{"id":97203,"date":"2020-10-16T14:42:53","date_gmt":"2020-10-16T12:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak"},"modified":"2020-10-16T14:42:53","modified_gmt":"2020-10-16T12:42:53","slug":"kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","title":{"rendered":"How we protect client virtual desktops from viruses, spyware, and attacks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>This year, many companies were hastily transitioning to remote work. We helped some clients <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/digest\/150-virtualnyh-rabochih-mest-dlya-call-centra-za-nedelyu\">organize more than a hundred remote workstations in a week. It was important to do this quickly and securely. The VDI technology came to the rescue: it facilitates the distribution of security policies across all workstations and protects against data leaks.<\/a><\/noindex> In this article, I will describe how our virtual desktop service based on Citrix VDI works from an information security perspective. I will show what we do to protect client workstations from external threats like ransomware or targeted attacks.\u00a0<\/p>\n<p>What security tasks we solve\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"How we protect client virtual desktops from viruses, spyware, and attacks\" src=\"\/wp-content\/uploads\/2020\/10\/bd9f5c9d944abf021f1a73351b88f49b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>We identified several main security threats to the service. On one hand, the virtual desktop is at risk of being infected from the user's computer. On the other hand, there's a danger of accessing the virtual desktop and downloading a malicious file from the open internet. Even if this happens, it should not affect the entire infrastructure. Therefore, when creating the service, we addressed several tasks:\u00a0<\/h2>\n<p>\nProtection of the entire VDI environment from external threats.\u00a0<\/p>\n<ul>\n<li>Isolation of clients from each other.\n<\/li>\n<li>Protection of the virtual desktops themselves.\n<\/li>\n<li>Secure connection for users from any device.\u00a0\n<\/li>\n<li>The core of our protection is FortiGate \u2013 the next-generation firewall from Fortinet. It controls the traffic of the VDI environment, provides an isolated infrastructure for each client, and protects against vulnerabilities on the user's side. Its capabilities are sufficient to address most information security issues.\n<\/li>\n<\/ul>\n<p>\nHowever, if a company has specific security requirements, we offer additional capabilities:\u00a0<\/p>\n<p>We organize a secure connection for working from home computers.\u00a0<\/p>\n<ul>\n<li>We provide access for independent analysis of security logs.\n<\/li>\n<li>We offer management of antivirus protection on workstations.\n<\/li>\n<li>We protect against zero-day vulnerabilities.\n<\/li>\n<li>We implement multi-factor authentication for additional protection against unauthorized access.\u00a0\n<\/li>\n<li>I will detail how we solved these tasks.<\/li>\n<\/ul>\n<p>\nHow we protect the environment and ensure network security\u00a0<\/p>\n<h2>We segment the network part.<\/h2>\n<p>\n<b>We segment the network part.<\/b> On the stand, we highlight a closed management segment for controlling all resources. The management segment is inaccessible from the outside: in the event of an attack on the client, intruders will not be able to access it.\u00a0<\/p>\n<p>The protection is provided by FortiGate. It combines the functions of an antivirus, firewall, and intrusion prevention system (IPS).\u00a0<\/p>\n<p>For each client, we create an isolated network segment for virtual desktops. To achieve this, FortiGate has a technology called virtual domains, or VDOM. This allows us to divide the firewall into several virtual entities and assign each client their own VDOM, which operates as a separate firewall. We also create a separate VDOM for the management segment. <\/p>\n<p>This results in the following scheme:<br \/>\n<img decoding=\"async\" alt=\"How we protect client virtual desktops from viruses, spyware, and attacks\" src=\"\/wp-content\/uploads\/2020\/10\/24d9f6fc2b50079e7d6eb60bc19429a4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nThere is no network connectivity between clients: each lives in its own VDOM and does not influence others. Without this technology, we would have to separate clients with firewall rules, which is risky due to the human factor. Such rules can be compared to a door that must be constantly closed. With VDOM, we leave no 'doors' at all.\u00a0<\/p>\n<p>In a separate VDOM, the client has its own addressing and routing. Therefore, overlapping ranges do not become a problem for the company. The client can assign the required IP addresses to the virtual desktops. This is convenient for large companies that have their own IP plans.\u00a0<\/p>\n<p><b>We address connectivity issues with the client's corporate network.<\/b> A separate task is the integration of VDI with the client's infrastructure. If the company keeps corporate systems in our data center, a network cable can simply be pulled from its equipment to the firewall. However, more often we deal with a remote location, such as another data center or the client's office. In this case, we plan secure exchange with the site and build a site-to-site VPN using IPsec VPN.\u00a0<\/p>\n<p>The schemes can vary depending on the complexity of the infrastructure. In some cases, it's sufficient to connect a single office network to VDI \u2013 static routing is adequate there. Large companies have many networks that constantly change; here the client needs dynamic routing. We use different protocols; we have already had cases with OSPF (Open Shortest Path First), GRE tunnels (Generic Routing Encapsulation), and BGP (Border Gateway Protocol). FortiGate supports network protocols in separate VDOMs, without affecting other clients.\u00a0<\/p>\n<p>It is also possible to build a GOST-VPN \u2013 encryption based on certified FSB of Russia means of cryptographic protection. For example, using solutions like KS1 in the virtual environment \"S-Terra virtual gateway\" or PAC ViPNet, APKSH \"Continent\", \"S-Terra.\"<\/p>\n<p><b>We configure Group Policies.<\/b> We coordinate with the client the group policies that are applied to the VDI. The configuration principles here are no different from the office policy settings. We set up integration with Active Directory and delegate some group policy management to clients. Client administrators can apply policies on the Computer object, manage organizational units in Active Directory, and create users.\u00a0<\/p>\n<p>On FortiGate, for each client's VDOM, we write a network security policy, set access restrictions, and configure traffic inspection. We use several FortiGate modules:\u00a0<\/p>\n<ul>\n<li>the IPS module checks traffic for malware and prevents intrusions;<\/li>\n<li>the antivirus protects the workstations from malicious and spy software;<\/li>\n<li>web filtering blocks access to unreliable resources and sites with malicious or unacceptable content;<\/li>\n<li>firewall settings can allow users to access only certain websites on the internet.\u00a0<\/li>\n<\/ul>\n<p>\nSometimes the client wants to manage employees' access to websites independently. This request often comes from banks: security services require that access control remains with the company. Such companies monitor traffic themselves and regularly make changes to policies. In this case, all traffic from FortiGate is directed towards the client. For this, we use a configured connection with the company's infrastructure. After that, the client sets up access rules for the corporate network and the internet.\u00a0<\/p>\n<p><b>We are monitoring the events at the booth.<\/b> Along with FortiGate, we use FortiAnalyzer \u2013 a log collector from Fortinet. This allows us to view all event logs on the VDI in one place, identify suspicious activities, and track correlations.\u00a0<\/p>\n<p>One of our clients uses Fortinet products in their office. For them, we configured log exports, allowing the client to analyze all security events for office machines and virtual desktops.<\/p>\n<h2>How we protect virtual desktops<\/h2>\n<p>\n<b>From known threats.<\/b> If the client wants to manage antivirus protection independently, we additionally install Kaspersky Security for virtual environments.\u00a0<\/p>\n<p>This solution works well in the cloud. We all know that the classic Kaspersky antivirus is a \"heavy\" solution. In contrast, Kaspersky Security for virtual environments does not burden virtual machines. All virus databases are on a server that issues verdicts for all virtual machines in the node. Only a lightweight agent is installed on the virtual desktop. It sends files for verification to the server.\u00a0<\/p>\n<p>This architecture provides file protection, internet protection, attack defense, and does not reduce the performance of virtual machines. At the same time, the client can independently make exceptions in file protection. We assist with the basic setup of the solution. We will discuss its features in a separate article.<\/p>\n<p><b>From unknown threats.<\/b> To do this, we connect FortiSandbox \u2013 the \"sandbox\" from Fortinet. We use it as a filter in case the antivirus misses a 'zero-day' threat. After downloading a file, we first check it with the antivirus, and then send it to the 'sandbox'. FortiSandbox emulates a virtual machine, runs the file, and observes its behavior: what objects in the registry it accesses, whether it sends external requests, and so on. If the file behaves suspiciously, the virtual machine in the sandbox is deleted, preventing the malicious file from reaching the user\u2019s VDI.\u00a0<\/p>\n<h2>How we configure a secure connection to VDI<\/h2>\n<p>\n<b>We check device compliance with security requirements.<\/b> Since the beginning of remote work, clients have approached us with requests to ensure the safe operation of users with their personal computers. Any information security specialist knows that protecting home devices is challenging: it\u2019s impossible to install the necessary antivirus or apply group policies since these are not office devices.\u00a0<\/p>\n<p>By default, VDI becomes a secure 'layer' between the personal device and the corporate network. To protect VDI from attacks originating from user machines, we disable the clipboard and prohibit USB passthrough. However, this does not make the user device itself secure.\u00a0<\/p>\n<p>We solve the problem with FortiClient. This is an endpoint protection tool. Company users install FortiClient on their home computers and use it to connect to the virtual desktop. FortiClient addresses three tasks at once:\u00a0<\/p>\n<ul>\n<li>it becomes a 'single access window' for the user;\n<\/li>\n<li>it checks whether there is antivirus software and the latest OS updates on the personal computer;\u00a0\n<\/li>\n<li>it builds a VPN tunnel for secure access.\u00a0<\/li>\n<\/ul>\n<p>\nAn employee gains access only if they pass the checks. Moreover, the virtual desktops themselves are not accessible from the internet, making them better protected from attacks.\u00a0<\/p>\n<p>If the company wants to manage endpoint protection on its own, we offer FortiClient EMS (Endpoint Management Server). The client can configure desktop scanning and intrusion prevention independently and create a whitelist of addresses.\u00a0<\/p>\n<p><b>We add authentication factors.<\/b> By default, users authenticate through Citrix Netscaler. Here, we can also enhance security with multi-factor authentication based on SafeNet products. This topic deserves separate attention, and we will also discuss it in a separate article.\u00a0<\/p>\n<p>We have accumulated such experience with various solutions over the past year. The VDI service is configured separately for each client, so we chose the most flexible tools. We may add something else in the near future and share our experience.<\/p>\n<p>On October 7th at 5:00 PM, my colleagues will discuss virtual desktops in the webinar 'Is VDI Needed, or How to Organize Remote Work?' <br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/oblaka\/vdi-kak-izvlech-iz-tehnologii-maksimum?utm_source=habr&amp;utm_medium=internal&amp;utm_campaign=webinar\">Register<\/a><\/noindex>, if you want to discuss when the VDI technology will be suitable for a company and when it is better to use other methods.<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/520452\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47How We Protect Clients' Virtual Desktops from Viruses, Spies, and Attacks | ProHoster","description":"This year, many companies hurriedly transitioned to remote work.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T12:42:53+00:00","article:modified_time":"2020-10-16T12:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:25:23","updated":"2022-09-28 06:23:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=97203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/97204"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=97203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=97203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=97203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}