{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sveicin\u0101ti las\u012bt\u0101ji tre\u0161aj\u0101 UserGate s\u0101ks tiek\u0161an\u0101s rakst\u0101, kur tiek st\u0101st\u012bts par NGFW risin\u0101jumu no uz\u0146\u0113muma&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. Iepriek\u0161\u0113j\u0101 rakst\u0101 tika aprakst\u012bts starpniekservera uzst\u0101d\u012b\u0161anas process un veikta t\u0101 s\u0101kotn\u0113j\u0101 konfigur\u0101cija. Tagad m\u0113s detaliz\u0113t\u0101k izp\u0113t\u012bsim noteikumu izveidi sada\u013c\u0101s, piem\u0113ram, \u201cStarpniekserveris\u201d, \u201cNAT un mar\u0161rut\u0113\u0161ana\u201d un \u201cP\u0101rvades jauda\u201d.<\/p>\n<p>UserGate noteikumu ideolo\u0123ija ir t\u0101da, ka noteikumi tiek izpild\u012bti no aug\u0161as uz leju, l\u012bdz tiek izpild\u012bts pirmais. Izmantojot iepriek\u0161 aprakst\u012bto, var secin\u0101t, ka specifisk\u0101ki noteikumi j\u0101novieto virs visp\u0101r\u0113jiem noteikumiem. Tom\u0113r j\u0101atz\u012bm\u0113, ka, t\u0101 k\u0101 noteikumi tiek p\u0101rbaud\u012bti sec\u012bgi, attiec\u012bb\u0101 uz veiktsp\u0113ju ir lab\u0101k izveidot visp\u0101r\u012bgus noteikumus. Nosac\u012bjumi, izveidojot jebkuru noteikumu, tiek piem\u0113roti saska\u0146\u0101 ar \u201cUN\u201d lo\u0123iku. Ja nepiecie\u0161ams izmantot \u201cVAI\u201d lo\u0123iku, to var sasniegt, izveidojot vair\u0101kus noteikumus. T\u0101tad, \u0161aj\u0101 rakst\u0101 aprakst\u012bt\u0101 inform\u0101cija attiecas ar\u012b uz cit\u0101m UserGate politik\u0101m.<\/p>\n<h3>Starpniekserveris<\/h3>\n<p>P\u0113c UserGate uzst\u0101d\u012b\u0161anas sada\u013c\u0101 \u201cStarpniekserveris\u201d jau ir vienk\u0101r\u0161a politika. Pirmie divi noteikumi aizliedz pl\u016bsmu botu t\u012bkliem. P\u0113c tam seko piek\u013cuves noteikumu piem\u0113ri no da\u017e\u0101d\u0101m zon\u0101m. P\u0113d\u0113jais noteikums vienm\u0113r tiek d\u0113v\u0113ts par \u201cAizliegt visu\u201d un ir atz\u012bm\u0113ts ar sl\u0113dzenes simbolu (tas noz\u012bm\u0113, ka noteikumu nevar dz\u0113st, main\u012bt, p\u0101rvietot vai atsl\u0113gt; tam var tikai iesl\u0113gt \u017eurn\u0101la iesp\u0113ju). T\u0101d\u0113j\u0101di \u0161\u012b noteikuma d\u0113\u013c visa skaidri nenoteikt\u0101 pl\u016bsma tiks blo\u0137\u0113ta ar p\u0113d\u0113jo noteikumu. Ja nepiecie\u0161ams at\u013caut visu pl\u016bsmu caur UserGate (lai gan tas tiek stingri nerekomend\u0113ts), vienm\u0113r var izveidot priek\u0161p\u0113d\u0113jo noteikumu \u201cAt\u013caut visu\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Redi\u0123\u0113jot vai izveidojot noteikumu starpniekserverim pirmaj\u0101 <em>ciln\u0113 \u201cVisp\u0101r\u012bgi\u201d<\/em>, taj\u0101 j\u0101veic sekojo\u0161as darb\u012bbas:&nbsp;<\/p>\n<ul>\n<li>\n<p>Ar izv\u0113les r\u016bti\u0146u \u201cIesl\u0113gt\u201d (Vkl) iesl\u0113dziet vai izsl\u0113dziet noteikumu.<\/p>\n<\/li>\n<li>\n<p>ievadiet noteikuma nosaukumu.<\/p>\n<\/li>\n<li>\n<p>nor\u0101diet noteikuma aprakstu.<\/p>\n<\/li>\n<li>\n<p>izv\u0113l\u0113ties no div\u0101m darb\u012bb\u0101m:<\/p>\n<ul>\n<li>\n<p>Aizliegt \u2013 blo\u0137\u0113 pl\u016bsmu (izr\u0101dot \u0161o nosac\u012bjumu, ir iesp\u0113ja nos\u016bt\u012bt ICMP host unreachable; j\u0101izv\u0113las attiec\u012bg\u0101 izv\u0113les r\u016bti\u0146a).<\/p>\n<\/li>\n<li>\n<p>At\u013caut \u2013 at\u013cauj pl\u016bsmu.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Scen\u0101rija punkts \u2014 \u013cauj izv\u0113l\u0113ties scen\u0101riju, kas ir papildu nosac\u012bjums, lai likums st\u0101tos sp\u0113k\u0101. T\u0101 uz\u0146\u0113mums UserGate \u012bsteno SOAR (Security Orchestration, Automation and Response) koncepciju.<\/p>\n<\/li>\n<li>\n<p>\u017durn\u0101lfail\u0113\u0161ana \u2014 ierakst\u012bt \u017eurn\u0101l\u0101 inform\u0101ciju par datu pl\u016bsmu, kad tiek aktiviz\u0113ts noteikums. Pieejami varianti:<\/p>\n<ul>\n<li>\n<p>\u017durn\u0101lfail\u0113t sesijas s\u0101kumu. \u0160aj\u0101 gad\u012bjum\u0101 \u017eurn\u0101l\u0101 tiks ierakst\u012bta tikai inform\u0101cija par sesijas s\u0101kumu (pirmais datu p\u0101rs\u016bt\u012b\u0161anas pakets). Tas ir ieteicamais \u017eurn\u0101lfail\u0113\u0161anas variants.<\/p>\n<\/li>\n<li>\n<p>\u017durn\u0101lfail\u0113t katru paketi. \u0160aj\u0101 gad\u012bjum\u0101 tiks ierakst\u012bta inform\u0101cija par katru p\u0101rs\u016bt\u012bto datu p\u0101rneses paketi. \u0160ai re\u017e\u012bm\u0101 ieteicams iesl\u0113gt \u017eurn\u0101lfail\u0113\u0161anas ierobe\u017eojumus, lai nov\u0113rstu ier\u012bces p\u0101rslodzi.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Piem\u0113rot noteikumu:<\/p>\n<ul>\n<li>\n<p>Vis\u0101m paket\u0113m<\/p>\n<\/li>\n<li>\n<p>pa fragment\u0113t\u0101m paket\u0113m<\/p>\n<\/li>\n<li>\n<p>pa nefragment\u0113t\u0101m paket\u0113m<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Jaun\u0101 noteikuma izveid\u0113 var izv\u0113l\u0113ties vietu politik\u0101.<\/p>\n<\/li>\n<\/ul>\n<p>N\u0101kamais <em>cilne \u201cAvots\u201d<\/em>. \u0160eit m\u0113s nor\u0101d\u0101m datu pl\u016bsmas avotu, tas var b\u016bt zona, no kuras ien\u0101k datu pl\u016bsma, vai ar\u012b var nor\u0101d\u012bt sarakstu vai konkr\u0113tu IP adresi (Geoip). Praktiski visos noteikumos, kurus var izveidot ier\u012bc\u0113, objektu var izveidot no noteikuma, piem\u0113ram, nerodoties noda\u013c\u0101 \u201cZonas\u201d, ar pogu \u201cIzveidot un pievienot jaunu objektu\u201d var izveidot nepiecie\u0161amo zonu. Bie\u017ei sastopams ir ar\u012b izv\u0113les lodzi\u0146\u0161 \u201cInvert\u0113t\u201d, kas maina noteikuma nosac\u012bjuma darb\u012bbu uz pret\u0113ju, kas ir l\u012bdz\u012bgi lo\u0123iskai darb\u012bbai \u2014 noliegumam. <em>Cilne &#171;M\u0113r\u0137is&#187;<\/em> ir l\u012bdz\u012bga k\u0101 avota cilne, tikai viet\u0101 avota datu pl\u016bsmas m\u0113s nor\u0101d\u0101m datu pl\u016bsmas m\u0113r\u0137i. <em>Cilne &#171;Lietot\u0101ji&#187;<\/em> \u2014 \u0161aj\u0101 viet\u0101 var pievienot lietot\u0101ju vai grupu sarakstu, kur\u0101m tiek piem\u0113rots \u0161is noteikums. <em>Cilne &#171;Serviss&#187;<\/em> \u2014 izv\u0113lamies pakalpojuma veidu no jau iepriek\u0161 defin\u0113t\u0101 vai varam nor\u0101d\u012bt savu. <em>Cilne &#171;Lietotne&#187;<\/em> \u2014 \u0161eit izv\u0113lamies konkr\u0113tus lietojumus vai lietojumu grupas. Un <em>Cilne &#171;Laiks&#187;<\/em> nor\u0101d\u0101m laiku, kad \u0161is noteikums ir sp\u0113k\u0101.&nbsp;<\/p>\n<p>No iepriek\u0161\u0113j\u0101s stundas mums ir noteikums internetam izie\u0161anai no zonas \u201cTrust\u201d, tagad es par\u0101d\u012b\u0161u, k\u0101 izveidot noteikumu, kas aizliedz ICMP datu pl\u016bsmu no zonas \u201cTrust\u201d uz zonu \u201cUntrusted\u201d k\u0101 piem\u0113ru.<\/p>\n<p>Vispirms izveidojam noteikumu, nospie\u017eot pogu \u201cPievienot\u201d. Atv\u0113rtaj\u0101 log\u0101, sada\u013c\u0101 visp\u0101r\u0113jais, aizpild\u0101m nosaukumu (ICMP aizliegums no trusted uz untrusted), atz\u012bm\u0113jam izv\u0113les r\u016bti\u0146u \u201cAkt\u012bv\u201d, izv\u0113lamies darb\u012bbu aizliegt un, pats svar\u012bg\u0101kais, pareizi izv\u0113lamies \u0161o noteikumu poz\u012bciju. Saska\u0146\u0101 ar manu politiku \u0161im noteikumam j\u0101atrodas virs noteikuma \u201cAt\u013caut trusted uz untrusted\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sada\u013c\u0101 \u201cAvots\u201d manai uzdevumam ir divi varianti:<\/p>\n<ul>\n<li>\n<p>Izv\u0113loties zonu \u201cTrusted\u201d<\/p>\n<\/li>\n<li>\n<p>Izv\u0113loties visas zonas iz\u0146emot \u201cTrusted\u201d un atz\u012bm\u0113jot izv\u0113les r\u016bti\u0146u \u201cInvert\u0113t\u201d<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Sada\u013ca \u201cM\u0113r\u0137is\u201d tiek iestat\u012bta l\u012bdz\u012bgi sada\u013cai \u201cAvots\u201d.<\/p>\n<p>T\u0101l\u0101k p\u0101rejam uz cilni \u201cServiss\u201d, jo UserGate ir iepriek\u0161 defin\u0113ts serviss ICMP satiksmei, l\u012bdz ar to, nospie\u017eot pogu &#171;Pievienot&#187;, izv\u0113lamies no pied\u0101v\u0101t\u0101 saraksta servisu ar nosaukumu \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Varb\u016bt t\u0101 ar\u012b bija pl\u0101nots UserGate izstr\u0101d\u0101t\u0101jiem, ta\u010du man izdev\u0101s izveidot vair\u0101kus piln\u012bgi identiskus noteikumus. Lai gan tiks izpild\u012bts tikai pirmais noteikums sarakst\u0101, iesp\u0113ja izveidot da\u017e\u0101dus funkcion\u0101los noteikumus ar identiskiem nosaukumiem, dom\u0101ju, var izrais\u012bt neskaidr\u012bbas, ja vair\u0101k nek\u0101 viens ier\u012bces administrators to lieto.<\/p>\n<h3>NAT un mar\u0161rut\u0113\u0161ana<\/h3>\n<p>Izveidojot NAT noteikumus, m\u0113s redzam vair\u0101kas l\u012bdz\u012bgas sada\u013cas, k\u0101 ar\u012b starpniekserverim. Sada\u013c\u0101 \u201cVisp\u0101r\u0113jais\u201d par\u0101d\u012bjusies lauks \u201cTips\u201d, kas \u013cauj izv\u0113l\u0113ties, par ko atbild\u0113s \u0161is noteikums:<\/p>\n<ul>\n<li>\n<p>NAT &#8212; T\u012bkla adreses p\u0101rveido\u0161ana.<\/p>\n<\/li>\n<li>\n<p>DNAT &#8212; P\u0101rvirza satiksmi uz nor\u0101d\u012bto IP adresi.<\/p>\n<\/li>\n<li>\n<p>Porta p\u0101rs\u016bt\u012b\u0161ana &#8212; P\u0101rvirza satiksmi uz nor\u0101d\u012bto IP adresi, bet \u013cauj main\u012bt publik\u0101cijas servisa porta numuru.<\/p>\n<\/li>\n<li>\n<p>Politiku balst\u012bta mar\u0161rut\u0113\u0161ana &#8212; \u013bauj mar\u0161rut\u0113t IP paketes, pamatojoties uz papla\u0161in\u0101tu inform\u0101ciju, piem\u0113ram, pakalpojumiem, MAC adres\u0113m vai serveriem (IP adres\u0113m).<\/p>\n<\/li>\n<li>\n<p>T\u012bkla kart\u0113\u0161ana &#8212; \u013bauj aizvietot IP adreses avotiem vai galam\u0113r\u0137iem no vienas t\u012bkla uz citu.<\/p>\n<\/li>\n<\/ul>\n<p>P\u0113c atbilsto\u0161\u0101 veida izv\u0113les tiks pieejamas iestat\u012bjumi tam.<\/p>\n<p>SNAT IP lauk\u0101 (\u0101r\u0113j\u0101 adrese) m\u0113s skaidri nor\u0101d\u0101m IP adresi, uz kuru tiks aizvietota avota adrese. \u0160is lauks nepiecie\u0161ams, ja ir vair\u0101ki IP adreses, kas pie\u0161\u0137irtas m\u0113r\u0137a zonas interfeisiem. Ja \u0161o lauku atst\u0101j tuk\u0161u, sist\u0113ma izmantos nejau\u0161u adresi no pieejamo IP adresu saraksta, kas pie\u0161\u0137irtas m\u0113r\u0137a zonas interfeisiem. UserGate iesaka nor\u0101d\u012bt SNAT IP, lai uzlabotu ugunsm\u016bra veiktsp\u0113ju.<\/p>\n<p>Piem\u0113ram, public\u0113\u0161u SSH servera Windows pakalpojumu, kas atrodas 'DMZ' zon\u0101, izmantojot 'port forwarding' noteikumu. Lai to izdar\u012btu, nospie\u017eam pogu 'Pievienot' un aizpild\u0101m cilni 'Visp\u0101r\u012bgi', nor\u0101dot noteikuma nosaukumu 'SSH to Windows' un tipu 'Port forwarding':<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ciln\u0113 \u201cAvots\u201d izv\u0113lamies zonu \u201cUntrusted\u201d un p\u0101rejam uz cilni \u201cPorta p\u0101rs\u016bt\u012b\u0161ana\u201d. \u0160eit mums j\u0101nor\u0101da protokols \u201cTCP\u201d (pieejami \u010detri varianti &#8212; TCP, UDP, SMTP, SMTPS). Ori\u0123in\u0101lais m\u0113r\u0137a ports 9922 &#8212; porta numurs, uz kuru lietot\u0101ji s\u016bta piepras\u012bjumus (nav at\u013cauts izmantot portus: 2200, 8001, 4369, 9000-9100). Jaunais m\u0113r\u0137a ports (22) &#8212; porta numurs, uz kuru tiks p\u0101rs\u016bt\u012bti lietot\u0101ju piepras\u012bjumi uz iek\u0161\u0113jo public\u0113to serveri.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ciln\u0113 'DNAT' nor\u0101d\u0101m datora IP adresi viet\u0113j\u0101 t\u012bkl\u0101, kas tiek public\u0113ta internet\u0101 (192.168.3.2). Un opcijon\u0101li var iesl\u0113gt SNAT, tad UserGate main\u012bs avota adresi paketes no \u0101r\u0113j\u0101 t\u012bkla uz savu IP adresi.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u0113c vis\u0101m iestat\u012b\u0161an\u0101m ieg\u016bstam noteikumu, kas \u013cauj piek\u013c\u016bt no zonas 'Untrusted' serverim ar IP adresi 192.168.3.2, izmantojot SSH protokolu, izmantojot savienojumam \u0101r\u0113jo adresi UserGate.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Caurlai\u017eu jauda<\/h3>\n<p>\u0160aj\u0101 sada\u013c\u0101 tiek noteikti noteikumi caurlai\u017eu jaudas p\u0101rvald\u012bbai. Tie var tikt izmantoti, lai ierobe\u017eotu noteiktu lietot\u0101ju, hostu, pakalpojumu, aplik\u0101ciju kan\u0101lu.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Izveidojot noteikumu, nosac\u012bjumus ciln\u0113s nosak\u0101m satiksmi, kurai tiks piem\u0113roti ierobe\u017eojumi. Joslas platumu var izv\u0113l\u0113ties no pied\u0101v\u0101taj\u0101m, vai ar\u012b nor\u0101d\u012bt savu. Joslas platuma izveid\u0113 var nor\u0101d\u012bt satiksmes prioriz\u0101cijas mar\u0137\u0113jumu DSCP. Piem\u0113rs situ\u0101cijai, kad tiek izmantoti DSCP mar\u0137\u0113jumi: nor\u0101dot noteikumu scen\u0101riju, kur\u0101 tiek piem\u0113rota \u0161\u012b noteikuma, tas var autom\u0101tiski main\u012bt \u0161os mar\u0137\u0113jumus. V\u0113l viens scen\u0101rija piem\u0113rs: noteikums darbosies tikai tad, kad tiks konstat\u0113ts torrents vai satiksmes apjoms p\u0101rsniegs noteikto ierobe\u017eojumu. P\u0101r\u0113j\u0101s cilnes aizpild\u0101m t\u0101pat k\u0101 cit\u0101s politik\u0101s, pamatojoties uz satiksmes veidu, kuram j\u0101b\u016bt piem\u0113rotam noteikumam.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate s\u0101ks tiek\u0161an\u0101s. T\u012bkla politikas\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Secin\u0101jums<\/h3>\n<p>\u0160aj\u0101 rakst\u0101 es apskat\u012bju noteikumu izveidi sada\u013c\u0101s \"Ugunsm\u016bris\", \"NAT un mar\u0161rut\u0113\u0161ana\" un \"Joslas platums\". Un pa\u0161\u0101 raksta s\u0101kum\u0101 aprakst\u012bju lietot\u0101ju noteikumu veido\u0161anas principus, k\u0101 ar\u012b noteikumu nosac\u012bjumu darb\u012bbu.&nbsp;<\/p>\n<p>Sekojiet m\u016bsu kan\u0101lu jaunumiem (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Iepaz\u012b\u0161an\u0101s. T\u012bkla politikas | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}