1vislosti na kvalit\u011b kan\u00e1lu.<\/em><\/p>\n<p><\/p>\n<p><em>(7): Po uplynut\u00ed platnosti Gold Pack budou podporov\u00e1ny pouze 2 AP.<\/em><\/p>\n<p><\/p>\n<p><em>(8): Funk\u010dnost lze aktivovat nebo roz\u0161\u00ed\u0159it zakoupen\u00edm dal\u0161\u00edch licenc\u00ed na slu\u017eby Zyxel.<\/em><\/p>\n<p><\/p>\n<p>V\u011bnujte pozornost podporovan\u00e9mu souboru VPN slu\u017eeb. Prakticky v\u0161e pot\u0159ebn\u00e9 pro spojen\u00ed s hlavn\u00ed kancel\u00e1\u0159\u00ed nebo dom\u00e1c\u00ed kancel\u00e1\u0159\u00ed je ji\u017e 'v jednom balen\u00ed', a proto lze toto za\u0159\u00edzen\u00ed s klidem doporu\u010dit jak jako koncov\u00fd uzel pro pobo\u010dku, tak pro podporu vzd\u00e1len\u00e9 pr\u00e1ce zam\u011bstnanc\u016f.<\/p>\n<p><\/p>\n<h2>\u0158e\u0161en\u00ed pro mal\u00e9 kancel\u00e1\u0159e<\/h2>\n<p><\/p>\n<p>Mal\u00e9 kancel\u00e1\u0159e lze p\u0159ibli\u017en\u011b rozd\u011blit do dvou skupin: nez\u00e1visl\u00e9 podniky a pobo\u010dky velk\u00fdch spole\u010dnost\u00ed.<\/p>\n<p><\/p>\n<p>Nez\u00e1visl\u00e9 jsou nov\u011b vznikl\u00e9 podniky a ty, kter\u00fdm je ur\u010deno z\u016fstat mal\u00fdmi. Nap\u0159\u00edklad design\u00e9rsk\u00e1 studia, architektonick\u00e9 kancel\u00e1\u0159e, redakce mal\u00fdch m\u00e9di\u00ed a podobn\u011b. Tyto obchodn\u00ed jednotky \u010dasto vyu\u017e\u00edvaj\u00ed cloudov\u00e9 slu\u017eby, minim\u00e1ln\u011b e-mail a sd\u00edlen\u00ed soubor\u016f.<\/p>\n<p><\/p>\n<p>Pobo\u010dky v\u011bt\u0161\u00edch organizac\u00ed \u2014 pro n\u011b je kl\u00ed\u010dov\u00e9 m\u00edt stabiln\u00ed spojen\u00ed s centr\u00e1ln\u00ed kancel\u00e1\u0159\u00ed. V\u0161e ostatn\u00ed se nach\u00e1z\u00ed v 'Centru'.<\/p>\n<p><\/p>\n<p>\u010casto tyto 'mal\u00e9' firmy pot\u0159ebuj\u00ed jednoduch\u00e9 rozhran\u00ed pro spr\u00e1vu. S\u00ed\u0165ov\u00fd administr\u00e1tor z centr\u00e1ly \u010dasto nem\u00e1 mo\u017enost rychle se dostat na vzd\u00e1len\u00e9 m\u00edsto, aby vy\u0159e\u0161il probl\u00e9m nov\u00e9ho pobo\u010dky. M\u00edstn\u00ed mal\u00e9 firmy tuto mo\u017enost nemaj\u00ed v\u016fbec. Je t\u0159eba vyu\u017e\u00edt slu\u017eby 'p\u0159ich\u00e1zej\u00edc\u00edho admina'. Pro takov\u00e9 p\u0159\u00edpady je pot\u0159ebn\u00e9 \u0159\u00edzen\u00ed podle principu '\u010d\u00edm jednodu\u0161\u0161\u00ed, t\u00edm spolehliv\u011bj\u0161\u00ed'.<br \/>\nPro mal\u00e9 kancel\u00e1\u0159e m\u00e1 smysl pou\u017e\u00edvat modely ZyWALL ATP100 a ZyWALL ATP200.<\/p>\n<p><\/p>\n<p>S\u00ed\u0165ov\u00fd br\u00e1na<\/p>\n<p><\/p>\n<p>ATP100 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP100\/overview\">se objevila relativn\u011b ned\u00e1vno, ale ji\u017e je v<\/a><\/noindex> prodeji <noindex><a rel=\"nofollow\" href=\"https:\/\/port-it.ru\/mezhsetevoi_ekran_zyxel_atp100-ru0102f\">. Hlavn\u00ed rozd\u00edl od star\u0161\u00edho sourozence (<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>ATP200<noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP200\/\">) \u2014 je ur\u010den pro men\u0161\u00ed z\u00e1t\u011b\u017e a nem\u00e1 mont\u00e1\u017e na 19palcovou sk\u0159\u00ed\u0148. Doporu\u010duje se pro dom\u00e1c\u00ed kancel\u00e1\u0159e, mal\u00e9 firmy, pobo\u010dky atd.<\/a><\/noindex>Obr\u00e1zek 1. ZyWALL ATP100.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/da5b561afab1a7e7ced6b9099cea2e2f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Z konstruk\u010dn\u00edch vlastnost\u00ed: ATP100 a ATP200 \u2014 to jsou bezv\u011btr\u00e1kov\u00e9 modely. Co je na tom dobr\u00e9: za prv\u00e9, nen\u00ed zde \u017e\u00e1dn\u00fd hluk, za druh\u00e9, nen\u00ed t\u0159eba m\u011bnit ventil\u00e1tor. V situaci s 'p\u0159ich\u00e1zej\u00edc\u00edm adminem' je to dost d\u016fle\u017eit\u00fd ukazatel.<\/em><\/p>\n<p><\/p>\n<p>Obr\u00e1zek 2. ZyWALL ATP200.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/7bf93eabbbb08784186a5b2347142084.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Model ATP200 podporuje dva WAN porty a m\u016f\u017ee b\u00fdt p\u0159ipojen k dv\u011bma nez\u00e1visl\u00fdm link\u00e1m, nap\u0159\u00edklad od r\u016fzn\u00fdch poskytovatel\u016f.<\/em><\/p>\n<p><\/p>\n<p>Model ATP200 podporuje dva porty WAN a m\u016f\u017ee se p\u0159ipojit k dv\u011bma nez\u00e1visl\u00fdm link\u00e1m, nap\u0159\u00edklad od r\u016fzn\u00fdch poskytovatel\u016f. <\/p>\n<p><\/p>\n<p>Jak ji\u017e bylo zm\u00edn\u011bno, pro mal\u00e9 kancel\u00e1\u0159e je nejd\u016fle\u017eit\u011bj\u0161\u00ed po stabiln\u00edm dod\u00e1v\u00e1n\u00ed elektrick\u00e9 energie stabiln\u00ed spojen\u00ed. Bohu\u017eel m\u00edstn\u00ed poskytovatel\u00e9 \u010dasto nemohou zaru\u010dit absenci hav\u00e1ri\u00ed. Je t\u0159eba hledat z\u00e1lo\u017en\u00ed mo\u017enosti.<\/p>\n<p><\/p>\n<p><strong><em>D\u016eLE\u017dIT\u00c9!<\/em><\/strong> <em>Krom\u011b speci\u00e1ln\u00edch WAN port\u016f maj\u00ed modely ATP tak\u00e9 USB porty, ke kter\u00fdm je mo\u017en\u00e9 p\u0159ipojit USB modemy a pou\u017e\u00edvat je jako WAN. Tato funkce je dostupn\u00e1 pro v\u0161echny modely ATP.<\/em><\/p>\n<p><\/p>\n<p><em>Pokud m\u00e1 za\u0159\u00edzen\u00ed port SFP, lze jej tak\u00e9 pou\u017e\u00edt jako WAN. Tato funkce je dostupn\u00e1 pro v\u0161echny modely ATP.<\/em> <\/p>\n<p><\/p>\n<p><em>Tady je takov\u00fd tip od spole\u010dnosti Zyxel.<\/em><\/p>\n<p><\/p>\n<h2>St\u0159edn\u00ed spole\u010dnosti<\/h2>\n<p><\/p>\n<p>Pro st\u0159edn\u00ed spole\u010dnosti m\u00e1 Zyxel svou slu\u0161nou \"krabi\u010dku\" \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/461975\/\">ZyWALL ATP500<\/a><\/noindex> <\/p>\n<p><\/p>\n<p>To je br\u00e1na nov\u00e9 generace s roz\u0161\u00ed\u0159enou ochranou p\u0159ed vyv\u00edjej\u00edc\u00edmi se hrozbami.<\/p>\n<p><\/p>\n<p>Zaj\u00edmav\u00e9 funkce zahrnuj\u00ed:<\/p>\n<p><\/p>\n<p>7 konfigurovateln\u00fdch port\u016f umo\u017e\u0148uje flexibiln\u00ed nastaven\u00ed, nap\u0159\u00edklad 2 WAN, 2 DMZ a 3 LAN porty p\u0159i p\u0159ipojen\u00ed 3 samostatn\u00fdch VLAN pro intern\u00ed pou\u017eit\u00ed. K dispozici je tak\u00e9 1 port SFP.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/f121459cdd5582a1f911c1f76ee56c21.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zek 3. ZyWALL ATP500.<\/em><\/p>\n<p><\/p>\n<p>Existuje mo\u017enost provozu v re\u017eimu vysoce dostupn\u00e9ho clusteru Device HA Pro ze dvou za\u0159\u00edzen\u00ed ZyWALL ATP500. Pokud jedno sel\u017ee, druh\u00e9 st\u00e1le zajist\u00ed p\u0159ipojen\u00ed.<\/p>\n<p><\/p>\n<p>Pou\u017eit\u00edm funkc\u00ed ATP500 na \"pln\u00e9 obr\u00e1tky\" lze dos\u00e1hnout flexibiln\u00edho,<br \/>\nvysokov\u011brn\u00e9ho a bezpe\u010dn\u00e9ho spojen\u00ed se vn\u011bj\u0161\u00edm sv\u011btem nebo jednotliv\u00fdm uzlem, nap\u0159\u00edklad,<br \/>\ncentr\u00e1lou.<\/p>\n<p><\/p>\n<h2>V\u011bt\u0161\u00ed kancel\u00e1\u0159e<\/h2>\n<p><\/p>\n<p>Pro n\u011b se doporu\u010duje nejsiln\u011bj\u0161\u00ed varianta t\u00e9to \u0159ady \u2014 ATP800.<\/p>\n<p><\/p>\n<p>Tento model m\u00e1 slu\u0161n\u00fd po\u010det port\u016f: 12 RJ-45 a 2 SFP, v\u0161echny mohou b\u00fdt nastaveny na re\u017eim WAN, LAN nebo DNZ, co\u017e umo\u017e\u0148uje pou\u017eit\u00ed n\u011bkolika WLAN, organizaci n\u011bkolika DMZ a zaji\u0161t\u011bn\u00ed p\u0159\u00edstupu do ve\u0159ejn\u00e9 s\u00edt\u011b pro slo\u017eitou intern\u00ed infrastrukturu. Je vhodn\u00fd pro pom\u011brn\u011b velk\u00e9 kancel\u00e1\u0159e s rozvinutou s\u00edt\u00ed a vysok\u00fdmi po\u017eadavky na bezpe\u010dnost a rozd\u011blen\u00ed p\u0159\u00edstupu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Co z\u016fstane v serverovn\u011b?\" src=\"\/wp-content\/uploads\/2019\/11\/d664589601f58c628fde19ac99b502b1.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zek 4. ZyWALL ATP800.<\/em><\/p>\n<p><\/p>\n<p>Je tak\u00e9 t\u0159eba poznamenat, \u017ee tento model se doporu\u010duje zakoupit s ohledem na tendenci \"k r\u016fstu\". Pokud se pl\u00e1nuje r\u016fst spole\u010dnosti, nap\u0159\u00edklad rozvoj m\u00edstn\u00ed s\u00edt\u011b obchod\u016f, m\u00e1 smysl hned zakoupit siln\u011bj\u0161\u00ed model, aby se pen\u00edze neutr\u00e1celi dvakr\u00e1t.<\/p>\n<p>Jak vid\u00edme, i za nejnuzn\u011bj\u0161\u00edch podm\u00ednek lze zajistit dobr\u00fd \u00farove\u0148 ochrany, odolnosti a flexibility p\u0159i pr\u00e1ci.<\/p>\n<p>Technick\u00e1 podpora, rady, diskuse, novinky, akce a ozn\u00e1men\u00ed \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">P\u0159ipojte se <\/a><\/noindex> k n\u00e1m na Telegramu! <\/p>\n<p><\/p>\n<h2>U\u017eite\u010dn\u00e9 odkazy<\/h2>\n<p><\/p>\n<ol>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/325136\/\">Kola\u010d\u00edkov\u00e1n\u00ed: jak, pro\u010d a na co<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/426179\/\">Sn\u00eddani si dejte sami, pr\u00e1ci sd\u00edlejte s \"oblakem\"<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP100\/overview\">Str\u00e1nka bezpe\u010dnostn\u00edho br\u00e1ny ZyWALL ATP100<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP200\/\">Str\u00e1nka bezpe\u010dnostn\u00edho br\u00e1ny ZyWALL ATP200<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP500\/\">Str\u00e1nka bezpe\u010dnostn\u00edho br\u00e1ny ZyWALL ATP500<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/products_services\/ATP-Firewall-ZyWALL-ATP800\/\">Str\u00e1nka bezpe\u010dnostn\u00edho br\u00e1ny ZyWALL ATP800<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/461975\/\">Na\u0161e slu\u017eba je nebezpe\u010dn\u00e1 a obt\u00ed\u017en\u00e1, nebo Zyxel ATP500<\/a><\/noindex><\/p>\n<p>\n<\/li>\n<\/ol>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/477492\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u044e\u0442 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0426\u041e\u0414. \u0427\u0442\u043e \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0438 \u043a\u0430\u043a \u043b\u0443\u0447\u0448\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u043e\u0444\u0438\u0441\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438? \u041a\u043e\u0433\u0434\u0430-\u0442\u043e \u0432\u0441\u0451 \u0431\u044b\u043b\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0420\u0443\u043d\u0435\u0442\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u0441 \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0440\u0435\u0448\u0430\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e \u043e\u0434\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u0435: \u0432\u044b\u0434\u0435\u043b\u044f\u043b\u043e\u0441\u044c \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043a\u0443\u0434\u0430 \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043a\u043e\u043d\u0434\u0438\u0446\u0438\u043e\u043d\u0435\u0440 \u0438 \u0433\u0434\u0435 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u0430\u0447\u0438\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0447\u0442\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53261","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-26T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:01:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Co z\u016fstane v serverovn\u011b? | ProHoster","description":"Mnoho organizac\u00ed vyu\u017e\u00edv\u00e1 cloudov\u00e9 slu\u017eby nebo.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439? | ProHoster","og:description":"\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-26T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53261","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 06:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:28:48","updated":"2026-08-11 12:50:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=53261"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53261\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=53261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=53261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=53261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}