{"id":29980,"date":"2019-10-31T21:32:59","date_gmt":"2019-10-31T18:32:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw\/"},"modified":"2019-10-31T21:32:59","modified_gmt":"2019-10-31T18:32:59","slug":"optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","title":{"rendered":"Optimizuesi i politikave t\u00eb siguris\u00eb Palo Alto Networks NGFW","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Si t\u00eb vler\u00ebsoni efikasitetin e konfigurimit t\u00eb NGFW<\/h1>\n

\nDetyra m\u00eb e zakonshme \u00ebsht\u00eb t\u00eb kontrolloni se sa efikas \u00ebsht\u00eb firewalli juaj. P\u00ebr k\u00ebt\u00eb, ekzistojn\u00eb mjete dhe sh\u00ebrbime falas nga kompani q\u00eb merren me NGFW. <\/p>\n

P\u00ebr shembull, m\u00eb posht\u00eb tregohet se kompania Palo Alto Networks ka mund\u00ebsin\u00eb p\u00ebrmes portalit t\u00eb mb\u00ebshtetjes<\/a><\/noindex> t\u00eb filloni analiz\u00ebn statistikore t\u00eb firewallit - raporti SLR ose analiza e p\u00ebrputhjes me praktikat m\u00eb t\u00eb mira - raporti BPA. K\u00ebto jan\u00eb mjete online falas q\u00eb mund t\u00eb p\u00ebrdoren pa instaluar asgj\u00eb.
\n\"Optimizuesi <\/a><\/noindex><\/p>\n

P\u00cbRMBAJA<\/h3>\n

\nExpedition (Mjeti i Migrimit)<\/a><\/noindex>
\nPolitika Optimizer<\/a><\/noindex>
\nZero Trust<\/a><\/noindex>
\nKlliko mbi Unused<\/a><\/noindex>
\nKlliko mbi Unused App<\/a><\/noindex>
\nKlliko mbi No Apps Specified<\/a><\/noindex>
\nPo si me Machine Learning?<\/a><\/noindex>
\nUTD<\/a><\/noindex><\/p>\n

<\/a><\/noindex><\/p>\n

Expedition (Mjeti i Migrimit)<\/h2>\n

\n\"Optimizuesi
\n
\nNj\u00eb variant m\u00eb i komplikuar p\u00ebr t\u00eb kontrolluar konfigurimet tuaja \u00ebsht\u00eb t\u00eb shkarkoni nj\u00eb mjet falas Expedition<\/a><\/noindex> (i njohur si Mjeti i Migrimit). Ai shkarkohet si nj\u00eb pajisje virtuale n\u00ebn VMware, dhe nuk k\u00ebrkon konfigurime - duhet t\u00eb shkarkoni imazhin dhe ta vendosni n\u00eb hipervizorin VMware, ta filloni dhe t\u00eb hyni n\u00eb nd\u00ebrfaqen e internetit. Ky mjet k\u00ebrkon nj\u00eb tregim t\u00eb ve\u00e7ant\u00eb, sepse kursi p\u00ebr t\u00eb zgjat 5 dit\u00eb, p\u00ebr shkak se tani ka shum\u00eb funksione, duke p\u00ebrfshir\u00eb Machine Learning dhe migrimin e konfigurimeve t\u00eb ndryshme t\u00eb politikave, NAT dhe objekteve p\u00ebr prodhues t\u00eb ndrysh\u00ebm firewall. P\u00ebr Machine Learning, do t\u00eb shkruaj m\u00eb shum\u00eb m\u00eb posht\u00eb n\u00eb tekst.<\/p>\n

<\/a><\/noindex><\/p>\n

Politika Optimizer<\/h2>\n

\nDhe varianti m\u00eb i p\u00ebrshtatsh\u00ebm (IMHO), rreth t\u00eb cilit do flas sot m\u00eb n\u00eb detaje - optimizuesi i politikave i integruar n\u00eb vet\u00eb nd\u00ebrfaqen e Palo Alto Networks. P\u00ebr ta demonstruar, kam instaluar nj\u00eb firewall n\u00eb sht\u00ebpi dhe kam shkruar nj\u00eb rregull t\u00eb thjesht\u00eb: lejo \u00e7do lidhje. N\u00eb parim, ndonj\u00ebher\u00eb shoh rregulla t\u00eb tilla edhe n\u00eb rrjetet korporative. Natyrisht, kam aktivizuar t\u00eb gjitha profillet e siguris\u00eb NGFW, si\u00e7 shikohet n\u00eb screenshot:
\n\"Optimizuesi
\n
\nN\u00eb screenshot-in m\u00eb posht\u00eb tregohet nj\u00eb shembull i firewallit tim sht\u00ebpiak t\u00eb pap\u00ebrshtatur, ku pothuajse t\u00eb gjitha lidhjet bien n\u00ebn rregullin e fundit: AllowAll, si\u00e7 tregohet nga statistikat n\u00eb kolon\u00ebn Hit Count.
\n\"Optimizuesi
\n
\n<\/a><\/noindex><\/p>\n

Zero Trust<\/h2>\n

\nEkziston nj\u00eb qasje p\u00ebr sigurin\u00eb e quajtur Zero Trust<\/a><\/noindex>. \u00c7far\u00eb do t\u00eb thot\u00eb kjo: ne duhet t\u00eb lejojm\u00eb njer\u00ebzit brenda rrjetit t\u00eb b\u00ebjn\u00eb vet\u00ebm ato lidhje q\u00eb u nevojiten dhe t\u00eb ndalojm\u00eb t\u00eb gjitha t\u00eb tjerat. Pra, duhet t\u00eb shtojm\u00eb rregulla t\u00eb qarta p\u00ebr aplikacionet, p\u00ebrdoruesit, kategorit\u00eb e URL-ve, llojet e skedar\u00ebve; t\u00eb aktivizojm\u00eb t\u00eb gjitha n\u00ebnshkrimet IPS dhe antivirusit, t\u00eb aktivizojm\u00eb kutin\u00eb e r\u00ebr\u00eb, mbrojtjen DNS, t\u00eb p\u00ebrdorim IoC nga bazat e disponueshme t\u00eb Inteligjenc\u00ebs p\u00ebr K\u00ebrc\u00ebnimet. N\u00eb p\u00ebrgjith\u00ebsi, ka nj\u00eb mori detyrash gjat\u00eb konfigurimit t\u00eb nj\u00eb firewalli. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, grupi minimal i cil\u00ebsimeve t\u00eb nevojshme p\u00ebr Palo Alto Networks NGFW \u00ebsht\u00eb p\u00ebrshkruar n\u00eb nj\u00eb nga dokumentet SANS: Benchmark i Konfigurimit t\u00eb Siguris\u00eb s\u00eb Palo Alto Networks<\/a><\/noindex> \u2014 rekomandoj t\u00eb filloni me t\u00eb. Dhe natyrisht ka nj\u00eb set praktikash m\u00eb t\u00eb mira p\u00ebr konfigurimin e firewall-it nga kompania prodhuese: Praktika M\u00eb e Mir\u00eb<\/a><\/noindex>.<\/p>\n

Pra, un\u00eb kam pasur nj\u00eb firewall n\u00eb sht\u00ebpi p\u00ebr nj\u00eb jav\u00eb. Le t\u00eb shohim se \u00e7far\u00eb trafik ka n\u00eb rrjetin tim:
\n\"Optimizuesi
\n
\nN\u00ebse renditim sipas numrit t\u00eb seancave, m\u00eb s\u00eb shumti krijohet nga bittorent, pastaj vjen SSL, e m\u00eb pas QUIC. Kjo \u00ebsht\u00eb statistika e t\u00eb dyja, t\u00eb trafikut hyr\u00ebs dhe dal\u00ebs: shum\u00eb ka skanime t\u00eb jashtme t\u00eb router-it tim. Ka 150 aplikacione t\u00eb ndryshme n\u00eb rrjetin tim. <\/p>\n

Pra, t\u00eb gjitha k\u00ebto jan\u00eb kaluara nga nj\u00eb rregull. Le t\u00eb shohim tani se \u00e7'thot\u00eb Policy Optimizer p\u00ebr k\u00ebt\u00eb. N\u00ebse keni par\u00eb m\u00eb sip\u00ebr screenshot-in e nd\u00ebrfaqes me rregullat e siguris\u00eb, do t\u00eb keni par\u00eb nj\u00eb dritare t\u00eb vog\u00ebl n\u00eb k\u00ebndin e posht\u00ebm t\u00eb majt\u00eb q\u00eb m\u00eb jep aludimin se ka rregulla q\u00eb mund t\u00eb optimizohen. Le t\u00eb klikojm\u00eb aty.<\/p>\n

\u00c7far\u00eb tregon Policy Optimizer:<\/p>\n