{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrsh\u00ebndetje lexuesve n\u00eb artikullin e tret\u00eb t\u00eb ciklit t\u00eb artikujve \"UserGate Getting Started\", ku flitet p\u00ebr zgjidhjen NGFW nga \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0458\u0430&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. N\u00eb artikullin e kaluar u p\u00ebrshkrua procesi i instalimit t\u00eb firewallit dhe u krye konfigurimi i tij fillestar. Tani do t\u00eb shqyrtojm\u00eb m\u00eb n\u00eb detaje krijimin e rregullave n\u00eb seksionet si \u201cFirewall\u201d, \u201cNAT dhe rrug\u00ebzim\u201d dhe \u201cKapaciteti\u201d.<\/p>\n<p>Ideologjia e funksionimit t\u00eb rregullave UserGate \u00ebsht\u00eb e till\u00eb q\u00eb rregullat ekzekutohen nga lart posht\u00eb, deri n\u00eb rregullin e par\u00eb q\u00eb aktivizohet. Duke u bazuar n\u00eb at\u00eb q\u00eb u p\u00ebrmend m\u00eb sip\u00ebr, \u00ebsht\u00eb e qart\u00eb se rregullat m\u00eb specifike duhet t\u00eb jen\u00eb m\u00eb lart se rregullat m\u00eb t\u00eb p\u00ebrgjithshme. Por duhet theksuar se, pasi rregullat kontrollohen n\u00eb rend, p\u00ebr performanc\u00ebn \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb krijoni rregulla t\u00eb p\u00ebrgjithshme. Kushtet gjat\u00eb krijimit t\u00eb \u00e7do rregulli zbatohen sipas logjik\u00ebs \u201cDHE\u201d. N\u00ebse \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrdoret logjika \u201cOSE\u201d, at\u00ebher\u00eb kjo arrihet duke krijuar disa rregulla. Pra, ajo q\u00eb p\u00ebrshkruhet n\u00eb k\u00ebt\u00eb artikull \u00ebsht\u00eb e vlefshme edhe p\u00ebr politikat e tjera t\u00eb UserGate.<\/p>\n<h3>Firewall<\/h3>\n<p>Pas instalimit t\u00eb UserGate, n\u00eb seksionin \"Firewall\" ekziston nj\u00eb politik\u00eb e thjesht\u00eb. Dy rregullat e para ndalojn\u00eb trafikun p\u00ebr rrjetet e robot\u00ebve. M\u00eb pas pasojn\u00eb shembuj t\u00eb rregullave t\u00eb aksesit nga zona t\u00eb ndryshme. Rregulli i fundit gjithmon\u00eb quhet \"Blloko t\u00eb gjitha\" dhe \u00ebsht\u00eb sh\u00ebnuar me simbolin e \u00e7el\u00ebsit (ai do t\u00eb thot\u00eb se rregulli nuk mund t\u00eb fshihet, ndryshohet, l\u00ebvizet ose fiket; p\u00ebr t\u00eb mund t\u00eb aktivizohet vet\u00ebm opsioni i regjistrimit). K\u00ebshtu, p\u00ebr shkak t\u00eb k\u00ebtij rregulli, t\u00ebr\u00eb trafiku q\u00eb nuk \u00ebsht\u00eb lejuar n\u00eb m\u00ebnyr\u00eb eksplicite do t\u00eb bllokohet nga rregulli i fundit. N\u00ebse \u00ebsht\u00eb e nevojshme t\u00eb lejohet t\u00ebr\u00eb trafiku p\u00ebrmes UserGate (ndon\u00ebse kjo nuk rekomandohet), gjithmon\u00eb mund t\u00eb krijoni nj\u00eb rregull t\u00eb parafundit \"Lejo t\u00eb gjitha\".<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kur po redaktoni ose krijoni nj\u00eb rregull p\u00ebr firewall-in, e para <em>tab \"T\u00eb p\u00ebrgjithshmet\"<\/em>, n\u00eb t\u00eb duhet t\u00eb kryhen veprimet e m\u00ebposhtme:&nbsp;<\/p>\n<ul>\n<li>\n<p>T\u00eb aktivizohet ose fiket rregulli me checkbox-in \"Aktivo\".<\/p>\n<\/li>\n<li>\n<p>t\u00eb enteroni emrin e rregullit.<\/p>\n<\/li>\n<li>\n<p>t\u00eb caktoni nj\u00eb p\u00ebrshkrim p\u00ebr rregullin.<\/p>\n<\/li>\n<li>\n<p>t\u00eb zgjidhet nga dy veprime:<\/p>\n<ul>\n<li>\n<p>Ndaloni \u2014 bllokon trafikun (kur caktohet kjo kusht, ka mund\u00ebsin\u00eb t\u00eb d\u00ebrgoni ICMP host unreachable, thjesht duhet t\u00eb aktivizoni checkbox-in e duhur).<\/p>\n<\/li>\n<li>\n<p>Lejo \u2014 lejon trafik.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Skema punkt \u2014 lejon zgjedhjen e nj\u00eb skenari q\u00eb \u00ebsht\u00eb nj\u00eb kusht shtes\u00eb p\u00ebr aktivizimin e rregullit. K\u00ebshtu, kompania UserGate realizon konceptin SOAR (Security Orchestration, Automation and Response).<\/p>\n<\/li>\n<li>\n<p>Regjistrimi \u2014 regjistron informacionin mbi trafikun kur rregulli aktivizohet. Variantet e mundshme jan\u00eb:<\/p>\n<ul>\n<li>\n<p>Regjistro fillimin e sesionit. N\u00eb k\u00ebt\u00eb rast, n\u00eb regjistrin e trafikut do t\u00eb regjistrohet vet\u00ebm informacioni mbi fillimin e sesionit (paketi i par\u00eb). Ky \u00ebsht\u00eb varianti i rekomanduar i regjistrimit.<\/p>\n<\/li>\n<li>\n<p>Regjistro \u00e7do paket\u00eb. N\u00eb k\u00ebt\u00eb rast, do t\u00eb regjistrohet informacioni mbi \u00e7do paket\u00eb rrjeti q\u00eb kalon. P\u00ebr k\u00ebt\u00eb mod, rekomandohet t\u00eb aktivizohet nj\u00eb kufizim regjistrimi p\u00ebr t\u00eb parandaluar ngarkes\u00ebn e lart\u00eb t\u00eb pajisjes.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Apliko rregullin n\u00eb:<\/p>\n<ul>\n<li>\n<p>T\u00eb gjitha paketat<\/p>\n<\/li>\n<li>\n<p>p\u00ebr paketat e fragmentuara<\/p>\n<\/li>\n<li>\n<p>p\u00ebr paketat e pa fragmentuara<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Kur krijoni nj\u00eb rregull t\u00eb ri, mund t\u00eb zgjidhni vendin n\u00eb politik\u00eb.<\/p>\n<\/li>\n<\/ul>\n<p>Tjetra <em>tabi \u2018Burimi\u2019<\/em>. K\u00ebtu ne shtojm\u00eb burimin e trafikut, mund t\u00eb jet\u00eb zona nga e cila vjen trafiku, ose mund t\u00eb tregojm\u00eb nj\u00eb list\u00eb ose nj\u00eb adres\u00eb IP t\u00eb caktuar (Geoip). Praktikisht n\u00eb t\u00eb gjitha rregullat q\u00eb mund t\u00eb vendosen n\u00eb pajisjen, objekti mund t\u00eb krijohet nga rregulli, p\u00ebr shembull, pa kaluar n\u00eb seksionin \u201cZona\u201d, mund t\u00eb krijojm\u00eb zon\u00ebn q\u00eb na nevojitet me butonin \u201cKrijo dhe shto nj\u00eb objekt t\u00eb ri\u201d. Nj\u00eb checkbox i njohur shpesh \u00ebsht\u00eb \u201cInverto\u201d, i cili ndryshon veprimin e rregullit n\u00eb t\u00eb kund\u00ebrt, q\u00eb \u00ebsht\u00eb e ngjashme me veprimin logjik t\u00eb mohim. <em>Tabi &#171;Q\u00ebllimi&#187;<\/em> \u00ebsht\u00eb e ngjashme me tabin e burimit, vet\u00ebm se n\u00eb vend t\u00eb burimit t\u00eb trafikut vendosim destinacionin e trafik\u00ebve. <em>Tabi &#171;P\u00ebrdoruesit&#187;<\/em> \u2014 n\u00eb k\u00ebt\u00eb vend mund t\u00eb shtojm\u00eb nj\u00eb list\u00eb p\u00ebrdoruesish ose grupesh, p\u00ebr t\u00eb cil\u00ebt aplikohet ky rregull. <em>Tabi &#171;Sh\u00ebrbimi&#187;<\/em> \u2014 zgjidhet tipi i sh\u00ebrbimit nga ato t\u00eb paracaktuara ose mund t\u00eb vendosim tonin ton\u00eb t\u00eb vet\u00eb. <em>Tabi &#171;Aplikacioni&#187;<\/em> \u2014 k\u00ebtu zgjidhen aplikacionet e sakta, ose grupe aplikacionesh. Dhe <em>tabi &#171;Koha&#187;<\/em> vendosim koh\u00ebn kur ky rregull \u00ebsht\u00eb aktiv.&nbsp;<\/p>\n<p>Nga m\u00ebsimi i kaluar, ne kemi nj\u00eb rregull p\u00ebr dalje n\u00eb internet nga zona \u201cTrust\u201d, tani do t\u00eb tregoj si shembull si t\u00eb krijoj nj\u00eb rregull ndaluese p\u00ebr trafikun ICMP nga zona \u201cTrust\u201d n\u00eb zon\u00ebn \u201cUntrusted\u201d.<\/p>\n<p>P\u00ebr t\u00eb filluar, krijojm\u00eb rregullin duke klikuar n\u00eb butonin \u201cShto\u201d. N\u00eb dritaren e hapur n\u00eb sked\u00ebn e p\u00ebrgjithshme, plotesojm\u00eb emrin (Ndalimi i ICMP nga trusted n\u00eb untrusted), vendosim shenj\u00ebn n\u00eb kutin\u00eb e kontrollit \u201cAktivizo\u201d, zgjidhim veprimin ndalo dhe m\u00eb e r\u00ebnd\u00ebsishmja, zgjidhim vendndodhjen e sakt\u00eb t\u00eb k\u00ebtij rregulli. Sipas politik\u00ebs time, ky rregull duhet t\u00eb vendoset m\u00eb lart se rregulli \u201cLejo trusted n\u00eb untrusted\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb sked\u00ebn \u201cBurimi\u201d p\u00ebr detyr\u00ebn time ka dy mund\u00ebsi:<\/p>\n<ul>\n<li>\n<p>Duke zgjedhur zon\u00ebn \u201cTrusted\u201d<\/p>\n<\/li>\n<li>\n<p>Duke zgjedhur t\u00eb gjitha zonat p\u00ebrve\u00e7 \u201cTrusted\u201d dhe duke vendosur nj\u00eb shenj\u00eb n\u00eb kutin\u00eb e kontrollit \u201cInverto\u201d<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Skeda \u201cDestinacioni\u201d rregullohet n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me sked\u00ebn \u201cBurimi\u201d.<\/p>\n<p>Pastaj kalojm\u00eb te tab-i \u201cSh\u00ebrbimi\u201d, p\u00ebr shkak se UserGate ka nj\u00eb sh\u00ebrbim t\u00eb paracaktuar p\u00ebr trafik ICMP, k\u00ebshtu q\u00eb, duke klikuar butonin &#171;Shto&#187;, zgjedhim nga lista e ofruar sh\u00ebrbimin me emrin \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Mund t\u00eb jet\u00eb se k\u00ebshtu e kan\u00eb menduar krijuesit e UserGate, por un\u00eb kam arritur t\u00eb krijoj disa rregulla t\u00eb plota identike. Edhe pse vet\u00ebm rregulli i par\u00eb n\u00eb list\u00eb do t\u00eb ekzekutohet, mund\u00ebsia p\u00ebr t\u00eb krijuar rregulla t\u00eb ndryshme funksionale me emra t\u00eb nj\u00ebjt\u00eb mendoj se mund t\u00eb shkaktoj\u00eb konfuzion kur punojn\u00eb disa administrator\u00eb t\u00eb pajisjes.<\/p>\n<h3>NAT dhe ruterizimi<\/h3>\n<p>Kur krijojm\u00eb rregulla NAT, shohim disa karta t\u00eb ngjashme, si p\u00ebr firewallin. N\u00eb kart\u00ebn 'T\u00eb P\u00ebrgjithshme' ka nj\u00eb fush\u00eb 'Lloji', e cila lejon t\u00eb zgjidhni p\u00ebr \u00e7far\u00eb do t\u00eb p\u00ebrgjigjet kjo rregull:<\/p>\n<ul>\n<li>\n<p>NAT &#8212; Transformatimi i adreseve rrjetuese.<\/p>\n<\/li>\n<li>\n<p>DNAT &#8212; Ridesh trafikun n\u00eb nj\u00eb adres\u00eb t\u00eb caktuar IP.<\/p>\n<\/li>\n<li>\n<p>P\u00ebrpara-portimi &#8212; Ridesh trafikun n\u00eb nj\u00eb adres\u00eb t\u00eb caktuar IP, por lejon t\u00eb ndryshosh numrin e portit t\u00eb sh\u00ebrbimit t\u00eb publikuar.<\/p>\n<\/li>\n<li>\n<p>Routimi bazuar n\u00eb politika &#8212; Lejon t\u00eb drejtohen paketa IP bazuar n\u00eb informacion t\u00eb avancuar, si sh\u00ebrbimet, adresat MAC ose server\u00ebt (adresat IP).<\/p>\n<\/li>\n<li>\n<p>Hartimi i rrjetit &#8212; Lejon z\u00ebvend\u00ebsimin e adresave IP t\u00eb burimit ose destinacionit t\u00eb nj\u00eb rrjeti me nj\u00eb rrjet tjet\u00ebr.<\/p>\n<\/li>\n<\/ul>\n<p>Pas zgjedhjes s\u00eb llojit p\u00ebrkat\u00ebs, do t\u00eb jen\u00eb t\u00eb disponueshme cil\u00ebsimet p\u00ebr t\u00eb.<\/p>\n<p>N\u00eb fush\u00ebn SNAT IP (adresa e jashtme) ne specifikojm\u00eb qart\u00eb adres\u00ebn IP n\u00eb t\u00eb cil\u00ebn do t\u00eb z\u00ebvend\u00ebsohet adresa e burimit. Kjo fush\u00eb \u00ebsht\u00eb e nevojshme kur ka disa adresa IP q\u00eb iu jan\u00eb caktuar interface-ve t\u00eb zon\u00ebs s\u00eb destinacionit. N\u00ebse e l\u00ebm\u00eb k\u00ebt\u00eb fush\u00eb bosh, sistemi do t\u00eb p\u00ebrdor\u00eb nj\u00eb adres\u00eb t\u00eb rastit nga lista e adresave IP t\u00eb disponueshme, q\u00eb i jan\u00eb caktuar interface-ve t\u00eb zon\u00ebs s\u00eb destinacionit. UserGate rekomandon t\u00eb specifikohet SNAT IP p\u00ebr t\u00eb rritur performanc\u00ebn e funksionimit t\u00eb firewallit.<\/p>\n<p>Si shembull, do t\u00eb publikoj sh\u00ebrbimin SSH t\u00eb serverit Windows, q\u00eb ndodhet n\u00eb zon\u00ebn \"DMZ\" p\u00ebrmes rregullit \"port-forwarding\". P\u00ebr k\u00ebt\u00eb, shkruajm\u00eb rregullin duke klikuar butonin \"Shto\" dhe plot\u00ebsojm\u00eb flet\u00ebn \"T\u00eb p\u00ebrgjithshme\", duke specifikuar emrin e rregullit \"SSH to Windows\" dhe tipin \"Port-forwarding\":<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb tab-in \u201cBurimi\u201d zgjedhim zon\u00ebn \u201cUntrusted\u201d dhe kalojm\u00eb te tab-i \u201cP\u00ebrpara-portimi\u201d. K\u00ebtu duhet t\u00eb specifikojm\u00eb protokollin \u201cTCP\u201d (jan\u00eb t\u00eb disponueshme kat\u00ebr variante &#8212; TCP, UDP, SMTP, SMTPS). Porta origjinale e destinacionit 9922 &#8212; numri i portit n\u00eb t\u00eb cilin p\u00ebrdoruesit d\u00ebrgojn\u00eb k\u00ebrkesa (nuk mund t\u00eb p\u00ebrdoren portat: 2200, 8001, 4369, 9000-9100). Porta e re e destinacionit (22) &#8212; numri i portit n\u00eb t\u00eb cilin do t\u00eb d\u00ebrgohen k\u00ebrkesat e p\u00ebrdoruesve n\u00eb serverin e brendsh\u00ebm t\u00eb publikuar.<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb sked\u00ebn \u201cDNAT\u201d vendosim adres\u00ebn IP t\u00eb kompjuterit n\u00eb rrjetin lokal, i cili publikohet n\u00eb internet (192.168.3.2). Dhe opcionalisht mund t\u00eb aktivizojm\u00eb SNAT, at\u00ebher\u00eb UserGate do t\u00eb ndryshoj\u00eb adres\u00ebn e burimit n\u00eb paketat nga jasht n\u00eb adres\u00ebn e tij IP.<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas t\u00eb gjitha konfigurimeve, rezulton nj\u00eb rregull q\u00eb lejon qasje nga zona \u201cUntrusted\u201d n\u00eb serverin me adres\u00ebn IP 192.168.3.2 p\u00ebrmes protokollit SSH, duke p\u00ebrdorur adres\u00ebn e jashtme t\u00eb UserGate gjat\u00eb lidhjes.<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Kapaciteti i Kalimit<\/h3>\n<p>N\u00eb k\u00ebt\u00eb seksion vendosen rregulla p\u00ebr menaxhimin e kapacitetit t\u00eb kalimit. Ato mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb kufizuar kanalin e p\u00ebrdoruesve, hosteve, sh\u00ebrbimeve dhe aplikacioneve t\u00eb caktuara.<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kur gjen creationi i rregullit, n\u00eb seksionet e tabave p\u00ebrcaktojm\u00eb trafikun, p\u00ebr t\u00eb cilin zbatohen kufizimet. Bandwidth-in mund ta zgjidhni nga ato t\u00eb propozuara, ose t\u00eb caktoni tuajin. Kur krijoni bandwidth, mund t\u00eb sh\u00ebnoni nj\u00eb etiket\u00eb p\u00ebr prioritizimin e trafikut DSCP. Nj\u00eb shembull se kur p\u00ebrdoren etiketat DSCP: duke specifikuar n\u00eb rregull skenarin, n\u00eb t\u00eb cilin aplikohet ky rregull, ky rregull mund t\u00eb ndryshoj\u00eb automatikisht k\u00ebto etiketa. Nj\u00eb shembull tjet\u00ebr i funksionit t\u00eb skenarit: rregulli do t\u00eb aktivizohet p\u00ebr p\u00ebrdoruesin vet\u00ebm kur t\u00eb zbulohet nj\u00eb torrent ose v\u00ebllimi i trafikut t\u00eb kaloj\u00eb pragun e caktuar. Pjes\u00ebt e tjera t\u00eb tabave plot\u00ebsohen ashtu si n\u00eb politikat e tjera, sipas llojit t\u00eb trafikut, p\u00ebr t\u00eb cilin duhet aplikuar rregulli.<\/p>\n<p><img decoding=\"async\" alt=\"3. Fillimi i p\u00ebrdorimit t\u00eb UserGate. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>P\u00ebrfundimi<\/h3>\n<p>N\u00eb k\u00ebt\u00eb artikull kam shqyrtuar krijimin e rregullave n\u00eb seksionet \"Firewall\", \"NAT dhe Rrug\u00ebzimi\" dhe \"Kapaciteti i Bandwidth-it\". Dhe n\u00eb fillim t\u00eb artikullit kam p\u00ebrshkruar rregullat e krijimit t\u00eb politikave UserGate, si dhe parimin e funksionimit t\u00eb kushteve kur krijohet nj\u00eb rregull.&nbsp;<\/p>\n<p>Ndjekni azhurnimet n\u00eb kanalet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>)!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Getting Started. Politikat e rrjetit | ProHoster","description":"P\u00ebrsh\u00ebndetje lexuesve n\u00eb artikullin e tret\u00eb t\u00eb ciklit t\u00eb artikujve UserGate Getting Started, ku flitet p\u00ebr zgjidhjen NGFW nga kompania UserGate. N\u00eb artikullin e kaluar u p\u00ebrshkrua procesi i instalimit t\u00eb firewall-it dhe u krye konfigurimi i tij fillestar. Tani do t\u00eb shqyrtojm\u00eb m\u00eb n\u00eb detaje krijimin e rregullave n\u00eb seksione t\u00eb tilla si \"Firewall\", \"NAT dhe routing\" dhe \"Kapaciteti i kalimit\". Ideologjia e funksionimit t\u00eb rregullave UserGate,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d.\u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b UserGate,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}