{"id":95964,"date":"2020-10-06T01:42:49","date_gmt":"2020-10-05T23:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka"},"modified":"2020-10-06T01:42:49","modified_gmt":"2020-10-05T23:42:49","slug":"2-usergate-getting-started-trebovaniya-ustanovka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","title":{"rendered":"2. UserGate Getting Started. K\u00ebrkesat, instalimi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/0dec3bafb496cf5c88562b7d59252a30.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrsh\u00ebndetje, ky \u00ebsht\u00eb artikulli i dyt\u00eb mbi zgjidhjen NGFW nga kompania&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. Q\u00ebllimi i k\u00ebtij artikulli \u00ebsht\u00eb t\u00eb tregoj\u00eb se si t\u00eb instaloni firewall-in UserGate n\u00eb nj\u00eb sistem virtual (do t\u00eb p\u00ebrdor softuerin e virtualizimit VMware Workstation) dhe t\u00eb realizoni konfigurimin e tij fillestar (t\u00eb lejoni qasje nga rrjeti lokal n\u00eb internet p\u00ebrmes UserGate).&nbsp;&nbsp;&nbsp;<\/p>\n<h2>1. Hyrje<\/h2>\n<p>Si fillim, do t\u00eb p\u00ebrshkruaj m\u00ebnyrat e ndryshme t\u00eb integrimit t\u00eb k\u00ebtij gateway n\u00eb rrjet. D\u00ebshiroj t\u00eb theksoj se, n\u00eb var\u00ebsi t\u00eb opsionit t\u00eb zgjedhur p\u00ebr lidhje, disa funksionalitete t\u00eb gateway-t mund t\u00eb mos jen\u00eb t\u00eb disponueshme. Zgjidhja UserGate mb\u00ebshtet m\u00ebnyrat e m\u00ebposhtme t\u00eb lidhjes:&nbsp;<\/p>\n<ul>\n<li>\n<p>Firewall L3-L7<\/p>\n<\/li>\n<li>\n<p>Ndiqni urdh\u00ebrimin L2<\/p>\n<\/li>\n<li>\n<p>Ndiqni urdh\u00ebrimin L3<\/p>\n<\/li>\n<li>\n<p>Virtualisht n\u00eb nd\u00ebrprerje, duke p\u00ebrdorur protokollin WCCP<\/p>\n<\/li>\n<li>\n<p>Virtualisht n\u00eb nd\u00ebrprerje, duke p\u00ebrdorur Routing t\u00eb bazuar n\u00eb Politika<\/p>\n<\/li>\n<li>\n<p>Router mbi nj\u00eb Stick<\/p>\n<\/li>\n<li>\n<p> Web-proxy i caktuar shprehimisht<\/p>\n<\/li>\n<li>\n<p>UserGate, si port\u00eb e paracaktuar<\/p>\n<\/li>\n<li>\n<p>Monitorimi i port\u00ebs Mirror<\/p>\n<\/li>\n<\/ul>\n<p>UserGate mb\u00ebshtet 2 tipa klasteresh:<\/p>\n<ol>\n<li>\n<p>Klaster i konfigurimit. Nj\u00ebsit\u00eb e bashkuara n\u00eb klasterin e konfigurimit mb\u00ebshtesin cil\u00ebsimet e p\u00ebrbashk\u00ebta brenda klasterit.<\/p>\n<\/li>\n<li>\n<p>Klaster i q\u00ebndrueshm\u00ebris\u00eb. Deri n\u00eb 4 nj\u00ebsit\u00eb e klasterit t\u00eb konfigurimit mund t\u00eb bashkohen n\u00eb nj\u00eb klaster t\u00eb q\u00ebndrueshm\u00ebris\u00eb, i cili mb\u00ebshtet funksionimin n\u00eb modin Aktiv-Aktiv ose Aktiv-Pasiv. \u00cbsht\u00eb e mundur t\u00eb krijohen disa klastera t\u00eb q\u00ebndrueshm\u00ebris\u00eb.<\/p>\n<\/li>\n<\/ol>\n<h2>2. Instalimi<\/h2>\n<p>Si\u00e7 u p\u00ebrmend n\u00eb artikullin e kaluar, UserGate vjen n\u00eb form\u00ebn e nj\u00eb kompleksi software-hardware ose instalohet n\u00eb ambientin virtual. Nga paneli personal n\u00eb sit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usergate.com\/\">UserGate <\/a><\/noindex>shkarkoni imazhin n\u00eb formatin OVF (Open Virtualization Format), ky format p\u00ebrshtatet p\u00ebr ofruesit VMWare dhe Oracle Virtualbox. P\u00ebr Microsoft Hyper-v dhe KVM ofrohen imazhe t\u00eb disqeve t\u00eb makin\u00ebs virtuale.<\/p>\n<p>Sipas faqes UserGate, p\u00ebr funksionimin e sakt\u00eb t\u00eb makin\u00ebs virtuale rekomandohet p\u00ebrdorimi i pakt\u00ebn 8Gb memorie RAM dhe nj\u00eb procesor virtual me 2 b\u00ebrthama. Hipervizori duhet t\u00eb mb\u00ebshtes\u00eb funksionimin e sistemeve operative 64-bit.<\/p>\n<p>Instalimi fillon me importimin e imazhit n\u00eb hipervizorin e zgjedhur (VirtualBox dhe VMWare). N\u00eb rastin e Microsoft Hyper-v dhe KVM, \u00ebsht\u00eb e nevojshme t\u00eb krijoni nj\u00eb makin\u00eb virtuale dhe t\u00eb caktoni imazhin e shkarkuar si disk, pas s\u00eb cil\u00ebs \u00ebsht\u00eb e nevojshme t\u00eb \u00e7aktivizoni sh\u00ebrbimet e integrimit n\u00eb cil\u00ebsimet e makin\u00ebs virtuale t\u00eb krijuar.<\/p>\n<p>Sipas parazgjedhjes, pas importit n\u00eb VMWare krijohet nj\u00eb makin\u00eb virtuale me k\u00ebto cil\u00ebsime:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/98764da6ccaed86f86c9924fdfe67516.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Si\u00e7 \u00ebsht\u00eb shkruar m\u00eb lart, memorie operative duhet t\u00eb jet\u00eb t\u00eb pakt\u00ebn 8 Gb dhe p\u00ebr \u00e7do 100 p\u00ebrdorues duhet t\u00eb shtoni 1 Gb. Kapaciteti i hard diskut parazgjedhur \u00ebsht\u00eb 100 Gb, megjithat\u00eb kjo zakonisht nuk \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u00eb ruajtur t\u00eb gjitha log-\u00ebt dhe konfigurimet. Madh\u00ebsia e rekomanduar \u00ebsht\u00eb 300 Gb ose m\u00eb shum\u00eb. Prandaj, n\u00eb pronat e makin\u00ebs virtuale, ne ndryshojm\u00eb madh\u00ebsin\u00eb e diskut n\u00eb at\u00eb q\u00eb na nevojitet. Fillimisht, UserGate UTM vjen me kat\u00ebr nd\u00ebrfaqe t\u00eb caktuara n\u00eb zona:<\/p>\n<p>Management \u2014 nd\u00ebrfaqja e par\u00eb e makineris\u00eb virtuale, zona p\u00ebr lidhjen e rrjeteve t\u00eb besuara, nga t\u00eb cilat lejohet menaxhimi i UserGate.<\/p>\n<p>Trusted \u2014 nd\u00ebrfaqja e dyt\u00eb e makineris\u00eb virtuale, zona p\u00ebr lidhjen e rrjeteve t\u00eb besuara, p\u00ebr shembull, rrjeteve LAN.<\/p>\n<p>Untrusted \u2014 nd\u00ebrfaqja e tret\u00eb e makineris\u00eb virtuale, zona p\u00ebr nd\u00ebrfaqet e lidhura me rrjete t\u00eb pa besuara, p\u00ebr shembull, me internetin.<\/p>\n<p>DMZ \u2014 nd\u00ebrfaqja e kat\u00ebrt e makineris\u00eb virtuale, zona p\u00ebr nd\u00ebrfaqet e lidhura me rrjetin DMZ.<\/p>\n<p>M\u00eb pas, ne fillojm\u00eb makinat virtuale, ndon\u00ebse n\u00eb manual \u00ebsht\u00eb shkruar q\u00eb duhet t\u00eb zgjidhni Mjetet e Mb\u00ebshtetjes dhe t\u00eb kryeni rikthimin n\u00eb fabrik\u00eb t\u00eb UTM-s\u00eb, si\u00e7 shihet ka vet\u00ebm nj\u00eb zgjedhje (UTM Fillimi i Par\u00eb). Gjat\u00eb k\u00ebtij hapi, UTM konfiguron adapter\u00ebt e rrjetit dhe rrit madh\u00ebsin\u00eb e pjes\u00ebs n\u00eb hard disk deri n\u00eb madh\u00ebsin\u00eb e plot\u00eb t\u00eb diskut:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f702cb25e9b6fb0da4a8e27ade1b2c01.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebr t\u00eb u lidhur me nd\u00ebrfaqen e internetit t\u00eb UserGate, \u00ebsht\u00eb e nevojshme t\u00eb hysh p\u00ebrmes zon\u00ebs s\u00eb Menaxhimit, p\u00ebr k\u00ebt\u00eb \u00ebsht\u00eb p\u00ebrgjegj\u00ebse nd\u00ebrfaqja eth0, e cila \u00ebsht\u00eb e konfiguruar p\u00ebr t\u00eb marr\u00eb adres\u00ebn IP n\u00eb m\u00ebnyr\u00eb automatike (DHCP). N\u00ebse nuk ka mund\u00ebsi p\u00ebr t\u00eb caktuar adres\u00ebn p\u00ebr nd\u00ebrfaqen e Menaxhimit n\u00eb m\u00ebnyr\u00eb automatike me an\u00eb t\u00eb DHCP-s\u00eb, mund ta caktoni qart\u00eb, duke p\u00ebrdorur CLI (Command Line Interface). P\u00ebr k\u00ebt\u00eb, duhet t\u00eb hyni n\u00eb CLI, duke p\u00ebrdorur emrin dhe fjal\u00ebkalimin e p\u00ebrdoruesit me t\u00eb drejtat e administratori t\u00eb plot\u00eb (ndryshe Admin me shkronj\u00eb t\u00eb madhe). N\u00ebse pajisja UserGate nuk ka kaluar inicializimin fillestar, p\u00ebr t\u00eb hyr\u00eb n\u00eb CLI duhet t\u00eb p\u00ebrdorni si em\u00ebr p\u00ebrdoruesi Admin, dhe si fjal\u00ebkalim \u2013 utm. Pastaj, shkruani komand\u00ebn di\u00e7ka si iface config \u2013name eth0 \u2013ipv4 192.168.1.254\\\/24 \u2013enable true \u2013mode static. M\u00eb von\u00eb kalojm\u00eb n\u00eb konsol\u00ebn e internetit t\u00eb UserGate n\u00eb adres\u00ebn e dh\u00ebn\u00eb, ajo duhet t\u00eb duket m\u00eb shum\u00eb n\u00eb k\u00ebt\u00eb form\u00eb:<noindex><a rel=\"nofollow\" href=\"https:\/\/usergate_ip_address:8001\/\"> <\/a><\/noindex><u>https:\/\/UserGateIPaddress:8001<\/u>:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/398f741bb9e16c33465c10d072ab31c0.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/0751e1047997f5afde57044beea10f74.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb konsol\u00ebn e web-it vazhdojm\u00eb instalimin, na nevojitet t\u00eb zgjedhim gjuh\u00ebn e nd\u00ebrfaqes (n\u00eb k\u00ebt\u00eb moment \u00ebsht\u00eb gjuha ruse ose ajo angleze), zon\u00ebn e koh\u00ebs, m\u00eb pas lexojm\u00eb dhe pranojm\u00eb marr\u00ebveshjen e licenc\u00ebs. Caktojm\u00eb nj\u00eb p\u00ebrdorues dhe fjal\u00ebkalim p\u00ebr t'u ky\u00e7ur n\u00eb nd\u00ebrfaqen e menaxhimit t\u00eb web-it. <\/p>\n<h2>3. Konfigurimi<\/h2>\n<p>Pas instalimit, k\u00ebshtu duket dritarja e nd\u00ebrfaqes s\u00eb menaxhimit t\u00eb platform\u00ebs:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/16a0d900c66eb23e07a9b5d56915ace8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>M\u00eb pas, \u00ebsht\u00eb e nevojshme t\u00eb konfiguroni nd\u00ebrfaqet rrjeti. P\u00ebr k\u00ebt\u00eb, n\u00eb seksionin \u00abNd\u00ebrfaqet\u00bb duhet t\u00eb aktivizoni ato, t\u00eb vendosni adresat IP t\u00eb sakta dhe t\u00eb caktoni zonat p\u00ebrkat\u00ebse.<\/p>\n<p>Seksioni \u00abNd\u00ebrfaqet\u00bb tregon t\u00eb gjitha nd\u00ebrfaqet fizike dhe virtuale t\u00eb disponueshme n\u00eb sistem, lejon ndryshimin e parametrave t\u00eb tyre dhe shtimin e VLAN-interfacave. Ai tregon gjithashtu t\u00eb gjitha nd\u00ebrfaqet e \u00e7do nyje n\u00eb klaster. Cil\u00ebsimet e nd\u00ebrfaqeve jan\u00eb specifike p\u00ebr secil\u00ebn nga nyjet, pra nuk jan\u00eb globale.<\/p>\n<p>N\u00eb pronat e interfcatit:<\/p>\n<ul>\n<li>\n<p>Aktivizoni ose \u00e7aktivizoni interfacin&nbsp; <\/p>\n<\/li>\n<li>\n<p>Tregoni llojin e nd\u00ebrfaqes \u2014 Layer 3 ose Mirror<\/p>\n<\/li>\n<li>\n<p>Caktoni nj\u00eb zon\u00eb p\u00ebr interfacin<\/p>\n<\/li>\n<li>\n<p>Caktoni profilin Netflow p\u00ebr d\u00ebrgimin e t\u00eb dh\u00ebnave statistikore n\u00eb kolektorin Netflow<\/p>\n<\/li>\n<li>\n<p>Ndryshoni parametrat fizik\u00eb t\u00eb nd\u00ebrfaqes \u2014 adres\u00ebn MAC dhe madh\u00ebsin\u00eb e MTU <\/p>\n<\/li>\n<li>\n<p>Zgjidhni tipin e caktimit t\u00eb adres\u00ebs IP \u2014 pa adres\u00eb, adres\u00eb IP statike ose e marr\u00eb p\u00ebrmes DHCP <\/p>\n<\/li>\n<li>\n<p>Konfiguroni funksionimin e DHCP-relay n\u00eb interfacin e zgjedhur.<\/p>\n<\/li>\n<\/ul>\n<p>Butoni \u00abShto\u00bb lejon shtimin e llojeve t\u00eb m\u00ebposhtme t\u00eb nd\u00ebrfaqeve logjike:<\/p>\n<ul>\n<li>\n<p>VLAN<\/p>\n<\/li>\n<li>\n<p>Bond<\/p>\n<\/li>\n<li>\n<p>Mast<\/p>\n<\/li>\n<li>\n<p>PPPoE<\/p>\n<\/li>\n<li>\n<p>VPN<\/p>\n<\/li>\n<li>\n<p>Tunel<\/p>\n<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/7f389a91d4d8c584140a1d7b1dbe3a11.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrve\u00e7 zonave t\u00eb p\u00ebrmendura m\u00eb par\u00eb, me t\u00eb cilat vjen imazhi Usergate, ka edhe tri lloje t\u00eb paracaktuara:<\/p>\n<p>Cluster \u2014 zona p\u00ebr nd\u00ebrfaqet q\u00eb p\u00ebrdoren p\u00ebr funksionimin e klasterit<\/p>\n<p>VPN for Site-to-Site \u2014 zona ku vendosen t\u00eb gjith\u00eb klient\u00ebt e tipit Zyr\u00eb-Zyr\u00eb, q\u00eb lidhin me UserGate p\u00ebrmes VPN<\/p>\n<p>VPN for remote access \u2014 zona ku vendosen t\u00eb gjith\u00eb p\u00ebrdoruesit mobil\u00eb, t\u00eb lidhur me UserGate p\u00ebrmes VPN<\/p>\n<p>Administrator\u00ebt e UserGate mund t\u00eb ndryshojn\u00eb cil\u00ebsimet e zonave t\u00eb krijuara me parazgjedhje, si dhe t\u00eb krijojn\u00eb zona t\u00eb tjera, por si\u00e7 thuhet n\u00eb udh\u00ebzimin p\u00ebr versionin 5, \u00ebsht\u00eb e mundur t\u00eb krijohen jo m\u00eb shum\u00eb se 15 zona. P\u00ebr t\u00eb ndryshuar ose krijuar ato, duhet t\u00eb kaloni n\u00eb seksionin e zonave. P\u00ebr \u00e7do zon\u00eb, mund t\u00eb vendosni nj\u00eb kufi p\u00ebr heqjen e pakove, duke mb\u00ebshtetur SYN, UDP, ICMP. Gjithashtu, konfigurohet kontrolli i aksesit n\u00eb sh\u00ebrbimet Usergate, dhe aktivizohet mbrojtja nga spufi.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/86a0d5f6898c5e1a4f10d2827b4c855d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas vendosjes s\u00eb nd\u00ebrfaqeve, n\u00eb seksionin &#171;Portat&#187; duhet t\u00eb konfigurohet rruga e paracaktuar. K\u00ebshtu, p\u00ebr t\u00eb lidhur UserGate me internetin, \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrcaktohet adresa IP e nj\u00eb ose disa portave. N\u00ebse p\u00ebr lidhjen me internetin p\u00ebrdoren disa ofrues, at\u00ebher\u00eb duhet t\u00eb specifikohen disa porte. Konfigurimi i portit \u00ebsht\u00eb unik p\u00ebr secilin nga nyjet e grumbullit. N\u00ebse jan\u00eb caktuar dy ose m\u00eb shum\u00eb porte, ka dy variante funksionimi:<\/p>\n<ol>\n<li>\n<p>Balancimi i trafikut midis porteve.<\/p>\n<\/li>\n<li>\n<p>Porti kryesor me kalim n\u00eb portin rezerv\u00eb.<\/p>\n<\/li>\n<\/ol>\n<p>Gjendja e portit (e aksesueshme \u2013 e gjelb\u00ebr, e paaksesueshme \u2013 e kuqe) p\u00ebrcaktohet si m\u00eb posht\u00eb:<\/p>\n<ol>\n<li>\n<p>Verifikimi i rrjetit \u00ebsht\u00eb i \u00e7aktivizuar \u2013 porta konsiderohet e aksesueshme n\u00ebse UserGate mund t\u00eb marr\u00eb adres\u00ebn e saj MAC n\u00ebp\u00ebrmjet k\u00ebrkes\u00ebs ARP. Verifikimi i qasjes n\u00eb internet p\u00ebrmes k\u00ebsaj porte nuk b\u00ebhet. N\u00ebse adresa MAC e portit nuk mund t\u00eb p\u00ebrcaktohet, porta konsiderohet e paaksesueshme.<\/p>\n<\/li>\n<li>\n<p>Kontrolli i rrjetit \u00ebsht\u00eb aktiv - porta konsiderohet e arritshme, n\u00ebse:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>UserGate mund t\u00eb marr\u00eb adres\u00ebn e saj MAC n\u00ebp\u00ebrmjet k\u00ebrkes\u00ebs ARP.<\/p>\n<\/li>\n<li>\n<p>Verifikimi i qasjes n\u00eb internet p\u00ebrmes k\u00ebsaj porte p\u00ebrfundoi me sukses.<\/p>\n<\/li>\n<\/ul>\n<p>N\u00eb t\u00eb kund\u00ebrt, porta konsiderohet e paaksesueshme.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f3bbb603ab50d1d665df761fa55efac9.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb seksionin &#171;DNS&#187; duhet t\u00eb shtohen server\u00ebt DNS q\u00eb do t\u00eb p\u00ebrdor\u00eb UserGate. Ky konfigurim tregohet n\u00eb zon\u00ebn Server\u00ebt DNS Sistemik\u00eb. M\u00eb posht\u00eb ndodhen konfigurimet p\u00ebr menaxhimin e k\u00ebrkesave DNS nga p\u00ebrdoruesit. UserGate lejon p\u00ebrdorimin e DNS-proxy. Sh\u00ebrbimi DNS-proxy lejon kapjen e k\u00ebrkesave DNS nga p\u00ebrdoruesit dhe ndryshimin e tyre n\u00eb var\u00ebsi t\u00eb nevojave t\u00eb administratorit. Me an\u00eb t\u00eb rregullave t\u00eb DNS-proxy mund t\u00eb specifikohen server\u00ebt DNS, n\u00eb t\u00eb cilat d\u00ebrgohen k\u00ebrkesat p\u00ebr domaine t\u00eb caktuara. P\u00ebrve\u00e7 k\u00ebsaj, me ndihm\u00ebn e DNS-proxy mund t\u00eb caktohen sh\u00ebnime statike t\u00eb tipit host (A-record).<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f98bb05fd143b873fdd5fee8cd38a6d0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb seksionin &#171;NAT dhe Rrug\u00ebzimi&#187; duhet t\u00eb krijohen rregullat e nevojshme NAT. P\u00ebr qasje n\u00eb internet nga p\u00ebrdoruesit e rrjetit Trusted, rregulli NAT tashm\u00eb \u00ebsht\u00eb krijuar - \u00abTrusted&#8212;&gt;Untrusted\u00bb, thjesht mbetet ta aktivizoni at\u00eb. Rregullat zbatohen nga lart posht\u00eb n\u00eb rendin n\u00eb t\u00eb cilin jan\u00eb specifikuar n\u00eb konsol\u00eb. Zbatimi b\u00ebhet gjithmon\u00eb p\u00ebr rregullin e par\u00eb, p\u00ebr t\u00eb cilin jan\u00eb p\u00ebrputhur kushtet e p\u00ebrcaktuara. P\u00ebr t\u00eb aktivizuar rregullin, \u00ebsht\u00eb e nevojshme q\u00eb t\u00eb p\u00ebrputhen t\u00eb gjitha kushtet e specifikuara n\u00eb parametrat e rregullit. UserGate rekomandon krijimin e rregullave t\u00eb p\u00ebrgjithshme NAT, p\u00ebr shembull, nj\u00eb rregull NAT nga rrjeti lokal (zakonisht zona Trusted) n\u00eb internet (zakonisht zona Untrusted), dhe ndarjen e aksesit sipas p\u00ebrdoruesve, sh\u00ebrbimeve, aplikacioneve t\u00eb b\u00ebhet me an\u00eb t\u00eb rregullave t\u00eb murit t\u00eb zjarrt\u00eb.<\/p>\n<p>Ka gjithashtu mund\u00ebsin\u00eb e krijimit t\u00eb rregullave DNAT, port-forwarding, policy-based routing, dhe network mapping.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/efa1a3f8e1b004a3f90c05b957b193f6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas k\u00ebsaj, n\u00eb seksionin &#171;Firewal&#187; \u00ebsht\u00eb e nevojshme t\u00eb krijoni rregulla p\u00ebr firewal. P\u00ebr qasje t\u00eb pakufizuar n\u00eb internet nga p\u00ebrdoruesit e rrjetit Trusted, rregulli i firewal-it p\u00ebr k\u00ebt\u00eb q\u00ebllim tashm\u00eb \u00ebsht\u00eb krijuar \u2014 \u00abInternet for Trusted\u00bb dhe duhet t\u00eb aktivizohet. Me ndihm\u00ebn e rregullave t\u00eb firewal-it, administratori mund t\u00eb lejoj\u00eb ose t\u00eb ndaloj\u00eb \u00e7do lloj trafiku rrjetor q\u00eb kalon p\u00ebrmes UserGate. Kushtet e rregullave mund t\u00eb p\u00ebrfshijn\u00eb zona dhe adresa IP burimore\/destinacioni, p\u00ebrdorues dhe grupe, sh\u00ebrbime dhe aplikacione. Rregullat zbatohen po ashtu si n\u00eb seksionin &#171;NAT dhe Richtimi&#187;, dmth nga lart\u00eb posht\u00eb. N\u00ebse nuk \u00ebsht\u00eb krijuar asnj\u00eb rregull, at\u00ebher\u00eb \u00e7do trafik transit p\u00ebrmes UserGate ndalohet.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Getting Started. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/098871017279694492f381069f172483.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>4. P\u00ebrfundim<\/h2>\n<p>Me k\u00ebt\u00eb, artikulli arriti n\u00eb p\u00ebrfundim. Ne vendos\u00ebm firewal-in UserGate n\u00eb makin\u00eb virtuale dhe b\u00ebm\u00eb cil\u00ebsimet minimale t\u00eb nevojshme q\u00eb interneti t\u00eb funksiononte n\u00eb rrjetin Trusted. Cil\u00ebsimet e m\u00ebtejshme do t\u00eb shqyrtohen n\u00eb artikujt e ardhsh\u00ebm.<\/p>\n<p>Ndjekni p\u00ebrdit\u00ebsimet n\u00eb kanalet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>)!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521322\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u044d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0417\u0430\u0434\u0430\u0447\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d&nbsp;UserGate&nbsp;\u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (\u0431\u0443\u0434\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438&nbsp;VMware&nbsp;Workstation) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 (\u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437&nbsp;UserGate&nbsp;\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442).&nbsp;&nbsp;&nbsp; 1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u044f \u043e\u043f\u0438\u0448\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 \u0432 \u0441\u0435\u0442\u044c. \u0425\u043e\u0447\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. UserGate Getting Started. K\u00ebrkesat, instalimi | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-05T23:42:49+00:00","article:modified_time":"2020-10-05T23:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95964","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:54:37","updated":"2022-09-28 17:15:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95964"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95964\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95965"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}