{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate alustamine. V\u00f5rgu poliitikad","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tere tulemast lugema artiklite seeriat UserGate Getting Started, kus r\u00e4\u00e4gitakse ettev\u00f5tte NGFW lahendusest.&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>Eelmises artiklis k\u00e4sitleti tulem\u00fc\u00fcri paigaldamise protsessi ja selle esialgset seadistamist. N\u00fc\u00fcd vaatleme l\u00e4hemalt reeglite loomist sellistes osades nagu \"Tulem\u00fc\u00fcr\", \"NAT ja suunamine\" ning \"L\u00e4bilaskev\u00f5ime.\"<\/p>\n<p>UserGate'i reeglite t\u00f6\u00f6 ideoloogia p\u00f5hineb reeglite t\u00e4itmisel \u00fcksteise kohal, kuni esimesele aktiveerunud reeglile. Eeltoodust l\u00e4htuvalt j\u00e4reldub, et spetsiifilisemad reeglid peaksid olema \u00fcldistest reeglitest k\u00f5rgemal. Siiski tuleks m\u00e4rkida, et kuna reegleid kontrollitakse j\u00e4rjestuses, on j\u00f5udluse aspektist parem luua \u00fcldisi reegleid. Igasuguste reeglite loomise tingimused rakendatakse \"JA\" loogika kohaselt. Kui on vajalik kasutada \"V\u00d5I\" loogikat, saavutatakse see mitme reegli loomisega. Seega on artiklis kirjeldatud p\u00f5him\u00f5tted rakendatavad ka teistele UserGate'i poliitikatele.<\/p>\n<h3>Tulekahju seina<\/h3>\n<p>UserGate'i paigaldamise j\u00e4rel on jaotises \"Tulekahju seinale\" juba olemas lihtne poliitika. Esimesed kaks reeglit keelavad liikluse botiv\u00f5rkude jaoks. Edasi tuleb n\u00e4iteid p\u00e4\u00e4sureeglitest erinevates tsoonides. Viimast reeglit nimetatakse alati \u201eBlokeeri k\u00f5ik\u201c ja see on t\u00e4histatud luku s\u00fcmboliga (see t\u00e4hendab, et reeglit ei saa kustutada, muuta, \u00fcmber paigutada ega keelata, selle ainus v\u00f5imalus on lubada logimise valik). Seega blokeerib see reegel kogu selgelt lubamatu liikluse. Kui on vaja lubada kogu liiklus UserGate'i kaudu (kuigi seda ei soovitata), saab alati luua eelviimase reegli \u201eLuba k\u00f5ik\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tulekahju seina reegli redigeerimise v\u00f5i loomise ajal on esimene <em>vahekaart \"\u00dcldine\"<\/em>, millel tuleb teha j\u00e4rgmised toimingud:&nbsp;<\/p>\n<ul>\n<li>\n<p>M\u00e4rkeruuduga \"K\u00e4ivita\" lubada v\u00f5i keelata reegel.<\/p>\n<\/li>\n<li>\n<p>sisestada reegli nimi.<\/p>\n<\/li>\n<li>\n<p>m\u00e4\u00e4rata reegli kirjeldus.<\/p>\n<\/li>\n<li>\n<p>valida kahe tegevuse hulgast:<\/p>\n<ul>\n<li>\n<p>Keela \u2014 blokeerib liikluse (antud tingimuse seadmisel on v\u00f5imalus saata ICMP host unreachable, piisab, kui lihtsalt j\u00e4tate vastava m\u00e4rkeruudu m\u00e4rgitud).<\/p>\n<\/li>\n<li>\n<p>Lubama \u2014 lubab t\u00fckeldatud andmepakettide liikumist.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Skenaaria element \u2014 v\u00f5imaldab valida stsenaariumi, mis on reegli aktiveerimise t\u00e4iendav tingimus. Nii rakendab UserGate SOAR (Security Orchestration, Automation and Response) kontseptsiooni.<\/p>\n<\/li>\n<li>\n<p>Logimine \u2014 salvestab reegli aktiveerimise hetkel teabe liiklustest.<\/p>\n<ul>\n<li>\n<p>Logida sessiooni algust. Sellisel juhul salvestatakse liikluslogisse ainult sessiooni alguse teave (esimene paket). See on soovituslik logimise variant.<\/p>\n<\/li>\n<li>\n<p>Logida iga paketti. Sellisel juhul salvestatakse teave iga edastatava v\u00f5rgu paketi kohta. Selle re\u017eiimi puhul on soovitatav logimise piirm\u00e4\u00e4ra aktiveerimine, et v\u00e4ltida seadme \u00fclem\u00e4\u00e4rast koormust.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Rakenda reegel:<\/p>\n<ul>\n<li>\n<p>K\u00f5ikidele pakettidele<\/p>\n<\/li>\n<li>\n<p>t\u00fckeldatud pakettidele<\/p>\n<\/li>\n<li>\n<p>t\u00fckeldamata pakettidele<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Uue reegli loomisel on v\u00f5imalik valida koht poliitikas.<\/p>\n<\/li>\n<\/ul>\n<p>J\u00e4rgmine <em>vahekaart \"Allikas\"<\/em>. Siin m\u00e4\u00e4rame liiklusallika, see v\u00f5ib olla ala, kust liiklus tuleb, v\u00f5i v\u00f5ime m\u00e4\u00e4rata nimekirja v\u00f5i konkreetse IP-aadressi (Geoip). Peaaegu k\u00f5igis reeglites, mida seadmes seadistada saab, on objekt, mille saab reeglist luua, n\u00e4iteks ei pea minema sektsiooni \"Alad\", vaid saab nuppu \"Loo ja lisa uus objekt\" kasutades luua vajaliku ala. Samuti on sageli leida checkbox \"Invertida\", mis muudab reegli tingimuse tegevuse vastupidiseks, mis on sarnane loogilise tegevuse eitamisega. <em>Vahekaart &#171;M\u00e4\u00e4rang&#187;<\/em> on sarnane allika vahekaardile, kuid liikluse allika asemel m\u00e4\u00e4rame liikluse sihtkoha. <em>Vahekaart &#171;Kasutajad&#187;<\/em> \u2014 siin on v\u00f5imalik lisada kasutajate v\u00f5i r\u00fchmade nimekiri, kellele seda reeglit rakendatakse. <em>Vahekaart &#171;Teenused&#187;<\/em> \u2014 valime teenuse t\u00fc\u00fcbi juba ette m\u00e4\u00e4ratletud valikute seast v\u00f5i saame m\u00e4\u00e4rata omaenda. <em>Vahekaart &#171;Rakendus&#187;<\/em> \u2014 siin valitakse konkreetsed rakendused v\u00f5i rakenduste grupid. Ja <em>vahekaart &#171;Aeg&#187;<\/em> m\u00e4\u00e4ra aeg, millal see reegel kehtib.&nbsp;<\/p>\n<p>Eelmise tunni j\u00e4rgi on meil reegel interneti\u00fchenduse loomiseks tsoonist \u201cTrust\u201d, n\u00fc\u00fcd n\u00e4itan n\u00e4itena, kuidas luua keelav reegel ICMP liikluse jaoks tsoonist \u201cTrust\u201d tsooni \u201cUntrusted\u201d.<\/p>\n<p>Alustuseks loome reegli, klikkides nupule \u201cLisa\u201d. Avanevas aknas vahekaardil \u00dcldine t\u00e4idame nime (Keelatud ICMP trusted\u2019ist untrusted\u2019isse), m\u00e4rgime linnukese kastikeses \u201cK\u00e4ivitada\u201d, valime tegevuseks keelata ja mis k\u00f5ige t\u00e4htsam, valime \u00f5igesti selle reegli asukoha. Vastavalt minu poliitikale peab see reegel olema k\u00f5rgemal reeglist \u201cLuba trusted\u2019ist untrusted\u2019isse\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaardil \u201cAllikas\u201d on minu \u00fclesande jaoks v\u00f5imalik kaks varianti:<\/p>\n<ul>\n<li>\n<p>Valides tsooni \u201cTrusted\u201d<\/p>\n<\/li>\n<li>\n<p>Valides k\u00f5ik tsoonid v\u00e4lja arvatud \u201cTrusted\u201d ja m\u00e4rkides linnukese kastikeses \u201cP\u00f6\u00f6rata \u00fcmber\u201d<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaart \u201cSihtkoht\u201d seadistatakse analoogselt vahekaartiga \u201cAllikas\u201d.<\/p>\n<p>Edasi liigume vahekaardile \"Teenused\", kuna UserGate'is on eeldefineeritud teenus ICMP liikluse jaoks. Vajutades nuppu &#171;Lisa&#187;, valime pakutud nimekirjast teenuse nimega \"Any ICMP\":<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>V\u00f5ib-olla soovisid UserGate'i arendajad just seda, kuid ma suudsin luua mitu t\u00e4iesti sarnast reeglit. Kuigi loetelu pealt t\u00f6\u00f6tab ainult esimene reegel, v\u00f5ib erinevate funktsioonide, kuid sarnaste nimedega reeglite loomine tekitada segadust, kui mitmed administraatorid t\u00f6\u00f6tlust teevad.<\/p>\n<h3>NAT ja marsruutimine<\/h3>\n<p>NAT reeglite loomisel n\u00e4eme mitmeid sarnaseid vahekaartide, nagu ka tulem\u00fc\u00fcris. \u201e\u00dcldine\u201c vahekaardil on ilmnenud v\u00e4li \u201eT\u00fc\u00fcp\u201c, mis v\u00f5imaldab valida, mille eest see reegel vastutab:<\/p>\n<ul>\n<li>\n<p>NAT &#8212; V\u00f5rguaadresse muutmine.<\/p>\n<\/li>\n<li>\n<p>DNAT &#8212; Suunab liikluse m\u00e4\u00e4ratud IP-aadressile.<\/p>\n<\/li>\n<li>\n<p>Portide suunamine &#8212; Suunab liikluse m\u00e4\u00e4ratud IP-aadressile, ent v\u00f5imaldab muuta avaliku teenuse porti.<\/p>\n<\/li>\n<li>\n<p>Poliitikap\u00f5hine marsruutimine &#8212; Lubab marsruutida IP-pakette p\u00f5hjalikuma teabe alusel, n\u00e4iteks teenuseid, MAC-aadresse v\u00f5i servereid (IP-aadresse).<\/p>\n<\/li>\n<li>\n<p>V\u00f5rgukaardistamine &#8212; Lubab asendada \u00fche v\u00f5rgu allika v\u00f5i siht-IP-aadresse teise v\u00f5rguga.<\/p>\n<\/li>\n<\/ul>\n<p>P\u00e4rast vastava t\u00fc\u00fcbi valimist on reegli seadistamine saadaval.<\/p>\n<p>SNAT IP (v\u00e4line aadress) v\u00e4ljale kirjeldame selgelt IP-aadressi, millele allika aadress asendatakse. See v\u00e4li on vajalik, kui sihtm\u00e4rgi liidestele on m\u00e4\u00e4ratud mitu IP-aadressi. Kui see v\u00e4li j\u00e4tta t\u00fchjaks, kasutab s\u00fcsteem suvalist aadressi kergesti saadaolevate IP-aadresside loendist, mis on m\u00e4\u00e4ratud sihtm\u00e4rgi liideste jaoks. UserGate soovitab SNAT IP-t m\u00e4\u00e4rata tulem\u00fc\u00fcride t\u00f6\u00f6 t\u00f5hususe suurendamiseks.<\/p>\n<p>N\u00e4iteks avaldan SSH-teenuse Windows-serveri kohta, mis asub \"DMZ\" tsoonis, kasutades \"port edastamise\" reeglit. Selleks vajutame nuppu \"Lisa\" ja t\u00e4idame \"\u00dcldine\" vahekaart, m\u00e4\u00e4rates reegli nimeks \"SSH to Windows\" ja t\u00fc\u00fcbiks \"Port edastamine\":<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaart \"Allikas\" valime tsooni \"Untrusted\" ja liigume edasi vahekaardile \"Portide suunamine\". Siin peame m\u00e4\u00e4rama protokolli \"TCP\" (neli varianti on saadaval &#8212; TCP, UDP, SMTP, SMTPS). Algne sihtport 9922 &#8212; port, kuhu kasutajad saadavad p\u00e4ringud (portide kasutamine: 2200, 8001, 4369, 9000-9100 on keelatud). Uus sihtport (22) &#8212; port, kuhu kasutajate p\u00e4ringud edastatakse sisemisele avalikule serverile.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahe \u201cDNAT\u201d m\u00e4\u00e4rame IP-aadressi arvutile kohalikus v\u00f5rgus, mis on avaldatud internetis (192.168.3.2). Ja soovi korral saab lubada SNAT\u2019i, siis UserGate muudab v\u00e4lise v\u00f5rgu paketid p\u00e4ritolu aadressi oma IP-aadressiks.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>K\u00f5ikide seadete j\u00e4rel saadakse reegel, mis v\u00f5imaldab p\u00e4\u00e4seda \u201cUsaldamatu\u201d tsoonist serverile IP-aadressiga 192.168.3.2 SSH-protokolli kaudu, kasutades \u00fchendamisel UserGate'i v\u00e4liseid aadresse.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>L\u00e4bivool<\/h3>\n<p>Selles jaotises m\u00e4\u00e4ratakse reeglid, mida kasutatakse ribalaiuse haldamiseks. Need v\u00f5ivad olla kasutajate, hostide, teenuste ja rakenduste ribalaiuse piiramiseks.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Reeglite loomisel m\u00e4\u00e4ratleme vahekaartidel trafik, millele piirangud kehtivad. Laiuse valik on v\u00f5imalik valida esitatud valikutest v\u00f5i m\u00e4\u00e4rata oma. Laiuse loomisel saab m\u00e4\u00e4rata trafik prioritiseerimise sildi DSCP. N\u00e4ide DSCP siltide kasutamisest: kui reeglisse on m\u00e4\u00e4ratud stsenaarium, siis v\u00f5ib see reegel automaatselt neid silte muuta. Veel \u00fcks stsenaariumi t\u00f6\u00f6 n\u00e4ide: reegel t\u00f6\u00f6tab kasutaja jaoks ainult siis, kui tuvastatakse torrent v\u00f5i kui trafik \u00fcletab m\u00e4\u00e4ratud piiri. \u00dclej\u00e4\u00e4nud vahekaardid t\u00e4idame samuti nagu teistes poliitikates, tuginedes trafik t\u00fc\u00fcbile, millele reegel peaks kehtima.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Kokkuv\u00f5te<\/h3>\n<p>Selles artiklis k\u00e4sitlesin reeglite loomist jaotustes \"Tulekahju seina\", \"NAT ja marsruutimine\" ning \"Laius\". Ja artikli alguses kirjeldasin UserGate poliitikate loomise reegleid ning reeglite loomise tingimuste t\u00f6\u00f6p\u00f5him\u00f5tteid.&nbsp;<\/p>\n<p>J\u00e4lgige meie uuendusi kanalites (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Getting Started. V\u00f5rgupoliitikad | ProHoster","description":"Tere tulemast kolmandasse artiklisse UserGate Getting Started artiklite seerias, kus r\u00e4\u00e4gitakse UserGate'i NGFW lahendusest. Eelmises artiklis k\u00e4sitleti tulem\u00fc\u00fcri installimise protsessi ja selle esialgse seadistamise tegemist. Praegu vaatame l\u00e4hemalt, kuidas luua reegleid sellistes jaotises nagu \u201eTulem\u00fc\u00fcr\u201d, \u201eNAT ja marsruutimine\u201d ning \u201eL\u00e4bilaskev\u00f5ime\u201d. UserGate'i reeglite t\u00f6\u00f6ideoloogia","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}