{"id":36872,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","title":{"rendered":"Shkoni te 2FA (Autentifikimi me dy faktor\u00eb p\u00ebr ASA SSL VPN)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nevojat p\u00ebr t\u00eb ofruar akses t\u00eb larg\u00ebt n\u00eb ambientin korporativ po rriten gjithnj\u00eb e m\u00eb shum\u00eb, pa marr\u00eb parasysh n\u00ebse jan\u00eb p\u00ebrdoruesit tan\u00eb apo partner\u00ebt q\u00eb k\u00ebrkojn\u00eb akses n\u00eb ndonj\u00eb server n\u00eb organizat\u00ebn tuaj.<\/p>\n

P\u00ebr k\u00ebto q\u00ebllime, shumica e kompanive p\u00ebrdorin teknologjin\u00eb VPN, e cila ka shk\u00eblqyer si nj\u00eb m\u00ebnyr\u00eb e sigurt p\u00ebr t\u00eb ofruar akses n\u00eb burimet lokale t\u00eb organizat\u00ebs.<\/p>\n

Kompania ime nuk ishte nj\u00eb p\u00ebrjashtim, dhe ne gjithashtu, ashtu si shum\u00eb t\u00eb tjer\u00eb, p\u00ebrdorim k\u00ebt\u00eb teknologji. Dhe si shum\u00eb t\u00eb tjer\u00eb, p\u00ebrdorim, si nj\u00eb port\u00eb p\u00ebr akses t\u00eb larg\u00ebt \u2014 Cisco ASA 55xx.<\/p>\n

Me rritjen e numrit t\u00eb p\u00ebrdoruesve t\u00eb larg\u00ebt, lind nevoja p\u00ebr t\u00eb leht\u00ebsuar procedur\u00ebn e dh\u00ebnies s\u00eb credencialeve. Por n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, kjo duhet t\u00eb b\u00ebhet pa kompromise mbi sigurin\u00eb.<\/p>\n

P\u00ebr veten ton\u00eb, ne gjet\u00ebm zgjidhje n\u00eb aplikimin e autentifikimit me dy faktor\u00eb p\u00ebr lidhjen p\u00ebrmes Cisco SSL. VPN<\/a>, me p\u00ebrdorimin e fjal\u00ebkalimeve nj\u00ebher\u00ebsh. Ky publikim do t\u00eb tregoj\u00eb se si t\u00eb organizoni nj\u00eb zgjidhje t\u00eb till\u00eb me shpenzime minimale kohore dhe pa shpenzime p\u00ebr softin e nevojsh\u00ebm (me kusht q\u00eb Cisco ASA t\u00eb jet\u00eb tashm\u00eb n\u00eb infrastruktur\u00ebn tuaj).<\/p>\n

Tregu \u00ebsht\u00eb i mbushur me zgjidhje kutish p\u00ebr gjenerimin e fjal\u00ebkalimeve nj\u00ebher\u00ebshe, duke ofruar shum\u00eb mund\u00ebsi p\u00ebr marrjen e tyre, qoft\u00eb p\u00ebrmes d\u00ebrgimit t\u00eb fjal\u00ebkalimit p\u00ebrmes SMS-\u00ebve, ose duke p\u00ebrdorur token, qoft\u00eb harduerik, apo softuerik (p.sh. n\u00eb telefonin mobil). Por, t\u00ebrheqja p\u00ebr kursim dhe d\u00ebshira p\u00ebr t\u00eb kursyer para p\u00ebr pun\u00ebdh\u00ebn\u00ebsin tim, n\u00eb kushtet e kriz\u00ebs aktuale, m\u00eb kan\u00eb shtyr\u00eb t\u00eb gjej nj\u00eb m\u00ebnyr\u00eb falas p\u00ebr t\u00eb realizuar nj\u00eb sh\u00ebrbim p\u00ebr gjenerimin e fjal\u00ebkalimeve nj\u00ebher\u00ebshe. Ky sh\u00ebrbim, megjith\u00ebse falas, nuk i jap shum\u00eb pas nj\u00ebzgjidhjeve tregtare (duhet t\u00eb theksohet se ky produkt ka gjithashtu nj\u00eb version komercial, por ne u dakorduam se shpenzimet, n\u00eb para, do t\u00eb ishin zero).
\n<\/a><\/noindex>
\nPra, na nevojiten:<\/p>\n

\u2014 Nj\u00eb imazh Linux me nj\u00eb paket\u00eb mjetesh t\u00eb integruara \u2014 multiOTP, FreeRADIUS dhe nginx, p\u00ebr akses n\u00eb server n\u00ebp\u00ebrmjet uebit (http:\/\/download.multiotp.net\/ \u2014 un\u00eb p\u00ebrdora nj\u00eb imazh t\u00eb gatsh\u00ebm p\u00ebr VMware)
\n \u2014 Server Active Directory
\n \u2014 Cisco ASA (p\u00ebr leht\u00ebsi, un\u00eb p\u00ebrdor ASDM)
\n \u2014 \u00c7do token softuerik q\u00eb mb\u00ebshtet mekanizmin TOTP (p.sh., un\u00eb p\u00ebrdor Google Authenticator, por edhe FreeOTP do t\u00eb funksiononte)<\/p>\n

Nuk do t\u00eb hyj n\u00eb detajet e rregullimit t\u00eb imazhit. N\u00eb fund do t\u00eb merrni Debian Linux me multiOTP dhe FreeRADIUS t\u00eb instaluar tashm\u00eb, t\u00eb konfiguruar p\u00ebr t\u00eb punuar s\u00eb bashku dhe nj\u00eb nd\u00ebrfaqe n\u00eb internet p\u00ebr administrimin e OTP.<\/p>\n

Hapi 1. Inicioni sistemin dhe konfiguroni p\u00ebr rrjetin tuaj<\/b>
\n\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 root root. \u0414\u0443\u043c\u0430\u044e, \u0432\u0441\u0435 \u0434\u043e\u0433\u0430\u0434\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root, \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043b\u043e\u0433\u0438\u043d\u0430. \u0422\u0430\u043a \u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0435\u0442\u0438 (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e ‘192.168.1.44’ c \u0448\u043b\u044e\u0437\u043e\u043c ‘192.168.1.1’). \u041f\u043e\u0441\u043b\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443.<\/p>\n

N\u00eb Active Directory do t\u00eb krijojm\u00eb p\u00ebrdoruesin otp<\/b>, me fjal\u00ebkalim MySuperPassword<\/b>.<\/p>\n

Hapi 2. Konfigurojm\u00eb lidhjen dhe importojm\u00eb p\u00ebrdoruesit e Active Directory<\/b>
\nP\u00ebr k\u00ebt\u00eb do na nevojitet qasje n\u00eb konsol\u00eb, dhe, konkretisht, skedari multiotp.php<\/b>, me an\u00eb t\u00eb t\u00eb cilit do t\u00eb konfigurojm\u00eb parametrat e lidhjes me Active Directory.<\/p>\n

Shkoni n\u00eb direktorin\u00eb \/usr\/local\/bin\/multiotp\/<\/i> dhe ekzekutojm\u00eb radhazi komandat e m\u00ebposhtme:<\/p>\n

.\/multiotp.php -config default-request-prefix-pin=0<\/code><\/pre>\n
\nP\u00ebrcakton n\u00ebse k\u00ebrkohet nj\u00eb PIN tjet\u00ebr (t\u00eb p\u00ebrhersh\u00ebm) gjat\u00eb futurjes s\u00eb PIN-it t\u00eb p\u00ebrkohsh\u00ebm (0 ose 1)<\/p>\n
.\/multiotp.php -config default-request-ldap-pwd=0<\/code><\/pre>\n
\nP\u00ebrcakton n\u00ebse k\u00ebrkohet futja e fjal\u00ebkalimit t\u00eb domenit gjat\u00eb futurjes s\u00eb PIN-it t\u00eb p\u00ebrkohsh\u00ebm (0 ose 1)<\/p>\n
.\/multiotp.php -config ldap-server-type=1<\/code><\/pre>\n
\nSpecifikon llojin e serverit LDAP (0 = server LDAP i zakonsh\u00ebm, n\u00eb rastin ton\u00eb 1 = Active Directory)<\/p>\n
.\/multiotp.php -config ldap-cn-identifier="sAMAccountName"<\/code><\/pre>\n
\nSpecifikon n\u00eb \u00e7far\u00eb forme duhet t\u00eb paraqitet emri i p\u00ebrdoruesit (kjo vler\u00eb do t\u00eb jap\u00eb vet\u00ebm emrin, pa domenin)<\/p>\n
.\/multiotp.php -config ldap-group-cn-identifier="sAMAccountName"<\/code><\/pre>\n
\nE nj\u00ebjta, p\u00ebr grupin<\/p>\n
.\/multiotp.php -config ldap-group-attribute="memberOf"<\/code><\/pre>\n
\nSpecifikon metod\u00ebn e p\u00ebrcaktimit t\u00eb p\u00ebrkat\u00ebsis\u00eb s\u00eb p\u00ebrdoruesit n\u00eb grup<\/p>\n
.\/multiotp.php -config ldap-ssl=1<\/code><\/pre>\n
\nA duhet t\u00eb p\u00ebrdorim nj\u00eb lidhje t\u00eb sigurt me serverin LDAP (sigurisht \u2014 po!)<\/p>\n
.\/multiotp.php -config ldap-port=636<\/code><\/pre>\n
\nPorti p\u00ebr t'u lidhur me serverin LDAP<\/p>\n
.\/multiotp.php -config ldap-domain-controllers=adSRV.domain.local<\/code><\/pre>\n
\nAdresa e serverit tuaj Active Directory<\/p>\n
.\/multiotp.php -config ldap-base-dn="CN=Users,DC=domain,DC=local"<\/code><\/pre>\n
\nSpecifikojm\u00eb se nga ku fillon k\u00ebrkimi i p\u00ebrdoruesve n\u00eb domen<\/p>\n
.\/multiotp.php -config ldap-bind-dn="otp@domain.local"<\/code><\/pre>\n
\nSpecifikojm\u00eb p\u00ebrdoruesin q\u00eb ka t\u00eb drejta k\u00ebrkimi n\u00eb Active Directory<\/p>\n
.\/multiotp.php -config ldap-server-password="MySuperPassword"<\/code><\/pre>\n
\nShkruajm\u00eb fjal\u00ebkalimin e p\u00ebrdoruesit p\u00ebr t'u lidhur me Active Directory<\/p>\n
.\/multiotp.php -config ldap-network-timeout=10<\/code><\/pre>\n
\nVendosim koh\u00ebn e skadimit p\u00ebr lidhjen me Active Directory<\/p>\n
.\/multiotp.php -config ldap-time-limit=30<\/code><\/pre>\n
\nVendosim nj\u00eb kufizim kohor p\u00ebr operacionin e importit t\u00eb p\u00ebrdoruesve<\/p>\n
.\/multiotp.php -config ldap-activated=1<\/code><\/pre>\n
\nAktivizojm\u00eb konfigurimin e lidhjes me Active Directory<\/p>\n
.\/multiotp.php -debug -display-log -ldap-users-sync<\/code><\/pre>\n
\nKryejm\u00eb importin e p\u00ebrdoruesve nga Active Directory<\/p>\n
Hapi 3. Gjenerojm\u00eb QR-kodin p\u00ebr tokenin<\/b>
\nK\u00ebtu gjith\u00e7ka \u00ebsht\u00eb mjaft e thjesht\u00eb. Hapim nd\u00ebrfaqen web t\u00eb serverit OTP n\u00eb shfletues, identifikohemi (mos harroni t\u00eb ndryshoni fjal\u00ebkalimin e administratorit nga parazgjedhja!) dhe klikojm\u00eb butonin \u00abPrint\u00bb:<\/p>\n
\"Shkoni
\nRezultati i k\u00ebtij veprimi do t\u00eb jet\u00eb nj\u00eb faqe, e cila p\u00ebrmban dy QR-koda. E harrojm\u00eb qet\u00ebsisht t\u00eb parin (pavar\u00ebsisht nga shkruhet me t\u00ebrheq\u00ebse Google Authenticator \/ Authenticator \/ 2 Steps Authenticator), dhe gjithashtu skanojm\u00eb kodin e dyt\u00eb n\u00eb tokenin softuerik n\u00eb telefon:<\/p>\n
\"Shkoni
\n(po, e kam prishur q\u00ebllimisht QR-kodin p\u00ebr ta b\u00ebr\u00eb at\u00eb t\u00eb pa lexuesh\u00ebm).<\/p>\n
Pas kryerjes s\u00eb k\u00ebtyre veprimeve, n\u00eb aplikacionin tuaj \u00e7do tridhjet\u00eb sekonda do t\u00eb filloj\u00eb t\u00eb gjenerohet nj\u00eb fjal\u00ebkalim me gjasht\u00eb shifra.<\/p>\n
P\u00ebr siguri, mund t\u00eb b\u00ebni verifikimin n\u00eb t\u00eb nj\u00ebjt\u00ebn nd\u00ebrfaqe:<\/p>\n
\"Shkoni
\nFutni emrin e p\u00ebrdoruesit dhe nj\u00eb kod t\u00eb p\u00ebrkohsh\u00ebm nga aplikacioni n\u00eb telefon. Marr\u00eb nj\u00eb p\u00ebrgjigje pozitive? At\u00ebher\u00eb kalojm\u00eb m\u00eb tej.<\/p>\n
Hapi 4. Rregullojm\u00eb dhe testojm\u00eb funksionimin e FreeRADIUS<\/b>
\nSi\u00e7 e p\u00ebrmenda m\u00eb sip\u00ebr \u2014 multiOTP tashm\u00eb \u00ebsht\u00eb konfiguruar p\u00ebr t\u00eb punuar me FreeRADIUS, \u00ebsht\u00eb e nevojshme t\u00eb kryhen testet dhe t\u00eb shtohet informacioni p\u00ebr port\u00ebn VPN n\u00eb konfigurimin e FreeRADIUS.<\/p>\n
Kthehemi n\u00eb konsol\u00ebn e serverit, n\u00eb direktorin\u00eb \/usr\/local\/bin\/multiotp\/<\/i>, shkruajm\u00eb:<\/p>\n
.\/multiotp.php -config debug=1\n.\/multiotp.php -config display-log=1<\/code><\/pre>\n
\nDuke p\u00ebrfshir\u00eb k\u00ebshtu nj\u00eb regjistrim m\u00eb t\u00eb detajuar.<\/p>\n
N\u00eb skedarin e konfigurimit t\u00eb klient\u00ebve FreeRADIUS (\/etc\/freeradius\/clinets.conf<\/i>) komentojm\u00eb t\u00eb gjitha rreshtat e lidhura me localhost<\/b> dhe shtojm\u00eb dy regjistrime:<\/p>\n
client localhost {\n        ipaddr = 127.0.0.1\n        secret          = testing321\n        require_message_authenticator = no\n}<\/code><\/pre>\n
\n \u2014 p\u00ebr testin<\/p>\n
client 192.168.1.254\/32 {\n        shortname =     CiscoASA\n        secret =        ConnectToRADIUSSecret\n}<\/code><\/pre>\n
\n \u2014 p\u00ebr port\u00ebn ton\u00eb VPN.<\/p>\n
Rini FreeRADIUS dhe provoni t\u00eb autentikoheni:<\/p>\n
radtest username 100110 localhost 1812 testing321<\/code><\/pre>\n
\nku username <\/i>= emri i p\u00ebrdoruesit, 100110 <\/i>= fjal\u00ebkalimi, q\u00eb na u dha nga aplikacioni n\u00eb telefon, localhost <\/i>= adresa e serverit RADIUS, 1812 <\/i> = porta e serverit RADIUS, testing321 <\/i> = fjal\u00ebkalimi i klientit t\u00eb serverit RADIUS (q\u00eb e kemi specifikuar n\u00eb konfigurim).<\/p>\n
Rezultati i k\u00ebsaj komande do t\u00eb jet\u00eb nj\u00eb dalje, q\u00eb do t\u00eb duket p\u00ebraf\u00ebrsisht k\u00ebshtu:<\/p>\n
Sending Access-Request of id 44 to 127.0.0.1 port 1812\n        User-Name = "username"\n        User-Password = "100110"\n        NAS-IP-Address = 127.0.1.1\n        NAS-Port = 1812\n        Message-Authenticator = 0x00000000000000000000000000000000\nrad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=44, length=20<\/code><\/pre>\n
\nTani na nevojitet t\u00eb sigurohemi q\u00eb p\u00ebrdoruesi ka kaluar me sukses autentifikimin. P\u00ebr k\u00ebt\u00eb, ne do t\u00eb shikojm\u00eb n\u00eb logun e vet\u00eb multiotp:<\/p>\n
tail \/var\/log\/multiotp\/multiotp.log<\/code><\/pre>\n
\nDhe n\u00ebse regjistrimi i fundit atje do t\u00eb jet\u00eb:<\/p>\n
2016-09-01 08:58:17     notice  username  User    OK: P\u00ebrdoruesi username u gjith\u00ebsisht lidh me sukses nga 127.0.0.1\n2016-09-01 08:58:17     debug           Debug   Debug: 0 OK: Tokeni u pranuar nga 127.0.0.1<\/code><\/pre>\n
\nAt\u00ebher\u00eb gjith\u00e7ka ka shkuar me sukses, dhe mund t\u00eb ekzekutojm\u00eb<\/p>\n
Hapi 5. Konfigurimi i Cisco ASA<\/b>
\nMarrim parasysh se tashm\u00eb kemi nj\u00eb grup t\u00eb konfiguruar dhe politika p\u00ebr qasje n\u00eb VPN SSL, t\u00eb cilat jan\u00eb konfiguruar n\u00eb lidhje me Active Directory, dhe na nevojitet t\u00eb shtojm\u00eb autentifikimin me dy faktor\u00eb p\u00ebr k\u00ebt\u00eb profil.<\/p>\n
1.<\/strong> Shtojm\u00eb nj\u00eb grup t\u00eb ri servera<\/a> AAA:<\/p>\n
\"Shkoni
\n2.<\/strong> Shtojm\u00eb n\u00eb grup serverin ton\u00eb multiOTP:<\/p>\n
\"Shkoni
\n3.<\/strong> Na duhet t\u00eb rregullojm\u00eb profilin e lidhjes<\/b>, duke vendosur si serverin kryesor t\u00eb autentifikimit grupin e server\u00ebve Active Directory:<\/p>\n
\"Shkoni
\n4.<\/strong> N\u00eb sked\u00ebn Avancuar -> Autentifikimi<\/b> po ashtu zgjedhim grupin e server\u00ebve Active Directory:<\/p>\n
\"Shkoni
\n5.<\/strong> N\u00eb sked\u00ebn Avancuar -> Sekondar<\/b> autentifikimi zgjedhim grupin e server\u00ebve t\u00eb krijuar, ku \u00ebsht\u00eb regjistruar multiOTP-server. Theksojm\u00eb se emri i sesionit trash\u00ebgohet nga grupi primar i server\u00ebve AAA:<\/p>\n
\"Shkoni
\nAplikojm\u00eb cil\u00ebsimet dhe<\/p>\n
Hapi 6, i fundit<\/b>
\nKontrollojm\u00eb n\u00ebse kemi dyfaktorin e autentifikimit p\u00ebr SLL VPN:<\/p>\n
\"Shkoni
\nVua-la! Kur lidhemi p\u00ebrmes Cisco AnyConnect VPN Client, do t\u00eb k\u00ebrkohet gjithashtu nj\u00eb kod tjet\u00ebr, nj\u00eb her\u00ebsh, p\u00ebr password.<\/p>\n
Shpresoj se ky artikull do t\u00eb ndihmoj\u00eb dik\u00eb dhe se do t\u2019i jap\u00eb dikujt ide se si mund t\u00eb p\u00ebrdoret ky, falas<\/b> O\u0422\u041f-server, p\u00ebr detyra t\u00eb tjera. Ndani n\u00eb komentet n\u00ebse keni d\u00ebshir\u00eb.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27626,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36872","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Shkoni te 2FA (Autentifikimi me dy faktor\u00eb p\u00ebr ASA SSL VPN) | ProHoster","description":"Nevoja p\u00ebr t\u00eb ofruar qasje t\u00eb larg\u00ebt n\u00eb ambientin korporativ po shfaqet gjithnj\u00eb e m\u00eb shpesh, pavar\u00ebsisht n\u00ebse jan\u00eb p\u00ebrdorues t\u00eb vet\u00eb apo partner\u00eb q\u00eb k\u00ebrkojn\u00eb qasje n\u00eb k\u00ebt\u00eb ose at\u00eb server n\u00eb organizat\u00ebn tuaj. P\u00ebr k\u00ebto q\u00ebllime, shumica e kompanive p\u00ebrdorin teknologjin\u00eb VPN, e cila \u00ebsht\u00eb e njohur si nj\u00eb m\u00ebnyr\u00eb e besueshme p\u00ebr t\u00eb ofruar qasje n\u00eb burimet lokale t\u00eb organizat\u00ebs. Kompania ime nuk b\u00ebri p\u00ebrjashtim.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Go to 2FA (\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f ASA SSL VPN) | ProHoster","og:description":"\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36872","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:05:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-02-09 17:05:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36872"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36872\/revisions"}],"predecessor-version":[{"id":158589,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36872\/revisions\/158589"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27626"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}