{"id":36872,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","title":{"rendered":"Liitu 2FA-ga (Kahefaktoriline autentimine ASA SSL VPN-i jaoks)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kuna vajadus anda kaugjuurdep\u00e4\u00e4s ettev\u00f5tte keskkonnale suureneb j\u00e4rjest enam, olenemata sellest, kas tegemist on oma kasutajate v\u00f5i partneritega, kellele on vajalik juurdep\u00e4\u00e4s m\u00f5nele teie organisatsiooni serverile.<\/p>\n

Sel eesm\u00e4rgil kasutab enamik ettev\u00f5tteid VPN-tehnoloogiat, mis on end t\u00f5estanud usaldusv\u00e4\u00e4rse ja turvalise viisina juurdep\u00e4\u00e4su andmiseks organisatsiooni kohalikele ressurssidele.<\/p>\n

Ka minu ettev\u00f5te ei ole erand ja me, nagu paljud teisedki, kasutame seda tehnoloogiat. Ja nagu paljud teised, kasutame kaugjuurdep\u00e4\u00e4su v\u00e4ravana \u2014 Cisco ASA 55xx.<\/p>\n

Kaugkasutajate arvu suurenedes on vajadus lihtsustada kasutajatunnuste v\u00e4ljastamise protseduuri. Kuid samas tuleb seda teha ohutuse arvelt loobumata.<\/p>\n

Oleme leidnud lahenduse, kasutades Cisco SSL-iga \u00fchenduse loomiseks kahefaktorilist autentimist. VPN<\/a>, kasutades \u00fchekordseid paroole. See artikkel selgitab, kuidas sellist lahendust organiseerida minimaalse ajakulu ja nullkuludega vajaliku tarkvara osas (eeldusel, et Cisco ASA on teie infrastruktuuris juba olemas).<\/p>\n

Turg on t\u00e4is karbiga lahendusi \u00fchekordsete paroolide genereerimiseks, pakkudes mitmeid variante nende saamiseks, olgu need siis paroolide saatmine SMS-iga v\u00f5i tokenite kasutamine, olgu need siis f\u00fc\u00fcsilised v\u00f5i tarkvaralised (n\u00e4iteks mobiiltelefonis). Kuid soov s\u00e4\u00e4sta raha oma t\u00f6\u00f6andja jaoks ja vajadus raha kokku hoida praeguse kriisi tingimustes sundis mind leidma tasuta viisi \u00fchekordsete paroolide genereerimise teenuse rakendamiseks. See teenus, hoolimata oma tasuta olemisest, ei j\u00e4\u00e4 palju alla kaubanduslikele lahendustele (siinkohal peab mainima, et tootel on ka kaubanduslik versioon, kuid olgem kokku leppinud, et meie kulud rahas j\u00e4\u00e4vad nulliks).
\n<\/a><\/noindex>
\nNii et meil on vaja:<\/p>\n

\u2014 Linuxi pilti koos sisseehitatud t\u00f6\u00f6riistade komplektiga \u2014 multiOTP, FreeRADIUS ja nginx, serverisse veebip\u00f5hiseks juurdep\u00e4\u00e4suks (http:\/\/download.multiotp.net\/ \u2014 kasutasin VMware jaoks valmis pilti)
\n \u2014 Active Directory server
\n \u2014 Cisco ASA is yours (I use ASDM for convenience)
\n \u2014 Any software token that supports the TOTP mechanism (for example, I use Google Authenticator, but FreeOTP works as well)<\/p>\n

I won't go into details about deploying the image. In the end, you will get Debian Linux with multiOTP and FreeRADIUS already installed, configured to work together, and a web interface for administering OTP.<\/p>\n

Step 1. Initialize the system and configure it for your network<\/b>
\nVaikimisi on s\u00fcsteem suitud root kasutajatunnustega root. Arvan, et k\u00f5ik on m\u00f5elnud, et oleks hea muuta root kasutaja parool p\u00e4rast esimest sisselogimist. Samuti on vajalik muuta v\u00f5rgu seadistusi (vaikimisi on see '192.168.1.44' koos v\u00e4rava '192.168.1.1' -ga). P\u00e4rast seda saab s\u00fcsteemi taask\u00e4ivitada.<\/p>\n

Let's create a user in Active Directory otp<\/b>, with the password MySuperPassword<\/b>.<\/p>\n

Step 2. Configure the connection and import Active Directory users<\/b>
\nFor this, we will need access to the console, and specifically the file multiotp.php<\/b>, which we will use to configure the connection parameters to Active Directory.<\/p>\n

Navigate to the directory \/usr\/local\/bin\/multiotp\/<\/i> and execute the following commands one by one:<\/p>\n

.\/multiotp.php -config default-request-prefix-pin=0<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kas \u00fchekordse pin-koodi sisestamisel on vajalik t\u00e4iendava (p\u00fcsiva) pin-koodi olemasolu (0 v\u00f5i 1)<\/p>\n
.\/multiotp.php -config default-request-ldap-pwd=0<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kas domeenipara sisestamine on vajalik \u00fchekordse pin-koodi sisestamisel (0 v\u00f5i 1)<\/p>\n
.\/multiotp.php -config ldap-server-type=1<\/code><\/pre>\n
\nM\u00e4\u00e4rab LDAP-serveri t\u00fc\u00fcbi (0 = tavaline LDAP-server, meie puhul 1 = Active Directory)<\/p>\n
.\/multiotp.php -config ldap-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nN\u00e4itab, millises vormingus esitada kasutajanimi (see v\u00e4\u00e4rtus kuvab ainult nime, ilma domeenita)<\/p>\n
.\/multiotp.php -config ldap-group-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nSee on sama, kuid grupi jaoks<\/p>\n
.\/multiotp.php -config ldap-group-attribute=\"memberOf\"<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kuidas m\u00e4\u00e4rata kasutaja kuuluvus gruppi<\/p>\n
.\/multiotp.php -config ldap-ssl=1<\/code><\/pre>\n
\nKas kasutada turvalist \u00fchendust LDAP-serveriga (muidugi jah!)<\/p>\n
.\/multiotp.php -config ldap-port=636<\/code><\/pre>\n
\nPort LDAP-serveriga \u00fchendamiseks<\/p>\n
.\/multiotp.php -config ldap-domain-controllers=adSRV.domain.local<\/code><\/pre>\n
\nTeie Active Directory serveri aadress<\/p>\n
.\/multiotp.php -config ldap-base-dn=\"CN=Users,DC=domain,DC=local\"<\/code><\/pre>\n
\nM\u00e4\u00e4rame, kust alustada kasutajate otsimist domeenis<\/p>\n
.\/multiotp.php -config ldap-bind-dn=\"otp@domain.local\"<\/code><\/pre>\n
\nM\u00e4\u00e4rame kasutaja, kellel on \u00f5igused Active Directory otsimiseks<\/p>\n
.\/multiotp.php -config ldap-server-password=\"MySuperPassword\"<\/code><\/pre>\n
\nKasutame kasutaja parooli, et \u00fchendada Active Directoryga<\/p>\n
.\/multiotp.php -config ldap-network-timeout=10<\/code><\/pre>\n
\nSeame Active Directoryga \u00fchenduse ajakulu<\/p>\n
.\/multiotp.php -config ldap-time-limit=30<\/code><\/pre>\n
\nSeame kasutajate impordi operatsiooni ajakulu<\/p>\n
.\/multiotp.php -config ldap-activated=1<\/code><\/pre>\n
\nAktiveerime Active Directoryga \u00fchenduse konfigureerimise<\/p>\n
.\/multiotp.php -debug -display-log -ldap-users-sync<\/code><\/pre>\n
\nTeostame kasutajate impordi Active Directoryst<\/p>\n
Samm 3. Genereerime QR-koodi tokeni jaoks<\/b>
\nSiin on k\u00f5ik \u00e4\u00e4rmiselt lihtne. Avame OTP-serveri veebiliidese brauseris, logime sisse (\u00e4rge unustage muuta vaikimisi adminni parooli!) ja vajutame nuppu 'Print':<\/p>\n
\"Liitu
\nSelle tegevuse tulemuseks on leht, millel on kaks QR-koodi. Me ignoreerime julgelt esimest (hoolimata atraktiivsest kirjutisest Google Authenticator \/ Authenticator \/ 2 Steps Authenticator) ja j\u00e4lle julgelt skanimeerime teise koodi oma telefonis oleva tarkvara tokenisse:<\/p>\n
\"Liitu
\n(jah, ma rikkusin QR-koodi tahtlikult, et muuta see loetamatuks).<\/p>\n
P\u00e4rast nende toimingute sooritamist genereeritakse teie rakenduses iga kolmek\u00fcmne sekundi tagant kuue numbri parool.<\/p>\n
Kindluse m\u00f5ttes v\u00f5ib samas liideses teha \u00fclevaate:<\/p>\n
\"Liitu
\nSisestage kasutajanimi ja \u00fchekordne parool telefonirakendusest. Kas sai positiivse vastuse? Siis liikume edasi.<\/p>\n
Samm 4. Kohandame ja testime FreeRADIUS'i t\u00f6\u00f6d<\/b>
\nNagu eespool mainitud \u2014 multiOTP on juba seadistatud FreeRADIUS'iga t\u00f6\u00f6tamiseks, j\u00e4\u00e4b \u00fcle vaid testid teha ja FreeRADIUS'i konfiguratsioonifaili lisada meie VPN-s\u00f5lme info.<\/p>\n
Tagasi serveri konsooli, kausta \/usr\/local\/bin\/multiotp\/<\/i>, sisestage:<\/p>\n
.\/multiotp.php -config debug=1\n.\/multiotp.php -config display-log=1<\/code><\/pre>\n
\nSeel\u00e4bi aktiveerides detailsema logimise.<\/p>\n
FreeRADIUS'i kliendi konfiguratsioonifailis (\/etc\/freeradius\/clinets.conf<\/i>) kommenteerime v\u00e4lja k\u00f5ik read, mis on seotud localhost<\/b> ja lisame kaks kirjet:<\/p>\n
client localhost {\n        ipaddr = 127.0.0.1\n        secret          = testing321\n        require_message_authenticator = no\n}<\/code><\/pre>\n
\n \u2014 testimiseks<\/p>\n
client 192.168.1.254\/32 {\n        shortname =     CiscoASA\n        secret =        ConnectToRADIUSSecret\n}<\/code><\/pre>\n
\n \u2014 meie VPN-s\u00f5lme jaoks.<\/p>\n
Taask\u00e4ivitame FreeRADIUS'i ja proovime autentimist:<\/p>\n
radtest username 100110 localhost 1812 testing321<\/code><\/pre>\n
\nkus username <\/i>= kasutajanimi, 100110 <\/i>= parool, mille rakendus meile andis, localhost <\/i>= RADIUS-serveri aadress, 1812 <\/i> \u2014 RADIUS-serveri port, testing321 <\/i> \u2014 RADIUS-serveri kliendi parool (mille me konfiguratsioonifailis m\u00e4\u00e4rasime).<\/p>\n
Selle k\u00e4su tulemus seisneb umbes j\u00e4rgmise sisu v\u00e4ljundis:<\/p>\n
Saadan Access-Request id 44 aadressile 127.0.0.1 portil 1812\n        Kasutaja-Nimi = \"username\"\n        Kasutaja-Parool = \"100110\"\n        NAS-IP-Aadress = 127.0.1.1\n        NAS-Port = 1812\n        S\u00f5numi-Automaator = 0x00000000000000000000000000000000\nrad_recv: Access-Accept pakett hostilt 127.0.0.1 port 1812, id=44, pikkus=20<\/code><\/pre>\n
\nN\u00fc\u00fcd peame veenduma, et kasutaja on edukalt autentitud. Selleks vaatame multiotp logisse:<\/p>\n
tail \/var\/log\/multiotp\/multiotp.log<\/code><\/pre>\n
\nJa kui viimaseks kirjeks seal on:<\/p>\n
2016-09-01 08:58:17     notice  username  Kasutaja OK: Kasutaja username logis sisse edukalt aadressilt 127.0.0.1\n2016-09-01 08:58:17     debug           Debug   Debug: 0 OK: Token aktsepteeritud aadressilt 127.0.0.1<\/code><\/pre>\n
\nSiis k\u00f5ik l\u00e4ks h\u00e4sti ja me saame teostada<\/p>\n
Samm 5. Cisco ASA seadistamine<\/b>
\nOletame, et meil on juba seadistatud grupp ja poliitikad SLL VPN-iga sisselogimiseks, seostatuna Active Directoryga, ning peame selle profiili jaoks lisama kahefaktorilise autentimise.<\/p>\n
1.<\/strong> Lisame uue grupi serverite<\/a> AAA:<\/p>\n
\"Liitu
\n2.<\/strong> Lisame gruppi meie multiOTP serveri:<\/p>\n
\"Liitu
\n3.<\/strong> Muudame \u00fchendusprofiili<\/b>, seades autentimise p\u00f5hiserveriks Active Directory serverite grupi:<\/p>\n
\"Liitu
\n4.<\/strong> Vahekaardil Advanced -> Authentication<\/b> valime samuti Active Directory serverite grupi:<\/p>\n
\"Liitu
\n5.<\/strong> Vahekaardil Advanced -> Secondary<\/b> valime autentimise jaoks loodud serveri grupi, kus on m\u00e4\u00e4ratud multiOTP-server. M\u00e4rgime, et sessiooni kasutajanimi p\u00e4rineb p\u00f5higrupist AAA:<\/p>\n
\"Liitu
\nRakendame seaded ja<\/p>\n
Samm 6, viimane samm<\/b>
\nKontrollime, kas meie kahefaktoriline autentimine SSL VPN-i jaoks t\u00f6\u00f6tab:<\/p>\n
\"Liitu
\nVoil\u00e0! Cisco AnyConnect VPN kliendi kasutamisel k\u00fcsitakse ka teist, \u00fchekordset parooli.<\/p>\n
Loodan, et see artikkel aitab kedagi ning pakub m\u00f5tteainet, kuidas seda kasutada, tasuta<\/b> OTP-serverit teiste \u00fclesannete t\u00e4itmiseks. Jagage kommentaarides, kui soovite.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27626,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36872","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mine 2FA (Kaksifaktoriline autentimine ASA SSL VPN-i jaoks) | ProHoster","description":"Vajadus pakkuda kaugjuurdep\u00e4\u00e4su ettev\u00f5tte keskkonnale tekib \u00fcha sagedamini, olgu need siis teie kasutajad v\u00f5i partnerid, kellele on vajalik juurdep\u00e4\u00e4s m\u00f5nele serverile teie organisatsioonis. Selleks kasutavad enamik ettev\u00f5tteid VPN-tehnoloogiat, mis on t\u00f5estatud usaldusv\u00e4\u00e4rse meetodina juurdep\u00e4\u00e4su andmiseks organisatsiooni kohalikele ressurssidele. Minu ettev\u00f5te ei olnud erand","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Go to 2FA (\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f ASA SSL VPN) | ProHoster","og:description":"\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36872","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:05:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-02-09 17:05:56"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36872"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872\/revisions"}],"predecessor-version":[{"id":158589,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872\/revisions\/158589"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27626"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}