{"id":97203,"date":"2020-10-16T14:42:53","date_gmt":"2020-10-16T12:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak"},"modified":"2020-10-16T14:42:53","modified_gmt":"2020-10-16T12:42:53","slug":"kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","title":{"rendered":"Ako chr\u00e1nime virtu\u00e1lne pracovn\u00e9 stoly klientov pred v\u00edrusmi, \u0161pehmi a \u00fatokmi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tento rok mnoh\u00e9 firmy r\u00fdchlo prech\u00e1dzali na pr\u00e1cu na dia\u013eku. Niektor\u00fdm klientom sme <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/digest\/150-virtualnyh-rabochih-mest-dlya-call-centra-za-nedelyu\">pom\u00e1hali<\/a><\/noindex> organizova\u0165 viac ako sto vzdialen\u00fdch pracovn\u00fdch miest za t\u00fd\u017ede\u0148. Bolo d\u00f4le\u017eit\u00e9 to urobi\u0165 nielen r\u00fdchlo, ale aj bezpe\u010dne. S pomocou technol\u00f3gie VDI bolo pohodln\u00e9 distribuova\u0165 bezpe\u010dnostn\u00e9 politiky na v\u0161etky pracovn\u00e9 miesta a chr\u00e1ni\u0165 sa pred \u00fanikmi d\u00e1t.\u00a0<\/p>\n<p>V tomto \u010dl\u00e1nku vysvetl\u00edm, ako funguje n\u00e1\u0161 servis virtu\u00e1lnych pracovn\u00fdch stolov na b\u00e1ze Citrix VDI z h\u013eadiska informa\u010dnej bezpe\u010dnosti. Uk\u00e1\u017eem, \u010do rob\u00edme, aby sme chr\u00e1nili klientsk\u00e9 pracovn\u00e9 stoly pred vonkaj\u0161\u00edmi hrozbami ako s\u00fa ransomv\u00e9r alebo cie\u013eov\u00e9 \u00fatoky.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"Ako chr\u00e1nime virtu\u00e1lne pracovn\u00e9 stoly klientov pred v\u00edrusmi, \u0161pehmi a \u00fatokmi\" src=\"\/wp-content\/uploads\/2020\/10\/bd9f5c9d944abf021f1a73351b88f49b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Ak\u00e9 bezpe\u010dnostn\u00e9 \u00falohy rie\u0161ime\u00a0<\/h2>\n<p>\nVy\u010dlenili sme nieko\u013eko hlavn\u00fdch bezpe\u010dnostn\u00fdch hrozieb pre servis. Na jednej strane virtu\u00e1lny pracovn\u00fd st\u00f4l m\u00f4\u017ee by\u0165 infikovan\u00fd z po\u010d\u00edta\u010da pou\u017e\u00edvate\u013ea. Na druhej strane, existuje riziko, \u017ee sa z virtu\u00e1lneho pracovn\u00e9ho stola dostaneme do otvoren\u00e9ho priestoru internetu a stiahneme infikovan\u00fd s\u00fabor. Aj ke\u010f sa to stane, nemalo by to ovplyvni\u0165 cel\u00fa infra\u0161trukt\u00faru. Preto sme pri vytv\u00e1ran\u00ed servisu rie\u0161ili nieko\u013eko \u00faloh:\u00a0<\/p>\n<ul>\n<li>Ochrana cel\u00e9ho VDI standu pred vonkaj\u0161\u00edmi hrozbami.\n<\/li>\n<li>Izol\u00e1cia klientov navz\u00e1jom.\n<\/li>\n<li>Ochrana samotn\u00fdch virtu\u00e1lnych pracovn\u00fdch stolov.\u00a0\n<\/li>\n<li>Bezpe\u010dn\u00e9 pripojenie pou\u017e\u00edvate\u013eov z ak\u00fdchko\u013evek zariaden\u00ed.\n<\/li>\n<\/ul>\n<p>\nJadrom ochrany sa stal FortiGate \u2013 firewall novej gener\u00e1cie od spolo\u010dnosti Fortinet. Kontroluje prev\u00e1dzku VDI standu, zabezpe\u010duje izolovan\u00fa infra\u0161trukt\u00faru pre ka\u017ed\u00e9ho klienta a chr\u00e1ni pred zranite\u013enos\u0165ami na strane pou\u017e\u00edvate\u013ea. Jeho funkcie s\u00fa dostato\u010dn\u00e9 na to, aby pokryli v\u00e4\u010d\u0161inu ot\u00e1zok informa\u010dnej bezpe\u010dnosti.\u00a0<\/p>\n<p>Ale ak m\u00e1 spolo\u010dnos\u0165 \u0161peci\u00e1lne bezpe\u010dnostn\u00e9 po\u017eiadavky, pon\u00fakame \u010fal\u0161ie mo\u017enosti:\u00a0<\/p>\n<ul>\n<li>Organizujeme zabezpe\u010den\u00e9 pripojenie pre pr\u00e1cu z dom\u00e1cich po\u010d\u00edta\u010dov.\n<\/li>\n<li>Poskytujeme pr\u00edstup na samostatn\u00fa anal\u00fdzu bezpe\u010dnostn\u00fdch logov.\n<\/li>\n<li>Zais\u0165ujeme spr\u00e1vu antiv\u00edrusovej ochrany na pracovn\u00fdch stoloch.\n<\/li>\n<li>Chr\u00e1nime pred zranite\u013enos\u0165ami typu \u201enulov\u00e9ho d\u0148a\u201c.\u00a0\n<\/li>\n<li>Nastavujeme viacfaktorov\u00fa autentifik\u00e1ciu na \u010fal\u0161iu ochranu pred neopr\u00e1vnen\u00fdm pripojen\u00edm.<\/li>\n<\/ul>\n<p>\nPodrobnej\u0161ie vysvetl\u00edm, ako sme vyrie\u0161ili \u00falohy.\u00a0<\/p>\n<h2>Ako chr\u00e1nime stand a zabezpe\u010dujeme sie\u0165ov\u00fa bezpe\u010dnos\u0165<\/h2>\n<p>\n<b>Segmentujeme sie\u0165ov\u00fa \u010das\u0165.<\/b> Na st\u00e1nku \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c uzavret\u00fd mana\u017e\u00e9rsky segment pre spr\u00e1vu v\u0161etk\u00fdch zdrojov. Mana\u017e\u00e9rsky segment nie je pr\u00edstupn\u00fd zvonka: v pr\u00edpade \u00fatoku na klienta \u00fato\u010dn\u00edci nemaj\u00fa pr\u00edstup do tohto segmentu.\u00a0<\/p>\n<p>Za ochranu zodpoved\u00e1 FortiGate. Spojuje funkcie antiv\u00edrusu, firewalla a syst\u00e9mu prevencie naru\u0161en\u00ed (intrusion prevention system, IPS).\u00a0<\/p>\n<p>Pre ka\u017ed\u00e9ho klienta vytv\u00e1rame izolovan\u00fd sie\u0165ov\u00fd segment pre virtu\u00e1lne pracovn\u00e9 plochy. Na to m\u00e1 FortiGate technol\u00f3giu virtu\u00e1lnych dom\u00e9n, alebo VDOM. Umo\u017e\u0148uje rozde\u013eova\u0165 firewall na nieko\u013eko virtu\u00e1lnych ent\u00edt a priradi\u0165 ka\u017ed\u00e9mu klientovi svoj VDOM, ktor\u00fd sa spr\u00e1va ako samostatn\u00fd firewall. Pre mana\u017e\u00e9rsky segment tie\u017e vytv\u00e1rame samostatn\u00fd VDOM. <\/p>\n<p>Vyzer\u00e1 to takto:<br \/>\n<img decoding=\"async\" alt=\"Ako chr\u00e1nime virtu\u00e1lne pracovn\u00e9 stoly klientov pred v\u00edrusmi, \u0161pehmi a \u00fatokmi\" src=\"\/wp-content\/uploads\/2020\/10\/24d9f6fc2b50079e7d6eb60bc19429a4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMedzi klientmi nie je sie\u0165ov\u00e1 konektivita: ka\u017ed\u00fd \u017eije vo svojom VDOM-e a nevpl\u00fdva na in\u00e9ho. Bez tejto technol\u00f3gie by sme museli rozde\u013eova\u0165 klientov pravidlami firewallu, \u010do je riskantn\u00e9 kv\u00f4li \u013eudsk\u00e9mu faktoru. Tieto pravidl\u00e1 sa daj\u00fa porovna\u0165 s dverami, ktor\u00e9 treba neust\u00e1le zatv\u00e1ra\u0165. V pr\u00edpade VDOM-u v\u00f4bec nenech\u00e1vame \u201edvere\u201c.\u00a0<\/p>\n<p>V samostatnom VDOM-e m\u00e1 klient svoju adres\u00e1ciu a smerovanie. Prekr\u00fdvanie rozsahov sa tak nest\u00e1va probl\u00e9mom pre spolo\u010dnos\u0165. Klient si m\u00f4\u017ee priradi\u0165 po\u017eadovan\u00e9 IP adresy k virtu\u00e1lnym pracovn\u00fdm ploch\u00e1m. To je v\u00fdhodn\u00e9 pre ve\u013ek\u00e9 spolo\u010dnosti, ktor\u00e9 maj\u00fa svoje IP pl\u00e1ny.\u00a0<\/p>\n<p><b>Rie\u0161ime ot\u00e1zky konektivity s firemnou sie\u0165ou klienta.<\/b> Samostatn\u00e1 \u00faloha \u2013 prepojenie VDI s klientskou infra\u0161trukt\u00farou. Ak spolo\u010dnos\u0165 uchov\u00e1va podnikov\u00e9 syst\u00e9my v na\u0161om d\u00e1tovom centre, sta\u010d\u00ed jednoducho natiahnu\u0165 sie\u0165ov\u00fd k\u00e1bel od jeho zariadenia k firewallu. \u010castej\u0161ie v\u0161ak m\u00e1me do \u010dinenia s vzdialen\u00fdm miestom \u2013 in\u00fdm d\u00e1tov\u00fdm centrom alebo kancel\u00e1riou klienta. V takom pr\u00edpade prem\u00fd\u0161\u013eame o bezpe\u010dnej v\u00fdmene s lokalitou a budujeme site-to-site VPN pomocou IPsec VPN.\u00a0<\/p>\n<p>Sch\u00e9my m\u00f4\u017eu by\u0165 r\u00f4zne v z\u00e1vislosti od zlo\u017eitosti infra\u0161trukt\u00fary. Niekde sta\u010d\u00ed pripoji\u0165 jedin\u00fa kancel\u00e1rsku sie\u0165 k VDI \u2013 tam sta\u010d\u00ed statick\u00e1 rout\u00e1\u017e. Vo ve\u013ek\u00fdch spolo\u010dnostiach je ve\u013ea siet\u00ed, ktor\u00e9 sa neust\u00e1le menia; tu potrebujem dynamick\u00fa rout\u00e1\u017e. Pou\u017e\u00edvame r\u00f4zne protokoly: u\u017e sme mali pr\u00edpady s OSPF (Open Shortest Path First), GRE tunelmi (Generic Routing Encapsulation) a BGP (Border Gateway Protocol). FortiGate podporuje sie\u0165ov\u00e9 protokoly v oddelen\u00fdch VDOM-och, bez vplyvu na in\u00fdch klientov.\u00a0<\/p>\n<p>M\u00f4\u017eeme vybudova\u0165 aj GOST-VPN \u2013 \u0161ifrovanie na z\u00e1klade certifikovan\u00fdch prostriedkov kryptografickej ochrany FSB RF. Napr\u00edklad pomocou rie\u0161en\u00ed triedy KS1 vo virtu\u00e1lnom prostred\u00ed \u201eS-Terra virtu\u00e1lny br gateway\u201c alebo PAK ViPNet, APK\u0160 \u201eKontinent\u201c, \u201eS-Terra\u201c.<\/p>\n<p><b>Nastavujeme Group Policies.<\/b> S klientom dohadujeme skupinov\u00e9 politiky, ktor\u00e9 sa aplikuj\u00fa na VDI. Tu princ\u00edpy nastavenia ni\u010d\u00edm neodli\u0161uj\u00fa od nastaven\u00ed polit\u00edk v kancel\u00e1rii. Nastavujeme integr\u00e1ciu s Active Directory a delegujeme klientom spr\u00e1vu niektor\u00fdch skupinov\u00fdch polit\u00edk. Klientski administr\u00e1tori m\u00f4\u017eu aplikova\u0165 politiky na objekt Computer, spravova\u0165 organiza\u010dn\u00fa jednotku v Active Directory a vytv\u00e1ra\u0165 pou\u017e\u00edvate\u013eov.\u00a0<\/p>\n<p>Na FortiGate pre ka\u017ed\u00fd klientsk\u00fd VDOM p\u00ed\u0161eme sie\u0165ov\u00fa politiku bezpe\u010dnosti, nastavujeme obmedzenia pr\u00edstupu a konfigurujeme kontrolu prev\u00e1dzky. Pou\u017e\u00edvame nieko\u013eko modulov FortiGate:\u00a0<\/p>\n<ul>\n<li>modul IPS kontroluje prev\u00e1dzku na malware a zabra\u0148uje vniknutiu;<\/li>\n<li>antivirus chr\u00e1ni samotn\u00e9 pracovn\u00e9 stanice pred \u0161kodliv\u00fdm a \u0161pehovac\u00edm softv\u00e9rom;<\/li>\n<li>webov\u00fd filtering blokuje pr\u00edstup k ned\u00f4veryhodn\u00fdm zdrojom a str\u00e1nkam so \u0161kodliv\u00fdm alebo neprijate\u013en\u00fdm obsahom;<\/li>\n<li>nastavenia firewallu m\u00f4\u017eu povoli\u0165 pou\u017e\u00edvate\u013eom pr\u00edstup na internet len na ur\u010dit\u00e9 str\u00e1nky.\u00a0<\/li>\n<\/ul>\n<p>\nNiekedy klient chce s\u00e1m spravova\u0165 pr\u00edstup zamestnancov na str\u00e1nky. \u010castej\u0161ie s tak\u00fdmto po\u017eiadavkom prich\u00e1dzaj\u00fa banky: bezpe\u010dnostn\u00e9 slu\u017eby po\u017eaduj\u00fa, aby kontrola pr\u00edstupu zostala na strane spolo\u010dnosti. Tieto spolo\u010dnosti sami monitoruj\u00fa prev\u00e1dzku a pravidelne menia politiky. V takom pr\u00edpade cel\u00fa prev\u00e1dzku z FortiGate smerujeme k klientovi. Na to pou\u017e\u00edvame nastaven\u00e9 rozhranie s infra\u0161trukt\u00farou spolo\u010dnosti. Potom klient s\u00e1m nastavuje pravidl\u00e1 pr\u00edstupu do firemnej siete a na internet.\u00a0<\/p>\n<p><b>Sledujeme udalosti na st\u00e1nku.<\/b> Spolu s FortiGate pou\u017e\u00edvame FortiAnalyzer \u2013 zbernicu logov od Fortinet. Pomocou neho sledujeme v\u0161etky protokoly udalost\u00ed na VDI na jednom mieste, identifikujeme podozriv\u00e9 aktivity a sledujeme korel\u00e1cie.\u00a0<\/p>\n<p>Jeden z na\u0161ich klientov pou\u017e\u00edva produkty Fortinet vo svojej kancel\u00e1rii. Pre neho sme nastavili export protokolov \u2013 tak mohol analyzova\u0165 v\u0161etky bezpe\u010dnostn\u00e9 udalosti pre kancel\u00e1rske zariadenia a virtu\u00e1lne pracovn\u00e9 stoly.<\/p>\n<h2>Ako chr\u00e1nime virtu\u00e1lne pracovn\u00e9 stoly<\/h2>\n<p>\n<b>Proti zn\u00e1mym hrozb\u00e1m.<\/b> Ak chce klient s\u00e1m spravova\u0165 antiv\u00edrusov\u00fa ochranu, dodato\u010dne in\u0161talujeme Kaspersky Security pre virtu\u00e1lne prostredia.\u00a0<\/p>\n<p>Toto rie\u0161enie dobre funguje v cloude. V\u0161etci sme zvyknut\u00ed, \u017ee klasick\u00fd antiv\u00edrus Kaspersky je \u201e\u0165a\u017ek\u00e9\u201c rie\u0161enie. Na rozdiel od neho, Kaspersky Security pre virtu\u00e1lne prostredia neza\u0165a\u017euje virtu\u00e1lne stroje. V\u0161etky v\u00edrusov\u00e9 datab\u00e1zy s\u00fa na serveri, ktor\u00fd vyd\u00e1va verdikty pre v\u0161etky virtu\u00e1lne stroje uzla. Na virtu\u00e1lnom pracovnom stole je nain\u0161talovan\u00fd iba \u013eahk\u00fd agent. Ten posiela s\u00fabory na kontrolu na server.\u00a0<\/p>\n<p>Tak\u00e1to architekt\u00fara poskytuje s\u00fa\u010dasne ochranu s\u00faborov, internetov\u00fa ochranu, ochranu pred \u00fatokmi a nezni\u017euje v\u00fdkon virtu\u00e1lnych strojov. Klient m\u00f4\u017ee tie\u017e s\u00e1m prid\u00e1va\u0165 v\u00fdnimky do ochrany s\u00faborov. Pom\u00e1hame s z\u00e1kladn\u00fdm nastaven\u00edm rie\u0161enia. O jeho vlastnostiach sa dozvieme v samostatnom \u010dl\u00e1nku.<\/p>\n<p><b>Proti nezn\u00e1mym hrozb\u00e1m.<\/b> Na tento \u00fa\u010del pripojujeme FortiSandbox \u2013 \u201epieskovisko\u201c od Fortinet. Pou\u017e\u00edvame ho ako filter v pr\u00edpade, \u017ee antiv\u00edrus prehliadne hrozbu \u201enult\u00e9ho d\u0148a\u201c. Po stiahnut\u00ed s\u00faboru ho najprv kontrolujeme antiv\u00edrusom, a potom ho posielame do \u201epieskoviska\u201c. FortiSandbox emuluje virtu\u00e1lny stroj, sp\u00fa\u0161\u0165a s\u00fabor a sleduje jeho spr\u00e1vanie: na ak\u00e9 objekty v registri sa obracia, posiela extern\u00e9 po\u017eiadavky a tak \u010falej. Ak s\u00fabor vykazuje podozriv\u00e9 spr\u00e1vanie, virtu\u00e1lka v pieskovisku sa odstr\u00e1ni a malv\u00e9r sa nedostane na u\u017e\u00edvate\u013esk\u00e9 VDI.\u00a0<\/p>\n<h2>Ako nastavujeme bezpe\u010dn\u00e9 pripojenie k VDI<\/h2>\n<p>\n<b>Kontrolujeme zhody zariadenia s po\u017eiadavkami IB.<\/b> Od za\u010diatku pr\u00e1ce z domu sa n\u00e1m klienti obracali s po\u017eiadavkami: zabezpe\u010di\u0165 bezpe\u010dn\u00fa pr\u00e1cu pou\u017e\u00edvate\u013eov na ich osobn\u00fdch po\u010d\u00edta\u010doch. Ka\u017ed\u00fd odborn\u00edk na informa\u010dn\u00fa bezpe\u010dnos\u0165 vie, \u017ee ochrana dom\u00e1cich zariaden\u00ed je n\u00e1ro\u010dn\u00e1: nemo\u017eno na ne nain\u0161talova\u0165 potrebn\u00fd antiv\u00edrus ani uplatni\u0165 skupinov\u00e9 politiky, ke\u010f\u017ee nejde o kancel\u00e1rske vybavenie.\u00a0<\/p>\n<p>Predvolene sa VDI st\u00e1va bezpe\u010dnou \u201evrstvou\u201c medzi osobn\u00fdm zariaden\u00edm a firemnou sie\u0165ou. Na ochranu VDI pred \u00fatokmi z pou\u017e\u00edvate\u013esk\u00e9ho po\u010d\u00edta\u010da vyp\u00edname schr\u00e1nku a zakazujeme prenos USB. To v\u0161ak samo o sebe neu\u010din\u00ed pou\u017e\u00edvate\u013esk\u00e9 zariadenie bezpe\u010dn\u00fdm.\u00a0<\/p>\n<p>Probl\u00e9m rie\u0161ime pomocou FortiClient. Toto je n\u00e1stroj na ochranu koncov\u00fdch bodov (endpoint ochrana). Pou\u017e\u00edvatelia spolo\u010dnosti si nain\u0161taluj\u00fa FortiClient na svoje dom\u00e1ce po\u010d\u00edta\u010de a pomocou neho sa pripoja k virtu\u00e1lnemu pracovn\u00e9mu stolu. FortiClient rie\u0161i tri \u00falohy:\u00a0<\/p>\n<ul>\n<li>st\u00e1va sa \u201ejedin\u00fdm oknom\u201c pr\u00edstupu pre pou\u017e\u00edvate\u013ea;\n<\/li>\n<li>kontroluje, \u010di je na osobnom po\u010d\u00edta\u010di antiv\u00edrus a najnov\u0161ie aktualiz\u00e1cie OS;\u00a0\n<\/li>\n<li>vytv\u00e1ra VPN-tunnel pre bezpe\u010dn\u00fd pr\u00edstup.\u00a0<\/li>\n<\/ul>\n<p>\nZamestnanec z\u00edska pr\u00edstup len v pr\u00edpade, \u017ee prejde overen\u00edm. Pri tom s\u00fa virtu\u00e1lne pracovn\u00e9 stoly nedostupn\u00e9 z internetu, a teda s\u00fa lep\u0161ie chr\u00e1nen\u00e9 pred \u00fatokmi.\u00a0<\/p>\n<p>Ak chce spolo\u010dnos\u0165 sama spravova\u0165 endpoint ochranu, pon\u00fakame FortiClient EMS (Endpoint Management Server). Klient si m\u00f4\u017ee s\u00e1m nastavi\u0165 skenovanie pracovn\u00fdch stolov a prevenciu naru\u0161en\u00ed, vytv\u00e1ra\u0165 bielu listinu adries.\u00a0<\/p>\n<p><b>Prid\u00e1vame faktory autentiz\u00e1cie.<\/b> Predvolene sa pou\u017e\u00edvatelia autentifikuj\u00fa cez Citrix netscaler. Tu m\u00f4\u017eeme tie\u017e posilni\u0165 bezpe\u010dnos\u0165 pomocou viacfaktorovej autentifik\u00e1cie zalo\u017eenej na produktoch SafeNet. T\u00e1to t\u00e9ma si zasluhuje osobitn\u00fa pozornos\u0165, o tom tie\u017e porozpr\u00e1vame v samostatnom \u010dl\u00e1nku.\u00a0<\/p>\n<p>Tak\u00fato sk\u00fasenos\u0165 s r\u00f4znymi rie\u0161eniami sme nazbierali za posledn\u00fd rok pr\u00e1ce. Slu\u017eba VDI sa nastavuje samostatne pre ka\u017ed\u00e9ho klienta, preto sme volili maxim\u00e1lne flexibiln\u00e9 n\u00e1stroje. Mo\u017eno v bl\u00edzkej bud\u00facnosti prid\u00e1me nie\u010do \u010fal\u0161ie a podel\u00edme sa o sk\u00fasenosti.<\/p>\n<p>7. okt\u00f3bra o 17:00 moji kolegovia porozpr\u00e1vaj\u00fa o virtu\u00e1lnych pracovn\u00fdch stoloch na webin\u00e1ri \u201ePotrebujete VDI, alebo ako usporiada\u0165 pr\u00e1cu z domu?\u201c <br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/oblaka\/vdi-kak-izvlech-iz-tehnologii-maksimum?utm_source=habr&amp;utm_medium=internal&amp;utm_campaign=webinar\">Prihl\u00e1ste sa<\/a><\/noindex>, ak chcete prediskutova\u0165, kedy spolo\u010dnosti pristane technol\u00f3gia VDI a kedy je lep\u0161ie pou\u017ei\u0165 in\u00e9 sp\u00f4soby.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/520452\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ako chr\u00e1nime virtu\u00e1lne pracovn\u00e9 stanice klientov pred v\u00edrusmi, \u0161pehmi a \u00fatokmi | ProHoster","description":"Tento rok mnoho spolo\u010dnost\u00ed r\u00fdchlo pre\u0161lo na pr\u00e1cu z domu.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T12:42:53+00:00","article:modified_time":"2020-10-16T12:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:25:23","updated":"2022-09-28 06:23:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/97203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=97203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/97203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/97204"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=97203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=97203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=97203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}