{"id":95964,"date":"2020-10-06T01:42:49","date_gmt":"2020-10-05T23:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka"},"modified":"2020-10-06T01:42:49","modified_gmt":"2020-10-05T23:42:49","slug":"2-usergate-getting-started-trebovaniya-ustanovka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","title":{"rendered":"2. UserGate \u00cenceputuri. Cerin\u021be, instalare","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/0dec3bafb496cf5c88562b7d59252a30.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bun\u0103, aceasta este a doua articol despre solu\u021bia NGFW de la companie&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. Scopul acestui articol este de a ar\u0103ta cum s\u0103 instala\u021bi firewall-ul UserGate pe un sistem virtual (voi folosi software-ul de virtualizare VMware Workstation) \u0219i s\u0103 efectua\u021bi configura\u021bia ini\u021bial\u0103 (permite\u021bi accesul din re\u021beaua local\u0103 prin gateway-ul UserGate c\u0103tre internet).&nbsp;&nbsp;&nbsp;<\/p>\n<h2>1. Introducere<\/h2>\n<p>Mai \u00eent\u00e2i voi descrie diferitele modalit\u0103\u021bi de implementare a acestui gateway \u00een re\u021bea. Vreau s\u0103 men\u021bionez c\u0103, \u00een func\u021bie de op\u021biunea de conectare aleas\u0103, anumite func\u021bionalit\u0103\u021bi ale gateway-ului pot s\u0103 nu fie disponibile. Solu\u021bia UserGate suport\u0103 urm\u0103toarele moduri de conectare:&nbsp;<\/p>\n<ul>\n<li>\n<p>Firewall L3-L7<\/p>\n<\/li>\n<li>\n<p>Pod transparent L2<\/p>\n<\/li>\n<li>\n<p>Pod transparent L3<\/p>\n<\/li>\n<li>\n<p>Virtual \u00een marj\u0103, folosind protocolul WCCP<\/p>\n<\/li>\n<li>\n<p>Virtual \u00een marj\u0103, folosind Routing pe Baz\u0103 de Politici<\/p>\n<\/li>\n<li>\n<p>Router pe un Stick<\/p>\n<\/li>\n<li>\n<p> Proxy WEB explicit<\/p>\n<\/li>\n<li>\n<p>UserGate, ca gateway implicit<\/p>\n<\/li>\n<li>\n<p>Monitorizarea portului Mirror<\/p>\n<\/li>\n<\/ul>\n<p>UserGate suporta 2 tipuri de clustere:<\/p>\n<ol>\n<li>\n<p>Cluster de configurare. Nodurile unite \u00eentr-un cluster de configurare sus\u021bin set\u0103ri comune \u00een cadrul cluster-ului.<\/p>\n<\/li>\n<li>\n<p>Cluster de rezilien\u021b\u0103. P\u00e2n\u0103 la 4 noduri din clusterul de configurare pot fi unite \u00eentr-un cluster de rezilien\u021b\u0103, care sus\u021bine operarea \u00een mod Activ-Activ sau Activ-Pasiv. Este posibil s\u0103 se construiasc\u0103 mai multe clustere de rezilien\u021b\u0103.<\/p>\n<\/li>\n<\/ol>\n<h2>2. Instalare<\/h2>\n<p>Dup\u0103 cum s-a men\u021bionat \u00een articolul anterior, UserGate este livrat sub form\u0103 de complex software-hardware sau se desf\u0103\u0219oar\u0103 \u00een mediu virtual. Din contul personal de pe site <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usergate.com\/\">UserGate <\/a><\/noindex>desc\u0103rc\u0103m imaginea \u00een format OVF (Open Virtualization Format), acest format este potrivit pentru furnizorii VMware \u0219i Oracle VirtualBox. Pentru Microsoft Hyper-V \u0219i KVM sunt furnizate imagini de discuri de ma\u0219ini virtuale.<\/p>\n<p>Conform datelor de pe site-ul UserGate, pentru o func\u021bionare corect\u0103 a ma\u0219inii virtuale se recomand\u0103 utilizarea a minim 8 Gb de RAM \u0219i un procesor virtual cu 2 nuclee. Hypervizorul trebuie s\u0103 suporte func\u021bionarea sistemelor de operare pe 64 de bi\u021bi.<\/p>\n<p>Instalarea \u00eencepe cu importul imaginii \u00een hypervizorul ales (VirtualBox \u0219i VMware). \u00cen cazul Microsoft Hyper-V \u0219i KVM este necesar s\u0103 crea\u021bi o ma\u0219in\u0103 virtual\u0103 \u0219i s\u0103 specifica\u021bi imaginea desc\u0103rcat\u0103 ca disc, dup\u0103 care s\u0103 dezactiva\u021bi serviciile de integrare \u00een set\u0103rile ma\u0219inii virtuale create.<\/p>\n<p>Implicit, dup\u0103 import \u00een VMware, se creeaz\u0103 o ma\u0219in\u0103 virtual\u0103 cu urm\u0103toarele set\u0103ri:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/98764da6ccaed86f86c9924fdfe67516.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dup\u0103 cum s-a men\u021bionat anterior, memoria RAM trebuie s\u0103 fie de minimum 8Gb, iar \u00een plus este necesar s\u0103 ad\u0103ug\u0103m c\u00e2te 1Gb pentru fiecare 100 de utilizatori. Dimensiunea discului dur implicit este de 100Gb, totu\u0219i, de obicei, aceasta nu este suficient\u0103 pentru a stoca toate jurnalurile \u0219i configur\u0103rile. Dimensiunea recomandat\u0103 este de 300Gb sau mai mult. Prin urmare, \u00een propriet\u0103\u021bile ma\u0219inii virtuale, modific\u0103m dimensiunea discului la valoarea necesar\u0103. Ini\u021bial, UserGate UTM este livrat cu patru interfe\u021be, atribuite \u00een zone:<\/p>\n<p>Management \u2014 prima interfa\u021b\u0103 a ma\u0219inii virtuale, zon\u0103 pentru conectarea re\u021belelor de \u00eencredere din care este permis\u0103 gestionarea UserGate.<\/p>\n<p>Trusted \u2014 a doua interfa\u021b\u0103 a ma\u0219inii virtuale, zon\u0103 pentru conectarea re\u021belelor de \u00eencredere, de exemplu, re\u021bele LAN.<\/p>\n<p>Untrusted \u2014 a treia interfa\u021b\u0103 a ma\u0219inii virtuale, zon\u0103 pentru interfe\u021bele conectate la re\u021bele nesigure, de exemplu, la internet.<\/p>\n<p>DMZ \u2014 a patra interfa\u021b\u0103 a ma\u0219inii virtuale, zon\u0103 pentru interfe\u021bele conectate la re\u021beaua DMZ.<\/p>\n<p>Apoi, lans\u0103m ma\u0219inile virtuale; de\u0219i \u00een manual se men\u021bioneaz\u0103 c\u0103 trebuie s\u0103 select\u0103m Support Tools \u0219i s\u0103 execut\u0103m Factory reset UTM, se pare c\u0103 exist\u0103 doar o singur\u0103 op\u021biune (UTM First Boot). \u00cen timpul acestui pas, UTM configureaz\u0103 adaptorele de re\u021bea \u0219i m\u0103re\u0219te dimensiunea parti\u021biei pe discul dur la dimensiunea total\u0103 a discului:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/f702cb25e9b6fb0da4a8e27ade1b2c01.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pentru a v\u0103 conecta la interfa\u021ba web UserGate, este necesar s\u0103 accesa\u021bi zona Management, pentru aceasta fiind responsabil\u0103 interfa\u021ba eth0, care este setat\u0103 s\u0103 primeasc\u0103 adresa IP \u00een mod automat (DHCP). Dac\u0103 nu este posibil s\u0103 aloca\u021bi o adres\u0103 pentru interfa\u021ba Management \u00een mod automat prin DHCP, aceasta poate fi setat\u0103 explicit folosind CLI (Command Line Interface). Pentru aceasta, trebuie s\u0103 v\u0103 conecta\u021bi la CLI, folosind numele \u0219i parola utilizatorului cu drepturi de Full administrator (implicit Admin, cu liter\u0103 mare). Dac\u0103 dispozitivul UserGate nu a trecut prin ini\u021bializarea ini\u021bial\u0103, pentru accesul la CLI trebuie s\u0103 folosi\u021bi numele de utilizator Admin \u0219i parola \u2013 utm. \u0218i s\u0103 introduce\u021bi un comand\u0103 de genul iface config \u2013name eth0 \u2013ipv4 192.168.1.254\\\/24 \u2013enable true \u2013mode static. Ulterior, trecem la consola web UserGate la adresa specificat\u0103, care ar trebui s\u0103 arate aproximativ \u00een felul urm\u0103tor:<noindex><a rel=\"nofollow\" href=\"https:\/\/usergate_ip_address:8001\/\"> <\/a><\/noindex><u>https:\/\/UserGateIPaddress:8001<\/u>:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/398f741bb9e16c33465c10d072ab31c0.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/0751e1047997f5afde57044beea10f74.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen consola web continu\u0103m instala\u021bia, trebuie s\u0103 alegem limba interfe\u021bei (\u00een prezent este limba rus\u0103 sau englez\u0103), fusul orar, apoi citim \u0219i suntem de acord cu acordul de licen\u021b\u0103. Stabilim un nume de utilizator \u0219i o parol\u0103 pentru accesul la interfa\u021ba web de management. <\/p>\n<h2>3. Configurare<\/h2>\n<p>Dup\u0103 instalare, fereastra interfe\u021bei web de gestionare arat\u0103 astfel:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/16a0d900c66eb23e07a9b5d56915ace8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Apoi, este necesar s\u0103 configura\u021bi interfe\u021bele de re\u021bea. Pentru aceasta, \u00een sec\u021biunea \u201eInterfe\u021be\u201d trebuie s\u0103 le activa\u021bi, s\u0103 seta\u021bi adresele IP corecte \u0219i s\u0103 le atribui\u021bi zonele corespunz\u0103toare.<\/p>\n<p>Sec\u021biunea \u201eInterfe\u021be\u201d afi\u0219eaz\u0103 toate interfe\u021bele fizice \u0219i virtuale disponibile \u00een sistem, permite modificarea set\u0103rilor acestora \u0219i ad\u0103ugarea interfe\u021belor VLAN. De asemenea, arat\u0103 toate interfe\u021bele fiec\u0103rui nod al cluster-ului. Set\u0103rile interfe\u021belor sunt specifice pentru fiecare dintre noduri, adic\u0103 nu sunt globale.<\/p>\n<p>\u00cen propriet\u0103\u021bile interfe\u021bei:<\/p>\n<ul>\n<li>\n<p>Activare sau dezactivare interfa\u021b\u0103&nbsp; <\/p>\n<\/li>\n<li>\n<p>Specifica\u021bi tipul interfe\u021bei \u2014 Layer 3 sau Mirror<\/p>\n<\/li>\n<li>\n<p>Atribui\u021bi o zon\u0103 interfe\u021bei<\/p>\n<\/li>\n<li>\n<p>Atribui\u021bi un profil Netflow pentru a trimite datele statistice c\u0103tre colectorul Netflow<\/p>\n<\/li>\n<li>\n<p>Schimba\u021bi parametrii fizici ai interfe\u021bei \u2014 adresa MAC \u0219i dimensiunea MTU <\/p>\n<\/li>\n<li>\n<p>Alege\u021bi tipul de alocare a adresei IP \u2014 f\u0103r\u0103 adres\u0103, adres\u0103 IP static\u0103 sau ob\u021binut\u0103 prin DHCP <\/p>\n<\/li>\n<li>\n<p>Configura\u021bi func\u021bionarea relay-ului DHCP pe interfa\u021ba selectat\u0103.<\/p>\n<\/li>\n<\/ul>\n<p>Butonul \u201eAd\u0103uga\u021bi\u201d permite ad\u0103ugarea urm\u0103toarelor tipuri de interfe\u021be logice:<\/p>\n<ul>\n<li>\n<p>VLAN<\/p>\n<\/li>\n<li>\n<p>Bond<\/p>\n<\/li>\n<li>\n<p>Pod<\/p>\n<\/li>\n<li>\n<p>PPPoE<\/p>\n<\/li>\n<li>\n<p>VPN<\/p>\n<\/li>\n<li>\n<p>Tunel<\/p>\n<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/7f389a91d4d8c584140a1d7b1dbe3a11.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pe l\u00e2ng\u0103 zonele men\u021bionate anterior, cu care se livreaz\u0103 imaginea Usergate, exist\u0103 \u0219i trei tipuri predefinite:<\/p>\n<p>Cluster \u2014 zon\u0103 pentru interfe\u021bele utilizate pentru operarea cluster-ului<\/p>\n<p>VPN for Site-to-Site \u2014 zon\u0103 \u00een care sunt plasate toate clien\u021bii de tip Oficiu-Ofic\u0103, conecta\u021bi la UserGate prin VPN<\/p>\n<p>VPN for remote access \u2014 zon\u0103 \u00een care sunt plasate to\u021bi utilizatorii mobili conecta\u021bi la UserGate prin VPN<\/p>\n<p>Administratorii UserGate pot modifica set\u0103rile zonelor create implicit, precum \u0219i crea zone suplimentare, dar a\u0219a cum este men\u021bionat \u00een manualul versiunii 5, se pot crea nu mai mult de 15 zone. Pentru a modifica sau crea zone, trebuie s\u0103 accesa\u021bi sec\u021biunea zone. Pentru fiecare zon\u0103 se poate stabili un prag de abandonare a pachetelor, suport\u00e2nd SYN, UDP, ICMP. De asemenea, se configureaz\u0103 controlul accesului la serviciile Usergate \u0219i se activeaz\u0103 protec\u021bia \u00eempotriva spoofing-ului.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/86a0d5f6898c5e1a4f10d2827b4c855d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dup\u0103 configurarea interfe\u021belor, este necesar, \u00een sec\u021biunea \u201eGateways\u201d, s\u0103 seta\u021bi ruta implicit\u0103. Adic\u0103, pentru a conecta UserGate la internet, trebuie s\u0103 specifica\u021bi adresa IP a unuia sau mai multor gateway-uri. Dac\u0103 se folosesc mai mul\u021bi furnizori pentru conectarea la internet, trebuie specificate mai multe gateway-uri. Configurarea gateway-ului este unic\u0103 pentru fiecare dintre nodurile cluster-ului. Dac\u0103 sunt specificate dou\u0103 sau mai multe gateway-uri, exist\u0103 dou\u0103 op\u021biuni de func\u021bionare:<\/p>\n<ol>\n<li>\n<p>\u00cemp\u0103r\u021birea traficului \u00eentre gateway-uri.<\/p>\n<\/li>\n<li>\n<p>Gateway-ul principal, cu comutare pe de rezerv\u0103.<\/p>\n<\/li>\n<\/ol>\n<p>Starea gateway-ului (disponibil \u2013 verde, nedisponibil \u2013 ro\u0219u) se determin\u0103 astfel:<\/p>\n<ol>\n<li>\n<p>Verificarea re\u021belei este dezactivat\u0103 \u2013 gateway-ul este considerat disponibil dac\u0103 UserGate poate ob\u021bine adresa sa MAC printr-o interogare ARP. Verificarea accesului la internet prin acest gateway nu se efectueaz\u0103. Dac\u0103 adresa MAC a gateway-ului nu poate fi determinat\u0103, gateway-ul este considerat nedisponibil.<\/p>\n<\/li>\n<li>\n<p>Verificarea re\u021belei este activat\u0103 \u2014 gateway-ul este considerat disponibil dac\u0103:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>UserGate poate ob\u021bine adresa sa MAC printr-o interogare ARP.<\/p>\n<\/li>\n<li>\n<p>Verificarea accesului la internet prin acest gateway a fost finalizat\u0103 cu succes.<\/p>\n<\/li>\n<\/ul>\n<p>\u00cen caz contrar, gateway-ul este considerat nedisponibil.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/f3bbb603ab50d1d665df761fa55efac9.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen sec\u021biunea \u201eDNS\u201d trebuie s\u0103 ad\u0103uga\u021bi serverele DNS pe care le va folosi UserGate. Aceast\u0103 configura\u021bie se specific\u0103 \u00een zona Servere DNS sistemice. Mai jos se afl\u0103 set\u0103rile pentru gestionarea cererilor DNS de la utilizatori. UserGate permite utilizarea proxy-ului DNS. Serviciul proxy DNS permite interceptarea cererilor DNS de la utilizatori \u0219i modificarea acestora \u00een func\u021bie de necesit\u0103\u021bile administratorului. Prin reguli DNS-proxy, pute\u021bi specifica serverele DNS la care sunt redirec\u021bionate cererile pentru anumite domenii. De asemenea, folosind proxy DNS, pute\u021bi defini \u00eenregistr\u0103ri statice de tip host (\u00eenregistrare A).<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/f98bb05fd143b873fdd5fee8cd38a6d0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen sec\u021biunea \u201eNAT \u0219i Rutare\u201d trebuie s\u0103 crea\u021bi regulile NAT necesare. Pentru accesul la internet al utilizatorilor din re\u021beaua Trusted, regula NAT a fost deja creat\u0103 \u2014 \u201eTrusted-&gt;Untrusted\u201d, r\u0103m\u00e2ne doar s\u0103 o activa\u021bi. Regulile se aplic\u0103 de sus \u00een jos, \u00een ordinea \u00een care sunt specificate \u00een consol\u0103. Se execut\u0103 \u00eentotdeauna doar prima regul\u0103 pentru care s-au \u00eendeplinit condi\u021biile specificate \u00een regul\u0103. Pentru ca o regul\u0103 s\u0103 func\u021bioneze, trebuie s\u0103 corespund\u0103 toate condi\u021biile specificate \u00een parametrii regulii. UserGate recomand\u0103 crearea de reguli NAT generale, de exemplu, o regul\u0103 NAT din re\u021beaua local\u0103 (\u00een general zona Trusted) c\u0103tre internet (\u00een general zona Untrusted), iar restric\u021bionarea accesului pe utilizatori, servicii, aplica\u021bii se efectueaz\u0103 prin reguli de firewall.<\/p>\n<p>De asemenea, exist\u0103 posibilitatea de a crea reguli DNAT, port forwarding, rutare bazat\u0103 pe politici, cartografiere a re\u021belei.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/efa1a3f8e1b004a3f90c05b957b193f6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dup\u0103 aceasta, \u00een sec\u021biunea \u201eFirewall\u201d trebuie s\u0103 crea\u021bi reguli de firewall. Pentru acces nelimitat la internet al utilizatorilor din re\u021beaua Trusted, regula firewall-ului a fost deja creat\u0103 - \u201eInternet for Trusted\u201d \u0219i trebuie activat\u0103. Prin intermediul regulilor firewall-ului, administratorul poate permite sau interzice orice tip de trafic de re\u021bea de tranzit care trece prin UserGate. Ca \u0219i condi\u021bii, regulile pot include zone \u0219i adrese IP surs\u0103\/destina\u021bie, utilizatori \u0219i grupuri, servicii \u0219i aplica\u021bii. Regulile se aplic\u0103 asemenea ca \u00een sec\u021biunea \u201eNAT \u0219i Rutare\u201d, adic\u0103 de sus \u00een jos. Dac\u0103 nu este creat\u0103 nici o regul\u0103, orice trafic de tranzit prin UserGate este interzis.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate \u00cenceputuri. Cerin\u021be, instalare\" src=\"\/wp-content\/uploads\/2020\/10\/098871017279694492f381069f172483.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>4. Concluzie<\/h2>\n<p>Aceasta a fost ultima parte a articolului. Am instalat firewall-ul UserGate pe o ma\u0219in\u0103 virtual\u0103 \u0219i am efectuat set\u0103rile minime necesare pentru a asigura conectivitatea la internet \u00een re\u021beaua Trusted. Vom discuta despre set\u0103rile suplimentare \u00een articolele urm\u0103toare.<\/p>\n<p>Urm\u0103ri\u021bi actualiz\u0103rile pe canalele noastre (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>)!<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521322\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u044d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0417\u0430\u0434\u0430\u0447\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d&nbsp;UserGate&nbsp;\u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (\u0431\u0443\u0434\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438&nbsp;VMware&nbsp;Workstation) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 (\u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437&nbsp;UserGate&nbsp;\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442).&nbsp;&nbsp;&nbsp; 1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u044f \u043e\u043f\u0438\u0448\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 \u0432 \u0441\u0435\u0442\u044c. \u0425\u043e\u0447\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. UserGate Ghid de \u00eenceput. Cerin\u021be, instalare | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-05T23:42:49+00:00","article:modified_time":"2020-10-05T23:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95964","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:54:37","updated":"2022-09-28 17:15:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=95964"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95964\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/95965"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=95964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=95964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=95964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}