{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate Getting Started. Politici de re\u021bea","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bun venit cititorilor \u00een cea de-a treia articol din seria UserGate Getting Started, care vorbe\u0219te despre solu\u021bia NGFW de la companie&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. \u00cen articolul anterior a fost descris procesul de instalare a firewall-ului \u0219i a fost efectuat\u0103 configurarea sa ini\u021bial\u0103. Acum vom examina mai detaliat crearea regulilor \u00een sec\u021biuni precum \u201eFirewall\u201d, \u201eNAT \u0219i rutare\u201d \u0219i \u201eL\u0103\u021bimea de band\u0103\u201d.<\/p>\n<p>Ideologia de func\u021bionare a regulilor UserGate este astfel \u00eenc\u00e2t regulile sunt executate de sus \u00een jos, p\u00e2n\u0103 la prima regul\u0103 care se aplic\u0103. Din cele de mai sus reiese c\u0103 regulile mai specifice trebuie s\u0103 fie plasate deasupra celor mai generale. Dar trebuie men\u021bionat c\u0103, deoarece regulile sunt verificate \u00een ordinea \u00een care sunt plasate, din punct de vedere al performan\u021bei este mai bine s\u0103 se creeze regulile generale. Condi\u021biile la crearea oric\u0103rei reguli se aplic\u0103 conform logicii \u201e\u0218I\u201d. Dac\u0103 este necesar\u0103 utilizarea logicii \u201eSAU\u201d, acest lucru se realizeaz\u0103 prin crearea mai multor reguli. Astfel, cele descrise \u00een acest articol se aplic\u0103 \u0219i altor politici UserGate.<\/p>\n<h3>Firewall<\/h3>\n<p>Dup\u0103 instalarea UserGate, \u00een sec\u021biunea \u201eFirewall\u201d exist\u0103 deja o politic\u0103 simpl\u0103. Primele dou\u0103 reguli interzic traficul pentru re\u021belele de bot. Urmeaz\u0103 exemple de reguli de acces din diferite zone. Ultima regul\u0103 se nume\u0219te \u00eentotdeauna \u201eBlocheaz\u0103 tot\u201d \u0219i este marcat\u0103 cu un simbol al unui lac\u0103t (acesta semnific\u0103 c\u0103 regula nu poate fi \u0219tears\u0103, modificat\u0103, mutat\u0103 sau dezactivat\u0103, se poate activa doar op\u021biunea de jurnalizare). Astfel, din cauza acestei reguli, tot traficul care nu este explicit permis va fi blocat de ultima regul\u0103. Dac\u0103 este necesar s\u0103 se permit\u0103 tot traficul prin UserGate (de\u0219i acest lucru este puternic descurajat), se poate crea \u00eentotdeauna o regul\u0103 penultim\u0103 \u201ePermite tot\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>C\u00e2nd edita\u021bi sau crea\u021bi o regul\u0103 pentru firewall, prima <em>tab-ul \u201eGenerale\u201d<\/em>, pe ea trebuie s\u0103 efectua\u021bi urm\u0103toarele ac\u021biuni:&nbsp;<\/p>\n<ul>\n<li>\n<p>Bifa\u021bi \u201eActivare\u201d pentru a activa sau dezactiva regula.<\/p>\n<\/li>\n<li>\n<p>introduce\u021bi numele regulii.<\/p>\n<\/li>\n<li>\n<p>defini\u021bi descrierea regulii.<\/p>\n<\/li>\n<li>\n<p>alege\u021bi din dou\u0103 ac\u021biuni:<\/p>\n<ul>\n<li>\n<p>Interzice \u2013 blocheaz\u0103 traficul (c\u00e2nd se stabile\u0219te aceast\u0103 condi\u021bie, exist\u0103 posibilitatea de a trimite ICMP host unreachable, este suficient s\u0103 bifa\u021bi caseta corespunz\u0103toare).<\/p>\n<\/li>\n<li>\n<p>Permite \u2013 permite traficul.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Punctul scenariului \u2014 permite selectarea unui scenariu care este o condi\u021bie suplimentar\u0103 pentru activarea regulii. Astfel, compania UserGate implementeaz\u0103 conceptul SOAR (Security Orchestration, Automation and Response).<\/p>\n<\/li>\n<li>\n<p>Jurnalizare \u2014 \u00eenregistrarea informa\u021biilor despre trafic \u00eentr-un jurnal atunci c\u00e2nd regula este activat\u0103. Sunt posibile urm\u0103toarele op\u021biuni:<\/p>\n<ul>\n<li>\n<p>Jurnaliza\u021bi \u00eenceputul sesiunii. \u00cen acest caz, \u00een jurnalul de trafic se va \u00eenregistra doar informa\u021bia despre \u00eenceputul sesiunii (primul pachet). Aceasta este op\u021biunea recomandat\u0103 pentru jurnalizare.<\/p>\n<\/li>\n<li>\n<p>Jurnaliza\u021bi fiecare pachet. \u00cen acest caz, se va \u00eenregistra informa\u021bia despre fiecare pachet de re\u021bea transmis. Pentru acest mod, se recomand\u0103 activarea limit\u0103rii jurnaliz\u0103rii pentru a preveni o \u00eenc\u0103rcare mare a dispozitivului.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Aplica\u021bi regula pentru:<\/p>\n<ul>\n<li>\n<p>Toate pachetele<\/p>\n<\/li>\n<li>\n<p>pachete fragmentate<\/p>\n<\/li>\n<li>\n<p>pachete nefragmentate<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>C\u00e2nd crea\u021bi o nou\u0103 regul\u0103, pute\u021bi alege un loc \u00een politic\u0103.<\/p>\n<\/li>\n<\/ul>\n<p>Urm\u0103torul <em>tabul \u201eSursa\u201d<\/em>. Aici specific\u0103m sursa de trafic, aceasta poate fi o zon\u0103 din care provine traficul, sau putem specifica o list\u0103 sau o adres\u0103 IP specific\u0103 (Geoip). Practic, \u00een toate regulile care pot fi definite \u00een dispozitiv, un obiect poate fi creat din regul\u0103, de exemplu, nefiind nevoie s\u0103 mergem \u00een sec\u021biunea \u201eZone\u201d, putem folosi butonul \u201eCreeaz\u0103 \u0219i adaug\u0103 un obiect nou\u201d pentru a crea zona dorit\u0103. De asemenea, apare frecvent un checkbox \u201eInverseaz\u0103\u201d, care schimb\u0103 ac\u021biunea condi\u021biei regulii \u00een contrar, ceea ce este echivalent cu ac\u021biunea logic\u0103 a neg\u0103rii. <em>Tab-ul &#171;Destina\u021bie&#187;<\/em> este similar cu tabul surs\u0103, doar c\u0103 \u00een loc de sursa de trafic, definim destina\u021bia traficului. <em>Tab-ul &#171;Utilizatori&#187;<\/em> \u2014 \u00een acest loc pute\u021bi ad\u0103uga o list\u0103 de utilizatori sau grupuri pentru care se aplic\u0103 aceast\u0103 regul\u0103. <em>Tab-ul &#171;Serviciu&#187;<\/em> \u2014 alegem tipul de serviciu din cele deja predefinite sau putem defini propriul nostru serviciu. <em>Tab-ul &#171;Aplica\u021bie&#187;<\/em> \u2014 aici se aleg aplica\u021biile specifice sau grupurile de aplica\u021bii. \u0218i <em>tab-ul &#171;Timp&#187;<\/em> precizeaz\u0103 timpul \u00een care aceast\u0103 regul\u0103 este activ\u0103.&nbsp;<\/p>\n<p>De la lec\u021bia trecut\u0103 avem o regul\u0103 pentru ie\u0219irea pe internet din zona \u201eTrust\u201d, acum voi ar\u0103ta, ca exemplu, cum s\u0103 creez o regul\u0103 de interzicere pentru traficul ICMP din zona \u201eTrust\u201d \u00een zona \u201eUntrusted\u201d.<\/p>\n<p>Pentru \u00eenceput, cre\u0103m o regul\u0103 ap\u0103s\u00e2nd pe butonul \u201eAdaug\u0103\u201d. \u00cen fereastra care se deschide, \u00een tab-ul general, complet\u0103m numele (Interzicere ICMP din trusted \u00een untrusted), bif\u0103m c\u0103su\u021ba \u201eActivat\u201d, alegem ac\u021biunea interzice \u0219i, cel mai important, alegem corect locul unde va fi plasat\u0103 aceast\u0103 regul\u0103. Conform politicii mele, aceast\u0103 regul\u0103 ar trebui s\u0103 fie plasat\u0103 deasupra regulii \u201ePermite trusted \u00een untrusted\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen tab-ul \u201eSurs\u0103\u201d, pentru sarcina mea exist\u0103 dou\u0103 variante:<\/p>\n<ul>\n<li>\n<p>Aleg\u00e2nd zona \u201eTrusted\u201d<\/p>\n<\/li>\n<li>\n<p>Aleg\u00e2nd toate zonele, cu excep\u021bia \u201eTrusted\u201d \u0219i bif\u00e2nd c\u0103su\u021ba \u201eInverseaz\u0103\u201d<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tab-ul \u201eDestina\u021bie\u201d se configureaz\u0103 similar cu tab-ul \u201eSurs\u0103\u201d.<\/p>\n<p>Apoi, trecem la tab-ul \u201cServiciu\u201d, deoarece \u00een UserGate exist\u0103 un serviciu predefinit pentru traficul ICMP, deci, ap\u0103s\u00e2nd butonul &#171;Adaug\u0103&#187;, alegem din lista oferit\u0103 serviciul intitulat \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Poate c\u0103 a\u0219a a fost g\u00e2ndit de creatorii UserGate, dar eu ajungeam s\u0103 creez mai multe reguli complet identice. De\u0219i va fi executat\u0103 doar prima regul\u0103 din list\u0103, posibilitatea de a crea reguli diferite ca func\u021bionalitate cu acela\u0219i nume ar putea provoca confuzie \u00een cazul mai multor administratori ai dispozitivului.<\/p>\n<h3>NAT \u0219i rutare<\/h3>\n<p>Atunci c\u00e2nd cre\u0103m reguli NAT, vedem c\u00e2teva tab-uri asem\u0103n\u0103toare cu cele pentru firewall. \u00cen tab-ul \u201eGeneral\u201d a ap\u0103rut un c\u00e2mp \u201eTip\u201d, care permite alegerea responsabilit\u0103\u021bii acestei reguli:<\/p>\n<ul>\n<li>\n<p>NAT &#8212; Conversia adreselor de re\u021bea.<\/p>\n<\/li>\n<li>\n<p>DNAT &#8212; Redirec\u021bioneaz\u0103 traficul c\u0103tre adresa IP specificat\u0103.<\/p>\n<\/li>\n<li>\n<p>Port-forwarding &#8212; Redirec\u021bioneaz\u0103 traficul c\u0103tre adresa IP specificat\u0103, dar permite modificarea num\u0103rului portului serviciului publicat.<\/p>\n<\/li>\n<li>\n<p>Routing bazat pe politic\u0103 &#8212; Permite rutarea pachetelor IP pe baza unor informa\u021bii extinse, cum ar fi servicii, adrese MAC sau servere (adreselor IP).<\/p>\n<\/li>\n<li>\n<p>Maparea re\u021belei &#8212; Permite \u00eenlocuirea adreselor IP surs\u0103 sau destina\u021bie dintr-o re\u021bea \u00een alta.<\/p>\n<\/li>\n<\/ul>\n<p>Dup\u0103 alegerea tipului corespunz\u0103tor, vor fi disponibile set\u0103rile pentru acesta.<\/p>\n<p>\u00cen c\u00e2mpul SNAT IP (adresa extern\u0103) specific\u0103m clar adresa IP care va \u00eenlocui adresa surs\u0103. Acest c\u00e2mp este necesar atunci c\u00e2nd exist\u0103 mai multe adrese IP atribuite interfetelor din zona de destina\u021bie. Dac\u0103 l\u0103s\u0103m acest c\u00e2mp gol, sistemul va folosi o adres\u0103 aleatorie din lista adreselor IP disponibile, atribuite interfetelor din zona de destina\u021bie. UserGate recomand\u0103 specificarea SNAT IP pentru a \u00eembun\u0103t\u0103\u021bi performan\u021ba func\u021bion\u0103rii firewall-ului.<\/p>\n<p>Ca exemplu, voi publica serviciul SSH al serverului Windows, aflat \u00een zona \u201eDMZ\u201d, prin intermediul regulii \u201eport-forwarding\u201d. Pentru aceasta, facem clic pe butonul \u201eAdaug\u0103\u201d \u0219i complet\u0103m fila \u201eGeneral\u201d, specific\u00e2nd numele regulii \u201eSSH to Windows\u201d \u0219i tipul \u201ePort-forwarding\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen tab-ul \u201cSurs\u0103\u201d alegem zona \u201cUntrusted\u201d \u0219i apoi trecem la tab-ul \u201cPort-forwarding\u201d. Aici trebuie s\u0103 specific\u0103m protocolul \u201cTCP\u201d (sunt disponibile patru op\u021biuni &#8212; TCP, UDP, SMTP, SMTPS). Portul original de destina\u021bie 9922 &#8212; num\u0103rul portului la care utilizatorii trimit cereri (nu se pot utiliza porturile: 2200, 8001, 4369, 9000-9100). Noua adres\u0103 de destina\u021bie (22) &#8212; num\u0103rul portului la care vor fi redirec\u021bionate cererile utilizatorilor c\u0103tre serverul intern publicat.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00cen fila \u201eDNAT\u201d configur\u0103m adresa IP a computerului din re\u021beaua local\u0103 care este publicat pe internet (192.168.3.2). Op\u021bional, se poate activa SNAT, iar atunci UserGate va modifica adresa surs\u0103 \u00een pachetele din re\u021beaua extern\u0103 cu adresa sa IP.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dup\u0103 toate set\u0103rile, rezult\u0103 o regul\u0103 care permite accesul din zona \u201eNe\u00eencredere\u201d la serverul cu adresa IP 192.168.3.2 prin protocolul SSH, folosind adresa extern\u0103 UserGate la conexiune.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>L\u0103\u021bimea de band\u0103<\/h3>\n<p>\u00cen aceast\u0103 sec\u021biune se stabilesc regulile pentru gestionarea l\u0103\u021bimii de band\u0103. Acestea pot fi folosite pentru a restric\u021biona canalul anumitor utilizatori, gazde, servicii, aplica\u021bii.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>At the creation of the rule, the conditions in the tabs determine the traffic to which restrictions apply. The bandwidth can be selected from the proposed options or specified by the user. When creating a bandwidth, you can indicate a traffic prioritization label using DSCP. An example of when DSCP labels are applied: if you specify in the rule a scenario in which this rule applies, then this rule can automatically change these labels. Another example of the scenario in action: the rule will trigger for a user only when a torrent is detected or the traffic volume exceeds a specified limit. The other tabs are filled in just like in other policies, based on the type of traffic to which the rule should be applied.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politici de re\u021bea\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Concluzie<\/h3>\n<p>In this article, I examined the creation of rules in the \"Firewall\", \"NAT and Routing\", and \"Bandwidth\" sections. At the beginning of the article, I described the rules for creating UserGate policies, as well as the principle of how conditions work when creating a rule.&nbsp;<\/p>\n<p>Urm\u0103ri\u021bi actualiz\u0103rile pe canalele noastre (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>)!<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Getting Started. Network Policies | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}