{"id":95964,"date":"2020-10-06T01:42:49","date_gmt":"2020-10-05T23:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka"},"modified":"2020-10-06T01:42:49","modified_gmt":"2020-10-05T23:42:49","slug":"2-usergate-getting-started-trebovaniya-ustanovka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","title":{"rendered":"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/0dec3bafb496cf5c88562b7d59252a30.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sveiki, \u0161\u012b ir otr\u0101 rakstu s\u0113rija par NGFW risin\u0101jumu no uz\u0146\u0113muma&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. \u0160\u012b raksta m\u0113r\u0137is ir par\u0101d\u012bt, k\u0101 uzst\u0101d\u012bt ugunsm\u016bri UserGate virtu\u0101l\u0101 sist\u0113m\u0101 (es izmantos\u0161u VMware Workstation virtu\u0101lo programmat\u016bru) un veikt t\u0101 s\u0101kotn\u0113jo konfigur\u0101ciju (at\u013caut piek\u013cuvi no viet\u0113j\u0101 t\u012bkla caur UserGate v\u0101rteju uz internetu).&nbsp;&nbsp;&nbsp;<\/p>\n<h2>1. Ievads<\/h2>\n<p>Vispirms aprakst\u012b\u0161u da\u017e\u0101das metodes, k\u0101 integr\u0113t \u0161o v\u0101rteju t\u012bkl\u0101. V\u0113r\u0161u uzman\u012bbu, ka atkar\u012bb\u0101 no izv\u0113l\u0113t\u0101s piesl\u0113guma iesp\u0113jas noteiktas v\u0101rtejas funkcijas var b\u016bt nepieejamas. Risin\u0101jums UserGate atbalsta \u0161\u0101das piesl\u0113guma re\u017e\u012bmus:&nbsp;<\/p>\n<ul>\n<li>\n<p>L3-L7 ugunsm\u016bris<\/p>\n<\/li>\n<li>\n<p>L2 caurredzams tilts<\/p>\n<\/li>\n<li>\n<p>L3 caurredzams tilts<\/p>\n<\/li>\n<li>\n<p>Virtu\u0101li vid\u016b, izmantojot WCCP protokolu<\/p>\n<\/li>\n<li>\n<p>Virtu\u0101li vid\u016b, izmantojot politikas balst\u012btu mar\u0161rut\u0113\u0161anu<\/p>\n<\/li>\n<li>\n<p>Router on a Stick<\/p>\n<\/li>\n<li>\n<p> P\u0101rvald\u012bts WEB-prokssi<\/p>\n<\/li>\n<li>\n<p>UserGate k\u0101 noklus\u0113juma v\u0101rteina<\/p>\n<\/li>\n<li>\n<p>Mirror-portu uzraudz\u012bba<\/p>\n<\/li>\n<\/ul>\n<p>UserGate atbalsta 2 veidu klasterus:<\/p>\n<ol>\n<li>\n<p>Konfigur\u0101cijas klasteris. Kluster\u0101 apvienoti mezgli atbalsta vienotas iestat\u012bjumus klastera ietvaros.<\/p>\n<\/li>\n<li>\n<p>K\u013c\u016bmes notur\u012bbas klasteris. L\u012bdz 4 konfigur\u0101cijas klastera mezgli var tikt apvienoti k\u013c\u016bmes notur\u012bbas klaster\u012b, kas atbalsta Akt\u012bva-Akt\u012bva vai Akt\u012bva-Pas\u012bva re\u017e\u012bmus. Iesp\u0113jams izveidot vair\u0101kus k\u013c\u016bmes notur\u012bbas klasterus.<\/p>\n<\/li>\n<\/ol>\n<h2>2. Uzst\u0101d\u012b\u0161ana<\/h2>\n<p>K\u0101 nor\u0101d\u012bts iepriek\u0161\u0113j\u0101 rakst\u0101, UserGate tiek pied\u0101v\u0101ts programmat\u016bras un aparat\u016bras komplekta veid\u0101 vai tiek izv\u0113rsts virtu\u0101laj\u0101 vid\u0113. No person\u012bg\u0101 konta vietn\u0113 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usergate.com\/\">UserGate <\/a><\/noindex>lejupiel\u0101d\u0113jiet att\u0113lu OVF (Open Virtualization Format) form\u0101t\u0101, \u0161is form\u0101ts ir piem\u0113rots VMWare un Oracle Virtualbox p\u0101rdev\u0113jiem. Microsoft Hyper-v un KVM nodro\u0161ina virtu\u0101lo ma\u0161\u012bnu diska att\u0113lus.<\/p>\n<p>Saska\u0146\u0101 ar UserGate vietnes datiem ieteicams izmantot vismaz 8Gb operat\u012bv\u0101s atmi\u0146as un 2 kodolu virtu\u0101lo procesoru, lai nodro\u0161in\u0101tu pareizu virtu\u0101l\u0101s ma\u0161\u012bnas darb\u012bbu. Hipervizoram j\u0101atbalsta 64 bitu oper\u0113t\u0101jsist\u0113mas.<\/p>\n<p>Uzst\u0101d\u012b\u0161ana s\u0101kas ar att\u0113la import\u0113\u0161anu izv\u0113l\u0113taj\u0101 hipervizor\u0101 (VirtualBox un VMWare). Gad\u012bjum\u0101 ar Microsoft Hyper-v un KVM nepiecie\u0161ams izveidot virtu\u0101lo ma\u0161\u012bnu un nor\u0101d\u012bt lejupiel\u0101d\u0113to att\u0113lu k\u0101 disku, p\u0113c tam atsl\u0113gt integr\u0101cijas pakalpojumus izveidot\u0101s virtu\u0101l\u0101s ma\u0161\u012bnas iestat\u012bjumos.<\/p>\n<p>P\u0113c noklus\u0113juma, import\u0113jot VMWare, tiek izveidota virtu\u0101l\u0101 ma\u0161\u012bna ar \u0161\u0101d\u0101m iestat\u012bjumiem:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/98764da6ccaed86f86c9924fdfe67516.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>K\u0101 tika min\u0113ts iepriek\u0161, operat\u012bv\u0101s atmi\u0146as j\u0101b\u016bt vismaz 8 GB, un papildus j\u0101pie\u0161\u0137ir 1 GB katriem 100 lietot\u0101jiem. Noklus\u0113juma ciet\u0101 diska lielums ir 100 GB, tom\u0113r \u0161\u012b parasti nav pietiekama, lai uzglab\u0101tu visus \u017eurn\u0101lus un iestat\u012bjumus. Ieteicamais lielums ir 300 GB vai vair\u0101k. T\u0101d\u0113\u013c virtu\u0101l\u0101s ma\u0161\u012bnas \u012bpa\u0161\u012bb\u0101s j\u0101maina diska izm\u0113rs uz nepiecie\u0161amo. S\u0101kotn\u0113ji virtu\u0101lais UserGate UTM tiek pieg\u0101d\u0101ts ar \u010detriem interfeisiem, kas pie\u0161\u0137irti zon\u0101m:<\/p>\n<p>Management \u2014 pirm\u0101 virtu\u0101l\u0101s ma\u0161\u012bnas saskarne, zona, kur\u0101 piesl\u0113gt uzticamus t\u012bklus, no kuriem at\u013cauta UserGate p\u0101rvald\u012bba.<\/p>\n<p>Trusted \u2014 otr\u0101 virtu\u0101l\u0101s ma\u0161\u012bnas saskarne, zona, kur\u0101 piesl\u0113gt uzticamus t\u012bklus, piem\u0113ram, LAN t\u012bklus.<\/p>\n<p>Untrusted \u2014 tre\u0161\u0101 virtu\u0101l\u0101s ma\u0161\u012bnas saskarne, zona, kur\u0101 piesl\u0113gtas saskarnes, kas savienotas ar neuzticamiem t\u012bkliem, piem\u0113ram, internetu.<\/p>\n<p>DMZ \u2014 ceturt\u0101 virtu\u0101l\u0101s ma\u0161\u012bnas saskarne, zona, kur\u0101 piesl\u0113gtas saskarnes, kas savienotas ar DMZ t\u012bklu.<\/p>\n<p>T\u0101l\u0101k m\u0113s palaid\u012bsim virtu\u0101l\u0101s ma\u0161\u012bnas, lai gan vadl\u012bnij\u0101s ir rakst\u012bts, ka ir j\u0101izv\u0113las Support Tools un j\u0101veic Factory reset UTM, tom\u0113r k\u0101 redzam, ir tikai viena izv\u0113le (UTM First Boot). \u0160aj\u0101 posm\u0101 UTM konfigur\u0113 t\u012bkla adapterus un palielina nodal\u012bjuma lielumu cietaj\u0101 disk\u0101 l\u012bdz pilnam diska izm\u0113ram:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/f702cb25e9b6fb0da4a8e27ade1b2c01.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Lai piek\u013c\u016btu UserGate t\u012bmek\u013ca interfeisam, j\u0101piesl\u0113dzas caur Management zonu, ko nodro\u0161ina eth0 interfeiss, kas ir konfigur\u0113ts, lai autom\u0101tiski sa\u0146emtu IP adresi (DHCP). Ja nav iesp\u0113jas pie\u0161\u0137irt adresi Management interfeisam autom\u0101tiski, izmantojot DHCP, to var nor\u0101d\u012bt skaidri, izmantojot CLI (Command Line Interface). Lai to izdar\u012btu, j\u0101ielogojas CLI, izmantojot lietot\u0101jv\u0101rdu un paroli ar pilnu administratora ties\u012bb\u0101m (noklus\u0113juma \u2013 Admin ar lielo burtu). Ja UserGate ier\u012bce nav izg\u0101jusi s\u0101kotn\u0113jo inicializ\u0101ciju, tad, lai piek\u013c\u016btu CLI, j\u0101izmanto lietot\u0101jv\u0101rds Admin, bet parole \u2013 utm. Un j\u0101ievada komanda l\u012bdz\u012bga iface config \u2013name eth0 \u2013ipv4 192.168.1.254\/24 \u2013enable true \u2013mode static. P\u0113c tam p\u0101rejam uz UserGate t\u012bmek\u013ca konsoli nor\u0101d\u012btaj\u0101 adres\u0113, tai j\u0101izskat\u0101s aptuveni \u0161\u0101di:<noindex><a rel=\"nofollow\" href=\"https:\/\/usergate_ip_address:8001\/\"> <\/a><\/noindex><u>https:\/\/UserGateIPaddress:8001<\/u>:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/398f741bb9e16c33465c10d072ab31c0.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/0751e1047997f5afde57044beea10f74.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>T\u0101l\u0101k m\u0113s turpin\u0101m instal\u0101ciju t\u012bmek\u013ca konsol\u0113, mums j\u0101izv\u0113las saskarnes valoda (\u0161obr\u012bd t\u0101 var b\u016bt krievu vai ang\u013cu valoda), laika zona, p\u0113c tam izlas\u0101m un piekr\u012btam licenc\u0113\u0161anas l\u012bgumam. Uzst\u0101d\u0101m lietot\u0101jv\u0101rdu un paroli, lai piek\u013c\u016btu p\u0101rvald\u012bbas t\u012bmek\u013ca saskarnei. <\/p>\n<h2>3. Iestat\u012bjumi<\/h2>\n<p>P\u0113c instal\u0101cijas p\u0101rvald\u012bbas platformas t\u012bmek\u013ca saskarne izskat\u0101s \u0161\u0101di:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/16a0d900c66eb23e07a9b5d56915ace8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tad ir nepiecie\u0161ams konfigur\u0113t t\u012bkla saskarnes. \u0160im nol\u016bkam sada\u013c\u0101 \u00abSaskarnes\u00bb j\u0101iesl\u0113dz t\u0101s, j\u0101iestata pareizie IP adre\u0161u un j\u0101pie\u0161\u0137ir attiec\u012bg\u0101s zonas.<\/p>\n<p>Sada\u013ca \u00abSaskarnes\u00bb att\u0113lo visas fizisk\u0101s un virtu\u0101l\u0101s saskarnes sist\u0113m\u0101, \u013cauj main\u012bt to iestat\u012bjumus un pievienot VLAN saskarnes. T\u0101 ar\u012b par\u0101da visus saskarnes katra klastera mezgla. Saskarnes iestat\u012bjumi ir specifiski katram mezglam, proti, tie nav glob\u0101li.<\/p>\n<p>Saskarnes \u012bpa\u0161\u012bb\u0101s:<\/p>\n<ul>\n<li>\n<p>Iesl\u0113gt vai izsl\u0113gt saskarni&nbsp; <\/p>\n<\/li>\n<li>\n<p>Nor\u0101d\u012bt saskarnes tipu \u2014 Layer 3 vai Mirror<\/p>\n<\/li>\n<li>\n<p>Pie\u0161\u0137irt zonu saskarnei<\/p>\n<\/li>\n<li>\n<p>Pie\u0161\u0137irt Netflow profilu statistikas datu s\u016bt\u012b\u0161anai uz Netflow kolektoru<\/p>\n<\/li>\n<li>\n<p>Main\u012bt saskarnes fiziskos parametrus \u2014 MAC adresi un MTU lielumu <\/p>\n<\/li>\n<li>\n<p>Izv\u0113l\u0113ties IP adreses pie\u0161\u0137ir\u0161anas veidu \u2014 bez adreses, statisku IP adresi vai DHCP sa\u0146emtu <\/p>\n<\/li>\n<li>\n<p>Konfigur\u0113t DHCP p\u0101rejas darbu izv\u0113l\u0113taj\u0101 saskarn\u0113.<\/p>\n<\/li>\n<\/ul>\n<p>Poga \u00abPievienot\u00bb \u013cauj pievienot \u0161\u0101dus lo\u0123isko saskaru tipus:<\/p>\n<ul>\n<li>\n<p>VLAN<\/p>\n<\/li>\n<li>\n<p>Bonds<\/p>\n<\/li>\n<li>\n<p>Tilts<\/p>\n<\/li>\n<li>\n<p>PPPoE<\/p>\n<\/li>\n<li>\n<p>VPN<\/p>\n<\/li>\n<li>\n<p>Tunelis<\/p>\n<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/7f389a91d4d8c584140a1d7b1dbe3a11.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Papildus iepriek\u0161 min\u0113taj\u0101m zon\u0101m, ar kur\u0101m tiek pieg\u0101d\u0101ts Usergate att\u0113ls, ir v\u0113l tr\u012bs iepriek\u0161 noteikta veida zonas:<\/p>\n<p>Cluster \u2014 zona saskarn\u0113m, ko izmanto klastera darb\u012bb\u0101<\/p>\n<p>VPN for Site-to-Site \u2014 zona, kur tiek iek\u013cauti visi Office-Office tipa klienti, kas piesl\u0113gti UserGate pa VPN<\/p>\n<p>VPN for remote access \u2014 zona, kur tiek iek\u013cauti visi mobilie lietot\u0101ji, kas piesl\u0113gti UserGate pa VPN<\/p>\n<p>UserGate administratori var main\u012bt noklus\u0113juma izveidoto zonu iestat\u012bjumus un veidot papildu zonas, ta\u010du, k\u0101 nor\u0101d\u012bts 5. versijas rokasgr\u0101mat\u0101, var izveidot ne vair\u0101k k\u0101 15 zonas. Lai t\u0101s main\u012btu vai izveidotu, ir j\u0101iet uz zonu sada\u013cu. Katram zonai var noteikt paketu atme\u0161anas slieksni, tiek atbalst\u012bts SYN, UDP, ICMP. T\u0101pat tiek iestat\u012bta piek\u013cuves kontrole UserGate pakalpojumiem un tiek aktiviz\u0113ta aizsardz\u012bba pret viltot\u0101m IP adres\u0113m.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/86a0d5f6898c5e1a4f10d2827b4c855d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u0113c interfeisa iestat\u012b\u0161anas sada\u013c\u0101 \u201eV\u0101rti\u201d j\u0101iestata noklus\u0113juma mar\u0161ruts. T.i., lai savienotu UserGate ar internetu, j\u0101nor\u0101da viena vai vair\u0101ku v\u0101rtu IP adrese. Ja piek\u013cuvei internetam tiek izmantoti vair\u0101ki pakalpojumu sniedz\u0113ji, j\u0101n nor\u0101da vair\u0101ki v\u0101rti. V\u0101rta iestat\u012bjumi ir unik\u0101li katram klastera mezglam. Ja ir nor\u0101d\u012bti divi vai vair\u0101ki v\u0101rti, past\u0101v 2 darb\u012bbas varianti:<\/p>\n<ol>\n<li>\n<p>Sastr\u0113guma l\u012bdzsvaro\u0161ana starp v\u0101rtej\u0101m.<\/p>\n<\/li>\n<li>\n<p>Galven\u0101 v\u0101rteja ar p\u0101rsl\u0113g\u0161anos uz rezerves.<\/p>\n<\/li>\n<\/ol>\n<p>V\u0101rtejas st\u0101voklis (pieejama \u2013 za\u013ca, nepieejama \u2013 sarkana) tiek noteikts \u0161\u0101di:<\/p>\n<ol>\n<li>\n<p>T\u012bkla p\u0101rbaude ir atsl\u0113gta \u2013 v\u0101rteja tiek uzskat\u012bta par pieejamu, ja UserGate sp\u0113j ieg\u016bt t\u0101s MAC adresi, izmantojot ARP piepras\u012bjumu. Piek\u013cuves internetam p\u0101rbaude caur \u0161o v\u0101rteju netiek veikta. Ja v\u0101rtejas MAC adrese nevar tikt noteikta, v\u0101rteja tiek uzskat\u012bta par nepieejamu.<\/p>\n<\/li>\n<li>\n<p>T\u012bkla p\u0101rbaude ir iesl\u0113gta \u2014 v\u0101rts tiek uzskat\u012bts par pieejamu, ja:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>UserGate var ieg\u016bt t\u0101s MAC adresi, izmantojot ARP piepras\u012bjumu.<\/p>\n<\/li>\n<li>\n<p>Piek\u013cuves internetam p\u0101rbaude caur \u0161o v\u0101rteju ir veiksm\u012bga.<\/p>\n<\/li>\n<\/ul>\n<p>Pret\u0113j\u0101 gad\u012bjum\u0101 v\u0101rteja tiek uzskat\u012bta par nepieejamu.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/f3bbb603ab50d1d665df761fa55efac9.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sada\u013c\u0101 \u201eDNS\u201d j\u0101nor\u0101da DNS serveri, kurus izmantos UserGate. \u0160ie iestat\u012bjumi nor\u0101d\u012bti sada\u013c\u0101 Sist\u0113mas DNS-serveri. Zem\u0101k atrodas iestat\u012bjumi, lai p\u0101rvald\u012btu lietot\u0101ju DNS piepras\u012bjumus. UserGate \u013cauj izmantot DNS starpniekserveri. DNS starpniekservera pakalpojums \u013cauj p\u0101rtvert lietot\u0101ju DNS piepras\u012bjumus un tos main\u012bt atkar\u012bb\u0101 no administratora vajadz\u012bb\u0101m. Ar DNS starpniekservera noteikumiem var nor\u0101d\u012bt DNS serverus, uz kuriem tiek p\u0101rs\u016bt\u012bti piepras\u012bjumi uz noteiktiem dom\u0113niem. Turkl\u0101t, izmantojot DNS starpniekserveri, var izveidot statiskas ieraksta tipa host (A ieraksts).<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/f98bb05fd143b873fdd5fee8cd38a6d0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sada\u013c\u0101 \u201eNAT un Mar\u0161rut\u0113\u0161ana\u201d j\u0101izveido nepiecie\u0161amie NAT noteikumi. Piek\u013cuvei internetam Trusted t\u012bkla lietot\u0101jiem NAT noteikums jau ir izveidots \u2014 \u201eTrusted-&gt;Untrusted\u201d, atliek to tikai iesl\u0113gt. Noteikumi tiek piem\u0113roti no aug\u0161as uz leju taj\u0101 sec\u012bb\u0101, k\u0101d\u0101 tie nor\u0101d\u012bti konsol\u0113. Vienm\u0113r tiek izpild\u012bts pirmais noteikums, kuram ir izpild\u012bti nosac\u012bjumi, kas nor\u0101d\u012bti noteikum\u0101. Lai noteikums darbotos, visiem noteikuma parametru nosac\u012bjumiem j\u0101b\u016bt izpild\u012btiem. UserGate iesaka veidot visp\u0101r\u0113jus NAT noteikumus, piem\u0113ram, NAT noteikumu no lok\u0101l\u0101s t\u012bkla (parasti Trusted zona) uz internetu (parasti Untrusted zona), bet piek\u013cuves ierobe\u017eo\u0161anu lietot\u0101jiem, pakalpojumiem, lietotn\u0113m veikt ar ugunsm\u016bra noteikumiem.<\/p>\n<p>T\u0101pat ir iesp\u0113ja izveidot DNAT noteikumus, portu p\u0101rs\u016bt\u012b\u0161anu, politikas balst\u012btu mar\u0161rutiz\u0101ciju, t\u012bkla kart\u0113\u0161anu.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/efa1a3f8e1b004a3f90c05b957b193f6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u0113c tam sada\u013c\u0101 \u00abUgunsm\u016bris\u00bb ir j\u0101izveido ugunsm\u016bra noteikumi. Neierobe\u017eotai piek\u013cuvei internetam Trusted t\u012bkla lietot\u0101jiem ugunsm\u016bra noteikums jau ir izveidots - \u00abInternet for Trusted\u00bb, un tas ir j\u0101aktiviz\u0113. Ar ugunsm\u016bra noteikumiem administrators var at\u013caut vai aizliegt jebkura veida p\u0101rejas t\u012bkla trafiku, kas \u0161\u0137\u0113rso UserGate. K\u0101 nosac\u012bjumi var kalpot zonas un IP adreses avota \/ galam\u0113r\u0137a, lietot\u0101ji un grupas, pakalpojumi un lietotnes. Noteikumi tiek piem\u0113roti t\u0101pat k\u0101 sada\u013c\u0101 \u00abNAT un Mar\u0161rut\u0113\u0161ana\u00bb, t.i., no aug\u0161as uz leju. Ja nav izveidots neviens noteikums, tad jebkur\u0161 p\u0101rejas trafiks caur UserGate ir aizliegts.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate S\u0101kumlapa. Pras\u012bbas, uzst\u0101d\u012b\u0161ana\" src=\"\/wp-content\/uploads\/2020\/10\/098871017279694492f381069f172483.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>4. Secin\u0101jums<\/h2>\n<p>\u0160aj\u0101 br\u012bd\u012b raksts ir beidzies. M\u0113s esam uzst\u0101d\u012bju\u0161i ugunsm\u016bri UserGate uz virtu\u0101l\u0101s ma\u0161\u012bnas un veiku\u0161i minim\u0101li nepiecie\u0161am\u0101s iestat\u012b\u0161anas darb\u012bbas, lai nodro\u0161in\u0101tu interneta darb\u012bbu Trusted t\u012bkl\u0101. N\u0101kam\u0101s iestat\u012b\u0161anas darb\u012bbas tiks apskat\u012btas n\u0101kamajos rakstos.<\/p>\n<p>Sekojiet m\u016bsu kan\u0101lu jaunumiem (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521322\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u044d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0417\u0430\u0434\u0430\u0447\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d&nbsp;UserGate&nbsp;\u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (\u0431\u0443\u0434\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438&nbsp;VMware&nbsp;Workstation) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 (\u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437&nbsp;UserGate&nbsp;\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442).&nbsp;&nbsp;&nbsp; 1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u044f \u043e\u043f\u0438\u0448\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 \u0432 \u0441\u0435\u0442\u044c. \u0425\u043e\u0447\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. UserGate Ies\u0101kumi. Pras\u012bbas, uzst\u0101d\u012b\u0161ana | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-05T23:42:49+00:00","article:modified_time":"2020-10-05T23:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95964","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:54:37","updated":"2022-09-28 17:15:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/95964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=95964"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/95964\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/95965"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=95964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=95964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=95964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}