{"id":95964,"date":"2020-10-06T01:42:49","date_gmt":"2020-10-05T23:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka"},"modified":"2020-10-06T01:42:49","modified_gmt":"2020-10-05T23:42:49","slug":"2-usergate-getting-started-trebovaniya-ustanovka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","title":{"rendered":"2. UserGate Hyrje. K\u00ebrkesat, instalimi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/0dec3bafb496cf5c88562b7d59252a30.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrsh\u00ebndetje, kjo \u00ebsht\u00eb artikulli i dyt\u00eb mbi zgjidhjen NGFW nga kompania&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. Q\u00ebllimi i k\u00ebtij artikulli \u00ebsht\u00eb t\u00eb tregoj\u00eb se si t\u00eb instaloni firewallen UserGate n\u00eb nj\u00eb sistem virtual (do t\u00eb p\u00ebrdor softuerin e virtualizimit VMware Workstation) dhe t\u00eb kryeni konfigurimin e tij fillestar (t\u00eb lejoni aksesin nga rrjeti lokal n\u00eb internet p\u00ebrmes UserGate).&nbsp;&nbsp;&nbsp;<\/p>\n<h2>1. Hyrje<\/h2>\n<p>Fillimisht do t\u00eb p\u00ebrshkruaj m\u00ebnyrat e ndryshme t\u00eb implementimit t\u00eb k\u00ebtij gateway n\u00eb rrjet. Dua t\u00eb theksoj se, n\u00eb var\u00ebsi t\u00eb opsionit t\u00eb zgjedhur p\u00ebr lidhje, disa funksionalitete t\u00eb gateway-t mund t\u00eb mos jen\u00eb t\u00eb disponueshme. Zgjidhja UserGate mb\u00ebshtet m\u00ebnyrat e m\u00ebposhtme t\u00eb lidhjes:&nbsp;<\/p>\n<ul>\n<li>\n<p>Firewall L3-L7<\/p>\n<\/li>\n<li>\n<p>Ushqime t\u00eb shpjegta n\u00eb L2<\/p>\n<\/li>\n<li>\n<p>Ushqime t\u00eb shpjegta n\u00eb L3<\/p>\n<\/li>\n<li>\n<p>Virtualisht n\u00eb nd\u00ebrprerje, duke p\u00ebrdorur protokollin WCCP<\/p>\n<\/li>\n<li>\n<p>Virtualisht n\u00eb nd\u00ebrprerje, duke p\u00ebrdorur Routing t\u00eb Baze t\u00eb Politik\u00ebs<\/p>\n<\/li>\n<li>\n<p>Router n\u00eb nj\u00eb Stick<\/p>\n<\/li>\n<li>\n<p> Proxy Web i caktuar qart\u00eb<\/p>\n<\/li>\n<li>\n<p>UserGate, si gateway-i i paracaktuar<\/p>\n<\/li>\n<li>\n<p>Monitorimi i portit Mirror<\/p>\n<\/li>\n<\/ul>\n<p>UserGate mb\u00ebshtet 2 lloje klasteresh:<\/p>\n<ol>\n<li>\n<p>Kluster konfigurimi. Nods e bashkuara n\u00eb nj\u00eb kluster konfigurimi mb\u00ebshtesin cil\u00ebsime t\u00eb p\u00ebrbashk\u00ebta brenda klusterit.<\/p>\n<\/li>\n<li>\n<p>Klusteri i q\u00ebndrueshm\u00ebris\u00eb ndaj d\u00ebshtimit. Deri n\u00eb 4 nyje t\u00eb konfigurimit mund t\u00eb bashkohen n\u00eb nj\u00eb kluster q\u00eb mb\u00ebshtet funksionimin n\u00eb modalitetin Aktiv-Aktiv ose Aktiv-Pasiv. \u00cbsht\u00eb e mundur t\u00eb nd\u00ebrtohen disa klaster\u00eb q\u00ebndrore.<\/p>\n<\/li>\n<\/ol>\n<h2>2. Instalimi<\/h2>\n<p>Si\u00e7 u p\u00ebrmend n\u00eb artikullin e m\u00ebparsh\u00ebm, UserGate ofrohet si nj\u00eb kompleks softuerik-hardware ose vendoset n\u00eb nj\u00eb mjedis virtual. Nga paneli personal n\u00eb faqen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usergate.com\/\">UserGate <\/a><\/noindex>shkarkojm\u00eb imazhin n\u00eb formatin OVF (Open Virtualization Format), ky format \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr ofruesit VMWare dhe Oracle Virtualbox. P\u00ebr Microsoft Hyper-v dhe KVM, ofrohen imazhet e diskut t\u00eb makin\u00ebs virtuale.<\/p>\n<p>Sipas faqes s\u00eb UserGate, p\u00ebr t\u00eb siguruar funksionimin e duhur t\u00eb makin\u00ebs virtuale, rekomandohet t\u00eb p\u00ebrdoren t\u00eb pakt\u00ebn 8Gb memorie RAM dhe nj\u00eb procesor virtual me 2 b\u00ebrthama. Hipervizori duhet t\u00eb mb\u00ebshtes\u00eb funksionimin e sistemeve operative 64-bit.<\/p>\n<p>Instalimi fillon me importimin e imazhit n\u00eb hipervizorin e zgjedhur (VirtualBox dhe VMWare). N\u00eb rastin e Microsoft Hyper-v dhe KVM, \u00ebsht\u00eb e nevojshme t\u00eb krijohet nj\u00eb makin\u00eb virtuale dhe t\u00eb p\u00ebrcaktohet si disk imazhi i shkarkuar, pas s\u00eb cil\u00ebs duhet t\u00eb \u00e7aktivizohen sh\u00ebrbimet e integrimit n\u00eb cil\u00ebsimet e makin\u00ebs virtuale t\u00eb krijuar.<\/p>\n<p>Nga t\u00eb dh\u00ebnat e importuara n\u00eb VMWare krijohet nj\u00eb makin\u00eb virtuale me cil\u00ebsimet e m\u00ebposhtme:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/98764da6ccaed86f86c9924fdfe67516.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Si\u00e7 u p\u00ebrmend m\u00eb sip\u00ebr, duhet t\u00eb ket\u00eb t\u00eb pakt\u00ebn 8GB memorie t\u00eb p\u00ebrkohshme dhe p\u00ebr \u00e7do 100 p\u00ebrdorues duhet t\u00eb shtohet 1GB. Kapaciteti i ngjeshur n\u00eb disk n\u00eb m\u00ebnyr\u00eb standarde \u00ebsht\u00eb 100GB, megjithat\u00eb ky zakonisht \u00ebsht\u00eb i pamjaftuesh\u00ebm p\u00ebr t\u00eb ruajtur t\u00eb gjitha regjistrat dhe konfigurimet. Madh\u00ebsia e rekomanduar \u00ebsht\u00eb 300GB ose m\u00eb shum\u00eb. Prandaj n\u00eb pronat e makin\u00ebs virtuale duhet t\u00eb ndryshojm\u00eb madh\u00ebsin\u00eb e diskut n\u00eb t\u00eb d\u00ebshiruar. Nga fillimi, UserGate UTM vjen me kat\u00ebr nd\u00ebrfaqe, t\u00eb caktuara n\u00eb zona:<\/p>\n<p>Menaxhimi \u2014 si\u00e7 do t\u00eb shihni, interfaci i par\u00eb i makineris\u00eb virtuale, zona p\u00ebr lidhjen e rrjeteve t\u00eb besueshme, nga t\u00eb cilat \u00ebsht\u00eb e lejuar menaxhimi i UserGate.<\/p>\n<p>I besuesh\u00ebm \u2014 interfaci i dyt\u00eb i makineris\u00eb virtuale, zona p\u00ebr lidhjen e rrjeteve t\u00eb besueshme, p\u00ebr shembull, rrjete LAN.<\/p>\n<p>I pabesuesh\u00ebm \u2014 interfaci i tret\u00eb i makineris\u00eb virtuale, zona p\u00ebr interfeset e lidhura me rrjete t\u00eb pabesueshme, p\u00ebr shembull, me internetin.<\/p>\n<p>DMZ \u2014 interfaci i kat\u00ebrt i makineris\u00eb virtuale, zona p\u00ebr interfeset e lidhura me rrjetin DMZ.<\/p>\n<p>M\u00eb pas, vazhdojm\u00eb me nisjen e makinave virtuale, edhe pse n\u00eb udh\u00ebzues thuhet se duhet t\u00eb zgjidhet Support Tools dhe t\u00eb kryhet Factory reset UTM, por si\u00e7 e shohim ka vet\u00ebm nj\u00eb zgjedhje (UTM First Boot). Gjat\u00eb k\u00ebtij hapi, UTM konfiguroni \u0430\u0434\u0430\u043f\u0442\u00ebr\u00ebt e rrjetit dhe rrit madh\u00ebsin\u00eb e pjes\u00ebs n\u00eb diskun e ngurt\u00eb n\u00eb madh\u00ebsin\u00eb e plot\u00eb t\u00eb diskut:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f702cb25e9b6fb0da4a8e27ade1b2c01.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebr t'u lidhur me nd\u00ebrfaqen ueb UserGate, duhet t\u00eb hyni p\u00ebrmes zon\u00ebs s\u00eb Menaxhimit, p\u00ebr k\u00ebt\u00eb \u00ebsht\u00eb p\u00ebrgjegj\u00ebs nd\u00ebrfaqja eth0, e cila \u00ebsht\u00eb e konfigurume p\u00ebr t\u00eb marr\u00eb adres\u00ebn IP n\u00eb m\u00ebnyr\u00eb automatike (DHCP). N\u00ebse nuk ka mund\u00ebsi p\u00ebr t\u00eb caktuar nj\u00eb adres\u00eb p\u00ebr nd\u00ebrfaqen e Menaxhimit n\u00eb m\u00ebnyr\u00eb automatike n\u00ebp\u00ebrmjet DHCP, at\u00ebher\u00eb mund ta caktoni qart\u00eb, duke p\u00ebrdorur CLI (Interfejsi i Linj\u00ebs s\u00eb Komand\u00ebs). P\u00ebr k\u00ebt\u00eb, duhet t\u00eb hyni n\u00eb CLI duke p\u00ebrdorur emrin dhe fjal\u00ebkalimin e p\u00ebrdoruesit me t\u00eb drejtat e Administratorit t\u00eb Plot\u00eb (n\u00eb parazgjedhje Admin me shkronj\u00eb t\u00eb madhe). N\u00ebse pajisja UserGate nuk ka p\u00ebrfunduar inicializimin fillestar, at\u00ebher\u00eb p\u00ebr t\u00eb qasje n\u00eb CLI duhet t\u00eb p\u00ebrdorni si em\u00ebr p\u00ebrdoruesi Admin, si fjal\u00ebkalim \u2013 utm. Dhe t\u00eb shkruani nj\u00eb komand\u00eb si iface config \u2013name eth0 \u2013ipv4 192.168.1.254\/24 \u2013enable true \u2013mode static. M\u00eb pas kalojm\u00eb n\u00eb konsol\u00ebn ueb UserGate n\u00eb adres\u00ebn e caktuar, e cila duhet t\u00eb dukej p\u00ebraf\u00ebrsisht si kjo:<noindex><a rel=\"nofollow\" href=\"https:\/\/usergate_ip_address:8001\/\"> <\/a><\/noindex><u>https:\/\/UserGateIPaddress:8001<\/u>:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/398f741bb9e16c33465c10d072ab31c0.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/0751e1047997f5afde57044beea10f74.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb konsol\u00ebn e internetit vazhdojm\u00eb instalimin, duhet t\u00eb zgjedhim gjuh\u00ebn e nd\u00ebrfaqes (tani \u00ebsht\u00eb rusisht ose anglisht), rajonin e koh\u00ebs, pastaj lexojm\u00eb dhe pajtohemi me marr\u00ebveshjen e licenc\u00ebs. Caktojm\u00eb emrin dhe fjal\u00ebkalimin p\u00ebr qasje n\u00eb nd\u00ebrfaqen e menaxhimit t\u00eb internetit. <\/p>\n<h2>3. Konfigurimi<\/h2>\n<p>Pas instalimit, k\u00ebshtu duket dritarja e nd\u00ebrfaqes s\u00eb menaxhimit t\u00eb platform\u00ebs:<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/16a0d900c66eb23e07a9b5d56915ace8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>M\u00eb pas, \u00ebsht\u00eb e nevojshme t\u00eb konfigurohen interfeset rrjetore. P\u00ebr k\u00ebt\u00eb, n\u00eb seksionin \u2018Interfesa\u2019 duhet t\u2019i aktivizoni ato, t\u00eb vendosni adresat IP t\u00eb sakta dhe t\u00eb caktoni zonat p\u00ebrkat\u00ebse.<\/p>\n<p>Seksioni \u2018Interfesa\u2019 shfaq t\u00eb gjitha interfeset fizike dhe virtuale q\u00eb jan\u00eb n\u00eb sistem, lejon ndryshimin e parametrave t\u00eb tyre dhe shtimin e interfeseve VLAN. Ai gjithashtu tregon t\u00eb gjitha interfeset e \u00e7do nyjeje t\u00eb klasterit. Parametrat e interfeseve jan\u00eb specifik\u00eb p\u00ebr secil\u00ebn nga nyjet, q\u00eb do t\u00eb thot\u00eb se nuk jan\u00eb globale.<\/p>\n<p>N\u00eb pronat e nd\u00ebrfaqes:<\/p>\n<ul>\n<li>\n<p>Aktivizoni ose \u00e7aktivizoni nd\u00ebrfaqen&nbsp; <\/p>\n<\/li>\n<li>\n<p>Specifikoni tipin e interfesit \u2014 Layer 3 ose Mirror<\/p>\n<\/li>\n<li>\n<p>Caktoni nj\u00eb zon\u00eb p\u00ebr nd\u00ebrfaqen<\/p>\n<\/li>\n<li>\n<p>Caktoni nj\u00eb profil Netflow p\u00ebr t\u00eb d\u00ebrguar t\u00eb dh\u00ebnat statistikore n\u00eb kolektorin Netflow<\/p>\n<\/li>\n<li>\n<p>Ndryshoni parametrat fizik\u00eb t\u00eb interfesit \u2014 adresa MAC dhe madh\u00ebsia MTU <\/p>\n<\/li>\n<li>\n<p>Zgjidhni tipin e dh\u00ebnies s\u00eb adres\u00ebs IP \u2014 pa adres\u00eb, adres\u00eb IP statike ose t\u00eb marr\u00eb p\u00ebrmes DHCP <\/p>\n<\/li>\n<li>\n<p>Konfiguroni funksionimin e relait DHCP n\u00eb nd\u00ebrfaqen e zgjedhur.<\/p>\n<\/li>\n<\/ul>\n<p>Butoni \u2018Shto\u2019 lejon t\u00eb shtoni k\u00ebto tipa t\u00eb interfeseve logjike:<\/p>\n<ul>\n<li>\n<p>VLAN<\/p>\n<\/li>\n<li>\n<p>Bonde<\/p>\n<\/li>\n<li>\n<p>Ura<\/p>\n<\/li>\n<li>\n<p>PPPoE<\/p>\n<\/li>\n<li>\n<p>VPN<\/p>\n<\/li>\n<li>\n<p>Tuneli<\/p>\n<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/7f389a91d4d8c584140a1d7b1dbe3a11.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrve\u00e7 zonave t\u00eb p\u00ebrmendura m\u00eb par\u00eb, me imazhin e Usergate vijn\u00eb edhe tri lloje t\u00eb paracaktuara:<\/p>\n<p>Kluster \u2014 zona p\u00ebr interfeset q\u00eb p\u00ebrdoren p\u00ebr funksionimin e klasterit<\/p>\n<p>VPN p\u00ebr Site-to-Site \u2014 zona, n\u00eb t\u00eb cil\u00ebn vendosen t\u00eb gjith\u00eb klient\u00ebt e tipit Zyr\u00eb-Zyr\u00eb, q\u00eb lidhen me UserGate p\u00ebrmes VPN<\/p>\n<p>VPN p\u00ebr qasje t\u00eb larg\u00ebt \u2014 zona, n\u00eb t\u00eb cil\u00ebn vendosen t\u00eb gjith\u00eb p\u00ebrdoruesit mobil\u00eb, q\u00eb lidhen me UserGate p\u00ebrmes VPN<\/p>\n<p>Administrator\u00ebt e UserGate mund t\u00eb ndryshojn\u00eb parametrat e zonave t\u00eb krijuara nga default, si dhe t\u00eb krijojn\u00eb zona t\u00eb tjera, por si\u00e7 thuhet n\u00eb udh\u00ebzimin p\u00ebr versionin 5, nuk mund t\u00eb krijohen m\u00eb shum\u00eb se 15 zona. P\u00ebr t\u00eb ndryshuar ose krijuar ato, duhet t\u00eb kaloni n\u00eb seksionin e zonave. P\u00ebr \u00e7do zon\u00eb mund t\u00eb p\u00ebrcaktoni pragun e hedhjes s\u00eb paketave, mb\u00ebshtetet SYN, UDP, ICMP. Gjithashtu, konfiguroni kontrollin e aksesit n\u00eb sh\u00ebrbimet e Usergate dhe aktivizoni mbrojtjen nga spufing.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/86a0d5f6898c5e1a4f10d2827b4c855d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas vendosjes s\u00eb interfaz\u00ebve, ne seksionin &#171;Portat&#187; duhet t\u00eb konfigurohet rruga e paracaktuar. Pra, p\u00ebr t'u lidhur UserGate me internetin, duhet t\u00eb specifikohet adresa IP e nj\u00eb ose disa portave. N\u00ebse p\u00ebr lidhjen me internetin p\u00ebrdoren disa ofrues, at\u00ebher\u00eb duhet t\u00eb specifikohen disa porte. Konfigurimi i portit \u00ebsht\u00eb unik p\u00ebr secil\u00ebn nga nyjet e klasterit. N\u00ebse jan\u00eb caktuar dy ose m\u00eb shum\u00eb porte, ka dy mund\u00ebsi p\u00ebr funksionim:<\/p>\n<ol>\n<li>\n<p>Balancimi i trafik\u00ebve midis porteve.<\/p>\n<\/li>\n<li>\n<p>P\u00ebrgjegj\u00ebsja kryesore me kalim n\u00eb rezerv\u00eb.<\/p>\n<\/li>\n<\/ol>\n<p>Gjat\u00ebsia e port\u00ebs (disponues \u2013 e gjelb\u00ebr, e padisponueshme \u2013 e kuqe) p\u00ebrcaktohet n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb:<\/p>\n<ol>\n<li>\n<p>Kontrolli i rrjetit \u00ebsht\u00eb i fikur \u2013 porta konsiderohet e disponueshme n\u00ebse UserGate \u00ebsht\u00eb n\u00eb gjendje t\u00eb marr\u00eb adres\u00ebn e saj MAC p\u00ebrmes k\u00ebrkes\u00ebs ARP. Kontrolli i aksesit n\u00eb internet p\u00ebrmes k\u00ebsaj porte nuk b\u00ebhet. N\u00ebse adresa MAC e port\u00ebs nuk mund t\u00eb p\u00ebrcaktohet, porta konsiderohet e padisponueshme.<\/p>\n<\/li>\n<li>\n<p>Kontrolli i rrjetit \u00ebsht\u00eb i aktivizuar \u2014 porta konsiderohet e arritshme n\u00ebse:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>UserGate mund t\u00eb marr\u00eb adres\u00ebn e saj MAC p\u00ebrmes k\u00ebrkes\u00ebs ARP.<\/p>\n<\/li>\n<li>\n<p>Kontrolli i aksesit n\u00eb internet p\u00ebrmes k\u00ebsaj porte ka p\u00ebrfunduar me sukses.<\/p>\n<\/li>\n<\/ul>\n<p>N\u00eb t\u00eb kund\u00ebrt, porta konsiderohet e padisponueshme.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f3bbb603ab50d1d665df761fa55efac9.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb seksionin &#171;DNS&#187; nevojitet t\u00eb shtohen serverat DNS q\u00eb do t\u00eb p\u00ebrdor\u00eb UserGate. Ky konfigurim \u00ebsht\u00eb i specifikuar n\u00eb zon\u00ebn Serverat sistemor\u00eb DNS. M\u00eb posht\u00eb gjenden konfigurime p\u00ebr menaxhimin e k\u00ebrkesave DNS nga p\u00ebrdoruesit. UserGate lejon p\u00ebrdorimin e DNS-proxy. Sh\u00ebrbimi DNS-proxy mund\u00ebson kapjen e k\u00ebrkesave DNS nga p\u00ebrdoruesit dhe ndryshimin e tyre sipas nevojave t\u00eb administrat\u00ebs. Me ndihm\u00ebn e rregullave DNS-proxy mund t\u00eb caktosh serverat DNS, te cil\u00ebt do t\u00eb d\u00ebrgohen k\u00ebrkesat p\u00ebr domenet e caktuara. P\u00ebrve\u00e7 k\u00ebsaj, me DNS-proxy mund t\u00eb caktosh regjistrime statike t\u00eb tipit host (regjistrimi A).<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/f98bb05fd143b873fdd5fee8cd38a6d0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb seksionin &#171;NAT dhe Rrug\u00ebzim&#187; nevojitet t\u00eb krijohen rregullat e nevojshme NAT. P\u00ebr qasje n\u00eb internet t\u00eb p\u00ebrdoruesve t\u00eb rrjetit Trusted, rregulli NAT tashm\u00eb \u00ebsht\u00eb krijuar \u2014 \u00abTrusted&#8212;&gt;Untrusted\u00bb, mbetet vet\u00ebm ta aktivizoni. Rregullat aplikohen nga lart posht\u00eb n\u00eb rendin n\u00eb t\u00eb cilin jan\u00eb caktuara n\u00eb konsol\u00eb. Zbatimi ndodh vet\u00ebm p\u00ebr rregullin e par\u00eb p\u00ebr t\u00eb cilin jan\u00eb p\u00ebrmbushur kushtet e caktuara. P\u00ebr t\u00eb aktivizuar rregullin, duhet t\u00eb p\u00ebrmbushen t\u00eb gjitha kushtet q\u00eb jan\u00eb specifikuar n\u00eb parametrat e rregullit. UserGate rekomandon krijimin e rregullave t\u00eb p\u00ebrgjithshme NAT, p\u00ebr shembull, rregulli NAT nga rrjeti lokal (zakonisht zona Trusted) n\u00eb internet (zakonisht zona Untrusted), dhe ndarjen e qasjes sipas p\u00ebrdoruesve, sh\u00ebrbimeve, aplikacioneve t\u00eb realizohen me ndihm\u00ebn e rregullave t\u00eb firewall-it.<\/p>\n<p>Ka gjithashtu mund\u00ebsin\u00eb p\u00ebr t\u00eb krijuar rregulla DNAT, port-forwarding, routing t\u00eb bazuar n\u00eb politika, dhe hartimin e rrjetit.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/efa1a3f8e1b004a3f90c05b957b193f6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas k\u00ebsaj, n\u00eb seksionin &#171;Firewall&#187; \u00ebsht\u00eb e nevojshme t\u00eb krijoni rregulla p\u00ebr firewall-in. P\u00ebr akses t\u00eb pakufizuar n\u00eb internet p\u00ebr p\u00ebrdoruesit e rrjetit Trusted, rregulli i firewall-it \u00abInternet for Trusted\u00bb \u00ebsht\u00eb krijuar tashm\u00eb dhe duhet t\u00eb aktivizohet. Me an\u00eb t\u00eb rregullave t\u00eb firewall-it, administratori mund t\u00eb lejoj\u00eb ose ndaloj\u00eb \u00e7do lloj trafiku t\u00eb kaluesh\u00ebm rrjetit q\u00eb kalon p\u00ebrmes UserGate. Kushtet e rregullave mund t\u00eb p\u00ebrfshijn\u00eb zona dhe IP-t\u00eb e burimit\/destinacionit, p\u00ebrdoruesit dhe grupet, sh\u00ebrbimet dhe aplikacionet. Rregullat aplikohen po ashtu si n\u00eb seksionin &#171;NAT dhe Rrjet\u00ebzimi&#187;, dmth nga lart posht\u00eb. N\u00ebse nuk \u00ebsht\u00eb krijuar asnj\u00eb rregull, \u00e7do trafik kalues p\u00ebrmes UserGate \u00ebsht\u00eb i ndaluar.<\/p>\n<p><img decoding=\"async\" alt=\"2. UserGate Hyrje. K\u00ebrkesat, instalimi\" src=\"\/wp-content\/uploads\/2020\/10\/098871017279694492f381069f172483.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>4. P\u00ebrfundim<\/h2>\n<p>Me k\u00ebt\u00eb, artikulli arriti n\u00eb fund. Ne instaluam firewall-in UserGate n\u00eb nj\u00eb makin\u00eb virtuale dhe b\u00ebm\u00eb konfigurimet minimale t\u00eb nevojshme p\u00ebr t\u00eb funksionuar interneti n\u00eb rrjetin Trusted. Konfigurimin e m\u00ebtejsh\u00ebm do ta shqyrtojm\u00eb n\u00eb artikujt e ardhsh\u00ebm.<\/p>\n<p>Ndjekni azhurnimet n\u00eb kanalet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>)!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521322\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u044d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0417\u0430\u0434\u0430\u0447\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d&nbsp;UserGate&nbsp;\u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (\u0431\u0443\u0434\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438&nbsp;VMware&nbsp;Workstation) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 (\u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437&nbsp;UserGate&nbsp;\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442).&nbsp;&nbsp;&nbsp; 1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u044f \u043e\u043f\u0438\u0448\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 \u0432 \u0441\u0435\u0442\u044c. \u0425\u043e\u0447\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-05T23:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. UserGate Hyrje. K\u00ebrkesat, instalimi | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. UserGate Getting Started. \u0422\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/2-usergate-getting-started-trebovaniya-ustanovka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-05T23:42:49+00:00","article:modified_time":"2020-10-05T23:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95964","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:54:37","updated":"2022-09-28 17:15:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95964"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95964\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95965"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}