{"id":97203,"date":"2020-10-16T14:42:53","date_gmt":"2020-10-16T12:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak"},"modified":"2020-10-16T14:42:53","modified_gmt":"2020-10-16T12:42:53","slug":"kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","title":{"rendered":"Sihtojm\u00eb si i mbrojm\u00eb desktopet virtuale t\u00eb klient\u00ebve nga viruset, spiun\u00ebt dhe sulmet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00ebt\u00eb vit, shum\u00eb kompani u nxit\u00ebn p\u00ebr t\u00eb kaluar n\u00eb pun\u00eb nga distanca. Disa klient\u00ebve ne <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/digest\/150-virtualnyh-rabochih-mest-dlya-call-centra-za-nedelyu\">i ndihmuam<\/a><\/noindex> t\u00eb organizonin m\u00eb shum\u00eb se nj\u00ebqind vende pune t\u00eb larg\u00ebta brenda nj\u00eb jave. Ishte e r\u00ebnd\u00ebsishme ta b\u00ebnim k\u00ebt\u00eb jo vet\u00ebm shpejt, por edhe n\u00eb m\u00ebnyr\u00eb t\u00eb sigurt. Teknologjia VDI ndihmoi n\u00eb shp\u00ebrndarjen e politikave t\u00eb siguris\u00eb p\u00ebr t\u00eb gjitha vendet e pun\u00ebs dhe n\u00eb mbrojtjen nga humbjet e t\u00eb dh\u00ebnave.\u00a0<\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull do t\u00eb flas p\u00ebr m\u00ebnyr\u00ebn se si funksionon sh\u00ebrbimi yn\u00eb i desktop\u00ebve virtual\u00eb mbi baz\u00ebn e Citrix VDI nga perspektiva e siguris\u00eb informatike. Do t\u00eb tregoj se \u00e7far\u00eb b\u00ebjm\u00eb p\u00ebr t\u00eb mbrojtur desktopet e klient\u00ebve nga k\u00ebrc\u00ebnime t\u00eb jashtme si ransomware ose sulmet e targetuara.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"Sihtojm\u00eb si i mbrojm\u00eb desktopet virtuale t\u00eb klient\u00ebve nga viruset, spiun\u00ebt dhe sulmet\" src=\"\/wp-content\/uploads\/2020\/10\/bd9f5c9d944abf021f1a73351b88f49b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Cilat jan\u00eb problemet e siguris\u00eb q\u00eb ne zgjidhim\u00a0<\/h2>\n<p>\nNe kemi identifikuar disa k\u00ebrc\u00ebnime kryesore p\u00ebr sh\u00ebrbimin. Nga nj\u00ebra an\u00eb, desktopi virtual rrezikon t\u00eb infektohet nga kompjuteri i p\u00ebrdoruesit. Nga ana tjet\u00ebr, ka rrezikun t\u00eb dal\u00eb nga desktopi virtual n\u00eb hap\u00ebsir\u00ebn e hapur t\u00eb internetit dhe t\u00eb shkarkoj\u00eb nj\u00eb skedar t\u00eb infektuar. Edhe n\u00ebse kjo ndodh, nuk duhet t\u00eb ndikoj\u00eb n\u00eb t\u00ebr\u00eb infrastruktur\u00ebn. Prandaj, gjat\u00eb krijimit t\u00eb sh\u00ebrbimit, ne trajtuam disa detyra:\u00a0<\/p>\n<ul>\n<li>Mbrojtja e gjith\u00eb sken\u00ebs VDI nga k\u00ebrc\u00ebnimet e jashtme.\n<\/li>\n<li>Izolimi i klient\u00ebve nga nj\u00ebri-tjetri.\n<\/li>\n<li>Mbrojtja e vet\u00eb desktop\u00ebve virtual\u00eb.\u00a0\n<\/li>\n<li>Konektim t\u00eb sigurt p\u00ebr p\u00ebrdoruesit nga \u00e7do pajisje.\n<\/li>\n<\/ul>\n<p>\nB\u00ebrthama e mbrojtjes \u00ebsht\u00eb FortiGate \u2013 nj\u00eb firewall i gjenerat\u00ebs s\u00eb re nga Fortinet. Ai kontrollon trafikun e sken\u00ebs VDI, siguron nj\u00eb infrastruktur\u00eb t\u00eb izoluar p\u00ebr \u00e7do klient dhe mbron nga dob\u00ebsit\u00eb n\u00eb an\u00ebn e p\u00ebrdoruesit. Mund\u00ebsit\u00eb e tij jan\u00eb t\u00eb mjaftueshme p\u00ebr t\u00eb zgjidhur shumic\u00ebn e \u00e7\u00ebshtjeve t\u00eb siguris\u00eb informative.\u00a0<\/p>\n<p>Por, n\u00ebse kompania ka k\u00ebrkesa speciale p\u00ebr sigurin\u00eb, ne ofrojm\u00eb mund\u00ebsi shtes\u00eb:\u00a0<\/p>\n<ul>\n<li>Organizojm\u00eb nj\u00eb lidhje t\u00eb sigurt p\u00ebr pun\u00eb nga kompjuter\u00ebt sht\u00ebpiak\u00eb.\n<\/li>\n<li>Sigurojm\u00eb qasje p\u00ebr analiz\u00eb t\u00eb pavarur t\u00eb regjistrave t\u00eb siguris\u00eb.\n<\/li>\n<li>Ofron menaxhimin e mbrojtjes antivirus n\u00eb desktopet.\n<\/li>\n<li>Mbrojm\u00eb nga dob\u00ebsit\u00eb e 'dit\u00ebs s\u00eb zero'.\u00a0\n<\/li>\n<li>Konfiguroni autentikimin me shum\u00eb faktor\u00eb p\u00ebr mbrojtje shtes\u00eb nga lidhjet e paautorizuara.<\/li>\n<\/ul>\n<p>\nDo t\u00eb tregoj m\u00eb shum\u00eb se si zgjidh\u00ebm problemet.\u00a0<\/p>\n<h2>Si mbrojm\u00eb ambientin dhe sigurojm\u00eb sigurin\u00eb e rrjetit<\/h2>\n<p>\n<b>Segmentojm\u00eb pjes\u00ebn e rrjetit.<\/b> N\u00eb ambient, ne ndajn\u00eb nj\u00eb segment menaxhimi t\u00eb mbyllur p\u00ebr menaxhimin e t\u00eb gjitha burimeve. Segmenti i menaxhimit nuk \u00ebsht\u00eb i aksesuesh\u00ebm nga jasht\u00eb: n\u00eb rast sulmi ndaj klientit, sulmuesit nuk do t\u00eb mund t\u00eb hyjn\u00eb aty.\u00a0<\/p>\n<p>Mbrojtja sigurohet nga FortiGate. Ai kombinon funksionet e antivirusit, firewall-it dhe sistemit t\u00eb parandalimit t\u00eb sulmeve (intrusion prevention system, IPS).\u00a0<\/p>\n<p>P\u00ebr \u00e7do klient krijojm\u00eb nj\u00eb segment t\u00eb izoluara rrjeti p\u00ebr desktopet virtuale. P\u00ebr k\u00ebt\u00eb n\u00eb FortiGate ka teknologjin\u00eb e domeneve virtuale, ose VDOM. Ajo lejon ndarjen e firewall-it n\u00eb disa entitete virtuale dhe t\u00eb caktoj\u00eb p\u00ebr secilin klient VDOM t\u00eb tij, i cili sillet si nj\u00eb firewall i ve\u00e7ant\u00eb. Po ashtu krijojm\u00eb nj\u00eb VDOM t\u00eb ve\u00e7ant\u00eb p\u00ebr segmentin e menaxhimit. <\/p>\n<p>K\u00ebshtu duket skema:<br \/>\n<img decoding=\"async\" alt=\"Sihtojm\u00eb si i mbrojm\u00eb desktopet virtuale t\u00eb klient\u00ebve nga viruset, spiun\u00ebt dhe sulmet\" src=\"\/wp-content\/uploads\/2020\/10\/24d9f6fc2b50079e7d6eb60bc19429a4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNuk ka lidhje rrjetore nd\u00ebrmjet klient\u00ebve: \u00e7do njeri jeton n\u00eb VDOM-n\u00eb e tij dhe nuk ndikon te tjetri. Pa k\u00ebt\u00eb teknologji, do t\u00eb duhej t\u00eb ndanim klient\u00ebt me rregulla t\u00eb firewall-it, dhe kjo \u00ebsht\u00eb e rrezikshme p\u00ebr shkak t\u00eb faktor\u00ebve njer\u00ebzor\u00eb. Mund t\u00eb krahasohet me nj\u00eb der\u00eb q\u00eb duhet ta mbash gjithmon\u00eb t\u00eb mbyllur. Me VDOM-in ne n\u00eb fakt nuk l\u00ebm\u00eb \"dyer\" fare.\u00a0<\/p>\n<p>N\u00eb nj\u00eb VDOM t\u00eb ve\u00e7ant\u00eb, klienti ka adresimin dhe ruterin e tij. Prandaj, nd\u00ebrthurja e intervaleve nuk b\u00ebhet problem p\u00ebr kompanin\u00eb. Klienti mund t\u00eb bashkangjit\u00eb adresat IP t\u00eb nevojshme p\u00ebr desktopet virtuale. Kjo \u00ebsht\u00eb e p\u00ebrshtatshme p\u00ebr kompanit\u00eb e m\u00ebdha, t\u00eb cilat kan\u00eb planet e veta IP.\u00a0<\/p>\n<p><b>Ne zgjidhim \u00e7\u00ebshtjet e lidhshm\u00ebris\u00eb me rrjetin korporativ t\u00eb klientit.<\/b> Nj\u00eb detyr\u00eb e ve\u00e7ant\u00eb \u00ebsht\u00eb lidhja e VDI me infrastruktur\u00ebn e klientit. N\u00ebse kompania ka sistemet korporative n\u00eb Qendr\u00ebn ton\u00eb t\u00eb t\u00eb Dh\u00ebnave, mund t\u00eb t\u00ebrheqim thjesht nj\u00eb kabllo rrjeti nga pajisjet e saj te firewall-i. Por shpesh na ndodh t\u00eb merremi me nj\u00eb vend t\u00eb larg\u00ebt \u2013 nj\u00eb Qend\u00ebr t\u00eb Dh\u00ebnash tjet\u00ebr ose zyr\u00ebn e klientit. N\u00eb k\u00ebt\u00eb rast, ne mendojm\u00eb p\u00ebr nj\u00eb shk\u00ebmbim t\u00eb sigurt me at\u00eb vend dhe nd\u00ebrtojm\u00eb nj\u00eb site2site VPN me ndihm\u00ebn e IPsec VPN.\u00a0<\/p>\n<p>Skemat mund t\u00eb jen\u00eb t\u00eb ndryshme, n\u00eb var\u00ebsi t\u00eb kompleksitetit t\u00eb infrastruktur\u00ebs. Diku mjafton t\u00eb lidhet vet\u00ebm nj\u00eb rrjet zyre n\u00eb VDI \u2013 atje mjafton rrug\u00ebzim statik. N\u00eb kompanit\u00eb e m\u00ebdha ka shum\u00eb rrjete q\u00eb ndryshojn\u00eb vazhdimisht; k\u00ebtu klienti ka nevoj\u00eb p\u00ebr rrug\u00ebzim dinamik. Ne p\u00ebrdorim protokole t\u00eb ndryshme: tashm\u00eb kemi pasur raste me OSPF (Open Shortest Path First), tunel GRE (Generic Routing Encapsulation) dhe BGP (Border Gateway Protocol). FortiGate mb\u00ebshtet protokollet rrjetore n\u00eb VDOM t\u00eb ndara, pa ndikuar n\u00eb klient\u00eb t\u00eb tjer\u00eb.\u00a0<\/p>\n<p>\u00cbsht\u00eb e mundur t\u00eb nd\u00ebrtohet edhe nj\u00eb \u0413\u041e\u0421\u0422-VPN \u2013 enkriptim n\u00eb baz\u00eb t\u00eb mjeteve t\u00eb certifikuara t\u00eb kriptogjykimit nga FSB e RF. P\u00ebr shembull, me ndihm\u00ebn e zgjidhjeve t\u00eb klas\u00ebs KS1 n\u00eb mjedisin virtual \"\u0421-\u0422\u0435\u0440\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0448\u043b\u044e\u0437\" ose PAK ViPNet, APKSH \"\u041a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442\", \"\u0421-\u0422\u0435\u0440\u0440\u0430\".<\/p>\n<p><b>Konfigurojm\u00eb Politikat e Grupit.<\/b> Ne shum\u00ebzojm\u00eb politik\u00ebn grupore me klientin, e cila aplikohet n\u00eb VDI. K\u00ebtu parimet e konfigurimit nuk ndryshojn\u00eb nga ato t\u00eb politikave n\u00eb zyr\u00eb. Ne konfigurjm\u00eb integrimin me Active Directory dhe delegojm\u00eb klient\u00ebve menaxhimin e disa politikave grupore. Administrator\u00ebt e klientit mund t\u00eb aplikojn\u00eb politikat mbi objektin Computer, menaxhojn\u00eb nj\u00ebsin\u00eb organizative n\u00eb Active Directory dhe krijojn\u00eb p\u00ebrdorues.\u00a0<\/p>\n<p>N\u00eb FortiGate, p\u00ebr secilin VDOM t\u00eb klient\u00ebve, ne shkruajm\u00eb politik\u00ebn e siguris\u00eb rrjetit, vendosim kufizime akses dhe konfigurim t\u00eb kontrollit t\u00eb trafikut. P\u00ebrdorim disa module FortiGate:\u00a0<\/p>\n<ul>\n<li>moduli IPS kontrollon trafikun p\u00ebr malware dhe parandalon hyrjet e paautorizuara;<\/li>\n<li>antivirusi mbron vet\u00eb desktop\u00ebt nga malware dhe spyware;<\/li>\n<li>filtrimi i ueb-it bllokon qasjen n\u00eb burime t\u00eb pasigurta dhe faqe me p\u00ebrmbajtje t\u00eb d\u00ebmshme ose t\u00eb papranueshme;<\/li>\n<li>konfigurimet e murit t\u00eb zjarrit mund t\u00eb lejojn\u00eb p\u00ebrdoruesit t\u00eb dalin n\u00eb internet vet\u00ebm n\u00eb disa faqe t\u00eb caktuara.\u00a0<\/li>\n<\/ul>\n<p>\nHer\u00eb pas here, klienti d\u00ebshiron t\u00eb menaxhoj\u00eb vet\u00eb aksesin e punonj\u00ebsve n\u00eb uebfaqe. Shpesh, kjo k\u00ebrkes\u00eb vjen nga bankat: sh\u00ebrbimet e siguris\u00eb k\u00ebrkojn\u00eb q\u00eb kontrolli i aksesit t\u00eb mbetet n\u00eb duar t\u00eb kompanis\u00eb. K\u00ebto kompani monitorojn\u00eb vet\u00eb trafikun dhe rregullisht b\u00ebjn\u00eb ndryshime n\u00eb politikat. N\u00eb k\u00ebt\u00eb rast, e gjith\u00eb trafiku nga FortiGate e drejtojm\u00eb n\u00eb drejtim t\u00eb klientit. P\u00ebr k\u00ebt\u00eb p\u00ebrdorim nj\u00eb nd\u00ebrfaqe t\u00eb konfiguruar me infrastruktur\u00ebn e kompanis\u00eb. Pas k\u00ebsaj, klienti vendos vet\u00eb rregullat e aksesit n\u00eb rrjetin e korporat\u00ebs dhe n\u00eb internet.\u00a0<\/p>\n<p><b>Po v\u00ebzhgojm\u00eb ngjarjet n\u00eb stend\u00eb.<\/b> S\u00eb bashku me FortiGate, p\u00ebrdorim FortiAnalyzer \u2013 kolektorin e logeve nga Fortinet. Me ndihm\u00ebn e tij shohim t\u00eb gjitha regjistrat e ngjarjeve n\u00eb VDI n\u00eb nj\u00eb vend, gjejm\u00eb veprime t\u00eb dyshimta dhe ndjekim korrelacionet.\u00a0<\/p>\n<p>Nj\u00eb nga klient\u00ebt tan\u00eb p\u00ebrdor produktet Fortinet n\u00eb zyr\u00ebn e tij. P\u00ebr t\u00eb, ne konfiguruan eksportin e logeve \u2013 k\u00ebshtu klienti mundi t\u00eb analizohej t\u00eb gjitha ngjarjet e siguris\u00eb p\u00ebr makinat zyrtare dhe pamjet e pun\u00ebs virtuale.<\/p>\n<h2>Si i mbrojm\u00eb desktopet virtuale<\/h2>\n<p>\n<b>Nga k\u00ebrc\u00ebnimet e njohura.<\/b> N\u00ebse klienti d\u00ebshiron t\u00eb menaxhoj\u00eb vet\u00eb mbrojtjen nga viruset, ne shtojm\u00eb Kaspersky Security p\u00ebr mjediset virtuale.\u00a0<\/p>\n<p>Ky zgjidhje funksionon mir\u00eb n\u00eb cloud. T\u00eb gjith\u00eb ne jemi m\u00ebsuar me antivirusin klasik t\u00eb Kaspersky, q\u00eb \u00ebsht\u00eb nj\u00eb zgjidhje \"e r\u00ebnd\u00eb\". Ndryshe nga ai, Kaspersky Security p\u00ebr mjediset virtuale nuk ngarkon makinat virtuale. T\u00eb gjitha bazat e virus\u00ebve ndodhen n\u00eb server, i cili jep vendime p\u00ebr t\u00eb gjitha makinat virtuale t\u00eb nyj\u00ebs. N\u00eb desktopin virtual \u00ebsht\u00eb instaluar vet\u00ebm nj\u00eb agjent i leht\u00eb. Ai d\u00ebrgon skedar\u00ebt p\u00ebr kontroll n\u00eb server.\u00a0<\/p>\n<p>Kjo arkitektur\u00eb nj\u00ebkoh\u00ebsisht siguron mbrojtje nga skedar\u00ebt, mbrojtje nga interneti, mbrojtje nga sulmet dhe nuk e ul performanc\u00ebn e makinave virtuale. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, klienti mund t\u00eb b\u00ebj\u00eb p\u00ebrjashtime n\u00eb mbrojtjen nga skedar\u00ebt. Ne ndihmojm\u00eb me konfigurimin e baz\u00ebs s\u00eb zgjidhjes. P\u00ebr ve\u00e7orit\u00eb e saj do t\u00eb flasim n\u00eb nj\u00eb artikull t\u00eb ve\u00e7ant\u00eb.<\/p>\n<p><b>Nga k\u00ebrc\u00ebnimet e panjohura.<\/b> P\u00ebr k\u00ebt\u00eb, ne p\u00ebrcaktojm\u00eb FortiSandbox \u2013 \"sandboxin\" nga Fortinet. E p\u00ebrdorim at\u00eb si nj\u00eb filt\u00ebr n\u00eb rast se antivirusit i shp\u00ebton nj\u00eb k\u00ebrc\u00ebnim \"zero-day\". Pas shkarkimit t\u00eb skedarit, s\u00eb pari e kontrollojm\u00eb me antivirusin, dhe m\u00eb pas e d\u00ebrgojm\u00eb n\u00eb \"sandbox\". FortiSandbox imiton nj\u00eb makin\u00eb virtuale, ekzekuton skedarin dhe v\u00ebzhgon sjelljen e tij: me cilat objekte n\u00eb regjistrin e sistemit lidhet, n\u00ebse d\u00ebrgon k\u00ebrkesa jasht etj. N\u00ebse skedari sillet n\u00eb m\u00ebnyr\u00eb t\u00eb dyshimt\u00eb, makina virtuale n\u00eb sandbox fshihet, dhe skedari i d\u00ebmsh\u00ebm nuk arrin n\u00eb VDI-n\u00eb e p\u00ebrdoruesit.\u00a0<\/p>\n<h2>Si e konfiguroni lidhjen e sigurt n\u00eb VDI<\/h2>\n<p>\n<b>Kontrollojm\u00eb pajisjen p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me k\u00ebrkesat e siguris\u00eb.<\/b> Q\u00eb nga fillimi i pun\u00ebs nga distanca, klient\u00ebt na kan\u00eb kontaktuar me k\u00ebrkesa: t\u00eb sigurojn\u00eb funksionimin e sigurt t\u00eb p\u00ebrdoruesve me kompjuter\u00ebt e tyre personal\u00eb. \u00c7do specialist i siguris\u00eb e di se mbrojtja e pajisjeve sht\u00ebpiake \u00ebsht\u00eb e v\u00ebshtir\u00eb: nuk \u00ebsht\u00eb e mundur t\u00eb instalohet antivirus i nevojsh\u00ebm apo t\u00eb aplikohen politikat grupore, pasi k\u00ebto nuk jan\u00eb pajisje zyre.\u00a0<\/p>\n<p>N\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar, VDI b\u00ebhet nj\u00eb \"sip\u00ebrfaqe\" e sigurt midis pajisjes personale dhe rrjetit korporativ. P\u00ebr t\u00eb mbrojtur VDI nga sulmet nga makina e p\u00ebrdoruesit, ne \u00e7aktivizojm\u00eb kopjimin dhe ndalojm\u00eb kalimin e USB-ve. Por kjo nuk e b\u00ebn pajisjen personale t\u00eb sigurt vet\u00eb.\u00a0<\/p>\n<p>Problemin e zgjidhim me FortiClient. Ky \u00ebsht\u00eb nj\u00eb mjet p\u00ebr mbrojtjen e pikave t\u00eb fundit (endpoint protection). P\u00ebrdoruesit e kompanis\u00eb instalojn\u00eb FortiClient n\u00eb kompjuter\u00ebt e tyre t\u00eb sht\u00ebpis\u00eb dhe me t\u00eb lidhen me desktopin virtual. FortiClient zgjidh 3 detyra nj\u00ebkoh\u00ebsisht:\u00a0<\/p>\n<ul>\n<li>sh\u00ebrben si \"dritarja e vetme\" p\u00ebr qasje p\u00ebr p\u00ebrdoruesin;\n<\/li>\n<li>kontrollon n\u00ebse kompjuteri personal ka antivirus dhe p\u00ebrdit\u00ebsimet e fundit t\u00eb sistemit operativ;\u00a0\n<\/li>\n<li>nd\u00ebrton nj\u00eb tunel VPN p\u00ebr qasje t\u00eb sigurt.\u00a0<\/li>\n<\/ul>\n<p>\nP\u00ebrpunuesi merr akses vet\u00ebm pasi kalon verifikimin. Deri at\u00ebher\u00eb, vet\u00eb desktopet virtuale nuk jan\u00eb t\u00eb aksesueshme nga interneti, dhe prandaj, jan\u00eb m\u00eb t\u00eb mbrojtur nga sulmet.\u00a0<\/p>\n<p>N\u00ebse kompania d\u00ebshiron t\u00eb menaxhoj\u00eb vet\u00eb mbrojtjen e pikave t\u00eb fundit, ne ofrojm\u00eb FortiClient EMS (Endpoint Management Server). Klienti mund t\u00eb konfiguroj\u00eb skanimin e desktop\u00ebve dhe parandalimin e nd\u00ebrhyrjeve, duke formuar nj\u00eb list\u00eb t\u00eb bardh\u00eb adresash.\u00a0<\/p>\n<p><b>Shtojm\u00eb faktor\u00ebt e autentikimit.<\/b> P\u00ebrdoruesit autentifikohen p\u00ebr default p\u00ebrmes Citrix netscaler. K\u00ebtu gjithashtu mund t\u00eb forcojm\u00eb sigurin\u00eb me ndihm\u00ebn e autentifikimit me shum\u00eb faktor\u00eb bazuar n\u00eb produktet SafeNet. Ky tem\u00eb meriton nj\u00eb v\u00ebmendje t\u00eb ve\u00e7ant\u00eb, p\u00ebr t\u00eb cilin do t\u00eb flasim n\u00eb nj\u00eb artikull t\u00eb ve\u00e7ant\u00eb.\u00a0<\/p>\n<p>Ky p\u00ebrvoj\u00eb pune me zgjidhje t\u00eb ndryshme e kemi grumbulluar gjat\u00eb vitit t\u00eb fundit. Sh\u00ebrbimi VDI konfiguriohet ve\u00e7 separatisht p\u00ebr \u00e7do klient, prandaj ne zgjodh\u00ebm mjete sa m\u00eb fleksibile. Mund\u00ebsisht, n\u00eb t\u00eb ardhmen e af\u00ebrt do t\u00eb shtojm\u00eb di\u00e7ka tjet\u00ebr dhe do t\u00eb ndajm\u00eb p\u00ebrvoj\u00ebn ton\u00eb.<\/p>\n<p>M\u00eb 7 tetor n\u00eb 17:00 koleg\u00ebt e mi do t\u00eb flasin p\u00ebr desktopet virtuale n\u00eb webinarin \"A \u00ebsht\u00eb i nevojsh\u00ebm VDI, ose si t\u00eb organizoni pun\u00ebn nga distanca?\" <br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/oblaka\/vdi-kak-izvlech-iz-tehnologii-maksimum?utm_source=habr&amp;utm_medium=internal&amp;utm_campaign=webinar\">Regjistrohu<\/a><\/noindex>, n\u00ebse d\u00ebshironi t\u00eb bisedoni, kur teknologjia VDI i p\u00ebrshtatet kompanis\u00eb dhe kur \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrdoren m\u00ebnyra t\u00eb tjera.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/520452\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si i mbrojm\u00eb desktopet virtuale t\u00eb klient\u00ebve nga viruset, spiun\u00ebt dhe sulmet | ProHoster","description":"K\u00ebt\u00eb vit, shum\u00eb kompani nxitonin t\u00eb kalonin n\u00eb pun\u00eb nga distanca.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T12:42:53+00:00","article:modified_time":"2020-10-16T12:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:25:23","updated":"2022-09-28 06:23:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=97203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/97204"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=97203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=97203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=97203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}