GRANDSTREAM GCC601X(W) One Networking Solution Firewall
MOEKETSI MOSEBETSI
GCC601X(W) Firewall
Tataisong ena, re tla hlahisa liparamente tsa tlhophiso tsa GCC601X(W) Firewall Module.
FEELAVIEW
The overview Leqephe le fa basebelisi temohisiso ea lefats'e ea mojule oa mollo oa GCC le litšokelo le lipalo-palo,view leqephe le na le:
- Tšebeletso ea Firewall: e bonts'a ts'ebeletso ea firewall le boemo ba sephutheloana ka matsatsi a sebetsang le a felloang ke nako.
- Log ea Ts'ireletso e Phahameng: e bonts'a li-logs tse holimo bakeng sa sehlopha ka seng, mosebelisi a ka khetha sehlopha ho tsoa lenaneng le theohang kapa a tobetse letšoao la motsu ho fetisetsoa leqepheng la ts'ireletso bakeng sa lintlha tse ling.
- Lipalopalo tsa Ts'ireletso: e bonts'a lipalo-palo tse fapaneng tsa ts'ireletso, ho na le khetho ea ho hlakola lipalo-palo tsohle ka ho tobetsa letšoao la li-setting.
- Lisebelisoa tse Hlophisitsoeng ka ho Fetisisa: e bonts'a lits'ebetso tse holimo tse tlhotliloeng ka palo ea palo.
- Vaerase Files: e bonts'a tse hlahlobiloeng files le ho fumana kokoana-hloko files hape, ho thusa / ho tima anti-malware basebelisi ba ka tobetsa letšoao la litlhophiso.
- Boemo ba Tšokelo: e bonts'a boemo ba ts'okelo ho tloha ho ba bohlokoa ho isa bonyane ka khoutu ea mebala.
- Mofuta oa Tšokelo: e bonts'a mefuta ea litšokelo ka khoutu ea 'mala le palo ea ho pheta-pheta, basebelisi ba ka tsamaisa sekheo sa toeba holim'a' mala ho bonts'a lebitso le ketsahalo ea palo.
- Matšokelo a Phahameng: e bonts'a litšokelo tse holimo ka mofuta le palo.
Basebelisi ba ka bona litemoso le litšokelo tsa bohlokoa ka ho fetisisa.
Basebelisi ba ka tobetsa letšoao la motsu tlas'a Top Security Log hore ba fetisetsoe karolong ea Security Log, kapa ba fetele holim'a letšoao la gear tlas'a Lipalopalo tsa Tšireletso ho hlakola lipalo-palo kapa tlas'a Virus. files ho thibela Anti-malware. Tlas'a Boemo ba Tšokelo le Mofuta oa Tšokelo, basebelisi le bona ba ka sutumetsa holim'a li-graph ho bontša lintlha tse ling. Ka kopo sheba lipalo tse ka holimo.
LEANO LA MOTSAMAI
Melao Leano
Leano la melao le lumella ho hlalosa hore na sesebelisoa sa GCC se tla sebetsana le sephethephethe se kenang joang. Sena se etsoa ho latela WAN, VLAN, le VPN.
- Leano la Inbound: Hlalosa qeto eo sesebelisoa sa GCC se tla e nka bakeng sa sephethephethe se qaliloeng ho tsoa ho WAN kapa VLAN. Likhetho tse teng ke Amohela, Hana, 'me Lahlela.
- IP Masquerading: Numella IP masquerading. Sena se tla pata aterese ea IP ea batho ba ka hare.
- MSS Clamping: Ho nolofalletsa khetho ena ho tla lumella MSS (Maximum Segment Size) ho buisanoa nakong ea lipuisano tsa seboka sa TCP.
- Log Drop / Hana Sephethephethe: Ho nolofalletsa khetho ena ho tla hlahisa lethathamo la sephethephethe sohle se theohileng kapa se lahliloeng.
- Tloha / Hana Moedi oa Logi ea Sephethephethe: Hlalosa palo ea lits'oants'o motsotsoana, motsotso, hora kapa letsatsi. Mefuta e fapaneng ke 1 ~ 99999999, haeba e se na letho, ha ho na moeli.
Melao e Kenang
GCC601X(W) e lumella ho sefa sephethephethe se kenang ho sehlopha sa marang-rang kapa koung ea WAN mme e sebelisa melao e kang:
- Amohela: Ho lumella sephethephethe ho feta.
- Latola: Karabo e tla romelloa lehlakoreng le ka thōko e bolelang hore pakete e hanngoe.
- Lahla: Pakete e tla lahleloa ntle le tsebiso ho lehlakoreng le hole.
Ho Fetisa Melao
GCC601X(W) e fana ka monyetla oa ho lumella sephethephethe lipakeng tsa lihlopha tse fapaneng le li-interfaces (WAN/VLAN/VPN).
Ho eketsa molao oa ho fetisa, ka kopo, ea ho Firewall Module → Firewall Policy → Melao ea ho Fetisa, ebe u tobetsa konopo ea "Eketsa" ho eketsa molao o mocha oa ho fetisa kapa tobetsa letšoao la "Edita" ho hlophisa molao.
NAT e tsoetseng pele
NAT kapa phetolelo ea aterese ea Netweke joalo ka ha lebitso le fana ka maikutlo a hore ke phetolelo kapa 'mapa oa liaterese tsa poraefete kapa tsa kahare ho liaterese tsa IP tsa sechaba kapa ka tsela e fapaneng, 'me GCC601X(W) e li tšehetsa ka bobeli.
- SNAT: Mohloli oa NAT e bua ka 'mapa oa liaterese tsa IP tsa bareki (Liaterese tsa Botho kapa tsa ka Hare) ho ea sechabeng.
- DNAT: Sebaka sa NAT ke ts'ebetso e ka morao ea SNAT moo lipakete li tla fetisetsoa atereseng e itseng ea kahare.
Leqephe la Firewall Advanced NAT le fana ka bokhoni ba ho theha tlhophiso ea mohloli le sebaka sa NAT. E ea ho Firewall Module → Leano la Firewall → E tsoetseng pele NAT.
SNAT
Ho kenya SNAT tobetsa konopo ea "Add" ho kenya SNAT e ncha kapa tobetsa letšoao la "Edit" ho hlophisa e entsoeng pele. Sheba lipalo le tafole e ka tlase:
Sheba tafole e ka tlase ha u theha kapa u hlophisa sengoloa sa SNAT:
DNAT
Ho kenya DNAT tobetsa konopo ea "Add" ho kenya DNAT e ncha kapa tobetsa letšoao la "Edita" ho hlophisa e entsoeng pele. Sheba lipalo le tafole e ka tlase:
Sheba tafole e ka tlase ha u theha kapa u hlophisa DNAT:
Global Configuration
Hlahisa Khokahano hape
Ha khetho ena e nolofalitsoe 'me liphetoho tsa tlhophiso ea li-firewall li etsoa, likhokahano tse teng tse neng li lumelletsoe ke melao ea pele ea li-firewall li tla felisoa.
Haeba melao e mecha ea firewall e sa lumelle khokahanyo e neng e thehiloe pele, e tla felisoa 'me e ke ke ea khona ho hokahanya hape. Ka khetho ena e holofalitsoe, likhokahano tse teng li lumelloa ho tsoela pele ho fihlela li felile, le haeba melao e mecha e ke ke ea lumella khokahano ena hore e thehoe.
TS'IRELETSO TS'IRELETSO
Tšireletso ea DoS
Litlhophiso tsa Motheo - Tšireletso ea Tšireletso
Denial-of-Service Attack ke tlhaselo e reretsoeng ho etsa hore lisebelisoa tsa marang-rang li se ke tsa fumaneha ho basebelisi ba nepahetseng ka ho tlatsa mochine o lebisitsoeng ka likōpo tse ngata tse etsang hore tsamaiso e tlōle kapa e senyehe kapa e koalehe.
IP Mokhelo
Leqepheng lena, basebelisi ba ka eketsa liaterese tsa IP kapa marang-rang a IP hore a qheleloe ka thoko ho scan ea DoS Defense. Ho kenya aterese ea IP kapa IP lethathamong, tobetsa konopo ea "Add" joalokaha ho bontšitsoe ka tlase:
Hlalosa lebitso, ebe u fetola boemo ON ka mor'a moo, bolela aterese ea IP kapa IP.
Tšireletso ea Spoofing
Karolo ea ts'ireletso ea Spoofing e fana ka mehato e mengata ea ho hanyetsa mekhoa e fapaneng ea spoofing. Ho sireletsa marang-rang a hau khahlanong le bolotsana, ka kopo lumella mehato e latelang ho felisa kotsi ea hore sephethephethe sa hau se kenelle le ho senyeha. Lisebelisoa tsa GCC601X(W) li fana ka mehato ea ho thibela ho senya tlhahisoleseding ea ARP, hammoho le tlhahisoleseding ea IP.
Tšireletso ea ARP Spoofing
- Thibela Likarabo tsa ARP ka Liaterese tsa MAC tse sa Ts'oaneng: Sesebelisoa sa GCC se tla netefatsa aterese ea MAC ea pakete e itseng, 'me ha karabo e amoheloa ke sesebelisoa, e tla netefatsa aterese ea MAC ea mohloli mme e tla etsa bonnete ba hore li lumellana. Ho seng joalo, sesebelisoa sa GCC se ke ke sa fetisetsa pakete.
- Thibela Likarabo tsa ARP ka Liaterese tsa MAC tse sa Ts'oaneng: GCC601X(W) e tla netefatsa aterese ea mohloli oa MAC ha karabo e amoheloa. Sesebelisoa se tla netefatsa aterese ea MAC ea moo u eang teng 'me se tla etsa bonnete ba hore lia lumellana.
- Ho seng joalo, sesebelisoa se ke ke sa fetisetsa pakete.
- Hanela VRRP MAC ho Lethathamo la ARP: GCC601X(W) e tla fokotseha ho kenyelletsa aterese efe kapa efe e hlahisitsoeng ea MAC tafoleng ea ARP.
MOTHIBANE LE MALWARE
Karolong ena, basebelisi ba ka thusa Anti-malware le ho ntlafatsa tlhahisoleseling ea bona ea laeborari ea ho saena.
Tlhophiso
Ho nolofalletsa Anti-malware, ea ho mojule oa Firewall → Anti-Malware → Configuration.
Anti-malware: toggle ON/OFF ho thusa/ho tima Anti-malware.
Hlokomela:
Ho sefa li-HTTP URL, ka kopo lumella "SSL Proxy".
Tšireletso ea Spoofing
Tšireletso ea ARP Spoofing
Thibela Likarabo tsa ARP ka Liaterese tsa MAC tse sa Ts'oaneng: Sesebelisoa sa GCC se tla netefatsa aterese ea MAC ea pakete e itseng, 'me ha karabo e amoheloa ke sesebelisoa, e tla netefatsa aterese ea MAC ea mohloli mme e tla etsa bonnete ba hore li lumellana. Ho seng joalo, sesebelisoa sa GCC se ke ke sa fetisetsa pakete.
Thibela Likarabo tsa ARP ka Liaterese tsa MAC tse sa Ts'oaneng: GCC601X(W) e tla netefatsa aterese ea mohloli oa MAC ha karabo e amoheloa. Sesebelisoa se tla netefatsa aterese ea MAC ea moo u eang teng 'me se tla etsa bonnete ba hore lia lumellana.
Ho seng joalo, sesebelisoa se ke ke sa fetisetsa pakete.
Hanela VRRP MAC ho Lethathamo la ARP: GCC601X(W) e tla fokotseha ho kenyelletsa aterese efe kapa efe e hlahisitsoeng ea MAC tafoleng ea ARP.
MOTHIBANE LE MALWARE
Karolong ena, basebelisi ba ka thusa Anti-malware le ho ntlafatsa tlhahisoleseling ea bona ea laeborari ea ho saena.
Tlhophiso
Ho nolofalletsa Anti-malware, ea ho mojule oa Firewall → Anti-Malware → Configuration.
Anti-malware: toggle ON/OFF ho thusa/ho tima Anti-malware.
Botebo ba Tlhahlobo ea Pakete ea data: Sheba litaba tsa pakete ea sephethephethe se seng le se seng ho latela tlhophiso. Ha botebo bo ntse bo teba, lebelo la ho lemoha le holimo le ho feta ts'ebeliso ea CPU. Ho na le maemo a 3 a botebo bo tlase, bo mahareng le bo phahameng.
Scan e hatisitsoe Files: e tšehetsa ho hlahlojoa ha compressed files
Ka ho Fetaview leqepheng la, basebelisi ba ka hlahloba lipalo-palo le ho ba le ho fetaview. Hape, hoa khonahala ho tima Anti-malware ka kotloloho leqepheng lena ka ho tobetsa letšoao la litlhophiso joalo ka ha ho bonts'itsoe ka tlase:
Hape hoa khoneha ho lekola lethathamo la ts'ireletso bakeng sa lintlha tse ling
Laeborari ea Tšebeliso ea Virus
Leqepheng lena, basebelisi ba ka ntlafatsa tlhahisoleseling ea laeborari e khahlanong le malware ka letsoho, ba ntlafatsa letsatsi le letsatsi kapa ba etsa kemiso, ka kopo sheba setšoantšo se ka tlase:
Hlokomela:
Ka tloaelo, e nchafatsoa ka nako e sa reroang (00:00-6:00) letsatsi le letsatsi.
THIBELLO THIBELO
Sistimi ea Thibelo ea ho Thibela ho Kena (IPS) le Sistimi ea Ts'ebetso ea Ts'ireletso (IDS) ke mekhoa ea ts'ireletso e behang leihlo sephethephethe sa marang-rang bakeng sa mesebetsi e belaetsang le liteko tse sa lumelloeng tsa ho fihlella. IDS e supa litšokelo tse ka bang teng tsa ts'ireletso ka ho sekaseka lipakete tsa marang-rang le li-log, athe IPS e thibela litšokelo tsena ka ho thibela kapa ho fokotsa sephethephethe se kotsi ka nako ea nnete. Ka kopanelo, IPS le IDS li fana ka mokhoa o leka-lekaneng oa ts'ireletso ea marang-rang, e thusang ho sireletsa khahlanong le litlhaselo tsa marang-rang le ho sireletsa lintlha tsa bohlokoa. Botnet ke marang-rang a likhomphutha tse senyehileng tse tšoaelitsoeng ke malware 'me li laoloa ke sebapali se lonya, seo hangata se sebelisetsoang ho etsa litlhaselo tse kholo tsa marang-rang kapa mesebetsi e seng molaong.
IDS/IPS
Litlhophiso tsa mantlha - IDS/IPS
Tabeng ena, basebelisi ba ka khetha mokhoa oa IDS/IPS, Boemo ba Tšireletso ea Tšireletso.
Mokhoa oa IDS/IPS:
- Tsebisa: lemoha sephethephethe mme u tsebise basebelisi feela ntle le ho se thibela, sena se lekana le IDS (Intrusion Detection System).
- Tsebisa & Thibela: e lemoha kapa e thibela sephethephethe mme e tsebisa ka taba ea ts'ireletso, sena se lekana le IPS (Intrusion Prevention System).
- Ha ho na Ketso: ha ho litsebiso kapa thibelo, IDS/IPS e holofetse tabeng ena.
Boemo ba Tšireletso ea Tšireletso: Khetha boemo ba tšireletso (Botlase, Bohareng, Bo phahameng, Bo phahameng ka ho Fetisisa le Tloaelo). Maemo a fapaneng a tšireletso a lumellana le maemo a fapaneng a tšireletso. Basebelisi ba ka khetha mofuta oa ts'ireletso. Ha boemo ba tshireletso bo phahame, melao e mengata ya tshireletso, mme Custom e tla thusa basebedisi ho kgetha seo IDS/IPS e tla se lemoha.
Hape hoa khoneha ho khetha boemo ba ts'ireletso ea tloaelo ebe u khetha lethathamong litšokelo tse ikhethileng. Ka kopo sheba setšoantšo se ka tlase:
Ho lekola litemoso le liketso tse nkiloeng, tlas'a sengoloa sa Ts'ireletso, khetha IDS/IPS ho tsoa lenaneng le theoha joalo ka ha ho bonts'itsoe ka tlase:
IP Mokhelo
Liaterese tsa IP tse lethathamong lena li ke ke tsa bonoa ke IDS/IPS. Ho kenya aterese ea IP lethathamong, tobetsa konopo ea "Add" joalokaha ho bontšitsoe ka tlase:
Kenya lebitso, ebe u lumella boemo, ebe u khetha mofuta (Mohloli kapa Sebaka) bakeng sa (li)aterese tsa IP. Ho kenya aterese ea IP tobetsa letšoao la "+" le ho hlakola aterese ea IP, tobetsa letšoao la "- " joalokaha ho bontšitsoe ka tlase:
Botnet
Litlhophiso tsa mantlha - Botnet
Leqepheng lena, basebelisi ba ka hlophisa litlhophiso tsa mantlha bakeng sa ho lekola Botnet IP le Lebitso la Botnet Domain mme ho na le likhetho tse tharo:
Tlhokomeliso: lialamo lia hlahisoa empa ha li thijoe.
Thibela: li-monitor le ho thibela liaterese tsa IP tse tsoang ka ntle / mabitso a Domain a fihlellang li-botnets.
Ha ho Ketso: Aterese ea IP / Lebitso la Domain la botnet e tsoang kantle ha e fumanoe.
IP/Domain Name Exception
Liaterese tsa IP tse lethathamong lena li ke ke tsa fumanoa bakeng sa Botnets. Ho kenya aterese ea IP lethathamong, tobetsa konopo ea "Add" joalokaha ho bontšitsoe ka tlase:
Kenya lebitso, ebe o lumella boemo. Ho kenya aterese ea IP/Domain, tobetsa letšoao la "+" le ho hlakola aterese ea IP / Domain name tobetsa letšoao la "-" joalo ka ha ho bonts'itsoe ka tlase:
Laeborari ea ho saena - Botnet
Leqepheng lena, basebelisi ba ka ntlafatsa tlhahisoleseling ea laeborari ea li-IDS/IPS le Botnet, ba e ntlafatsa letsatsi le letsatsi kapa ba etsa kemiso, ka kopo sheba setšoantšo se ka tlase:
Hlokomela:
Ka tloaelo, e nchafatsoa ka nako e sa reroang (00:00-6:00) letsatsi le letsatsi.
TEBELLO MOLAOLI
Karolo ea Taolo ea Likahare e fa basebelisi bokhoni ba ho sefa (ho lumella kapa ho thibela) sephethephethe ho latela DNS, URL, mantsoe a sehlooho, le tšebeliso.
DNS Filtering
Ho sefa sephethephethe ho ipapisitse le DNS, ea ho mojule oa Firewall → Taolo ea Likahare → Ho Filtering ea DNS. Tobetsa konopo ea "Eketsa" ho eketsa Sesefo sa DNS se secha joalo ka ha ho bonts'itsoe ka tlase:
Ebe, kenya lebitso la filthara ea DNS, lumella boemo, 'me u khethe ketso (Lumella kapa Thibela) ha e le bakeng sa Filtered DNS, ho na le likhetho tse peli:
Papali e bonolo: lebitso la domain le ts'ehetsa mabitso a marang-rang a maemo a mangata.
Wildcard: mantsoe a bohlokoa le wildcard * a ka kenngoa, wildcard * e ka eketsoa feela pele kapa ka mor'a lentsoe la sehlooho le kentsoeng. Bakeng sa mohlalaample: *.setšoantšo, litaba*, *litaba*. The * e bohareng e tšoaroa joalo ka sebopeho se tloaelehileng.
Ho hlahloba DNS e tlhotliloeng, basebelisi ba ka e fumana ho Overview leqepheng la kapa tlas'a lethathamo la Tšireletso joalokaha ho bontšitsoe ka tlase:
Web Ho sefa
Litlhophiso tsa Motheo - Web Ho sefa
Leqepheng, basebelisi ba ka nolofalletsa / ba tima lefatše lohle web ho sefa, ebe basebelisi ba ka nolofalletsa kapa ba tima web URL ho sefa, URL ho sefa sehlopha le ho sefa mantsoe a bohlokoa ka boikemelo le ho sefa li-HTTP URLs, ka kopo lumella "SSL Proxy".
URL Ho sefa
URL ho sefa ho thusa basebelisi ho sefa URL liaterese tse sebelisang papali e bonolo (lebitso la domain kapa aterese ea IP) kapa ho sebelisa Wildcard (mohlala, *example*).
Ho bopa a URL ho sefa, ea ho Firewall Module → Sefe ea Litaba → Web Leqephe la ho sefa → URL Sefa tab, ebe o tobetsa konopo ea "Add" joalokaha ho bontšitsoe ka tlase:
Hlalosa lebitso, ebe u fetola boemo ON, khetha ketso (Lumella, Thibela), 'me qetellong u hlalose URL ebang ke ho sebelisa lebitso le bonolo la domain, aterese ea IP (Mopi o bonolo), kapa ho sebelisa karete ea hlaha. Ka kopo sheba setšoantšo se ka tlase:
URL Sehlopha sa Filtering
Basebelisi ba boetse ba na le khetho ea ho sesefa feela ka aterese e itseng ea domain/IP kapa wildcard, empa hape le ho sefa ka mekhahlelo bakeng sa ex.ample Litlhaselo le Litšokelo, Batho ba baholo, joalo-joalo.
Ho thibela kapa ho lumella sehlopha sohle, tobetsa khetho ea pele moleng ebe u khetha All Lumella kapa Thibela Tsohle. Hape hoa khoneha ho thibela / ho lumella ka likaroloana joalo ka ha ho bonts'itsoe ka tlase:
Tlhophiso ea mantsoe a sehlooho
Ho sefa ha mantsoe a sehlooho ho thusa basebelisi ho sefa ba sebelisa polelo e tloaelehileng kapa Wildcard (mohlala, *example*).
Ho theha mantsoe a sefang, ea ho Firewall Module → Sefe ea Litaba → Web Leqephe la ho sefa → Leqephe la ho sefa mantsoe a sehlooho, ebe o tobetsa konopo ea "Eketsa" joalo ka ha ho bonts'itsoe ka tlase:
Hlalosa lebitso, ebe u fetola boemo ON, khetha ketso (Lumella, Thibela), 'me qetellong u hlalose litaba tse tlhotliloeng ebang u sebelisa polelo e tloaelehileng kapa karete ea hlaha. Ka kopo sheba setšoantšo se ka tlase:
Ha ho sefa ha mantsoe a sehlooho ho BUTSE 'me ketso e setetsoe ho Thibela. Haeba basebelisi ba leka ho fihlella bakeng sa example "YouTube" ho sebatli, ba tla tsebisoa ka tlhokomeliso ea firewall joalo ka ha ho bonts'itsoe ka tlase:
Example ea keywords_filtering ho Browser
Bakeng sa lintlha tse ling mabapi le tlhokomeliso, basebelisi ba ka ea ho mojule oa Firewall → Log ea Ts'ireletso.
URL Saeno Library
Leqepheng lena, basebelisi ba ka ntlafatsa Web Ho sefa lintlha tsa laeborari ea tekeno ka letsoho, ho ntlafatsa letsatsi le letsatsi, kapa ho etsa kemiso, ka kopo sheba setšoantšo se ka tlase:
Hlokomela:
Ka tloaelo, e nchafatsoa ka nako e sa reroang (00:00-6:00) letsatsi le letsatsi.
Tlhophiso ea Sesebelisoa
Litlhophiso tsa Motheo - Tlhophiso ea Ts'ebeliso
Leqepheng, basebelisi ba ka nolofalletsa / ba tima ho sefa lits'ebetso tsa lefats'e, ebe basebelisi ba ka khona ho etsa kapa ho tima ka mekhahlelo ea lisebelisoa.
Eya ho mojule wa Firewall → Taolo ya Dikahare → Tlhophiso ya Tshebediso, mme ho tab ya di-setting tsa motheo, etsa hore Application Filtering lefatšeng ka bophara, hape hoa khoneha ho nolofalletsa AI Recognition bakeng sa ho arola hantle.
Hlokomela:
ha AI Recognition e nolofalitsoe, li-algorithms tsa ho ithuta tse tebileng tsa AI li tla sebelisoa ho ntlafatsa ho nepahala le ho ts'epahala ha likarolo tsa kopo, tse ka jang CPU e ngata le lisebelisoa tsa memori.
Melao ea ho Filtering App
Ka har'a "App Filtering Rules Rules", basebelisi ba ka Lumella/Thibela ka sehlopha sa lisebelisoa joalo ka ha ho bonts'itsoe ka tlase:
Fetola Melao ea ho Sefa
Haeba sehlopha sa app se khethiloe, basebelisi ba ntse ba tla ba le boikhethelo ba ho tlola molao o akaretsang (mokhahlelo oa li-app) ka karolo ea melaoana ea ho sefa.
Bakeng sa mohlalaample, haeba karolo ea app ea Browsers e behiloe ho Block, joale re ka eketsa molao oa ho sefa ho lumella Opera Mini, ka tsela ena sehlopha sohle sa app ea sebatli se koetsoe ntle le Opera Mini.
Ho theha molao o fetelletseng oa Filtering, tobetsa konopo ea "Add" joalo ka ha ho bonts'itsoe ka tlase:
Ebe, hlakisa lebitso 'me u fetole boemo ON, beha ketso ho Lumella kapa Thibela' me qetellong u khethe lethathamong lisebelisoa tse tla lumelloa kapa li thijoe. Ka kopo sheba setšoantšo se ka tlase:
Laeborari ea Saeno - Tlhophiso ea Ts'ebeliso
Leqepheng lena, basebelisi ba ka ntlafatsa tlhahisoleseling ea laeborari ea Sieting ea kopo ka letsoho, ba ntlafatsa letsatsi le letsatsi kapa ba etsa kemiso, ka kopo sheba setšoantšo se ka tlase:
Hlokomela:
Ka tloaelo, e nchafatsoa ka nako e sa reroang (00:00-6:00) letsatsi le letsatsi.
SSL MOKHETHI
Moemeli oa SSL ke seva e sebelisang encryption ea SSL ho sireletsa phetiso ea data lipakeng tsa moreki le seva. E sebetsa ka mokhoa o pepeneneng, e encrypting le ho hlakola data ntle le ho bonoa. Haholo-holo, e netefatsa phano e bolokehileng ea tlhahisoleseling ka marang-rang.
Ha SSL Proxy e buletsoe, GCC601x(w) e tla sebetsa joalo ka Seva ea Proxy ea SSL bakeng sa bareki ba hokahaneng.
Litlhophiso tsa mantlha - Moemeli oa SSL
Ho bulela likarolo tse kang SSL Proxy, Web Sefa, kapa Anti-malware e thusa ho bona mefuta e itseng ea litlhaselo ho weblibaka, joalo ka ente ea SQL le litlhaselo tsa cross-site scripting (XSS). Litlhaselo tsena li leka ho ntša kotsi kapa ho utsoa tlhahisoleseding ho weblibaka.
Ha likarolo tsena li sebetsa, li hlahisa li-log tsa tlhokomeliso tlas'a Security Log.
Leha ho le joalo, ha likarolo tsena li buletsoe, basebelisi ba ka bona litemoso mabapi le setifikeiti ha ba bala web. Sena se etsahala hobane sebatli ha se bone setifikeiti se sebelisoang. Ho qoba litemoso tsena, basebelisi ba ka kenya setifikeiti ho sebatli sa bona. Haeba setifikeiti se sa tšepahale, lits'ebetso tse ling li kanna tsa se sebetse ka nepo ha u kena inthaneteng
Bakeng sa ho sefa ha HTTPS, basebelisi ba ka nolofalletsa moemeli oa SSL ka ho ea ho mojule oa Firewall → Proxy ea SSL → Litlhophiso tsa Motheo, ebe o fetola ON SSL proxy, ka mor'a ho khetha Setifikeiti sa CA ho tsoa lethathamong le theoha kapa ho tobetsa konopo ea "Add" ho theha setšoantšo. setifikeiti se secha sa CA. Ka kopo sheba lipalo le tafole e ka tlase:
]
Hore SSL Proxy e sebetse, basebelisi ba ka khoasolla setifikeiti sa CA ka ho tobetsa letšoao la khoaso joalokaha ho bontšitsoe ka tlase:
Ebe, setifikeiti sa CA se ka eketsoa ho lisebelisoa tse reriloeng tlasa litifikeiti tse tšepahalang.
Aterese ea Mohloli
Ha ho se liaterese tsa mohloli tse boletsoeng, likhokahano tsohle tse tsoang li tsamaisoa ka bo eona ka proxy ea SSL. Leha ho le joalo, ha u eketsa liaterese tse ncha tsa mohloli ka letsoho, ke tse kenyellelitsoeng ka ho khetheha feela tse tla hlahisoa ka SSL, ho netefatsa hore ho na le khetho e khethehileng e thehiloeng ho mekhoa e hlalositsoeng ke mosebedisi.
Lethathamo la Tokollo ea Baemeli ba SSL
Moemeli oa SSL o kenyelletsa ho thibela le ho hlahloba sephethephethe se patiloeng sa SSL/TLS pakeng tsa moreki le seva, seo hangata se etsoang molemong oa ts'ireletso le ho beha leihlo ka har'a marang-rang a likhoebo. Leha ho le joalo, ho na le maemo a itseng moo proxy ea SSL e ka 'nang ea se ke ea lakatseha kapa ea sebetsa ka ho khetheha weblibaka kapa libaka.
Lethathamo la likhaello le lumella basebelisi ho hlakisa aterese ea bona ea IP, domain, mefuta ea IP, le web mokhahlelo o tla lokolloa ho moemeli oa SSL.
Tobetsa konopo ea "Eketsa" ho kenyelletsa ho lokolloa ha SSL joalokaha ho bontšitsoe ka tlase:
Tlas'a khetho ea "Content", basebelisi ba ka eketsa litaba ka ho tobetsa konopo ea "+" ebe ba hlakola ka ho tobetsa "- aekhone" joalo ka ha ho bonts'itsoe ka tlase:
TS'IRELETSO LENAKA
Log
Leqepheng lena, lits'oants'o tsa ts'ireletso li tla thathamisoa ka lintlha tse ngata joalo ka Mohloli oa IP, sebopeho sa Mohloli, Mofuta oa Tlhaselo, Ketso, le Nako. Tobetsa konopo ea "Refresh" ho nchafatsa lenane le konopo ea "Export" ho jarolla lenane mochining oa lehae.
Basebelisi ba boetse ba na le khetho ea ho sefa lits'oants'o ka:
1. Nako
Hlokomela:
Li-log li bolokoa ka mokhoa oa kamehla ka matsatsi a 180. Ha sebaka sa disk se fihla moeling, li-log tsa ts'ireletso li tla hlakoloa ka bo eona.
2. Tlhaselo
Hlopha likenyelletso ka:
1. Mohloli oa IP
2. Mohloli Interface
3. Mofuta oa Tlhaselo
4. Ketso
Bakeng sa lintlha tse ling, tlanya ho "aekhone ea mohoo" tlas'a kholomo ea Lintlha joalokaha ho bontšitsoe ka holimo:
Lenane la tshireletso
Ha basebelisi ba tobetsa konopo ea "Export", e leng Excel file e tla kopitsoa mochineng oa habo bona. Ka kopo sheba setšoantšo se ka tlase:
Litsebiso tsa E-mail
Leqepheng, basebelisi ba ka khetha hore na ke litšokelo life tsa ts'ireletso tse tla tsebisoa ka ho sebelisa liaterese tsa E-mail. Khetha seo u batlang ho tsebisoa ka sona lenaneng.
Hlokomela:
Litlhophiso tsa lengolo-tsoibila li tlameha ho hlophisoa pele, tobetsa ho "Litlhophiso tsa Imeile" ho nolofalletsa le ho hlophisa litsebiso tsa E-mail. Ka kopo sheba setšoantšo se ka tlase:
E
Litlhaloso:
- Mohlala oa Sehlahisoa: GCC601X(W) Firewall
- Ts'ehetso: WAN, VLAN, VPN
- Likarolo: Leano la Melao, Melao ea Phatlalatso, NAT e tsoetseng pele
Lipotso tse atisang ho botsoa (FAQ)
P: Nka hlakola Lipalopalo tsa Tšireletso joang?
K: Tsamaisa holim'a letšoao la gear tlas'a Lipalopalo tsa Tšireletso ebe u tobetsa ho hlakola lipalo-palo.
Litokomane / Lisebelisoa
 |
GRANDSTREAM GCC601X(W) One Networking Solution Firewall [pdf] Bukana ea Mosebelisi GCC601X W, GCC601X W One Networking Solution Firewall, GCC601X W, One Networking Solution Firewall, Networking Solution Firewall, Solution Firewall, Firewall |
