{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate Uvod. Politike mre\u017ee","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pozdravljam \u010ditatelje u tre\u0107em \u010dlanku ciklusa \u010dlanaka UserGate Uvod, gdje se govori o NGFW rje\u0161enju tvrtke&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. U prethodnom \u010dlanku opisan je proces instalacije vatrozida i izvr\u0161ena je njegova po\u010detna konfiguracija. Sada \u0107emo detaljnije razmotriti stvaranje pravila u odjeljcima kao \u0161to su \"Vatrozid\", \"NAT i usmjeravanje\" i \"Propusnost\".<\/p>\n<p>Ideologija rada pravila UserGate je takva da se pravila izvr\u0161avaju od vrha prema dolje, do prvog aktiviranog. Iz prethodno opisanog proizlazi da specifi\u010dnija pravila trebaju biti iznad op\u0107enitijih pravila. No, treba napomenuti, budu\u0107i da se pravila provjeravaju redoslijedom, s aspekta performansi bolje je prvo stvoriti op\u0107a pravila. Uvjeti prilikom stvaranja bilo kojeg pravila primjenjuju se prema logici \"I\". Ako je potrebno koristiti logiku \"ILI\", to se posti\u017ee stvaranjem vi\u0161e pravila. Tako je ono \u0161to je opisano u ovom \u010dlanku primjenjivo i na druge politike UserGate.<\/p>\n<h3>Vatrozid<\/h3>\n<p>Nakon instalacije UserGate, u odjeljku \"Vatrozid\" ve\u0107 postoji jednostavna politika. Prva dva pravila zabranjuju promet za bot mre\u017ee. Slijede primjeri pravila pristupa iz razli\u010ditih zona. Posljednje pravilo uvijek se naziva \"Blokirati sve\" i ozna\u010deno je simbolom zaklju\u010davanja (to zna\u010di da pravilo ne mo\u017ee biti izbrisano, izmijenjeno, premje\u0161teno, onemogu\u0107eno, za njega se mo\u017ee samo omogu\u0107iti opcija evidencije). Dakle, zbog ovog pravila sav izri\u010dito neovla\u0161ten promet \u0107e biti blokiran prema posljednjem pravilu. Ako je potrebno dozvoliti sav promet kroz UserGate (iako se to izri\u010dito ne preporu\u010duje), uvijek se mo\u017ee stvoriti pretposljednje pravilo \"Dozvoli sve\".<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Prilikom ure\u0111ivanja ili stvaranja pravila za vatrozid prva <em>kartica \"Op\u0107e\"<\/em>, na njoj je potrebno izvr\u0161iti sljede\u0107e radnje:&nbsp;<\/p>\n<ul>\n<li>\n<p>Potvrdom \"Ukl\" uklju\u010diti ili isklju\u010diti pravilo.<\/p>\n<\/li>\n<li>\n<p>unijeti naziv pravila.<\/p>\n<\/li>\n<li>\n<p>postaviti opis pravila.<\/p>\n<\/li>\n<li>\n<p>odabrati izme\u0111u dvije radnje:<\/p>\n<ul>\n<li>\n<p>Zabraniti \u2014 blokira promet (pri postavljanju ovog uvjeta postoji mogu\u0107nost slanja ICMP poruke nedostupnog hosta, potrebno je samo ozna\u010diti odgovaraju\u0107u potvrdnu ku\u0107icu).<\/p>\n<\/li>\n<li>\n<p>Dozvoliti \u2014 dopu\u0161ta promet.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Scenarij stavka \u2014 omogu\u0107uje odabir scenarija koji predstavlja dodatni uvjet za aktivaciju pravila. Tako kompanija UserGate implementira koncept SOAR (Sigurnosna orkestracija, automatizacija i odgovor).<\/p>\n<\/li>\n<li>\n<p>Evidentiranje \u2014 zapisivanje informacija o prometu u evidenciju pri aktivaciji pravila. Mogu\u0107e opcije:<\/p>\n<ul>\n<li>\n<p>Evidentirati po\u010detak sesije. U tom slu\u010daju, u evidenciji prometa bit \u0107e zabilje\u017eene samo informacije o po\u010detku sesije (prvi paket). Ovo je preporu\u010dena opcija evidentiranja.<\/p>\n<\/li>\n<li>\n<p>Evidentirati svaki paket. U tom slu\u010daju, bit \u0107e zabilje\u017eene informacije o svakom prijenosu mre\u017enog paketa. Za ovaj na\u010din preporu\u010duje se omogu\u0107iti limit evidentiranja kako bi se sprije\u010dilo optere\u0107enje ure\u0111aja.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Primijeni pravilo na:<\/p>\n<ul>\n<li>\n<p>Sve pakete<\/p>\n<\/li>\n<li>\n<p>fragmentirane pakete<\/p>\n<\/li>\n<li>\n<p>nefragmentirane pakete<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Prilikom kreiranja novog pravila mo\u017ee se odabrati mjesto u politici.<\/p>\n<\/li>\n<\/ul>\n<p>Sljede\u0107e <em>zada\u0107a \"Izvor\"<\/em>. Ovdje navodimo izvor prometa, to mo\u017ee biti zona iz koje promet dolazi, ili mo\u017eemo navesti popis ili odre\u0111enu IP adresu (Geoip). U gotovo svim pravilima koja se mogu postaviti na ure\u0111aju, objekt se mo\u017ee kreirati iz pravila, na primjer, ne odlaze\u0107i u odjeljak \"Zone\", mo\u017eemo gumbom \"Kreiraj i dodaj novi objekt\" stvoriti potrebnu zonu. Tako\u0111er se \u010desto susre\u0107e izbor \"Inverzija\", koji mijenja radnju u uvjetu pravila u suprotnu, \u0161to odgovara logi\u010dkoj radnji negacija. <em>Zavihek \u00abNamjena\u00bb<\/em> sli\u010dna je zada\u0107i izvor, samo umjesto izvora prometa odre\u0111ujemo odredi\u0161te prometa. <em>Zavihek \u00abKorisnici\u00bb<\/em> \u2014 na ovom mjestu mo\u017eemo dodati popis korisnika ili grupa za koje se primjenjuje ovo pravilo. <em>Zavihek \u00abServis\u00bb<\/em> \u2014 odabiremo tip usluge iz ve\u0107 unaprijed definiranog ili mo\u017eemo postaviti vlastiti. <em>Zavihek \u00abAplikacija\u00bb<\/em> \u2014 ovdje se biraju specifi\u010dne aplikacije ili grupe aplikacija. I <em>zavihek \u00abVrijeme\u00bb<\/em> navodimo vrijeme kada je ovo pravilo aktivno.&nbsp;<\/p>\n<p>Od pro\u0161le lekcije imamo pravilo za izlaz na internet iz zone \"Trust\", sada \u0107u pokazati kao primjer kako stvoriti zabranjuju\u0107e pravilo za ICMP promet iz zone \"Trust\" u zonu \"Untrusted\".<\/p>\n<p>Za po\u010detak, kreiramo pravilo klikom na dugme \"Dodaj\". U otvorenom prozoru na kartici Op\u0107e ispunjavamo naziv (Zabrana ICMP iz trusted u untrusted), stavljamo kva\u010dicu u potvrdni okvir \"Uklju\u010di\", biramo akciju zabraniti i najva\u017enije pravilno biramo mesto za ovo pravilo. U skladu sa mojom politikom, to pravilo treba biti iznad pravila \"Dozvoli trusted u untrusted\":<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Na kartici \"Izvor\" za moj zadatak postoje dvije mogu\u0107nosti:<\/p>\n<ul>\n<li>\n<p>Biraju\u0107i zonu \"Trusted\"<\/p>\n<\/li>\n<li>\n<p>Biraju\u0107i sve zone osim \"Trusted\" i stavljaju\u0107i kva\u010dicu u potvrdni okvir \"Obrni\"<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kartica \"Odredi\u0161te\" se pode\u0161ava sli\u010dno kartici \"Izvor\".<\/p>\n<p>Dalje idemo na zavihek \u201cServis\u201d, s obzirom na to da UserGate ima unaprijed definiran servis za ICMP promet, pritiskom na gumb \u00abDodaj\u00bb biramo iz ponu\u0111enog popisa servis pod nazivom \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Mo\u017eda su tako zamislili autori UserGate-a, ali kod mene je uspevalo da se kreira nekoliko potpuno identi\u010dnih pravila. Iako \u0107e se izvr\u0161avati samo prvo pravilo sa liste, mogu\u0107nost stvaranja razli\u010ditih funkcionalnih pravila sa istim imenom mo\u017ee izazvati zabunu kada se radi s vi\u0161e administratora ure\u0111aja.<\/p>\n<h3>NAT i rutiranje<\/h3>\n<p>Pri kreiranju NAT pravila vidimo nekoliko sli\u010dnih kartica kao i za vatrozid. Na kartici \"Op\u0107e\" pojavljuje se polje \"Tip\", koje omogu\u0107ava odabir za \u0161ta \u0107e odgovarati ovo pravilo:<\/p>\n<ul>\n<li>\n<p>NAT \u2014 Prevo\u0111enje mre\u017enih adresa.<\/p>\n<\/li>\n<li>\n<p>DNAT \u2014 Preusmjerava promet na odre\u0111enu IP adresu.<\/p>\n<\/li>\n<li>\n<p>Port forwarding \u2014 Preusmjerava promet na odre\u0111enu IP adresu, ali omogu\u0107uje promjenu broja porta objavljenog servisa.<\/p>\n<\/li>\n<li>\n<p>Politika usmjeravanja \u2014 Omogu\u0107uje usmjeravanje IP paketa na temelju dodatnih informacija, kao \u0161to su servisi, MAC adrese ili poslu\u017eitelji (IP adrese).<\/p>\n<\/li>\n<li>\n<p>Umre\u017eavanje \u2014 Omogu\u0107uje zamjenu izvornih ili odredi\u0161nih IP adresa jedne mre\u017ee s drugom mre\u017eom.<\/p>\n<\/li>\n<\/ul>\n<p>Nakon odabira odgovaraju\u0107eg tipa pravila bi\u0107e dostupne postavke za to.<\/p>\n<p>U polju SNAT IP (vanjska adresa) jasno navodimo IP adresu koja \u0107e zamijeniti adresu izvora. Ovo polje je potrebno kada postoji vi\u0161e IP adresa dodijeljenih su\u010deljima odredi\u0161ne zone. Ako ostavite ovo polje praznim, sustav \u0107e koristiti proizvoljnu adresu s popisa dostupnih IP adresa dodijeljenih su\u010deljima odredi\u0161ne zone. UserGate preporu\u010duje navo\u0111enje SNAT IP za pobolj\u0161anje performansi rada vatrozida.<\/p>\n<p>Za primjer, objavit \u0107u SSH uslugu poslu\u017eitelja Windows koji se nalazi u zoni 'DMZ' putem pravila 'port forwarding'. Za to kliknemo gumb 'Dodaj' i ispunjavamo karticu 'Op\u0107enito', navodimo naziv pravila 'SSH to Windows' i tip 'Port forwarding':<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Na zavihku \u201cIzvor\u201d biramo zonu \u201cNeovisni\u201d i prelazimo na zavihek \u201cPort forwarding\u201d. Ovdje trebamo odabrati protokol \u201cTCP\u201d (dostupne su \u010detiri opcije \u2014 TCP, UDP, SMTP, SMTPS). Originalna odredi\u0161na port 9922 \u2014 broj porta na koji korisnici \u0161alju zahtjeve (ne treba koristiti portove: 2200, 8001, 4369, 9000-9100). Novi odredi\u0161ni port (22) \u2014 broj porta na koji \u0107e se preusmjeravati zahtjevi korisnika na unutarnji objavljeni poslu\u017eitelj.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Na kartici 'DNAT' postavljamo IP adresu ra\u010dunala u lokalnoj mre\u017ei koje se objavljuje na internetu (192.168.3.2). Opcionalno se mo\u017ee uklju\u010diti SNAT, tada \u0107e UserGate mijenjati adresu izvora u paketima iz vanjske mre\u017ee na svoju IP adresu.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Nakon svih postavki, nastaje pravilo koje omogu\u0107uje pristup iz zone 'Untrusted' do poslu\u017eitelja s IP adresom 192.168.3.2 putem protokola SSH, koriste\u0107i pri povezivanju vanjsku adresu UserGate.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Propusnost<\/h3>\n<p>U ovom odjeljku definiraju se pravila za upravljanje propusno\u0161\u0107u. Ona se mogu koristiti za ograni\u010davanje kanala odre\u0111enih korisnika, hostova, usluga, aplikacija.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Prilikom izrade pravila, uvjetima na karticama odre\u0111ujemo promet na koji se primjenjuju ograni\u010denja. Propusnost se mo\u017ee odabrati iz ponu\u0111enih opcija ili definirati vlastita. Prilikom izrade propusnosti mo\u017ee se odrediti oznaka prioritetizacije prometa DSCP. Primjer kada se primjenjuju oznake DSCP: ako u pravilu navedemo scenarij u kojem se ovo pravilo primjenjuje, tada mo\u017ee automatski promijeniti te oznake. Jo\u0161 jedan primjer rada scenarija: pravilo \u0107e se aktivirati za korisnika samo kada se otkrije torrent ili kada ukupni promet prema\u0161i zadani limit. Ostale kartice ispunjavamo isto kao i u drugim politikama, na temelju vrste prometa na koju se pravilo treba primijeniti.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Uvod. Politike mre\u017ee\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Zaklju\u010dak<\/h3>\n<p>U ovom \u010dlanku razmatram izradu pravila u sekcijama 'Vatrozid', 'NAT i usmjeravanje' i 'Propusnost'. Na samom po\u010detku \u010dlanka opisao sam pravila izrade politika UserGate, kao i princip rada uvjeta prilikom izrade pravila.&nbsp;<\/p>\n<p>Pratite novosti na na\u0161im kanalima (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Uvod. Mre\u017ene politike | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}