{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate alustamine. V\u00f5rgu poliitikad","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tere tulemast UserGate alustamise artiklite kolmandasse artiklisse, kus r\u00e4\u00e4gitakse ettev\u00f5tte NGFW lahendusest.&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>Eelmises artiklis kirjeldati tulem\u00fc\u00fcripaigaldamise protsessi ja tehti selle algne seadistamine. N\u00fc\u00fcd vaatleme l\u00e4hemalt reeglite loomist jaotistes nagu \u201cTulem\u00fc\u00fcr\u201d, \u201cNAT ja marsruutimine\u201d ning \u201cL\u00e4bilaskev\u00f5ime\u201d.<\/p>\n<p>UserGate reeglite t\u00f6\u00f6ideoloogia on selline, et reeglid t\u00e4idetakse \u00fclalt alla kuni esimese aktiveerimise korral. Sellest tuleneb, et spetsiifilisemad reeglid peaksid olema \u00fcle \u00fcldisemate reeglite. Kuid tuleb m\u00e4rkida, et kuna reeglid kontrollitakse j\u00e4rjest, on tootlikkuse osas parem luua \u00fcldised reeglid. K\u00f5ikide reeglite loomisel rakendatakse tingimusi loogika \u201cJA\u201d alusel. Kui on vajalik kasutada loogikat \u201cV\u00d5I\u201d, saavutatakse see, luues mitu reeglit. Seega kehtib selles artiklis kirjeldatud ka teistele UserGate poliitikatele.<\/p>\n<h3>Tulem\u00fc\u00fcr<\/h3>\n<p>UserGate'i paigaldamise j\u00e4rel on jaotises \u201cTulem\u00fc\u00fcr\u201d juba olemas lihtne poliitika. Esimesed kaks reeglit keelavad liikluse botnetide jaoks. J\u00e4rgnev on n\u00e4idis erinevate tsoonide juurdep\u00e4\u00e4sureeglitest. Viimane reegel on alati nimetatud \u201cLuba k\u00f5ik\u201d ja m\u00e4rgistatud lukus\u00fcmboliga (mis t\u00e4hendab, et reeglit ei saa kustutada, muuta, \u00fcmber paigutada, keelata, vaid seda saab ainult ajakirjastada). Seega blokeerib see reegel kogu selgelt mitte lubatud liikluse. Kui on vaja lubada kogu liiklus UserGate'i kaudu (kuigi seda ei soovitata), saab alati luua eelviimase reegli \u201cLuba k\u00f5ik\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Reegli redigeerimisel v\u00f5i loomisel tulem\u00fc\u00fcri jaoks on esimene <em>vahekaart \u201c\u00dcldine\u201d<\/em>, kus tuleb teha j\u00e4rgmised toimingud:&nbsp;<\/p>\n<ul>\n<li>\n<p>T\u0161eki kast \u201cK\u00e4ivitamine\u201d lubab v\u00f5i keelab reegli.<\/p>\n<\/li>\n<li>\n<p>sisestage reegli nimi.<\/p>\n<\/li>\n<li>\n<p>m\u00e4\u00e4rake reegli kirjeldus.<\/p>\n<\/li>\n<li>\n<p>valige kahte tegevust:<\/p>\n<ul>\n<li>\n<p>Keelata \u2014 blokeerib liikluse (selle tingimuse seadmisel on v\u00f5imalus saata ICMP host unreachable, selleks tuleb lihtsalt aktiveerida vastav m\u00e4rkeruut).<\/p>\n<\/li>\n<li>\n<p>Lubada \u2014 lubab liikluse.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Skenaarioni valik \u2014 v\u00f5imaldab valida skenaarioni, mis on reegli aktiveerimiseks t\u00e4iendav tingimus. Nii rakendab ettev\u00f5te UserGate SOAR (Security Orchestration, Automation and Response) kontseptsiooni.<\/p>\n<\/li>\n<li>\n<p>Logimine \u2014 salvestada logisse teavet liikluse kohta reegli aktiveerimise korral. Saadaval on j\u00e4rgmised valikud:<\/p>\n<ul>\n<li>\n<p>Logi seansi algus. Sel juhul salvestatakse liikluselogi ainult teave seansi alguse kohta (esimene pakett). See on soovitatav logimise valik.<\/p>\n<\/li>\n<li>\n<p>Logi iga pakett. Sel juhul salvestatakse teave iga edastatava v\u00f5rgu paketi kohta. Selle re\u017eiimi puhul on soovitatav sisse l\u00fclitada logimise limiit, et v\u00e4ltida seadme k\u00f5rget koormust.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Rakenda reegel:<\/p>\n<ul>\n<li>\n<p>K\u00f5ikidele pakettidele<\/p>\n<\/li>\n<li>\n<p>fraktsioonilistele pakettidele<\/p>\n<\/li>\n<li>\n<p>mittefraktsioonilistele pakettidele<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Uue reegli loomisel saab valida koha poliitikas.<\/p>\n<\/li>\n<\/ul>\n<p>Edasi <em>vahekaart \"Allikas\"<\/em>. Siin m\u00e4\u00e4rame liikluse allika, mis v\u00f5ib olla tsoon, kust liiklus p\u00e4rineb, v\u00f5i v\u00f5ib m\u00e4\u00e4rata nimekirja v\u00f5i konkreetse IP-aadressi (Geoip). Praktikas v\u00f5ib k\u00f5iki seadmes m\u00e4\u00e4ratavaid reegleid luua objekti, n\u00e4iteks ei pea minema jaossa \"Tsoonid\", saab nupuga \"Loo ja lisa uus objekt\" luua vajaliku tsooni. Samuti esineb sageli m\u00e4rkeruut \"P\u00f6\u00f6ra \u00fcmber\", mis muudab reegli tingimuse vastupidiseks, mis on sarnane loogilisele toimingule eitamine. <em>Vahe \u201cM\u00e4\u00e4ratlemine\u201d<\/em> on sarnane allika vahekaardile, ainult et allika asemel m\u00e4\u00e4rame liikluse sihtkoha. <em>Vahe \u201cKasutajad\u201d<\/em> \u2014 siin saab lisada nimekirja kasutajatest v\u00f5i r\u00fchmadest, kellele reegel kehtib. <em>Vahe \u201cTeenused\u201d<\/em> \u2014 valime teenuse t\u00fc\u00fcbi juba eelnevalt m\u00e4\u00e4ratletud hulgast v\u00f5i saame m\u00e4\u00e4rata omaette teenuse. <em>Vahe \u201cRakendus\u201d<\/em> \u2014 siin valitakse konkreetsed rakendused v\u00f5i rakenduste r\u00fchmad. Ja <em>vahe \u201cAeg\u201d<\/em> m\u00e4\u00e4ra aeg, millal reegel on aktiivne.&nbsp;<\/p>\n<p>Eelmise \u00f5ppetunni p\u00f5hjal on meil reegel, mis v\u00f5imaldab interneti\u00fchendust tsoonist \"Trust\"; n\u00fc\u00fcd n\u00e4itan n\u00e4itena, kuidas luua keelav reegel ICMP-liikluse jaoks tsoonist \"Trust\" tsooni \"Untrusted\".<\/p>\n<p>Esmaltame loome reegli, kl\u00f5psates nuppu \u201eLisa\u201c. Avanevas aknas vahekaardil \u201e\u00dcldine\u201c t\u00e4idame nime (ICMP keeld trusted-st untrusted-isse), paneme linnukese kasti \u201eK\u00e4ivita\u201c, valime toimingu keelduda ja k\u00f5ige t\u00e4htsam - valime \u00f5igesti reegli asukoha. Minu poliitika kohaselt peaks see reegel asuma k\u00f5rgemal reeglist \u201eLuba trusted-st untrusted-isse\u201c:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaardil \u201eAllikas\u201c on minu \u00fclesande jaoks v\u00f5imalik kaks varianti:<\/p>\n<ul>\n<li>\n<p>Valides tsooni \u201eTrusted\u201c<\/p>\n<\/li>\n<li>\n<p>Valides k\u00f5ik tsoonid, v\u00e4lja arvatud \u201eTrusted\u201c, ja pannes linnukese kasti \u201eP\u00f6\u00f6rata \u00fcmber\u201c<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaart \u201eSihtkoht\u201c seadistatakse analoogselt vahekaardile \u201eAllikas\u201c.<\/p>\n<p>Edasi liikudes l\u00e4heme vahelehele \u201cTeenused\u201d, kuna UserGate'is on ICMP liikluseks eeldefineeritud teenus, siis, vajutades nuppu \u201cLisa\u201d, valime ettepanekute nimekirjast teenuse nimega \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>V\u00f5ib-olla oli UserGate'i loojate eesm\u00e4rk see, aga mul \u00f5nnestus luua mitu t\u00e4iesti sarnast reeglit. Kuigi loogitakse vaid esimest reeglit loendis, v\u00f5ivad erineva funktsionaalsusega sarnase nimega reeglite loomise v\u00f5imalused minu arvates tekitada segadust, kui mitmed administraatorid t\u00f6\u00f6tlust teevad.<\/p>\n<h3>NAT ja marsruutimine<\/h3>\n<p>NAT reeglite loomisel n\u00e4eme mitmeid sarnaseid vahekaarte, nagu ka tulem\u00fc\u00fcris. Vahekaardil \u201e\u00dcldine\u201c on tekinud v\u00e4li \u201eT\u00fc\u00fcp\u201c, mis v\u00f5imaldab valida, mille eest see reegel vastutab:<\/p>\n<ul>\n<li>\n<p>NAT \u2014 V\u00f5rguaadressi t\u00f5lkimine.<\/p>\n<\/li>\n<li>\n<p>DNAT \u2014 Suunab liikluse m\u00e4\u00e4ratud IP-aadressile.<\/p>\n<\/li>\n<li>\n<p>Portide edastamine \u2014 Suunab liikluse m\u00e4\u00e4ratud IP-aadressile, kuid v\u00f5imaldab muuta avaliku teenuse porti.<\/p>\n<\/li>\n<li>\n<p>Poliitikap\u00f5hine suunamine \u2014 V\u00f5imaldab IP-pakette suunata p\u00f5hinedes t\u00e4iendaval teabel, n\u00e4iteks teenustele, MAC-aadressidele v\u00f5i serveritele (IP-aadressidele).<\/p>\n<\/li>\n<li>\n<p>V\u00f5rgu kaardistus \u2014 V\u00f5imaldab asendada \u00fche v\u00f5rgu allika v\u00f5i siht-IP-aadresse teise v\u00f5rgu aadressidega.<\/p>\n<\/li>\n<\/ul>\n<p>P\u00e4rast vastava t\u00fc\u00fcbi valimist on seadistused sellele reeglile saadaval.<\/p>\n<p>SNAT IP (v\u00e4lisadresse) v\u00e4ljale m\u00e4rkime selgelt IP-aadressi, millele allika aadress asendatakse. Seda v\u00e4lja on vajalik kasutada, kui sihtala liidesele on m\u00e4\u00e4ratud mitu IP-aadressi. Kui see v\u00e4li j\u00e4tta t\u00fchjaks, kasutab s\u00fcsteem juhuslikku aadressi loendist, mis on m\u00e4\u00e4ratud sihtala liidesele. UserGate soovitab SNAT IP-d m\u00e4\u00e4rata, et suurendada tulem\u00fc\u00fcriga t\u00f6\u00f6tamise t\u00f5husust.<\/p>\n<p>N\u00e4iteks avaldan Windows serveri SSH teenuse, mis asub 'DMZ' tsoonis, 'port-forwarding' reegli abil. Selleks vajutame nuppu 'Lisa' ja t\u00e4idame vahekaart '\u00dcldine', m\u00e4\u00e4rates reegli nimeks 'SSH to Windows' ja t\u00fc\u00fcbiks 'Port-forwarding':<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaart \u201cAllikas\u201d valime tsooni \u201cUsaldamatu\u201d ja liigume vahelehele \u201cPortide edastamine\u201d. Siin peame m\u00e4\u00e4rama protokolli \u201cTCP\u201d (saadaval on neli varianti \u2014 TCP, UDP, SMTP, SMTPS). Algne sihtport 9922 \u2014 port, kuhu kasutajad saadavad p\u00e4ringud (ei tohi kasutada porte: 2200, 8001, 4369, 9000-9100). Uus sihtport (22) \u2014 port, kuhu suunatakse kasutajate p\u00e4ringud sisev\u00f5rgu avalikule serverile.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Vahekaardil 'DNAT' m\u00e4\u00e4rame kohalikus v\u00f5rgus olevale arvutile IP-aadressi, mida avaldatakse internetis (192.168.3.2). Ja valikuliselt saab sisse l\u00fclitada SNAT, siis UserGate muudab v\u00e4lisv\u00f5rgust tulevate pakettide allika aadressi oma IP-aadressiks.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00e4rast k\u00f5iki seadeid on reegel, mis v\u00f5imaldab saada juurdep\u00e4\u00e4su tsoonist 'Untrusted' serverile IP-aadressiga 192.168.3.2 SSH protokolli kaudu, kasutades \u00fchendust luues UserGate'i v\u00e4list aadressi.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>L\u00e4bivusv\u00f5ime<\/h3>\n<p>Selles jaotises m\u00e4\u00e4ratletakse reeglid, mis reguleerivad l\u00e4bivusv\u00f5imet. Neid saab kasutada teatud kasutajate, hostide, teenuste, rakenduste kanali piiramiseks.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Reeglite seadmisel m\u00e4\u00e4rame vahekaartidel liikluse tingimused, millega piirangud kehtivad. Laius v\u00f5ib olla valitud pakutud seast v\u00f5i m\u00e4\u00e4rata oma. Laiuse seadmisel saab m\u00e4\u00e4rata liikluse prioriseerimise sildi DSCP. N\u00e4ide DSCP siltide rakendamise kohta: m\u00e4\u00e4rates reegli stsenaariumi, millega antud reegel kehtib, v\u00f5ib antud reegel automaatselt neid silte muuta. Teine n\u00e4ide stsenaariumi toimimisest: reegel kehtib kasutajale ainult siis, kui avastatakse torrent v\u00f5i liiklus \u00fcletab m\u00e4\u00e4ratud piiri. Teised vahekaardid t\u00e4idame samuti nagu muudes poliitikates, l\u00e4htudes liikluse t\u00fc\u00fcbist, millele reegel peab kehtima.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate alustamine. V\u00f5rgu poliitikad\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Kokkuv\u00f5te<\/h3>\n<p>Selles artiklis vaatasin reeglite loomist sektsioonides \"Tulem\u00fc\u00fcr\", \"NAT ja marsruutimine\" ning \"L\u00e4bivool\". Ja artikli alguses kirjeldasin UserGate poliitikate loomise reegleid ning ka tingimuste toimimise p\u00f5him\u00f5tteid reegli loomisel.&nbsp;<\/p>\n<p>J\u00e4lgige meie kanaleid (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Alustamine. V\u00f5rgu poliitikad | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}