{"id":29980,"date":"2019-10-31T21:32:59","date_gmt":"2019-10-31T18:32:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw\/"},"modified":"2019-10-31T21:32:59","modified_gmt":"2019-10-31T18:32:59","slug":"optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","title":{"rendered":"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1>Hogyan \u00e9rt\u00e9kelj\u00fck az NGFW be\u00e1ll\u00edt\u00e1s\u00e1nak hat\u00e9konys\u00e1g\u00e1t<\/h1>\n<p>\nA leggyakoribb feladat az, hogy ellen\u0151rizz\u00fck, mennyire hat\u00e9konyan van be\u00e1ll\u00edtva a t\u0171zfalunk. Erre ingyenes seg\u00e9dprogramok \u00e9s szolg\u00e1ltat\u00e1sok \u00e1llnak rendelkez\u00e9sre olyan c\u00e9gekt\u0151l, amelyek NGFW-vel foglalkoznak. <\/p>\n<p>P\u00e9ld\u00e1ul, az al\u00e1bbiakban l\u00e1that\u00f3, hogy a Palo Alto Networks-nak lehet\u0151s\u00e9ge van k\u00f6zvetlen\u00fcl a <noindex><a rel=\"nofollow\" href=\"https:\/\/support.paloaltonetworks.com\/\">t\u00e1mogat\u00e1si port\u00e1lr\u00f3l<\/a><\/noindex> elind\u00edtani a t\u0171zfal statisztik\u00e1inak elemz\u00e9s\u00e9t \u2013 SLR jelent\u00e9s vagy a legjobb gyakorlatokkal val\u00f3 \u00f6sszhang elemz\u00e9se \u2013 BPA jelent\u00e9s. Ezek ingyenes online seg\u00e9dprogramok, amelyeket telep\u00edt\u00e9s n\u00e9lk\u00fcl haszn\u00e1lhatunk.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/86d2f4d5f28af9f744b1d1842e461309.png\" style=\"display:block;margin: 0 auto;\" \/> <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>TARTALOM<\/h3>\n<p>\n<noindex><a rel=\"nofollow\" href=\"#Expedition\">Expedition (Migr\u00e1ci\u00f3s Eszk\u00f6z)<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#PolicyOptimizer\">Politika Optimaliz\u00e1l\u00f3<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#ZeroTrust\">Zero Trust<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#Unused\">Kattintsunk az Unused-re<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#UnusedApp\">Kattintsunk az Unused App-ra<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#AppsSpecified\">Kattintsunk a No Apps Specified-re<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#MachineLearning\">De mi a helyzet a G\u00e9pi Tanul\u00e1ssal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#UTD\">UTD<\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"Expedition\"><\/a><\/noindex><\/p>\n<h2>Expedition (Migr\u00e1ci\u00f3s Eszk\u00f6z)<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/1d568bbbd1480eda4de7b5cdcaaae90a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nEgy bonyolultabb m\u00f3dja a be\u00e1ll\u00edt\u00e1saink ellen\u0151rz\u00e9s\u00e9nek az ingyenes seg\u00e9dprogram let\u00f6lt\u00e9se <noindex><a rel=\"nofollow\" href=\"https:\/\/live.paloaltonetworks.com\/t5\/Expedition-Migration-Tool\/ct-p\/migration_tool\">Expedition<\/a><\/noindex> (kor\u00e1bbi Migr\u00e1ci\u00f3s Eszk\u00f6z). Ez egy Virtual Appliance form\u00e1j\u00e1ban let\u00f6lthet\u0151 VMware-hez, telep\u00edt\u00e9sre nincs sz\u00fcks\u00e9g \u2013 csak le kell t\u00f6lteni a k\u00e9pet \u00e9s elind\u00edtani a VMware hypervisor alatt, majd bel\u00e9pni a webes fel\u00fcletre. Ez a seg\u00e9dprogram k\u00fcl\u00f6n besz\u00e9lget\u00e9st ig\u00e9nyel, hiszen csak az arr\u00f3l sz\u00f3l\u00f3 kurzus 5 napot vesz ig\u00e9nybe, annyira sok funkci\u00f3 tal\u00e1lhat\u00f3 most benne, bele\u00e9rtve a G\u00e9pi Tanul\u00e1st \u00e9s a k\u00fcl\u00f6nb\u00f6z\u0151 gy\u00e1rt\u00f3k t\u0171zfalak politik\u00e1inak, NAT-j\u00e1nak \u00e9s objektumainak migr\u00e1l\u00e1s\u00e1t. A G\u00e9pi Tanul\u00e1sr\u00f3l k\u00e9s\u0151bb, r\u00e9szletesebben \u00edrok.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"Po\"><\/a><\/noindex><\/p>\n<h2>Politika Optimaliz\u00e1l\u00f3<\/h2>\n<p>\n\u00c9s a legk\u00e9nyelmesebb megold\u00e1s (IMO), amir\u0151l ma r\u00e9szletesebben besz\u00e9lni fogok \u2013 a politikai optimaliz\u00e1l\u00f3, amely a Palo Alto Networks interf\u00e9sz\u00e9be van be\u00e9p\u00edtve. Ennek bemutat\u00e1s\u00e1hoz egy t\u0171zfalat telep\u00edtettem otthon, \u00e9s \u00edrtam egy egyszer\u0171 szab\u00e1lyt: enged\u00e9lyezni b\u00e1rmit b\u00e1rkinek. Elvileg ilyen szab\u00e1lyokat n\u00e9ha a v\u00e1llalati h\u00e1l\u00f3zatokban is l\u00e1tok. Term\u00e9szetesen, bekapcsoltam az \u00f6sszes NGFW biztons\u00e1gi profilt, ahogyan az a k\u00e9perny\u0151k\u00e9pen is l\u00e1that\u00f3:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/a53a1bff59708c7082bafb5b84634b11.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAz al\u00e1bbi k\u00e9perny\u0151k\u00e9pen az \u00e9n otthoni, nem be\u00e1ll\u00edtott t\u0171zfalam p\u00e9ld\u00e1ja l\u00e1that\u00f3, ahol szinte minden kapcsolat a legutols\u00f3 szab\u00e1lyba tartozik: AllowAll, amit a statisztik\u00e1k a Hit Count oszlopban mutatnak.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/8b4e004f5488e6faa3109c956fb78c31.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"ZeroTrust\"><\/a><\/noindex><\/p>\n<h2>Zero Trust<\/h2>\n<p>\nL\u00e9tezik egy biztons\u00e1gi megk\u00f6zel\u00edt\u00e9s, amelyet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.paloaltonetworks.com\/cyberpedia\/what-is-a-zero-trust-architecture\">Zero Trust<\/a><\/noindex>. Mit jelent ez: csak azokat a kapcsol\u00f3d\u00e1sokat szabad megengedn\u00fcnk a h\u00e1l\u00f3zat belsej\u00e9ben l\u00e9v\u0151 embereknek, amelyekre sz\u00fcks\u00e9g\u00fck van, \u00e9s mindent m\u00e1s hinni tiltanunk. Teh\u00e1t vil\u00e1gos szab\u00e1lyokat kell hozz\u00e1rendeln\u00fcnk az alkalmaz\u00e1sokhoz, felhaszn\u00e1l\u00f3khoz, URL-kateg\u00f3ri\u00e1khoz, f\u00e1jlt\u00edpusokhoz; be kell kapcsolnunk az \u00f6sszes IPS \u00e9s antiv\u00edrus al\u00e1\u00edr\u00e1st, bekapcsolni a homokoz\u00f3t, DNS-v\u00e9delmet alkalmazni, haszn\u00e1lni az IoC-t a rendelkez\u00e9sre \u00e1ll\u00f3 Threat Intelligence adatb\u00e1zisokb\u00f3l. \u00d6sszess\u00e9g\u00e9ben a t\u0171zfal be\u00e1ll\u00edt\u00e1sakor sz\u00e1mos feladat v\u00e1r r\u00e1nk. <\/p>\n<p>Egy\u00e9bk\u00e9nt a Palo Alto Networks NGFW sz\u00fcks\u00e9ges be\u00e1ll\u00edt\u00e1sainak minim\u00e1lis k\u00e9szlete egy SANS dokumentumban van le\u00edrva: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sans.org\/reading-room\/whitepapers\/auditing\/paper\/35777\">Palo Alto Networks Biztons\u00e1gi Konfigur\u00e1ci\u00f3s Benchmark<\/a><\/noindex> \u2014 aj\u00e1nlom, hogy ezzel kezdje. Term\u00e9szetesen a gy\u00e1rt\u00f3n\u00e1l is tal\u00e1lhat\u00f3 egy sor legjobb gyakorlat a t\u0171zfal be\u00e1ll\u00edt\u00e1s\u00e1hoz: <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.paloaltonetworks.com\/best-practices\">Legjobb gyakorlat<\/a><\/noindex>.<\/p>\n<p>Teh\u00e1t, a t\u0171zfal egy h\u00e9tig \u00e1llt otthon. N\u00e9zz\u00fck meg, milyen forgalom van a h\u00e1l\u00f3zatomban: <br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/b3b773f46e892b688f65cc83c7a5ef05.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nHa a sessi\u00f3k sz\u00e1ma szerint rendezz\u00fck, akkor a legt\u00f6bb sesszi\u00f3t a bittorrent hozza l\u00e9tre, ut\u00e1na j\u00f6n az SSL, majd a QUIC. Ez egy\u00fctt mutatja a bej\u00f6v\u0151 \u00e9s kimen\u0151 forgalmat: nagyon sok k\u00fcls\u0151 \u00e1tvizsg\u00e1l\u00e1s t\u00f6rt\u00e9nik a routeremen. K\u00fcl\u00f6nb\u00f6z\u0151 alkalmaz\u00e1sok a h\u00e1l\u00f3zatomban \u2014 150. <\/p>\n<p>Teh\u00e1t, mindezt egy szab\u00e1lyon kereszt\u00fcl engedt\u00fck \u00e1t. N\u00e9zz\u00fck most, mit mond err\u0151l a Policy Optimizer. Ha megn\u00e9zte a fent l\u00e1that\u00f3 k\u00e9perny\u0151k\u00e9pet a biztons\u00e1gi szab\u00e1lyokr\u00f3l, akkor bal als\u00f3 sarokban l\u00e1thatott egy kis ablakot, ami utal arra, hogy l\u00e9teznek olyan szab\u00e1lyok, amelyeket \u00e9rdemes optimaliz\u00e1lni. Kattintsunk oda.<\/p>\n<p>Mit mutat a Policy Optimizer:<\/p>\n<ul>\n<li>Mely politik\u00e1k nem voltak haszn\u00e1lva egy\u00e1ltal\u00e1n, 30 napig, 90 napig. Ez seg\u00edt eld\u00f6nteni, hogy el kell-e t\u00e1vol\u00edtani \u0151ket teljesen.<\/li>\n<li>Mely alkalmaz\u00e1sok szerepeltek a politik\u00e1kban, de a forgalomban nem tal\u00e1lhat\u00f3ak. Ez lehet\u0151v\u00e9 teszi a felesleges alkalmaz\u00e1sok elt\u00e1vol\u00edt\u00e1s\u00e1t a megengedett szab\u00e1lyokb\u00f3l.<\/li>\n<li>Mely politik\u00e1k enged\u00e9lyeztek mindent, de ott val\u00f3j\u00e1ban olyan alkalmaz\u00e1sok is voltak, amelyeket a Zero Trust m\u00f3dszertan szerint j\u00f3nak lenne kifejezetten megjel\u00f6lni.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/538a51166003e154430c16ff8cd01607.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" name=\"Unused\"><\/a><\/noindex><\/p>\n<h3>Kattintsunk az Unused-ra.<\/h3>\n<p>\nHogy bemutassam, hogyan m\u0171k\u00f6dik, hozz\u00e1adtam n\u00e9h\u00e1ny szab\u00e1lyt, \u00e9s ezek eddig m\u00e9g egyszer sem engedtek \u00e1t csomagot ma. \u00cdme a lista:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/227bc8339ce96a45370f2e07089eea03.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nLehets\u00e9ges, hogy id\u0151vel ott forgalom fog elmenni, \u00e9s akkor elt\u0171nnek err\u0151l a list\u00e1r\u00f3l. Ha 90 napig itt maradnak \u2014 d\u00f6nthet \u00fagy, hogy elt\u00e1vol\u00edtja ezeket a szab\u00e1lyokat. Hiszen minden szab\u00e1ly lehet\u0151s\u00e9get biztos\u00edt a hackereknek.<\/p>\n<p>Val\u00f3di probl\u00e9ma l\u00e9tezik a t\u0171zfal konfigur\u00e1l\u00e1sakor: \u00faj koll\u00e9ga \u00e9rkezik, megn\u00e9zi a t\u0171zfalszab\u00e1lyokat, \u00e9s ha azoknak nincsenek megjegyz\u00e9seik, \u00e9s nem tudja, mi\u00e9rt k\u00e9sz\u00edtett\u00e9k azt a szab\u00e1lyt, vajon sz\u00fcks\u00e9g van-e r\u00e1, elt\u00e1vol\u00edthat\u00f3-e: mi van, ha valaki szabads\u00e1gon van, \u00e9s 30 nap m\u00falva ism\u00e9t forgalom indul az \u0151 sz\u00fcks\u00e9ges szolg\u00e1ltat\u00e1s\u00e1t\u00f3l. Ez a funkci\u00f3 \u00e9ppen seg\u00edt neki d\u00f6nt\u00e9st hozni \u2014 senki sem haszn\u00e1lja \u2014 t\u00f6r\u00f6lni! <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"UnusedApp\"><\/a><\/noindex><\/p>\n<h3>\n<h3>Kattintsunk az Unused App-ra.<\/h3>\n<p>\nAz optimaliz\u00e1l\u00f3ban az Unused App-ra kattintunk, \u00e9s l\u00e1tjuk, hogy a f\u0151 ablakban \u00e9rdekes inform\u00e1ci\u00f3k jelennek meg. <\/p>\n<p>L\u00e1tjuk, hogy h\u00e1rom szab\u00e1ly l\u00e9tezik, ahol a megengedett alkalmaz\u00e1sok sz\u00e1ma \u00e9s a val\u00f3ban \u00e1thalad\u00f3 alkalmaz\u00e1sok sz\u00e1ma elt\u00e9r. <br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/423bfe9cd60e5236d0edd014eb8dbecd.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nR\u00e1 tudunk kattintani, \u00e9s megn\u00e9zhetj\u00fck ezeknek az alkalmaz\u00e1soknak a list\u00e1j\u00e1t, \u00e9s \u00f6sszehasonl\u00edthatjuk ezeket a list\u00e1kat.<br \/>\nP\u00e9ld\u00e1ul kattintsunk a Compare gombra a Max szab\u00e1lyhoz.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/1bf1659825811e1478a0d1441e9f5b58.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nItt l\u00e1that\u00f3, hogy megengedett alkalmaz\u00e1sok a Facebook, Instagram, Telegram, Vkontakte. De a forgalom val\u00f3j\u00e1ban csak n\u00e9h\u00e1ny alprogramon ment kereszt\u00fcl. Itt fontos meg\u00e9rteni, hogy a Facebook alkalmaz\u00e1s t\u00f6bb alprogramot is tartalmaz. <\/p>\n<p>Az NGFW alkalmaz\u00e1sok teljes list\u00e1j\u00e1t a port\u00e1lon lehet megtekinteni. <noindex><a rel=\"nofollow\" href=\"https:\/\/applipedia.paloaltonetworks.com\/\">applipedia.paloaltonetworks.com<\/a><\/noindex> \u00e9s mag\u00e1n az interf\u00e9szen a Objects-&gt;Applications r\u00e9szben, \u00e9s a keres\u0151be \u00edrja be az alkalmaz\u00e1s nev\u00e9t: facebook, \u00edgy fog kin\u00e9zni az eredm\u00e9ny:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/2259b709f372944508dd05343a33deae.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTeh\u00e1t az NGFW alprogramok egy r\u00e9sz\u00e9t l\u00e1tta, m\u00e1sokat viszont nem. Val\u00f3j\u00e1ban k\u00fcl\u00f6n tilthatja \u00e9s enged\u00e9lyezheti a Facebook k\u00fcl\u00f6nb\u00f6z\u0151 alfunkci\u00f3it. P\u00e9ld\u00e1ul enged\u00e9lyezheti az \u00fczenetek megtekint\u00e9s\u00e9t, de tilthatja a chatet vagy a f\u00e1jlok \u00e1tad\u00e1s\u00e1t. Ennek megfelel\u0151en a Policy Optimizer err\u0151l t\u00e1j\u00e9koztat, \u00e9s \u00d6n d\u00f6nt\u00e9st hozhat: nem az \u00f6sszes Facebook alkalmaz\u00e1st enged\u00e9lyezni, hanem csak az alapvet\u0151ket.<\/p>\n<p>Teh\u00e1t meg\u00e9rtett\u00fck, hogy a list\u00e1k k\u00fcl\u00f6nb\u00f6znek. Megteheti, hogy a szab\u00e1lyok pontosan azokat az alkalmaz\u00e1sokat enged\u00e9lyezik, amelyek t\u00e9nylegesen \u00e1thaladtak a h\u00e1l\u00f3zaton. Ehhez kattintson a MatchUsage gombra. \u00cdgy n\u00e9z ki:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/85137129471774d242f5d7fe1874c9b0.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00c9s emellett alkalmaz\u00e1sokat is hozz\u00e1adhat, amelyeket sz\u00fcks\u00e9gesnek tart \u2014 a bal oldal\u00e1n tal\u00e1lhat\u00f3 Add gombbal:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/23016dea6a835a07e3284b49845596ca.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMajd ezt a szab\u00e1lyt alkalmazhatja \u00e9s tesztelheti. Gratul\u00e1lok!<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"AppsSpecified\"><\/a><\/noindex><\/p>\n<h3>Kattintsunk a No Apps Specified gombra.<\/h3>\n<p>\nEbben az esetben egy fontos biztons\u00e1gi ablak fog megny\u00edlni.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/acac83fdf63c74fe537b4ce37c93e064.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nVal\u00f3sz\u00edn\u0171leg az \u00d6n h\u00e1l\u00f3zat\u00e1ban nagyon sok olyan szab\u00e1ly van, ahol a L7 szint\u0171 alkalmaz\u00e1st nem jel\u00f6lt\u00e9k meg. Az \u00e9n h\u00e1l\u00f3zatomban is van egy ilyen szab\u00e1ly \u2014 eml\u00e9keztetem, hogy az els\u0151 be\u00e1ll\u00edt\u00e1sn\u00e1l l\u00e9trehoztam, hogy megmutassam, hogyan m\u0171k\u00f6dik a Policy Optimizer.<\/p>\n<blockquote><p>A k\u00e9pen l\u00e1that\u00f3, hogy az AllowAll szab\u00e1ly 220 gigab\u00e1jt forgalmat engedett \u00e1t m\u00e1rcius 9. \u00e9s m\u00e1rcius 17. k\u00f6z\u00f6tt, \u00e9s a h\u00e1l\u00f3zatomban \u00f6sszesen 150 k\u00fcl\u00f6nb\u00f6z\u0151 alkalmaz\u00e1s van. Ez m\u00e9g mindig kev\u00e9s. \u00c1ltal\u00e1ban egy k\u00f6zepes m\u00e9ret\u0171 v\u00e1llalati h\u00e1l\u00f3zatban 200-300 k\u00fcl\u00f6nb\u00f6z\u0151 alkalmaz\u00e1s tal\u00e1lhat\u00f3.<\/p><\/blockquote>\n<p>\nTeh\u00e1t egy szab\u00e1ly ak\u00e1r 150 alkalmaz\u00e1st is \u00e1tenged. Ez \u00e1ltal\u00e1ban azt jelenti, hogy a t\u0171zfal be\u00e1ll\u00edt\u00e1sa helytelen, mert \u00e1ltal\u00e1ban egy szab\u00e1lyban 1-10 alkalmaz\u00e1s enged\u00e9lyezett k\u00fcl\u00f6nb\u00f6z\u0151 c\u00e9lokra. N\u00e9zz\u00fck meg, mik ezek az alkalmaz\u00e1sok: kattintsunk a Compare gombra:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/50050efc9d6f074d974c36d198447cc9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA Policy Optimizer funkci\u00f3 legcsod\u00e1latosabb r\u00e9sze az Match Usage gomb \u2014 egy kattint\u00e1ssal l\u00e9trehozhat egy szab\u00e1lyt, amelybe mind a 150 alkalmaz\u00e1st be\u00edrhatja. Ha ezt k\u00e9zzel kellene megtennie, az meglehet\u0151sen id\u0151ig\u00e9nyes lenne. Az adminisztr\u00e1l\u00f3 feladatainak sz\u00e1ma m\u00e9g a 10 eszk\u00f6zb\u0151l \u00e1ll\u00f3 h\u00e1l\u00f3zatom eset\u00e9ben is \u00f3ri\u00e1si.<\/p>\n<blockquote><p>Otthon 150 k\u00fcl\u00f6nb\u00f6z\u0151 alkalmaz\u00e1s fut, amelyek gigab\u00e1jtokat k\u00fcldenek! \u00c9s \u00d6nnek h\u00e1ny van?<\/p><\/blockquote>\n<p>\nMi t\u00f6rt\u00e9nik 100, 1000 vagy ak\u00e1r 10000 eszk\u00f6zb\u0151l \u00e1ll\u00f3 h\u00e1l\u00f3zatban? L\u00e1ttam t\u0171zfalakat, ahol 8000 szab\u00e1ly volt, \u00e9s nagyon \u00f6r\u00fcl\u00f6k, hogy most az adminisztr\u00e1torok rendelkeznek ilyen k\u00e9nyelmes automatiz\u00e1l\u00e1si eszk\u00f6z\u00f6kkel.<\/p>\n<p>Az L7 alkalmaz\u00e1selemz\u0151 modul \u00e1ltal l\u00e1tott \u00e9s bemutatott alkalmaz\u00e1sok egy r\u00e9sze val\u00f3sz\u00edn\u0171leg nem sz\u00fcks\u00e9ges a h\u00e1l\u00f3zatban, \u00edgy egyszer\u0171en elt\u00e1vol\u00edthatja \u0151ket az enged\u00e9lyez\u0151 szab\u00e1ly list\u00e1j\u00e1b\u00f3l, vagy kl\u00f3nozhatja a szab\u00e1lyokat a Clone gomb seg\u00edts\u00e9g\u00e9vel (a f\u0151 fel\u00fcleten), \u00e9s az egyik szab\u00e1lyban enged\u00e9lyezheti az alkalmaz\u00e1sokat, m\u00edg a m\u00e1sikban blokkolni fogja azokat, amelyek nem sz\u00fcks\u00e9gesek az \u00d6n h\u00e1l\u00f3zat\u00e1ban. Ilyen alkalmaz\u00e1sok gyakran a bittorrent, steam, ultrasurf, tor, rejtett alagutak, mint p\u00e9ld\u00e1ul tcp-over-dns \u00e9s m\u00e1sok.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/4aff079413a0995eb5324e7509c6b156.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nN\u00e9zz\u00fck meg egy m\u00e1sik szab\u00e1lyt \u2014 mi l\u00e1that\u00f3 ott:<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/73ab263fc788b185d4717a02d91bdffe.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nIgen, itt multicast-ra jellemz\u0151 alkalmaz\u00e1sok tal\u00e1lhat\u00f3ak. Enged\u00e9lyezn\u00fcnk kell \u0151ket, hogy a h\u00e1l\u00f3zaton vide\u00f3t n\u00e9zhess\u00fcnk. Kattintsunk az Match Usage gombra. Remek! K\u00f6sz\u00f6nj\u00fck, Policy Optimizer.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"MachineLearning\"><\/a><\/noindex><\/p>\n<h2>Mi a helyzet a g\u00e9pi tanul\u00e1ssal?<\/h2>\n<p>\nManaps\u00e1g divat automatik\u00e1r\u00f3l besz\u00e9lni. Amit eddig le\u00edrtam \u2014 nagyon hasznos. Van egy m\u00e1sik lehet\u0151s\u00e9g is, amir\u0151l besz\u00e9lnem kell. Ez a g\u00e9pi tanul\u00e1s funkci\u00f3, ami be van \u00e9p\u00edtve az Expedition eszk\u00f6zbe, amelyet m\u00e1r eml\u00edtettem. Ebben az eszk\u00f6zben lehet\u0151s\u00e9g van arra, hogy \u00e1thozza a szab\u00e1lyokat a r\u00e9gi t\u0171zfal\u00e1r\u00f3l egy m\u00e1sik gy\u00e1rt\u00f3t\u00f3l. R\u00e1ad\u00e1sul lehet\u0151s\u00e9g van a Palo Alto Networks megl\u00e9v\u0151 forgalmi napl\u00f3inak elemz\u00e9s\u00e9re \u00e9s javasolt szab\u00e1lyok k\u00e9sz\u00edt\u00e9s\u00e9re. Ez hasonl\u00edt a Policy Optimizer funkci\u00f3j\u00e1hoz, de az Expeditionban m\u00e9g kiterjedtebb, \u00e9s \u00d6n m\u00e1r egy el\u0151re elk\u00e9sz\u00edtett szab\u00e1lyok list\u00e1j\u00e1t kapja \u2014 csak j\u00f3v\u00e1 kell hagynia \u0151ket. <br \/>\n<noindex><a rel=\"nofollow\" name=\"UTD\"><\/a><\/noindex>A funkci\u00f3 tesztel\u00e9s\u00e9re laborat\u00f3riumi munka \u00e1ll rendelkez\u00e9sre - ezt tesztvezet\u00e9snek nevezz\u00fck. Ezt a tesztet el lehet v\u00e9gezni a virtu\u00e1lis t\u0171zfalakon, amelyeket a Palo Alto Networks moszkvai irod\u00e1j\u00e1nak munkat\u00e1rsai aktiv\u00e1lnak k\u00e9r\u00e9sedre.<br \/>\n<img decoding=\"async\" alt=\"Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja\" src=\"\/wp-content\/uploads\/2019\/03\/1be20da261e12f93736c4607f18299dc.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA k\u00e9rd\u00e9st a Russia@paloaltonetworks.com c\u00edmre lehet elk\u00fcldeni, a k\u00e9r\u00e9sben \u00edrd meg: \u201eSzeretn\u00e9k UTD-t csin\u00e1lni a Migration Process keret\u00e9ben.\u201d<\/p>\n<p>Val\u00f3j\u00e1ban a Unified Test Drive (UTD) n\u00e9ven t\u00f6bbf\u00e9le laborat\u00f3riumi munka l\u00e9tezik \u00e9s mindegyik <noindex><a rel=\"nofollow\" href=\"https:\/\/use.cloudshare.com\/Ent\/CsClient.mvc\/#\/vendor\/welcome\">t\u00e1volr\u00f3l el\u00e9rhet\u0151<\/a><\/noindex> a k\u00e9r\u00e9s ut\u00e1n.<\/h3>\n<p class=\"for_users_only_msg\">Csak a regisztr\u00e1lt felhaszn\u00e1l\u00f3k vehetnek r\u00e9szt a szavaz\u00e1son. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">K\u00e9rem, jelentkezzen be.<\/a><\/noindex>, k\u00e9rem.<\/p>\n<h2 class=\"default-block__polling-title\">Szeretn\u00e9d, ha valaki seg\u00edtene optimaliz\u00e1lni a t\u0171zfalad politik\u00e1it?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Igen<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Nem<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Mindent megoldok magam.<\/p>\n<\/li>\n<\/ul>\n<p>    M\u00e9g senki sem szavazott. Tart\u00f3zkod\u00f3 nincs.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444582\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u0430\u043a \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 NGFW \u0421\u0430\u043c\u0430\u044f \u0447\u0430\u0441\u0442\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0430\u0448 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f NGFW. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0438\u0436\u0435 \u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u0435\u0441\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u2014 SLR \u043e\u0442\u0447\u0435\u0442 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043b\u0443\u0447\u0448\u0438\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-29980","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u0430\u043a \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 NGFW \u0421\u0430\u043c\u0430\u044f \u0447\u0430\u0441\u0442\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0430\u0448 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Palo Alto Networks NGFW | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u0430\u043a \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 NGFW \u0421\u0430\u043c\u0430\u044f \u0447\u0430\u0441\u0442\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0430\u0448 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:32:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:32:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Palo Alto Networks NGFW biztons\u00e1gi politik\u00e1k optimaliz\u00e1l\u00f3ja | ProHoster","description":"Hogyan lehet \u00e9rt\u00e9kelni az NGFW be\u00e1ll\u00edt\u00e1sainak hat\u00e9konys\u00e1g\u00e1t? A leggyakoribb feladat az, hogy ellen\u0151rizz\u00fck, mennyire hat\u00e9konyan van be\u00e1ll\u00edtva a t\u0171zfalad.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Palo Alto Networks NGFW | ProHoster","og:description":"\u041a\u0430\u043a \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 NGFW \u0421\u0430\u043c\u0430\u044f \u0447\u0430\u0441\u0442\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0430\u0448 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d.","og:url":"https:\/\/prohoster.info\/hu\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:32:59+00:00","article:modified_time":"2019-10-31T18:32:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"29980","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:17:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:39","updated":"2026-01-20 23:17:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/29980","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=29980"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/29980\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=29980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=29980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=29980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}