{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate Getting Started. Network Policies","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Welcome readers to the third article in the UserGate Getting Started series, which discusses the NGFW solution from the company&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. In the previous article, we described the process of installing the firewall and carried out its initial setup. Now we will look more closely at creating rules in sections such as \u201cFirewall\u201d, \u201cNAT and Routing\u201d, and \u201cThroughput\u201d.<\/p>\n<p>The ideology of UserGate rules is that they are executed from top to bottom, up to the first match. Based on the above, it follows that more specific rules should be placed above more general ones. However, it should be noted that since rules are checked in order, it's better for performance to create general rules first. Conditions when creating any rule are applied according to \u201cAND\u201d logic. If \u201cOR\u201d logic is needed, this is achieved by creating several rules. Thus, what is described in this article is also applicable to other UserGate policies.<\/p>\n<h3>Firewall<\/h3>\n<p>After installing UserGate, there is already a simple policy in the \u201cFirewall\u201d section. The first two rules block traffic from botnets. Following that are examples of access rules from various zones. The last rule is always called \u201cBlock All\u201d and is marked with a lock symbol (indicating that the rule cannot be deleted, modified, moved, or disabled; it can only have logging enabled). As a result, due to this rule, all explicitly unauthorized traffic will be blocked by the last rule. If you need to allow all traffic through UserGate (although this is strongly discouraged), you can always create a second-to-last rule called \u201cAllow All\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>When editing or creating a firewall rule, the first <em>tab is \u201cGeneral\u201d<\/em>, where you need to take the following actions:&nbsp;<\/p>\n<ul>\n<li>\n<p>Use the \u201cOn\u201d checkbox to enable or disable the rule.<\/p>\n<\/li>\n<li>\n<p>Enter the rule name.<\/p>\n<\/li>\n<li>\n<p>Provide a description for the rule.<\/p>\n<\/li>\n<li>\n<p>Select one of two actions:<\/p>\n<ul>\n<li>\n<p>Deny \u2014 blocks traffic (when setting this condition, there is the option to send ICMP host unreachable, just check the corresponding box).<\/p>\n<\/li>\n<li>\n<p>Allow \u2014 permits traffic.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>The Scenario Item allows you to select a scenario that is an additional condition for the rule to trigger. This is how UserGate implements the SOAR (Security Orchestration, Automation, and Response) concept.<\/p>\n<\/li>\n<li>\n<p>Logging - to record traffic information in the log when the rule is triggered. Options available:<\/p>\n<ul>\n<li>\n<p>Log the session start. In this case, only the information about the session start (the first packet) will be recorded in the traffic log. This is the recommended logging option.<\/p>\n<\/li>\n<li>\n<p>Log every packet. In this case, information about each transmitted network packet will be recorded. For this mode, it is recommended to enable logging limits to prevent high device load.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Apply the rule to:<\/p>\n<ul>\n<li>\n<p>All packets<\/p>\n<\/li>\n<li>\n<p>Fragmented packets<\/p>\n<\/li>\n<li>\n<p>Non-fragmented packets<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>When creating a new rule, you can choose a position in the policy.<\/p>\n<\/li>\n<\/ul>\n<p>Next <em>the 'Source' tab<\/em>. Here we specify the source of the traffic; it can be a zone from which the traffic originates, or you can specify a list or a specific IP address (Geoip). In practically all rules that can be set on the device, an object can be created from the rule; for example, without going to the 'Zones' section, you can use the 'Create and add a new object' button to create the zone we need. A checkbox labeled 'Invert' is often found; it changes the action in the rule condition to the opposite, which is analogous to the logical operation of negation. <em>Tab \u2018Purpose\u2019<\/em> is similar to the source tab, just instead of the source of the traffic, we specify the destination of the traffic. <em>Tab \u2018Users\u2019<\/em> is where you can add a list of users or groups for which this rule applies. <em>Tab \u2018Service\u2019<\/em> allows us to choose the type of service from the predefined ones or specify our own. <em>Tab \u2018Application\u2019<\/em> is where specific applications or groups of applications are selected. And <em>tab \u2018Time\u2019<\/em> specifies the time when this rule is active.&nbsp;<\/p>\n<p>From the last lesson, we have a rule for internet access from the 'Trust' zone; now I will show you as an example how to create a blocking rule for ICMP traffic from the 'Trust' zone to the 'Untrusted' zone.<\/p>\n<p>To begin, create a rule by clicking the 'Add' button. In the window that opens, under the 'General' tab, fill in the name (ICMP Block from trusted to untrusted), check the 'Enable' checkbox, select the action to block, and most importantly, correctly choose the location of this rule. According to my policy, this rule should be placed above the 'Allow trusted to untrusted' rule.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>In the 'Source' tab, there are two options for my task:<\/p>\n<ul>\n<li>\n<p>Select the 'Trusted' zone.<\/p>\n<\/li>\n<li>\n<p>Select all zones except 'Trusted' and check the 'Invert' checkbox.<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>The 'Destination' tab is configured similarly to the 'Source' tab.<\/p>\n<p>Next, we go to the \u2018Service\u2019 tab. Since UserGate has a predefined service for ICMP traffic, we will click the \u2018Add\u2019 button and select the service named \u2018Any ICMP\u2019 from the suggested list:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>It may have been intended by the creators of UserGate, but I found that I could create several completely identical rules. Although only the first rule in the list will be executed, the ability to create functionally different rules with the same name could cause confusion when multiple administrators are working with the device.<\/p>\n<h3>NAT and Routing<\/h3>\n<p>When creating NAT rules, we see several similar tabs as in the firewall. On the 'General' tab, a 'Type' field has appeared, which allows us to choose what this rule will be responsible for:<\/p>\n<ul>\n<li>\n<p>NAT \u2014 Network Address Translation.<\/p>\n<\/li>\n<li>\n<p>DNAT \u2014 Redirects traffic to the specified IP address.<\/p>\n<\/li>\n<li>\n<p>Port forwarding \u2014 Redirects traffic to the specified IP address but allows changing the port number of the published service.<\/p>\n<\/li>\n<li>\n<p>Policy-based routing \u2014 Allows routing IP packets based on extended information, such as services, MAC addresses, or servers (IP addresses).<\/p>\n<\/li>\n<li>\n<p>Network mapping \u2014 Allows substituting the source or destination IP addresses of one network with another network.<\/p>\n<\/li>\n<\/ul>\n<p>After selecting the appropriate type, the settings for it will become available.<\/p>\n<p>In the SNAT IP field (external address), we explicitly specify the IP address that will be used to replace the source address. This field is necessary when multiple IP addresses are assigned to the interfaces of the destination zone. If this field is left empty, the system will use a random address from the list of available IP addresses assigned to the destination zone interfaces. UserGate recommends specifying the SNAT IP to improve the performance of the firewall.<\/p>\n<p>As an example, I will publish the SSH service of the Windows server located in the 'DMZ' zone using the 'port forwarding' rule. To do this, we click the 'Add' button and fill out the 'General' tab, specifying the rule name 'SSH to Windows' and the type 'Port Forwarding':<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>On the \u2018Source\u2019 tab, we select the \u2018Untrusted\u2019 zone and proceed to the \u2018Port forwarding\u2019 tab. Here, we need to specify the protocol \u2018TCP\u2019 (four options are available \u2014 TCP, UDP, SMTP, SMTPS). The original destination port 9922 is the port number that users send requests to (the following ports cannot be used: 2200, 8001, 4369, 9000-9100). The new destination port (22) is the port number to which user requests will be forwarded to the internal published server.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>On the 'DNAT' tab, we set the IP address of the computer in the local network that will be published on the internet (192.168.3.2). Optionally, SNAT can be enabled, in which case UserGate will change the source address in packets from the external network to its own IP address.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>After all the settings are completed, the result is a rule that allows access from the 'Untrusted' zone to the server with the IP address 192.168.3.2 using the SSH protocol, using UserGate's external address for the connection.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Throughput<\/h3>\n<p>This section defines rules for managing bandwidth. They can be used to limit the channel of specific users, hosts, services, and applications.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>When creating a rule, the conditions on the tabs define the traffic to which the restrictions apply. You can choose a bandwidth from the options provided or set your own. When creating a bandwidth, you can specify a traffic prioritization label DSCP. An example of when DSCP labels are applied: by specifying a scenario in the rule to which this rule applies, the rule can automatically change these labels. Another example of the scenario's operation: the rule will be triggered for a user only when a torrent is detected or the traffic volume exceeds the specified limit. Fill in the other tabs just as in other policies, based on the type of traffic to which the rule should apply.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Network Policies\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Conclusion<\/h3>\n<p>In this article, I discussed the creation of rules in the sections 'Firewall', 'NAT and Routing' and 'Bandwidth'. At the very beginning of the article, I described the rules for creating UserGate policies, as well as the principle of operation of conditions when creating a rule.&nbsp;<\/p>\n<p>Stay updated through our channels (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Getting Started. Network Policies | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}