{"id":97713,"date":"2020-10-21T02:42:44","date_gmt":"2020-10-21T00:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti"},"modified":"2020-10-21T02:42:44","modified_gmt":"2020-10-21T00:42:44","slug":"3-usergate-getting-started-politiki-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","title":{"rendered":"3. UserGate Getting Started. Politikat e rrjetit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6135a0c5287f8256222ce4d295f2b2ec.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebrsh\u00ebndetje lexuesve n\u00eb artikullin e tret\u00eb t\u00eb seris\u00eb s\u00eb artikujve 'UserGate Getting Started', ku flitet p\u00ebr zgjidhjen NGFW nga kompania&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/tssolution.ru\/katalog\/usergate?utm_source=habr\">UserGate<\/a><\/noindex>. N\u00eb artikullin e kaluar u p\u00ebrshkrua procesi i instalimit t\u00eb firewall-it dhe u realizua konfigurimi i tij fillestar. Tani do t\u00eb shqyrtojm\u00eb m\u00eb n\u00eb detaj krijimin e rregullave n\u00eb seksione si 'Firewall', 'NAT dhe Routing' dhe 'Kapaciteti'.<\/p>\n<p>Idet\u00eb q\u00eb q\u00ebndrojn\u00eb pas rregullave t\u00eb UserGate jan\u00eb t\u00eb tilla q\u00eb rregullat zbatohet nga lart posht\u00eb, deri n\u00eb rregullin e par\u00eb q\u00eb aktivizohet. Duke u bazuar n\u00eb k\u00ebt\u00eb, rregullat m\u00eb specifike duhet t\u00eb jen\u00eb m\u00eb lart se rregullat m\u00eb t\u00eb p\u00ebrgjithshme. Por duhet t\u00eb theksohet se, p\u00ebr shkak se rregullat kontrollohen sipas rendit, n\u00eb aspektin e performanc\u00ebs \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb krijohen rregulla t\u00eb p\u00ebrgjithshme. Kushtet e krijimit t\u00eb \u00e7do rregulli zbatohen sipas logjik\u00ebs 'DHE'. N\u00ebse nevojitet p\u00ebrdorimi i logjik\u00ebs 'OSE', kjo arrihet duke krijuar disa rregulla. K\u00ebshtu, ajo q\u00eb p\u00ebrshkruhet n\u00eb k\u00ebt\u00eb artikull \u00ebsht\u00eb gjithashtu e aplikueshme p\u00ebr politika t\u00eb tjera t\u00eb UserGate.<\/p>\n<h3>Firewall<\/h3>\n<p>Pas instalimit t\u00eb UserGate, n\u00eb seksionin 'Firewall' tashm\u00eb ekziston nj\u00eb politik\u00eb e thjesht\u00eb. Dy rregullat e para ndalojn\u00eb trafikun p\u00ebr bot-netet. M\u00eb pas vijojn\u00eb shembuj rregullash qasje nga zona t\u00eb ndryshme. Rregulli i fundit quhet gjithmon\u00eb 'Blloko t\u00eb gjitha' dhe sh\u00ebnohet me simbolin e \u00e7el\u00ebsit (ky do t\u00eb thot\u00eb se rregulli nuk mund t\u00eb fshihet, ndryshohet, zhvendoset, \u00e7aktivizohet, p\u00ebr t\u00eb mund t\u00eb aktivizohet vet\u00ebm opsioni i regjistrimit). K\u00ebshtu, p\u00ebr shkak t\u00eb k\u00ebtij rregulli, e gjith\u00eb trafiku q\u00eb nuk \u00ebsht\u00eb shpallur qart\u00eb i lejuar do t\u00eb bllokohet nga rregulli i fundit. N\u00ebse nevojitet leja p\u00ebr t\u00eb gjith\u00eb trafikun p\u00ebrmes UserGate (ndon\u00ebse kjo rekomandohet fort q\u00eb t\u00eb mos b\u00ebhet), gjithmon\u00eb mund t\u00eb krijoni rregullin e par\u00ebnd\u00ebsish\u00ebm 'Lejo t\u00eb gjitha'.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6259ea9b51da9481e186b9027ddcbcf8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kur redaktoni ose krijoni nj\u00eb rregull p\u00ebr firewall-in, <em>tabi 'T\u00eb p\u00ebrgjithshme'<\/em>, duhet t\u00eb realizoni veprimet e m\u00ebposhtme:&nbsp;<\/p>\n<ul>\n<li>\n<p>Me checkbox-in 'Aktivizo' aktivizoni ose \u00e7aktivizoni rregullin.<\/p>\n<\/li>\n<li>\n<p>Vendosni emrin e rregullit.<\/p>\n<\/li>\n<li>\n<p>P\u00ebrcaktoni nj\u00eb p\u00ebrshkrim p\u00ebr rregullin.<\/p>\n<\/li>\n<li>\n<p>Zgjidhni nga dy veprime:<\/p>\n<ul>\n<li>\n<p>Ndaloni \u2014 bllokon trafikun (n\u00eb caktimin e k\u00ebtij kushti ka mund\u00ebsin\u00eb t\u00eb d\u00ebrgoni ICMP host unreachable, thjesht duhet t\u00eb aktivizoni checkbox-in p\u00ebrkat\u00ebs).<\/p>\n<\/li>\n<li>\n<p>Lejoni \u2014 lejon trafikun.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Skema e skenarit - lejon zgjedhjen e nj\u00eb skenari q\u00eb \u00ebsht\u00eb nj\u00eb kusht shtes\u00eb p\u00ebr aktivizimin e rregullit. K\u00ebshtu, kompania UserGate realizon konceptin SOAR (Orkestrimi i Siguris\u00eb, Automatizimi dhe P\u00ebrgjigjja).<\/p>\n<\/li>\n<li>\n<p>Regjistrimi - shkruani n\u00eb regjist\u00ebr informacionin e trafikut kur rregulli aktivizohet. Ka mund\u00ebsi:<\/p>\n<ul>\n<li>\n<p>Regjistro fillimin e sesionit. N\u00eb k\u00ebt\u00eb rast, n\u00eb regjistrin e trafikut do t\u00eb regjistrohet vet\u00ebm informacioni mbi fillimin e sesionit (paketa e par\u00eb). Ky \u00ebsht\u00eb varianti i rekomanduar i regjistrimit.<\/p>\n<\/li>\n<li>\n<p>Regjistro \u00e7do paket\u00eb. N\u00eb k\u00ebt\u00eb rast do t\u00eb regjistrohet informacioni mbi \u00e7do paket\u00eb rrjeti q\u00eb transmetohet. P\u00ebr k\u00ebt\u00eb mod, rekomandohet t\u00eb p\u00ebrfshihet nj\u00eb kufi regjistrimi p\u00ebr t\u00eb parandaluar ngarkes\u00ebn e lart\u00eb t\u00eb pajisjes.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Zbato rregullin p\u00ebr:<\/p>\n<ul>\n<li>\n<p>T\u00eb gjitha paketat<\/p>\n<\/li>\n<li>\n<p>p\u00ebr paketat e fragmentuara<\/p>\n<\/li>\n<li>\n<p>p\u00ebr paketat e pa fragmentuara<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Kur krijoni nj\u00eb rregull t\u00eb ri, mund t\u00eb zgjidhni vendin n\u00eb politik\u00eb.<\/p>\n<\/li>\n<\/ul>\n<p>Tjetra <em>tabi \"Burimi\"<\/em>. K\u00ebtu ne tregojm\u00eb burimin e trafikut, kjo mund t\u00eb jet\u00eb zona nga e cila vjen trafiku, ose mund t\u00eb tregojm\u00eb nj\u00eb list\u00eb ose nj\u00eb adres\u00eb IP specifike (Geoip). Praktikisht n\u00eb t\u00eb gjitha rregullat q\u00eb mund t\u00eb caktosh n\u00eb pajisje, objekti mund t\u00eb krijohet nga rregulli, p.sh. duke mos kaluar n\u00eb seksionin \"Zona\", mund t\u00eb krijoni zon\u00ebn q\u00eb na nevojitet me butonin \"Krijo dhe shto objekt t\u00eb ri\". Gjithashtu, shpesh haset kutia kontrolluese \"Inverto\", e cila ndryshon veprimin e kushtit t\u00eb rregullit n\u00eb t\u00eb kund\u00ebrt, q\u00eb \u00ebsht\u00eb e ngjashme me veprimin logjik t\u00eb mohimit. <em>Taba &#171;Destinacioni&#187;<\/em> \u00ebsht\u00eb e ngjashme me tabin e burimit, vet\u00ebm se n\u00eb vend t\u00eb burimit t\u00eb trafikut caktuar destinacionin e trafikut. <em>Taba &#171;P\u00ebrdoruesit&#187;<\/em> \u2014 n\u00eb k\u00ebt\u00eb vend mund t\u00eb shtoni nj\u00eb list\u00eb p\u00ebrdoruesish ose grupesh, p\u00ebr t\u00eb cil\u00ebt zbatohen ky rregull. <em>Taba &#171;Sh\u00ebrbimi&#187;<\/em> \u2014 zgjedhim tipin e sh\u00ebrbimit nga ai q\u00eb \u00ebsht\u00eb i paracaktuar ose mund t\u00eb caktosh t\u00ebnden. <em>Taba &#171;Aplikacioni&#187;<\/em> \u2014 k\u00ebtu zgjidhen aplikacionet specifike, ose grupe aplikacionesh. Dhe <em>taba &#171;Koh\u00eb&#187;<\/em> tregojm\u00eb koh\u00ebn kur ky rregull \u00ebsht\u00eb aktiv.&nbsp;<\/p>\n<p>Nga m\u00ebsimi i kaluar kemi nj\u00eb rregull p\u00ebr daljen n\u00eb internet nga zona \"Trust\", tani do t'ju tregoj si shembull si t\u00eb krijoni nj\u00eb rregull ndaluese p\u00ebr trafikun ICMP nga zona \"Trust\" n\u00eb zon\u00ebn \"Untrusted\".<\/p>\n<p>S\u00eb pari, krijoni nj\u00eb rregull duke klikuar butonin \u201cShto\u201d. N\u00eb dritaren q\u00eb hapet n\u00eb seksionin e p\u00ebrgjithsh\u00ebm, plot\u00ebsoni emrin (Ndalimi i ICMP nga trusted n\u00eb untrusted), vendosni shenj\u00ebn n\u00eb kutin\u00eb e kontrollit \u201cAktivizo\u201d, zgjidhni veprimin ndalo dhe m\u00eb kryesorja, zgjidhni sakt\u00eb vendndodhjen e k\u00ebtij rregulli. Sipas politik\u00ebs sime, ky rregull duhet t\u00eb vendoset mbi rregullin \u201cLejo trusted n\u00eb untrusted\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/61b267e2e914dd82473bb242c75af173.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb seksionin \u201cBurimi\u201d p\u00ebr detyr\u00ebn time ka dy opsione:<\/p>\n<ul>\n<li>\n<p>Duke zgjedhur zon\u00ebn \u201cTrusted\u201d<\/p>\n<\/li>\n<li>\n<p>Duke zgjedhur t\u00eb gjitha zonat p\u00ebrve\u00e7 \u201cTrusted\u201d dhe vendosur shenj\u00ebn n\u00eb kutin\u00eb e kontrollit \u201cInverto\u201d<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/b84ba5bd64a27d904607e23e0529bfa8.png\" style=\"display:block;margin: 0 auto;\" \/><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d938df2d1b567a9712e6a486e53d1a67.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Seksioni \u201cDestinacioni\u201d konfigurizohet ndryshe nga seksioni \u201cBurimi\u201d.<\/p>\n<p>Pastaj kalojm\u00eb n\u00eb seksionin \u201cSh\u00ebrbimi\u201d, pasi n\u00eb UserGate ka nj\u00eb sh\u00ebrbim t\u00eb paracaktuar p\u00ebr trafik ICMP, ne, duke klikuar butonin \u201cShto\u201d, zgjedhim nga lista e propozuar sh\u00ebrbimin me emrin \u201cAny ICMP\u201d:<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/c5ab4720c8f4c178f3e1d16d64d1a2ac.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Mund t\u00eb jet\u00eb se k\u00ebshtu e kishin menduar krijuesit e UserGate, por un\u00eb kam pasur mund\u00ebsi t\u00eb krijoj disa rregulla krejt\u00ebsisht t\u00eb nj\u00ebjta. Edhe pse vet\u00ebm rregulli i par\u00eb n\u00eb list\u00eb do t\u00eb ekzekutohet, mund\u00ebsia p\u00ebr t\u00eb krijuar rregulla t\u00eb ndryshme me funksionalitete t\u00eb ndryshme me t\u00eb nj\u00ebjtin em\u00ebr mendoj se mund t\u00eb shkaktoj\u00eb konfuzion gjat\u00eb pun\u00ebs nga disa administratori t\u00eb pajisjes.<\/p>\n<h3>NAT dhe rrug\u00ebzimi<\/h3>\n<p>Kur krijojm\u00eb rregulla NAT, ne shohim disa seksione t\u00eb ngjashme, si p\u00ebr nj\u00eb firewall. N\u00eb seksionin \u201cT\u00eb p\u00ebrgjithshme\u201d ka nj\u00eb fush\u00eb t\u00eb re \u201cTip\u201d, e cila lejon t\u00eb zgjidhet p\u00ebr \u00e7far\u00eb do t\u00eb p\u00ebrgjigjet ky rregull:<\/p>\n<ul>\n<li>\n<p>NAT \u2014 Shk\u00ebmbimi i adresave t\u00eb rrjetit.<\/p>\n<\/li>\n<li>\n<p>DNAT \u2014 Rr\u00ebfimi i trafikut n\u00eb nj\u00eb adres\u00eb IP t\u00eb caktuar.<\/p>\n<\/li>\n<li>\n<p>Port-forwarding \u2014 Rr\u00ebfimi i trafikut n\u00eb nj\u00eb adres\u00eb IP t\u00eb caktuar, por lejon ndryshimin e numrit t\u00eb portit t\u00eb sh\u00ebrbimit t\u00eb botuar.<\/p>\n<\/li>\n<li>\n<p>Rrug\u00ebzimi n\u00eb baz\u00eb t\u00eb politik\u00ebs \u2014 Lejon rrug\u00ebzimin e paketeve IP n\u00eb baz\u00eb t\u00eb informacionit t\u00eb zgjeruar, p\u00ebr shembull, sh\u00ebrbimeve, adresave MAC ose server\u00ebve (adresave IP).<\/p>\n<\/li>\n<li>\n<p>Hartimi i rrjetit \u2014 Lejon z\u00ebvend\u00ebsimin e adresave IP t\u00eb burimit ose destinacionit t\u00eb nj\u00eb rrjeti me nj\u00eb tjet\u00ebr rrjet.<\/p>\n<\/li>\n<\/ul>\n<p>Pas zgjedhjes s\u00eb tipit t\u00eb duhur t\u00eb rregullit, do t\u00eb jen\u00eb t\u00eb disponueshme parametrat p\u00ebr t\u00eb.<\/p>\n<p>N\u00eb fush\u00ebn SNAT IP (adresa e jashtme) ne qart\u00ebsojm\u00eb adres\u00ebn IP n\u00eb t\u00eb cil\u00ebn do t\u00eb z\u00ebvend\u00ebsohet adresa e burimit. Ky fush \u00ebsht\u00eb i nevojsh\u00ebm kur ka disa adresa IP t\u00eb caktuara p\u00ebr nd\u00ebrfaqet e zon\u00ebs s\u00eb destinacionit. N\u00ebse e l\u00ebm\u00eb k\u00ebt\u00eb fush bosh, sistemi do t\u00eb p\u00ebrdor\u00eb nj\u00eb adres\u00eb t\u00eb rastit nga lista e adresave IP t\u00eb disponueshme, t\u00eb caktuara p\u00ebr nd\u00ebrfaqet e zon\u00ebs s\u00eb destinacionit. UserGate rekomandon caktimin e SNAT IP p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar performanc\u00ebn e pun\u00ebs s\u00eb nd\u00ebrfaqes s\u00eb rrjetit.<\/p>\n<p>P\u00ebr shembull, do t\u00eb publikoj sh\u00ebrbimin SSH t\u00eb serverit Windows, i cili ndodhet n\u00eb zon\u00ebn \"DMZ\" p\u00ebrmes rregullit \"port-forwarding\". P\u00ebr k\u00ebt\u00eb, shtypim butonin \"Shto\" dhe plot\u00ebsojm\u00eb skedarin \"T\u00eb p\u00ebrgjithshme\", duke caktuar emrin e rregullit \"SSH to Windows\" dhe llojin \"Port-forwarding\":<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/b08987af4e8e8c30a48a82811d060e5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb skedarin \"Burimi\" zgjedhim zon\u00ebn \"Untrusted\" dhe kalojm\u00eb n\u00eb skedarin \"Port-forwarding\". K\u00ebtu duhet t\u00eb caktojm\u00eb protokollin \"TCP\" (disponohen kat\u00ebr variante \u2014 TCP, UDP, SMTP, SMTPS). Porta origjinale e destinacionit 9922 \u2014 numri i port\u00ebs n\u00eb t\u00eb cilin p\u00ebrdoruesit d\u00ebrgojn\u00eb k\u00ebrkesat (nuk lejohet p\u00ebrdorimi i porteve: 2200, 8001, 4369, 9000-9100). Porta e re e destinacionit (22) \u2014 numri i port\u00ebs n\u00eb t\u00eb cilin do t\u00eb d\u00ebrgohen k\u00ebrkesat e p\u00ebrdoruesve n\u00eb serverin publik t\u00eb brendsh\u00ebm.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d65a52e88c6f03f0540aa1ddb58fadcd.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00eb skedarin \"DNAT\" p\u00ebrcaktojm\u00eb adres\u00ebn IP t\u00eb kompjuterit n\u00eb rrjetin lokal, i cili publikohet n\u00eb internet (192.168.3.2). Dhe opcionalisht mund t\u00eb aktivizojm\u00eb SNAT, at\u00ebher\u00eb UserGate do t\u00eb ndryshoj\u00eb adres\u00ebn e burimit n\u00eb paketat nga rrjeti i jasht\u00ebm n\u00eb adres\u00ebn e tij IP.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/827801091a57c3460d70dba01fde055f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pas t\u00eb gjith\u00eb konfigurimeve, rezulton nj\u00eb rregull q\u00eb lejon qasje nga zona \"Untrusted\" n\u00eb serverin me adres\u00ebn IP 192.168.3.2 p\u00ebrmes protokollit SSH, duke p\u00ebrdorur gjat\u00eb lidhjes adres\u00ebn e jashtme t\u00eb UserGate.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/6eea26e4fcb8c427d0ac0231f63cdfc3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Kapaciteti<\/h3>\n<p>N\u00eb k\u00ebt\u00eb pjes\u00eb p\u00ebrcaktohen rregullat p\u00ebr menaxhimin e kapacitetit. Ato mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb kufizuar kanalin e p\u00ebrdoruesve t\u00eb caktuar, hosteve, sh\u00ebrbimeve, aplikacioneve.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/d6eb55e1eb77c3640bf08e2120ffbf13.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kur te krijoni rregulla, kushtet n\u00eb skedat e p\u00ebrcaktojn\u00eb trafikun p\u00ebr t\u00eb cilin aplikohen kufizimet. Gjer\u00ebsin\u00eb e band\u00ebs mund ta zgjidhni nga opsionet e ofruara ose ta p\u00ebrcaktoni tuaj\u00ebn. Kur krijoni nj\u00eb gjer\u00ebsi bande, mund t\u00eb specifikoni nj\u00eb etiket\u00eb p\u00ebr prioritetin e trafikut DSCP. Nj\u00eb shembull se kur aplikohen etiketat DSCP: duke specifikuar n\u00eb rregull skenarin ku aplikohet kjo rregull, rregulli mund t\u00eb ndryshoj\u00eb automatikisht k\u00ebto etiketa. Nj\u00eb shembull tjet\u00ebr i pun\u00ebs s\u00eb skenarit: rregulli do t\u00eb funksionoj\u00eb p\u00ebr p\u00ebrdoruesin vet\u00ebm kur zbulohet nj\u00eb torrent ose kur volumi i trafikut kalon kufirin e caktuar. Skedat e tjera plot\u00ebsohen n\u00eb t\u00eb nj\u00ebjt\u00ebn m\u00ebnyr\u00eb si n\u00eb politikat e tjera, n\u00eb var\u00ebsi t\u00eb tipit t\u00eb trafikut p\u00ebr t\u00eb cilin duhet t\u00eb aplikohet rregulli.<\/p>\n<p><img decoding=\"async\" alt=\"3. UserGate Getting Started. Politikat e rrjetit\" src=\"\/wp-content\/uploads\/2020\/10\/99c8edd1bd8c6059acf21e548a7467c4.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>P\u00ebrfundim<\/h3>\n<p>N\u00eb k\u00ebt\u00eb artikull kam shqyrtuar krijimin e rregullave n\u00eb seksionet \"Firewall\", \"NAT dhe Ruting\" dhe \"Gjer\u00ebsia e Band\u00ebs\". Dhe n\u00eb fillim t\u00eb artikullit p\u00ebrshkrova rregullat p\u00ebr krijimin e politikave UserGate, si dhe parimin e funksionimit t\u00eb kushteve gjat\u00eb krijimit t\u00eb rregullit.&nbsp;<\/p>\n<p>Ndjekni p\u00ebrdit\u00ebsimet n\u00eb kanalet tona (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/tssolution2020\/\">Facebook<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogu i Zgjidhjeve TS<\/a><\/noindex>)!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524188\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439 UserGate Getting Started, \u0433\u0434\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e NGFW \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438&nbsp;UserGate. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430. \u0421\u0435\u0439\u0447\u0430\u0441 \u0436\u0435 \u043c\u044b \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u201c\u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d\u201d, \u201cNAT \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u201d \u0438 \u201c\u041f\u0440\u043e\u043f\u0443\u0441\u043a\u043d\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c\u201d. \u0418\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0430\u0432\u0438\u043b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T00:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd473. UserGate Getting Started. Politikat e rrjetit | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. UserGate Getting Started. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/3-usergate-getting-started-politiki-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T00:42:44+00:00","article:modified_time":"2020-10-21T00:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:14:40","updated":"2022-10-01 16:58:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=97713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/97714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=97713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=97713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=97713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}