{"id":29980,"date":"2019-10-31T21:32:59","date_gmt":"2019-10-31T18:32:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw\/"},"modified":"2019-10-31T21:32:59","modified_gmt":"2019-10-31T18:32:59","slug":"optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/optimizator-politik-bezopasnosti-palo-alto-networks-ngfw","title":{"rendered":"Optimizuesi i politikave t\u00eb siguris\u00eb Palo Alto Networks NGFW","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Si si vler\u00ebsojm\u00eb efikasitetin e konfigurimit t\u00eb NGFW<\/h1>\n

\nDetyra m\u00eb e zakonshme \u00ebsht\u00eb t\u00eb kontrolloni se sa efektivisht \u00ebsht\u00eb konfiguruar firewalli juaj. P\u00ebr k\u00ebt\u00eb ekzistojn\u00eb mjete dhe sh\u00ebrbime falas nga kompanit\u00eb q\u00eb merren me NGFW. <\/p>\n

P\u00ebr shembull, m\u00eb posht\u00eb shihet se kompania Palo Alto Networks ka mund\u00ebsin\u00eb direkt nga portali i mb\u00ebshtetjes<\/a><\/noindex> t\u00eb nis\u00eb analiz\u00ebn e statistikave t\u00eb firewallit \u2014 raporti SLR ose analiza e p\u00ebrputhshm\u00ebris\u00eb me praktikat m\u00eb t\u00eb mira \u2014 raporti BPA. K\u00ebto jan\u00eb mjete online falas q\u00eb mund t\u00eb shfryt\u00ebzohen pa instaluar asgj\u00eb.
\n\"Optimizuesi <\/a><\/noindex><\/p>\n

P\u00cbRB\u00cbRJA<\/h3>\n

\nExpedition (Mjeti i Migracionit)<\/a><\/noindex>
\nOptimizuesi i Politikave<\/a><\/noindex>
\nBesimi Zero<\/a><\/noindex>
\nT\u00eb klikojm\u00eb n\u00eb Unused<\/a><\/noindex>
\nT\u00eb klikojm\u00eb n\u00eb Unused App<\/a><\/noindex>
\nT\u00eb klikojm\u00eb No Apps Specified<\/a><\/noindex>
\nPor, si q\u00ebndron me Machine Learning<\/a><\/noindex>
\nUTD<\/a><\/noindex><\/p>\n

<\/a><\/noindex><\/p>\n

Expedition (Mjeti i Migracionit)<\/h2>\n

\n\"Optimizuesi
\n
\nNj\u00eb variant m\u00eb i komplikuar i kontrollit t\u00eb konfigurimeve tuaja \u00ebsht\u00eb t\u00eb shkarkoni mjetin falas Expedition<\/a><\/noindex> (ish Mjeti i Migracionit). Ai shkarkohet si Virtual Appliance p\u00ebr VMware, nuk k\u00ebrkon konfigurim \u2014 thjesht shkarkoni imazhin dhe e lan\u00e7oni n\u00ebn hipervizorin VMware, m\u00eb pas hapni nd\u00ebrfaqen e web-it. Ky mjet k\u00ebrkon nj\u00eb p\u00ebrshkrim t\u00eb ve\u00e7ant\u00eb, pasi vet\u00ebm kursi p\u00ebr t\u00eb zgjat 5 dit\u00eb, aq shum\u00eb funksione ka tani, duke p\u00ebrfshir\u00eb Machine Learning dhe migrimin e konfigurimeve t\u00eb ndryshme t\u00eb politikave, NAT dhe objekteve p\u00ebr prodhues t\u00eb ndrysh\u00ebm t\u00eb Firewall. P\u00ebr Machine Learning, do t\u00eb shkruaj m\u00eb shum\u00eb posht\u00eb n\u00eb tekst.<\/p>\n

<\/a><\/noindex><\/p>\n

Optimizuesi i Politikave<\/h2>\n

\nDhe varianti m\u00eb i p\u00ebrshtatsh\u00ebm (IMHO), p\u00ebr t\u00eb cilin do t\u00eb flas m\u00eb holl\u00ebsisht sot \u2014 optimizuesi i politikave i integruar n\u00eb nd\u00ebrfaqen e vet\u00eb Palo Alto Networks. P\u00ebr ta demonstruar k\u00ebt\u00eb, instalova nj\u00eb firewill n\u00eb sht\u00ebpi dhe shkrova nj\u00eb rregull t\u00eb thjesht\u00eb: lejo \u00e7do gj\u00eb n\u00eb \u00e7do gj\u00eb. N\u00eb parim, k\u00ebto rregulla i shoh disa her\u00eb edhe n\u00eb rrjetet korporative. Sigurisht, aktivizova t\u00eb gjitha profillet e siguris\u00eb NGFW, si\u00e7 shihet n\u00eb screenshot:
\n\"Optimizuesi
\n
\nN\u00eb screenshot-in m\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb shembull i firewall-it tim t\u00eb pap\u00ebrshtatur, ku pothuajse t\u00eb gjitha lidhjet bien n\u00eb rregullin e fundit: AllowAll, q\u00eb shihet nga statistikat n\u00eb kolon\u00ebn Hit Count.
\n\"Optimizuesi
\n
\n<\/a><\/noindex><\/p>\n

Besimi Zero<\/h2>\n

\nEkziston nj\u00eb qasje ndaj siguris\u00eb e quajtur Besimi Zero<\/a><\/noindex>. \u00c7far\u00eb do t\u00eb thot\u00eb kjo: ne duhet t\u00eb lejojm\u00eb njer\u00ebzit brenda rrjetit t\u00eb ken\u00eb sakt\u00ebsisht lidhjet q\u00eb iu nevojiten dhe t\u00eb ndalojm\u00eb gjith\u00e7ka tjet\u00ebr. K\u00ebshtu q\u00eb duhet t\u00eb shtojm\u00eb rregulla t\u00eb qarta p\u00ebr aplikacionet, p\u00ebrdoruesit, kategorit\u00eb e URL-ve, llojet e skedar\u00ebve; t\u00eb aktivizojm\u00eb t\u00eb gjitha n\u00ebnshkrimet IPS dhe antivirusin, t\u00eb aktivizojm\u00eb sandbox-in, mbrojtjen DNS, t\u00eb p\u00ebrdorim IoC nga bazat e disponueshme t\u00eb Threat Intelligence. N\u00eb p\u00ebrgjith\u00ebsi, ka nj\u00eb num\u00ebr t\u00eb konsideruesh\u00ebm detyrash gjat\u00eb konfigurimit t\u00eb firewallit. <\/p>\n

Dhe, grupi minimal i konfigurimeve t\u00eb nevojshme p\u00ebr Palo Alto Networks NGFW \u00ebsht\u00eb p\u00ebrshkruar n\u00eb nj\u00eb nga dokumentet SANS: Standardi i Konfigurimit t\u00eb Siguris\u00eb nga Palo Alto Networks<\/a><\/noindex> \u2014 rekomandoj t\u00eb filloni nga ai. Si dhe, pa dyshim, ka nj\u00eb grup praktikash m\u00eb t\u00eb mira p\u00ebr konfigurimin e firewall-it nga kompania prodhuese: Praktika m\u00eb e Mir\u00eb<\/a><\/noindex>.<\/p>\n

Pra, kam l\u00ebn\u00eb nj\u00eb firewall n\u00eb sht\u00ebpi p\u00ebr nj\u00eb jav\u00eb. Le t\u00eb shohim se \u00e7far\u00eb trafiku ka n\u00eb rrjetin tim:
\n\"Optimizuesi
\n
\nN\u00ebse sortojm\u00eb sipas numrit t\u00eb sesioneve, m\u00ebnyra m\u00eb e madhe krijohet nga bittorent, pastaj vjen SSL, dhe m\u00eb pas QUIC. Kjo \u00ebsht\u00eb statistika e p\u00ebrbashk\u00ebt p\u00ebr trafikun hyr\u00ebs dhe dal\u00ebs: ka shum\u00eb skanime t\u00eb jashtme p\u00ebr routerin tim. Ka rreth 150 aplikacione n\u00eb rrjetin tim. <\/p>\n

Pra, e gjith\u00eb kjo e kaloi nj\u00eb rregull. Le t\u00eb shohim se \u00e7far\u00eb thot\u00eb Policy Optimizer p\u00ebr k\u00ebt\u00eb. N\u00ebse keni par\u00eb m\u00eb lart n\u00eb screenshot-in e nd\u00ebrfaqes me rregullat e siguris\u00eb, at\u00ebher\u00eb n\u00eb fund t\u00eb majt\u00eb keni par\u00eb nj\u00eb dritare t\u00eb vog\u00ebl q\u00eb m\u00eb jep nj\u00eb sugjerim se ekzistojn\u00eb rregulla q\u00eb mund t\u00eb optimizohen. Le t\u00eb klikojm\u00eb aty.<\/p>\n

\u00c7far\u00eb tregon Policy Optimizer:<\/p>\n