{"id":30215,"date":"2019-10-31T21:34:16","date_gmt":"2019-10-31T18:34:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/it-gigant-predstavil-servisno-opredelyaemyj-fajrvol\/"},"modified":"2019-10-31T21:34:16","modified_gmt":"2019-10-31T18:34:16","slug":"it-gigant-predstavil-servisno-opredelyaemyj-fajrvol","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/it-gigant-predstavil-servisno-opredelyaemyj-fajrvol","title":{"rendered":"Giganti IT prezantoi nj\u00eb firewall t\u00eb p\u00ebrcaktuar nga sh\u00ebrbimi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Ai do t\u00eb p\u00ebrdoret n\u00eb qendrat e t\u00eb dh\u00ebnave dhe n\u00eb re.<\/h5>\n

\n\"Giganti<\/a><\/noindex>
\n\/ \u0444\u043e\u0442\u043e Christiaan Colen<\/a><\/noindex> CC BY-SA<\/a><\/noindex><\/i><\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb kjo teknologji<\/h2>\n

\nKompania VMware prezantoi nj\u00eb firewall t\u00eb ri q\u00eb mbron rrjetin n\u00eb nivelin e aplikacioneve.<\/p>\n

Infrastruktura e kompanive moderne \u00ebsht\u00eb nd\u00ebrtuar mbi mij\u00ebra sh\u00ebrbime t\u00eb lidhura n\u00eb nj\u00eb rrjet t\u00eb p\u00ebrbashk\u00ebt. Kjo zgjeron vektorin e sulmeve t\u00eb mundshme nga hakerat. Firewall-in klasik \u00ebsht\u00eb n\u00eb gjendje t\u00eb mbroj\u00eb nga sulmet e jashtme, megjithat\u00eb jan\u00eb t\u00eb paaft\u00eb<\/a><\/noindex> n\u00ebse nj\u00eb sulmues ka arritur tashm\u00eb t\u00eb dep\u00ebrtoj\u00eb n\u00eb rrjet.
\n<\/a><\/noindex>
\nSpecialist\u00ebt e siguris\u00eb nga Carbon Black ekspert\u00ebt<\/a><\/noindex>, q\u00eb n\u00eb 59% t\u00eb rasteve, sulmuesit nuk ndalen n\u00eb thyerjen e nj\u00eb serveri t\u00eb vet\u00ebm. Ata k\u00ebrkojn\u00eb dob\u00ebsi n\u00eb pajisjet e lidhura dhe \"shkelin\" n\u00ebp\u00ebr rrjet p\u00ebr t\u00eb marr\u00eb qasje n\u00eb m\u00eb shum\u00eb t\u00eb dh\u00ebna.<\/p>\n

Firewall-i i ri p\u00ebrdor algoritme t\u00eb m\u00ebsimit t\u00eb automatik p\u00ebr t\u00eb identifikuar aktivitetet anormale n\u00eb rrjet dhe n\u00eb rast rreziku e njofton administratorin.<\/p>\n

Si funksionon<\/h2>\n

\nFirewalli p\u00ebrb\u00ebhet<\/a><\/noindex> nga dy komponente: platforma NSX dhe sistemi i zbules\u00ebs s\u00eb k\u00ebrc\u00ebnimeve AppDefense.<\/p>\n

Sistemi AppDefense \u00ebsht\u00eb p\u00ebrgjegj\u00ebs<\/a><\/noindex> p\u00ebr nd\u00ebrtimin e nj\u00eb modeli t\u00eb sjelljes s\u00eb t\u00eb gjitha aplikacioneve t\u00eb hapura n\u00eb rrjet. Algoritmet speciale t\u00eb m\u00ebsimit t\u00eb automatik analizojn\u00eb funksionimin e sh\u00ebrbimeve dhe krijojn\u00eb nj\u00eb \"list\u00eb t\u00eb bardh\u00eb\" t\u00eb veprimeve q\u00eb ato kryejn\u00eb. P\u00ebr p\u00ebrpilimin e saj, p\u00ebrdoret gjithashtu informacioni nga baza e t\u00eb dh\u00ebnave t\u00eb VMware, e cila formohet mbi baz\u00ebn e telemetris\u00eb q\u00eb ofrojn\u00eb klient\u00ebt e kompanis\u00eb.<\/p>\n

Kjo list\u00eb luan nj\u00eb rol si politikat e siguris\u00eb q\u00eb adaptohen, n\u00eb baz\u00eb t\u00eb s\u00eb cilave firewall-i identifikon anomalit\u00eb n\u00eb rrjet. Sistemi monitoron funksionimin e aplikacioneve dhe, kur zbulohet ndonj\u00eb devijim n\u00eb sjelljen e tyre, d\u00ebrgon nj\u00eb njoftim operatorit t\u00eb qendr\u00ebs s\u00eb t\u00eb dh\u00ebnave. P\u00ebrdoren mjete VMware vSphere p\u00ebr monitorimin e aktivitetit, k\u00ebshtu q\u00eb firewall-i i ri nuk k\u00ebrkon instalim t\u00eb softuerit t\u00eb specializuar n\u00eb \u00e7do host.<\/p>\n

Sa i p\u00ebrket NSX Data Center<\/a><\/noindex>, \u00ebsht\u00eb platformat p\u00ebr menaxhimin e rrjeteve t\u00eb definuara nga softueri n\u00eb qendrat e t\u00eb dh\u00ebnave. Detyra e saj \u00ebsht\u00eb t\u00eb lidh\u00eb komponent\u00ebt e firewall-it n\u00eb nj\u00eb sistem t\u00eb vet\u00ebm dhe t\u00eb reduktoj\u00eb kostot e mir\u00ebmbajtjes. N\u00eb ve\u00e7anti, sistemi lejon q\u00eb t\u00eb nj\u00ebjtat politika sigurie t\u00eb zbatohen n\u00eb mjedise t\u00eb ndryshme t\u00eb re.<\/p>\n

P\u00ebr t\u00eb par\u00eb firewall-in n\u00eb veprim, mund t\u00eb shikoni videon n\u00eb kanalin YouTube t\u00eb VMware<\/a><\/noindex>.<\/p>\n

\"Giganti
\n\/ \u0444\u043e\u0442\u043e USDA<\/a><\/noindex> PD<\/i><\/p>\n

Mendime<\/h2>\n

\nZgjidhja nuk \u00ebsht\u00eb e lidhur me arkitektur\u00ebn dhe harduerin e sistemit t\u00eb synuar. Prandaj, ajo mund t\u00eb implementohet n\u00eb nj\u00eb infrastruktur\u00eb multi-re. P\u00ebr shembull, p\u00ebrfaq\u00ebsuesit e kompanis\u00eb IlliniCloud, q\u00eb ofron<\/a><\/noindex> sh\u00ebrbime t\u00eb reja p\u00ebr institucionet qeveritare, thon\u00eb se sistemi NSX i ndihmon ata t\u00eb balancojn\u00eb ngarkesat n\u00eb rrjet dhe kryen funksionet e firewall-it n\u00eb tre qendra t\u00eb t\u00eb dh\u00ebnave t\u00eb q\u00ebndruara gjeografikisht t\u00eb ndryshme.<\/p>\n

P\u00ebrfaq\u00ebsuesit e IDC ekspert\u00ebt<\/a><\/noindex>, q\u00eb numri i kompanive q\u00eb punojn\u00eb me infrastruktur\u00ebn multi-re po rritet vazhdimisht. Prandaj, zgjidhjet q\u00eb thjeshtojn\u00eb menaxhimin dhe mbrojn\u00eb infrastruktur\u00ebn e shp\u00ebrndar\u00eb (si NSX dhe firewall-i i nd\u00ebrtuar mbi t\u00eb) do t\u00eb fitojn\u00eb popullaritet mes klient\u00ebve.<\/p>\n

Mes disavantazheve t\u00eb k\u00ebtij firewall-i t\u00eb ri, ekspert\u00ebt theksojn\u00eb nevoj\u00ebn p\u00ebr implementimin e rrjeteve t\u00eb definuara nga softueri. Kjo mund\u00ebsi nuk \u00ebsht\u00eb e disponueshme p\u00ebr t\u00eb gjitha kompanit\u00eb dhe qendrat e t\u00eb dh\u00ebnave. P\u00ebr m\u00eb tep\u00ebr, ende nuk \u00ebsht\u00eb e qart\u00eb se si do t\u00eb ndikoj\u00eb firewall-i i definuar nga sh\u00ebrbimi n\u00eb performanc\u00ebn e sh\u00ebrbimeve dhe kapacitetin e rrjeteve.<\/p>\n

Po ashtu, kompania VMware e ka testuar produktin e saj vet\u00ebm kund\u00ebr llojeve m\u00eb t\u00eb zakonshme t\u00eb sulmeve (p\u00ebr shembull, phishing). Nuk \u00ebsht\u00eb e qart\u00eb se si do t\u00eb reagoj\u00eb sistemi do t\u00eb funksionoj\u00eb<\/a><\/noindex> n\u00eb raste m\u00eb komplekse si sulmi i injektimit t\u00eb proceseve. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, firewall-i i ri nuk \u00ebsht\u00eb n\u00eb gjendje t\u00eb marr\u00eb masa vet\u00eb p\u00ebr t\u00eb mbrojtur rrjetin \u2014 ai di vet\u00ebm t\u00eb d\u00ebrgoj\u00eb njoftime p\u00ebr administratorin.<\/p>\n

Zgjidhje t\u00eb ngjashme<\/h2>\n

\nN\u00eb Palo Alto Networks dhe Cisco po ashtu po zhvillojn\u00eb firewalls t\u00eb gjenerat\u00ebs s\u00eb re, t\u00eb cilat mbrojn\u00eb infrastruktur\u00ebn e rrjetit n\u00eb t\u00eb gjith\u00eb perimetrin. Ky nivel mbrojtjeje arrihet p\u00ebrmes sistemeve t\u00eb analiz\u00ebs s\u00eb thell\u00eb t\u00eb trafikut, parandalimit t\u00eb dep\u00ebrtimeve (IPS) dhe virtualizimit t\u00eb rrjeteve private (VPN).<\/p>\n

Kompania e par\u00eb kreu<\/a><\/noindex> ofron nj\u00eb platform\u00eb q\u00eb siguron sigurin\u00eb e mjedisit rrjetor p\u00ebrmes disa firewalls t\u00eb specializuar. Secili prej tyre mbron nj\u00eb mjedis t\u00eb dedikuar \u2014 ka zgjidhje p\u00ebr rrjetet mobile, re dhe makina virtuale.<\/p>\n

Giganti i dyt\u00eb IT ofron<\/a><\/noindex> siguron mjete harduerike dhe software q\u00eb analizojn\u00eb dhe filtrojn\u00eb trafikun n\u00eb nivelin e protokolleve dhe funksioneve t\u00eb aplikacioneve. N\u00eb k\u00ebto mjete mund t\u00eb konfigurohen politikat e siguris\u00eb dhe t\u00eb p\u00ebrdoret nj\u00eb baz\u00eb t\u00eb integruar t\u00eb dob\u00ebsive dhe k\u00ebrc\u00ebnimeve p\u00ebr aplikacione t\u00eb caktuara.<\/p>\n

Pritet q\u00eb n\u00eb t\u00eb ardhmen m\u00eb shum\u00eb kompani do t\u00eb ofrojn\u00eb firewalls q\u00eb mbrojn\u00eb rrjetet n\u00eb nivelin e sh\u00ebrbimeve.<\/p>\n

\n\u00c7far\u00eb shkruajm\u00eb n\u00eb blogun e par\u00eb p\u00ebr IaaS t\u00eb korporatave:<\/p>\n