{"id":97203,"date":"2020-10-16T14:42:53","date_gmt":"2020-10-16T12:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak"},"modified":"2020-10-16T14:42:53","modified_gmt":"2020-10-16T12:42:53","slug":"kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","title":{"rendered":"Kuidas kaitseme klientide virtuaalseid t\u00f6\u00f6lauaid viiruste, nuhkvara ja r\u00fcnnakute eest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Sel aastal kiirus paljude ettev\u00f5tete \u00fcleminek kaugt\u00f6\u00f6le. M\u00f5nedele klientidele aitasime <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/digest\/150-virtualnyh-rabochih-mest-dlya-call-centra-za-nedelyu\">korraldada \u00fcle saja kaugt\u00f6\u00f6koha n\u00e4dalas. Oli oluline, et see toimuks mitte ainult kiiresti, vaid ka turvaliselt. Selleks tuli abiks tehnoloogia VDI: selle abil on mugav rakendada turvapoliitikaid k\u00f5igile t\u00f6\u00f6lauale ja end kaitsta andmelekkete eest.<\/a><\/noindex> Selles artiklis r\u00e4\u00e4gin, kuidas on korraldatud meie virtuaalsete t\u00f6\u00f6laudade teenus Citrix VDI baasil, pidades silmas infotehnoloogia turvalisust. N\u00e4itan, mida teeme, et kaitsta klientide t\u00f6\u00f6laudu v\u00e4liste ohtude, nagu ransomwaired v\u00f5i suunatud r\u00fcnnakud, eest.\u00a0<\/p>\n<p>Selles artiklis selgitame, kuidas toimib meie Citrix VDI p\u00f5hine virtuaalsete t\u00f6\u00f6tajate teenus teabeohutuse seisukohalt. N\u00e4itan, mida me teeme, et kaitsta klientide t\u00f6\u00f6laudu v\u00e4listest ohtudest nagu lunavara v\u00f5i suunatud r\u00fcnnakud.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"Kuidas kaitseme klientide virtuaalseid t\u00f6\u00f6lauaid viiruste, nuhkvara ja r\u00fcnnakute eest\" src=\"\/wp-content\/uploads\/2020\/10\/bd9f5c9d944abf021f1a73351b88f49b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Milliseid turvaprobleeme me lahendame\u00a0<\/h2>\n<p>\nOleme tuvastanud mitmeid peamisi turvaohtusid teenuse jaoks. \u00dchelt poolt on virtuaalne t\u00f6\u00f6lauarisk nakatuda kasutaja arvutist. Teiselt poolt on oht p\u00e4\u00e4seda virtuaalsest t\u00f6\u00f6lauast avatud internetti ja alla laadida nakkusohtlik fail. Isegi kui see juhtub, ei peaks see m\u00f5jutama kogu infrastruktuuri. Seet\u00f5ttu lahendasime teenuse loomisel mitu \u00fclesannet:\u00a0<\/p>\n<ul>\n<li>VDI kogu seista kaitse v\u00e4listest ohust.\n<\/li>\n<li>Klientide isoleerimine \u00fcksteisest.\n<\/li>\n<li>Kaitse virtuaalsete t\u00f6\u00f6lauade endi jaoks.\u00a0\n<\/li>\n<li>Kasutajate turvaline \u00fchendamine mistahes seadmetega.\n<\/li>\n<\/ul>\n<p>\nKaitse tuumaks on FortiGate \u2013 j\u00e4rgmise p\u00f5lvkonna tulem\u00fc\u00fcr Fortinetilt. See kontrollib VDI seista liiklust, tagab iga kliendi jaoks isoleeritud infrastruktuuri ja kaitseb kasutaja poolel esinevate haavatavuste eest. Selle v\u00f5imetest j\u00e4tkub suurema osa teabe kaitse k\u00fcsimuste lahendamiseks.\u00a0<\/p>\n<p>Kuid kui ettev\u00f5ttel on spetsiifilisi turvan\u00f5udeid, pakume t\u00e4iendavaid v\u00f5imalusi:\u00a0<\/p>\n<ul>\n<li>Korraldame kaitstud \u00fchenduse koduarvutitega t\u00f6\u00f6tamiseks.\n<\/li>\n<li>Pakume juurdep\u00e4\u00e4su turvaprotokollide iseseisvaks anal\u00fc\u00fcsiks.\n<\/li>\n<li>Kasutame viiruset\u00f5rje haldamiseks t\u00f6\u00f6lauaarvuteid.\n<\/li>\n<li>Kaitseme nullp\u00e4eva haavatavuste ja r\u00fcnnakute eest.\u00a0\n<\/li>\n<li>Seame \u00fcles mitmeastmelise autentimise, et tagada t\u00e4iendav kaitse volitamata juurdep\u00e4\u00e4su eest.<\/li>\n<\/ul>\n<p>\nR\u00e4\u00e4gin l\u00e4hemalt, kuidas me probleemid lahendasime.\u00a0<\/p>\n<h2>Kuidas kaitseme meie s\u00fcsteemi ja tagame v\u00f5rgu turvalisuse.<\/h2>\n<p>\n<b>Segmentime v\u00f5rguosa.<\/b> Me eraldame s\u00fcsteemis suletud haldussegmendi, et hallata k\u00f5iki ressursse. Haldussegment ei ole v\u00e4ljastpoolt ligip\u00e4\u00e4setav: r\u00fcnnaku korral ei p\u00e4\u00e4se kurjategijad sinna.\u00a0<\/p>\n<p>Kaitse eest vastutab FortiGate. See \u00fchendab endas viiruset\u00f5rje, tulem\u00fc\u00fcri ja sissetungimise ennetamise s\u00fcsteemi (IPS) funktsioonid.\u00a0<\/p>\n<p>Kliendi jaoks loome isoleeritud v\u00f5rgu segmente virtuaalsete t\u00f6\u00f6lauaarvutite jaoks. Selleks on FortiGate'il virtuaalsete domeenide tehnoloogia, ehk VDOM. See v\u00f5imaldab jaotada tulem\u00fc\u00fcri mitmeks virtuaalseks \u00fcksuseks ja eraldada igale kliendile oma VDOM, mis k\u00e4itub nagu eraldi tulem\u00fc\u00fcr. Haldussegmendi jaoks loome samuti eraldi VDOM. <\/p>\n<p>Saame sellise skeemi:<br \/>\n<img decoding=\"async\" alt=\"Kuidas kaitseme klientide virtuaalseid t\u00f6\u00f6lauaid viiruste, nuhkvara ja r\u00fcnnakute eest\" src=\"\/wp-content\/uploads\/2020\/10\/24d9f6fc2b50079e7d6eb60bc19429a4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKliendi vahel puudub v\u00f5rgu\u00fchendus: iga\u00fcks elab oma VDOM'is ja ei m\u00f5juta \u00fcksteist. Ilma tehnoloogiata peaksime kliente eraldama tulem\u00fc\u00fcrireeglitega, mis on riskantne inimfaktori t\u00f5ttu. Saame neid reegleid v\u00f5rrelda uksega, mida tuleb pidevalt kinni hoida. VDOM'i puhul ei j\u00e4ta me \u00fcldse 'uusi'.\u00a0<\/p>\n<p>Igas eraldi VDOM'is on kliendil oma adressatsioon ja marsruutimine. Seet\u00f5ttu ei muutu vahemike \u00fchisosa ettev\u00f5tte jaoks probleemiks. Klient saab kinnitada virtuaalsetele t\u00f6\u00f6laudadele vajalikud IP-aadressid. See on mugav suurtele ettev\u00f5tetele, kellel on oma IP-plaanid.\u00a0<\/p>\n<p><b>K\u00e4ideldakse \u00fchenduse k\u00fcsimusi kliendi ettev\u00f5ttega.<\/b> Erinev \u00fclesanne on VDI liitmine kliendi infrastruktuuriga. Kui ettev\u00f5te hoiab oma ettev\u00f5tte s\u00fcsteeme meie andmekeskuses, saab lihtsalt venitada v\u00f5rgu kaabli selle seadmete ja tulem\u00fc\u00fcri vahel. Kuid sagedamini tegeleme kaugplatsiga - teise andmekeskuse v\u00f5i kliendi kontoriga. Sel juhul hoolitseme turvalise vahetuse eest platvormiga ja ehitame site2site VPN-i IPsec VPN-i abil.\u00a0<\/p>\n<p>Schema v\u00f5ib olla erinev, s\u00f5ltuvalt infrastruktuuri keerukusest. M\u00f5nes kohas piisab, kui \u00fchendada VDI ainsasse kontoriv\u00f5rku \u2013 seal piisab staatilisest marsruutimisest. Suurtes ettev\u00f5tetes on palju v\u00f5rke, mis pidevalt muutuvad; siin on kliendile vajalik d\u00fcnaamiline marsruutimine. Kasutame erinevaid protokolle: oleme kokku puutunud OSPF-i (Open Shortest Path First), GRE-tunnelite (Generic Routing Encapsulation) ja BGP-ga (Border Gateway Protocol). FortiGate toetab v\u00f5rgu protokolle eraldi VDOM-ides, m\u00f5jutamata teisi kliente.\u00a0<\/p>\n<p>Saame luua ka \u0413\u041e\u0421\u0422-VPN - kr\u00fcptimine, mis p\u00f5hineb FSB RF sertifitseeritud kr\u00fcptokaitsevahenditel. N\u00e4iteks lahenduste klassi K\u04211 abil virtuaalses keskkonnas \u201e\u0421-\u0422\u0435\u0440\u0440\u0430 virtuaalne v\u00e4rav\u201d v\u00f5i PAK ViPNet, APK\u0428 \u201eKontinent\u201d, \u201e\u0421-\u0422\u0435\u0440\u0440\u0430\u201d.<\/p>\n<p><b>Seame sisse Group Policies.<\/b> Kliendi vahel lepime kokku grupipoliitika, mida rakendatakse VDI-s. Seadistamise p\u00f5him\u00f5tted ei eristu kontoris kehtestatud poliitikatest. Me seadistame integreerimise Active Directory-ga ja delegeerime klientidele teatavate grupipoliitikate haldamise. Kliendi administraatorid saavad poliitikaid rakendada objektile Computer, hallata organisatsioonilisi \u00fcksusi Active Directory-s ja luua kasutajaid.\u00a0<\/p>\n<p>FortiGate'is kirjutame varje kliendi VDOM'ile v\u00f5rgu turvapoliitikat, m\u00e4\u00e4rame juurdep\u00e4\u00e4supiirangud ja seadistame liikluse kontrollimise. Kasutame mitmeid FortiGate mooduleid:\u00a0<\/p>\n<ul>\n<li>IPS moodul kontrollib liiklust pahatahtlike tarkvarade suhtes ja takistab sissetunge;<\/li>\n<li>antiviirus kaitseb t\u00f6\u00f6laudu pahatahtliku ja nuhkvara eest;<\/li>\n<li>veebi filtreerimine blokeerib juurdep\u00e4\u00e4su kahtlastele ressurssidele ja saitidele, mille sisu on kahjulik v\u00f5i vastuv\u00f5etamatu;<\/li>\n<li>tulem\u00fc\u00fcriseaded v\u00f5ivad lubada kasutajatel internetti p\u00e4\u00e4seda ainult teatud saitidele.\u00a0<\/li>\n<\/ul>\n<p>\nM\u00f5nikord soovib klient iseseisvalt hallata oma t\u00f6\u00f6tajate juurdep\u00e4\u00e4su veebilehtedele. Sageli p\u00f6\u00f6rduvad sellise sooviga pangad: turvateenistused n\u00f5uavad, et juurdep\u00e4\u00e4su kontroll j\u00e4\u00e4ks ettev\u00f5tte k\u00e4tte. Sellised ettev\u00f5tted j\u00e4lgivad ise liiklust ja teevad regulaarselt muudatusi poliitikates. Sellisel juhul suuname kogu liikluse FortiGate'i kaudu kliendi poole. Selleks kasutame ettev\u00f5tte infrastruktuuri jaoks kohandatud liidest. P\u00e4rast seda seadistab klient ise juurdep\u00e4\u00e4sureeglid oma ettev\u00f5tte v\u00f5rku ja internetti.\u00a0<\/p>\n<p><b>J\u00e4lgime s\u00fcndmusi stendis.<\/b> Koos FortiGate'iga kasutame FortiAnalyzer'i \u2013 Fortinet'i logikogujat. Selle abil vaatame k\u00f5iki s\u00fcndmusloge VDI-s \u00fches kohas, leiame kahtlase tegevuse ja j\u00e4lgime korrelatsioone.\u00a0<\/p>\n<p>\u00dcks meie klientidest kasutab Fortinet'i tooteid oma kontoris. Tema jaoks seadistasime logide v\u00e4ljundimise \u2013 nii suutis klient anal\u00fc\u00fcsida k\u00f5iki turvas\u00fcndmusi kontorimasinate ja virtuaalsete t\u00f6\u00f6lauade jaoks.<\/p>\n<h2>Kuidas kaitseme virtuaalseid t\u00f6\u00f6lauasid<\/h2>\n<p>\n<b>Tuntud ohtude eest.<\/b> Kui klient soovib iseseisvalt hallata viiruset\u00f5rjet, installime lisaks Kaspersky Security virtuaalsetele keskkondadele.\u00a0<\/p>\n<p>See lahendus t\u00f6\u00f6tab h\u00e4sti pilves. Oleme harjunud, et klassikaline Kaspersky viiruset\u00f5rje on \u201eraske\u201c lahendus. Erinevalt sellest ei koorma Kaspersky Security virtuaalsetes keskkondades virtuaalmasinaid. K\u00f5ik viiruset\u00f5rje andmebaasid asuvad serveris, mis v\u00e4ljastab otsuseid k\u00f5ikidele nodi virtuaalmasinatele. Virtuaalses t\u00f6\u00f6lauas on paigaldatud vaid kerge agent, mis saadab faile kontrollimiseks serverisse.\u00a0<\/p>\n<p>Selline arhitektuur tagab samaaegselt failikaitse, internetikaitse ja r\u00fcnnakute kaitse ning ei v\u00e4henda virtuaalmasinate j\u00f5udlust. Samal ajal saab klient ise lisada erandeid failikaitsesse. Aitame algse seadistuse tegemisel. Selle omadustest r\u00e4\u00e4gime eraldi artiklis.<\/p>\n<p><b>Tundmatute ohtude eest.<\/b> Selleks \u00fchendame FortiSandboxi \u2013 Fortineti \u00abliivakasti\u00bb. Kasutame seda filtreerimiseks juhuks, kui viiruset\u00f5rje laseb l\u00e4bi \u00abnullp\u00e4eva\u00bb ohud. P\u00e4rast faili allalaadimist kontrollime seda esmalt viiruset\u00f5rjega ja seej\u00e4rel saadame liivakasti. FortiSandbox emuleerib virtuaalmasinat, k\u00e4ivitab faili ja j\u00e4lgib selle k\u00e4itumist: millistele registriobjektidele ta p\u00e4\u00e4seb, kas ta saadab v\u00e4liseid p\u00e4ringuid jne. Kui fail k\u00e4itub kahtlaselt, kustutatakse virtuaalmasin liivakastis ja pahavara ei j\u00f5ua kasutaja VDI-le.\u00a0<\/p>\n<h2>Kuidas seadistame turvalise \u00fchenduse VDI-le<\/h2>\n<p>\n<b>Kontrollime seadme vastavust IKT n\u00f5uetele.<\/b> Alates kaugt\u00f6\u00f6 algusest on kliendid p\u00f6\u00f6rdunud meie poole palvega: tagada ohutu t\u00f6\u00f6tamine nende isiklikest arvutitest. Iga IKT spetsialist teab, et koduste seadmete kaitsmine on keeruline: ei saa installida vajalikku viiruset\u00f5rjet ega rakendada r\u00fchmapoliitikaid, kuna need ei ole kontoriseadmed.\u00a0<\/p>\n<p>Vaikimisi moodustab VDI turvalise \u201ekihina\u201c isikliku seadme ja ettev\u00f5tte v\u00f5rgu vahel. VDI kaitsmiseks kasutaja masinast p\u00e4rit r\u00fcnnakute eest deaktiveerime l\u00f5ikepuhvri ja keelame USB edastamise. Kuid see ei tee kasutaja seadet iseenesest turvaliseks.\u00a0<\/p>\n<p>Probleem lahendatakse FortiClienti abil. See on l\u00f5pp-punktide kaitse lahendus. Ettev\u00f5tte kasutajad installivad FortiClienti oma koduarvutitesse ja selle abiga \u00fchenduvad virtuaalse t\u00f6\u00f6lauaga. FortiClient lahendab kohe kolm \u00fclesannet:\u00a0<\/p>\n<ul>\n<li>moodustades kasutajale \u201e\u00fche akna\u201c juurdep\u00e4\u00e4su;\n<\/li>\n<li>kontrollib, kas isiklikus arvutis on viiruset\u00f5rje ja viimased operatsioonis\u00fcsteemi uuendused;\u00a0\n<\/li>\n<li>loob VPN-tunneli kaitstud juurdep\u00e4\u00e4suks.\u00a0<\/li>\n<\/ul>\n<p>\nT\u00f6\u00f6taja saab juurdep\u00e4\u00e4su ainult siis, kui ta on l\u00e4binud kontrolli. Virtuaalsed t\u00f6\u00f6lauad ise pole internetist k\u00e4ttesaadavad, mis t\u00e4hendab, et need on paremini kaitstud r\u00fcnnakute eest.\u00a0<\/p>\n<p>Kui ettev\u00f5te soovib ise hallata l\u00f5pp-punktide kaitset, pakume FortiClient EMS-i (l\u00f5pp-punktide haldamise serverit). Klient saab ise seadistada t\u00f6\u00f6lauade skaneerimise ja sissetungide t\u00f5rje, koostada aadresside valge nimekirja.\u00a0<\/p>\n<p><b>Lisame autentimise tegureid.<\/b> Vaikimisi autentifitseeritakse kasutajad l\u00e4bi Citrix netscaler'i. Siin saame samuti turvalisust t\u00f5sta mitme teguri autentimisega, kasutades SafeNet tooteid. See teema v\u00e4\u00e4rib p\u00f5hjalikumat arutelu, millest r\u00e4\u00e4gime eraldi artiklis.\u00a0<\/p>\n<p>Selline kogemus erinevate lahendustega on meil viimase aasta jooksul kogunenud. VDI teenus seadistatakse igale kliendile eraldi, seet\u00f5ttu valisime maksimaalselt paindlikud t\u00f6\u00f6riistad. V\u00f5ib-olla peagi lisame midagi uut ning jagame oma kogemusi.<\/p>\n<p>7. oktoobril kell 17.00 r\u00e4\u00e4givad mu kolleegid virtuaalsetest t\u00f6\u00f6lauadest veebiseminaril \"Kas VDI on vajalik, v\u00f5i kuidas korraldada kaugt\u00f6\u00f6d?\" <br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/oblaka\/vdi-kak-izvlech-iz-tehnologii-maksimum?utm_source=habr&amp;utm_medium=internal&amp;utm_campaign=webinar\">Registreerige end<\/a><\/noindex>, kui soovite arutada, millal sobib ettev\u00f5ttele VDI tehnoloogia ja millal on paremad alternatiivid.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/520452\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas kaitseme klientide virtuaalseid t\u00f6\u00f6pindu viiruste, nuhkprogrammi ja r\u00fcnnakute eest | ProHoster","description":"Sel aastal kiirusid paljud ettev\u00f5tted kaugt\u00f6\u00f6le \u00fcle minema. Aitasime m\u00f5nel kliendil korraldada \u00fcle saja kaug- t\u00f6\u00f6koha vaid n\u00e4dalaga. Oluline oli teha seda mitte ainult kiiresti, vaid ka turvaliselt. Abiks tuli VDI tehnoloogia: selle abil on mugav levitada turvapoliitikaid k\u00f5ikidele t\u00f6\u00f6kohtadele ja kaitsta andmeleketest. Selles artiklis","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T12:42:53+00:00","article:modified_time":"2020-10-16T12:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:25:23","updated":"2022-09-28 06:23:36"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97204"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}