{"id":853,"date":"2024-06-13T08:10:53","date_gmt":"2024-06-13T08:10:53","guid":{"rendered":"https:\/\/uat.vacif.com\/?p=853"},"modified":"2024-12-27T07:54:25","modified_gmt":"2024-12-27T07:54:25","slug":"giai-phap-tuong-lua-the-he-moi-palo-alto-networks","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/giai-phap-tuong-lua-the-he-moi-palo-alto-networks\/","title":{"rendered":"Gi\u1ea3i ph\u00e1p t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi Palo Alto Networks"},"content":{"rendered":"\n

1. Palo Alto Networks l\u00e0 g\u00ec ?<\/strong><\/h3>\n\n\n\n

Palo Alto Networks l\u00e0 c\u00f4ng ty an ninh m\u1ea1ng h\u00e0ng \u0111\u1ea7u th\u1ebf gi\u1edbi. C\u00e1c c\u00f4ng ngh\u1ec7 c\u1ee7a Palo Alto Networks mang l\u1ea1i cho 65.000 kh\u00e1ch h\u00e0ng doanh nghi\u1ec7p s\u1ee9c m\u1ea1nh \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u00e0ng t\u1ef7 ng\u01b0\u1eddi tr\u00ean to\u00e0n th\u1ebf gi\u1edbi.<\/p>\n\n\n\n

Palo Alto Networks l\u00e0 t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 ti\u1ebfp theo \u0111\u01b0\u1ee3c tri\u1ec3n khai t\u1ea1i nhi\u1ec1u \u0111i\u1ec3m trong doanh nghi\u1ec7p. V\u1edbi kh\u1ea3 n\u0103ng hi\u1ec3n th\u1ecb v\u00e0 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng d\u1ef1a tr\u00ean c\u00e1c \u1ee9ng d\u1ee5ng, ng\u01b0\u1eddi s\u1eed d\u1ee5ng, v\u00e0 n\u1ed9i dung, Palo Alto qu\u1ea3n l\u00fd c\u00e1c \u1ee9ng d\u1ee5ng m\u1ed9t c\u00e1ch an to\u00e0n, ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda, v\u00e0 \u0111\u01a1n gi\u1ea3n h\u00f3a c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng.<\/p>\n\n\n\n

2. T\u01b0\u1eddng l\u1eeda m\u1edbi l\u00e0 g\u00ec ?<\/h3>\n\n\n\n

T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi, l\u00e0 thi\u1ebft b\u1ecb t\u01b0\u1eddng l\u1eeda d\u1ef1a tr\u00ean x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng, x\u00e1c th\u1ef1c d\u1ef1a tr\u00ean \u1ee9ng d\u1ee5ng hay n\u1ed9i dung. V\u1edbi c\u01a1 ch\u1ebf n\u00e0y, ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb d\u1ec5 d\u00e0ng nh\u1eadn d\u1ea1ng c\u00e1c \u1ee9ng d\u1ee5ng, n\u1ed9i dung b\u00ean trong lu\u1ed3ng d\u1eef li\u1ec7u v\u1edbi c\u00e1c m\u1ee9c \u0111\u1ed9 nguy c\u01a1 \u0111e d\u1ecda xu\u1ea5t ph\u00e1t t\u1eeb ng\u01b0\u1eddi s\u1eed d\u1ee5ng n\u00e0o.<\/p>\n\n\n\n

V\u1eady t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi c\u00f3 nh\u1eefng \u0111\u1eb7c \u0111i\u1ec3m n\u1ed5i tr\u1ed9i g\u00ec m\u00e0 t\u01b0\u1eddng l\u1eeda truy\u1ec1n th\u1ed1ng kh\u00f4ng th\u1ec3 c\u00f3 ?<\/p>\n\n\n\n

3. Nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt v\u1edbi Firewall truy\u1ec1n th\u1ed1ng.<\/strong><\/h3>\n\n\n\n

L\u00e0 m\u00f4 h\u00ecnh ch\u00ednh y\u1ebfu \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ph\u1ed5 bi\u1ebfn tr\u00ean to\u00e0n c\u1ea7u, tuy nhi\u00ean m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt v\u1edbi firewall truy\u1ec1n th\u1ed1ng c\u00f3 m\u1ed9t s\u1ed1 nh\u01b0\u1ee3c \u0111i\u1ec3m nh\u01b0 sau :<\/p>\n\n\n\n

    \n
  • Kh\u00f4ng th\u1ec3 \u0111\u1ecdc hi\u1ec3u t\u1eebng lo\u1ea1i th\u00f4ng tin v\u00e0 ph\u00e2n t\u00edch n\u1ed9i dung t\u1ed1t hay x\u1ea5u c\u1ee7a n\u00f3, ch\u1ec9 c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n s\u1ef1 x\u00e2m nh\u1eadp c\u1ee7a nh\u1eefng ngu\u1ed3n th\u00f4ng tin kh\u00f4ng mong mu\u1ed1n nh\u01b0ng ph\u1ea3i x\u00e1c \u0111\u1ecbnh r\u00f5 c\u00e1c th\u00f4ng s\u1ed1 \u0111\u1ecba ch\u1ec9.<\/li>\n\n\n\n
  • Kh\u00f4ng th\u1ec3 ng\u0103n ch\u1eb7n m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng n\u1ebfu cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y kh\u00f4ng \u0111i qua n\u00f3, ch\u1eb3ng h\u1ea1n nh\u01b0 nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb b\u00ean trong.<\/li>\n\n\n\n
  • Kh\u00f4ng th\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng b\u1edfi virus, m\u00e3 \u0111\u1ed9c \u2026<\/li>\n\n\n\n
  • Ch\u1ec9 nh\u1eadn di\u1ec7n v\u00e0 ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c th\u00f4ng l\u01b0\u1ee3ng v\u1edbi giao th\u1ee9c v\u00e0 c\u1ed5ng d\u1ecbch v\u1ee5, nh\u01b0ng kh\u00f4ng nh\u1eadn di\u1ec7n \u0111\u01b0\u1ee3c \u1ee9ng d\u1ee5ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c \u1ee9ng d\u1ee5ng web s\u1eed d\u1ee5ng chung giao th\u1ee9c HTTP v\u00e0 c\u1ed5ng d\u1ecbch v\u1ee5 80.<\/li>\n<\/ul>\n\n\n\n

    V\u1edbi nh\u1eefng h\u1ea1n ch\u1ebf c\u1ee7a m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt v\u1edbi firewall truy\u1ec1n th\u1ed1ng, c\u00f9ng v\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd v\u00e0 kh\u00f4ng ng\u1eebng c\u1ee7a c\u00e1c k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng, y\u1ebfu c\u1ea7u ph\u1ea3i c\u00f3 m\u1ed9t m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c n\u00e2ng c\u1ea5p, t\u1ed1i \u01b0u v\u00e0 th\u00f4ng minh h\u01a1n n\u1eefa \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o an to\u00e0n cho h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc nh\u1eefng m\u1ed1i hi\u1ec3m h\u1ecda. T\u1eeb \u0111\u00f3 gi\u1ea3i ph\u00e1p t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi ra \u0111\u1eddi.<\/p>\n\n\n\n

    Thi\u1ebft b\u1ecb t\u01b0\u1eddng l\u1eeda Palo Alto Next-Generation Firewall v\u1edbi ki\u1ebfn tr\u00fac ti\u00ean ti\u1ebfn v\u00e0 m\u1ea1nh m\u1ebd, k\u1ebft h\u1ee3p c\u00f9ng ph\u1ea7n c\u1ee9ng chuy\u00ean bi\u1ec7t t\u1ed1c \u0111\u1ed9 cao, \u0111\u00e3 cung c\u1ea5p c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt v\u01b0\u1ee3t tr\u1ed9i, gi\u00fap kh\u1eafc ph\u1ee5c nh\u1eefng nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt firewall truy\u1ec1n th\u1ed1ng v\u00e0 \u0111\u00e1p \u1ee9ng t\u1ed1t h\u01a1n y\u00eau c\u1ea7u v\u1ec1 b\u1ea3o m\u1eadt trong th\u1eddi \u0111i\u1ec3m hi\u1ec7n t\u1ea1i, tr\u1edf th\u00e0nh m\u1ed9t trong nh\u1eefng gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt hi\u1ec7u qu\u1ea3 hi\u1ec7n nay. Palo Alto lu\u00f4n \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 cao v\u00e0 b\u1ed1n n\u0103m li\u00ean ti\u1ebfp (t\u1eeb 2011 \u0111\u1ebfn 2017) \u0111\u1ec1u n\u1eb1m trong nh\u00f3m d\u1eabn \u0111\u1ea7u v\u1ec1 xu th\u1ebf c\u00f4ng ngh\u1ec7, theo \u0111\u00e1nh gi\u00e1 c\u1ee7a Gartner.<\/p>\n\n\n\n

    4<\/strong>. T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi c\u00f3 nh\u1eefng \u0111\u1eb7c \u0111i\u1ec3m n\u1ed5i tr\u1ed9i g\u00ec ?<\/strong><\/h3>\n\n\n\n

    Firewall th\u1ebf h\u1ec7 m\u1edbi c\u00f3 nhi\u1ec1u \u0111\u1eb7c t\u00ednh cho ph\u00e9p nh\u00e0 qu\u1ea3n tr\u1ecb m\u1ea1ng kh\u1ea3 n\u0103ng ki\u1ec3m so\u00e1t to\u00e0n di\u1ec7n h\u1ec7 th\u1ed1ng m\u1ea1ng c\u1ee7a m\u00ecnh:<\/p>\n\n\n\n

    Nh\u1eadn d\u1ea1ng nh\u1eefng \u1ee9ng d\u1ee5ng trong h\u1ec7 th\u1ed1ng m\u00e0 kh\u00f4ng ph\u1ee5 thu\u1ed9c v\u00e0o c\u1ed5ng hay giao th\u1ee9c m\u1ea1ng, gi\u00fap nh\u1eadn di\u1ec7n ch\u00ednh x\u00e1c c\u0169ng nh\u01b0 b\u1eaft ch\u1eb7t c\u00e1c \u1ee9ng d\u1ee5ng th\u00f4ng minh c\u00f3 kh\u1ea3 n\u0103ng chuy\u1ec3n \u0111\u1ed5i port hay giao th\u1ee9c m\u1ea1ng \u0111\u1ec3 ho\u1ea1t \u0111\u1ed9ng nh\u1eb1m tr\u00e1nh s\u1ef1 ki\u1ec3m so\u00e1t c\u1ee7a c\u00e1c h\u1ec7 th\u1ed1ng b\u1ea3o m\u1eadt.<\/p>\n\n\n\n

    Cho ph\u00e9p tri\u1ec3n khai c\u00e1c ch\u00ednh s\u00e1ch d\u1ef1a tr\u00ean nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng ho\u1eb7c nh\u00f3m ng\u01b0\u1eddi d\u00f9ng ch\u1ee9 kh\u00f4ng ch\u1ec9 ki\u1ec3m tra \u0111\u1ecba ch\u1ec9 IP c\u1ee7a m\u1ea1ng.<\/p>\n\n\n\n

    T\u00edch h\u1ee3p c\u00f4ng ngh\u1ec7 ph\u00f2ng ch\u1ed1ng t\u1ea5n c\u00f4ng b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng \u1edf ch\u1ebf \u0111\u1ed9 th\u1eddi gian th\u1ef1c ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0 nh\u1eefng ph\u1ea7n m\u1ec1m nguy h\u1ea1i \u0111\u01b0\u1ee3c nh\u00fang v\u00e0o nh\u1eefng \u1ee9ng d\u1ee5ng c\u0169ng nh\u01b0 l\u1ed7 h\u1ed5ng v\u1ec1 b\u1ea3o m\u1eadt c\u1ee7a c\u00e1c \u1ee9ng d\u1ee5ng hay h\u1ec7 \u0111i\u1ec1u h\u00e0nh trong h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n

    Giao di\u1ec7n th\u00e2n thi\u1ec7n, gi\u00fap vi\u1ec7c qu\u1ea3n l\u00fd c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o v\u1ec7 cho h\u1ec7 th\u1ed1ng \u0111\u01a1n gi\u1ea3n h\u01a1n, c\u0169ng nh\u01b0 cho ph\u00e9p t\u00f9y bi\u1ebfn xu\u1ea5t c\u00e1c b\u00e1o c\u00e1o tr\u1ef1c quan chi ti\u1ebft g\u1eafn k\u1ebft gi\u1eefa ng\u01b0\u1eddi d\u00f9ng v\u1edbi \u1ee9ng d\u1ee5ng v\u00e0 c\u00e1c m\u1ed1i nguy c\u01a1 ti\u1ec1m t\u00e0ng \u2013 gi\u00fap nh\u00e0 qu\u1ea3n tr\u1ecb c\u00f3 \u0111\u01b0\u1ee3c c\u00e1i nh\u00ecn bao qu\u00e1t v\u00e0 gi\u00fap \u0111\u01b0a ra quy\u1ebft \u0111\u1ecbnh nhanh ch\u00f3ng v\u00e0 k\u1ecbp th\u1eddi h\u01a1n.<\/p>\n\n\n\n

    Ki\u1ebfn tr\u00fac \u0111a lu\u1ed3ng x\u1eed l\u00fd \u0111\u1ed3ng th\u1eddi gi\u00fap \u0111\u1ea3m b\u1ea3o hi\u1ec7u n\u0103ng t\u1ed5ng th\u1ec3 c\u1ee7a h\u1ec7 th\u1ed1ng \u0111\u1ebfn h\u00e0ng gigabit tr\u00ean gi\u00e2y, \u0111\u1ea3m b\u1ea3o \u0111\u1ed9 tr\u1ec5 l\u00e0 th\u1ea5p nh\u1ea5t ngay c\u1ea3 khi k\u00edch ho\u1ea1t t\u1ea5t c\u1ea3 c\u00e1c t\u00ednh n\u0103ng ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n

    5<\/strong>. T\u1ea1i sao l\u1ea1i ch\u1ecdn Palo Alto <\/strong>Networks<\/strong>?<\/strong><\/h3>\n\n\n\n

    Hi\u1ec7n nay c\u00e1c h\u00e3ng c\u00f4ng ngh\u1ec7 b\u1ea3o m\u1eadt \u0111\u1ec1u \u0111\u00e3 cho ra m\u1eaft c\u00e1c s\u1ea3n ph\u1ea9m t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi gi\u00fap ch\u00fang ta c\u00f3 th\u00eam nhi\u1ec1u l\u1ef1a ch\u1ecdn h\u01a1n nh\u01b0ng trong s\u1ed1 c\u00e1c h\u00e3ng b\u1ea3o m\u1eadt th\u00ec Palo Alto Networks mang \u0111\u1ebfn s\u1ef1 kh\u00e1c bi\u1ec7t trong c\u00f4ng ngh\u1ec7 v\u00e0 ki\u1ebfn tr\u00fac nh\u01b0 sau :<\/p>\n\n\n\n

      \n
    • Thi\u1ebft b\u1ecb t\u01b0\u1eddng l\u1eeda Palo Alto Next-Generation Firewall v\u1edbi ki\u1ebfn tr\u00fac ti\u00ean ti\u1ebfn v\u00e0 m\u1ea1nh m\u1ebd, k\u1ebft h\u1ee3p c\u00f9ng ph\u1ea7n c\u1ee9ng chuy\u00ean bi\u1ec7t t\u1ed1c \u0111\u1ed9 cao, \u0111\u00e3 cung c\u1ea5p c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt v\u01b0\u1ee3t tr\u1ed9i, gi\u00fap kh\u1eafc ph\u1ee5c nh\u1eefng nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt firewall truy\u1ec1n th\u1ed1ng v\u00e0 \u0111\u00e1p \u1ee9ng t\u1ed1t h\u01a1n y\u00eau c\u1ea7u v\u1ec1 b\u1ea3o m\u1eadt trong th\u1eddi \u0111i\u1ec3m hi\u1ec7n t\u1ea1i, tr\u1edf th\u00e0nh m\u1ed9t trong nh\u1eefng gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt hi\u1ec7u qu\u1ea3 hi\u1ec7n nay. Palo Alto lu\u00f4n \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 cao v\u00e0 b\u1ed1n n\u0103m li\u00ean ti\u1ebfp (t\u1eeb 2011 \u0111\u1ebfn 2017) \u0111\u1ec1u n\u1eb1m trong nh\u00f3m d\u1eabn \u0111\u1ea7u v\u1ec1 xu th\u1ebf c\u00f4ng ngh\u1ec7, theo \u0111\u00e1nh gi\u00e1 c\u1ee7a Gartner.<\/li>\n\n\n\n
    • V\u1edbi vi\u1ec7c h\u1ed7 tr\u1ee3 c\u00f9ng l\u00fac nhi\u1ec1u m\u00f4 h\u00ecnh tri\u1ec3n khai tr\u00ean c\u00f9ng 1 thi\u1ebft b\u1ecb: Tap Mode (monitoring), Virtual Wire Mode (in-line), L2 Mode, L3 Mode, kh\u00e1ch h\u00e0ng s\u1ebd r\u1ea5t linh ho\u1ea1t trong vi\u1ec7c tri\u1ec3n khai c\u0169ng nh\u01b0 gi\u00fap t\u1ed1i \u01b0u v\u00e0 b\u1ea3o to\u00e0n chi ph\u00ed \u0111\u1ea7u t\u01b0 v\u00e0 v\u1eadn h\u00e0nh gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng.<\/li>\n\n\n\n
    • V\u1edbi ki\u1ebfn tr\u00fac x\u1eed l\u00fd song song m\u1ed9t giai \u0111o\u1ea1n \u2013 Single-Pass Parallel Processing\u2122 (SP3) Architecture \u2013 H\u1ed7 tr\u1ee3 \u0111\u1ed3ng th\u1eddi tr\u00ean c\u1ea3 ph\u1ea7n c\u1ee9ng v\u00e0 ph\u1ea7n m\u1ec1m: th\u1ef1c thi song song m\u1ed9t giai \u0111o\u1ea1n t\u1ea5t c\u1ea3 c\u00e1c t\u00ednh n\u0103ng App-ID, User-ID, Content-ID c\u0169ng nh\u01b0 c\u00f3 chip x\u1eed l\u00fd chuy\u00ean d\u1ee5ng (FPGA) cho t\u1eebng t\u00e1c v\u1ee5 ri\u00eang bi\u1ec7t s\u1ebd gi\u00fap \u0111\u1ea3m b\u1ea3o hi\u1ec7u n\u0103ng x\u1eed l\u00fd t\u1ed1c \u0111\u1ed9 cao v\u1edbi \u0111\u1ed9 tr\u1ec5 th\u1ea5p nh\u1ea5t. Chip x\u1eed l\u00fd chuy\u00ean d\u1ee5ng s\u1eed d\u1ee5ng c\u00f4ng ngh\u1ec7 FPGA cho ph\u00e9p t\u00e1i l\u1eadp tr\u00ecnh m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i thay th\u1ebf ph\u1ea7n c\u1ee9ng, gi\u00fap t\u0103ng c\u01b0\u1eddng s\u1ef1 \u1ed5n \u0111\u1ecbnh c\u1ee7a h\u1ec7 th\u1ed1ng v\u00e0 c\u00f3 th\u1eddi gian \u0111\u00e1p \u1ee9ng nhanh h\u01a1n nhi\u1ec1u so v\u1edbi gi\u1ea3i ph\u00e1p truy\u1ec1n th\u1ed1ng.<\/li>\n\n\n\n
    • Ch\u1ec9 c\u1ea7n m\u1ed9t thi\u1ebft l\u1eadp an ninh (one security policy) \u0111\u1ed3ng nh\u1ea5t bao g\u1ed3m to\u00e0n b\u1ed9 c\u00e1c t\u00e1c v\u1ee5, gi\u00fap kh\u00e1ch h\u00e0ng \u0111\u01a1n gi\u1ea3n h\u00f3a to\u00e0n b\u1ed9 thi\u1ebft l\u1eadp an ninh c\u1ee7a m\u00ecnh c\u0169ng nh\u01b0 \u0111\u01b0a ra \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp an ninh ch\u1ee7 \u0111\u1ed9ng v\u1edbi vi\u1ec7c ch\u1ec9 cho ph\u00e9p c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c ph\u00ea duy\u1ec7t m\u1edbi \u0111\u01b0\u1ee3c v\u1eadn h\u00e0nh trong h\u1ec7 th\u1ed1ng v\u00e0 t\u1ef1 \u0111\u1ed9ng t\u1eeb ch\u1ed1i, c\u1ea5m truy c\u1eadp \u0111\u1ed1i v\u1edbi c\u00e1c ph\u1ea7m m\u1ec1m kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00ea duy\u1ec7t. \u0110\u1ed3ng th\u1eddi s\u1ebd gi\u00fap kh\u00e1ch h\u00e0ng gi\u1ea3m thi\u1ec3u nguy c\u01a1 sai s\u00f3t trong thi\u1ebft l\u1eadp an ninh v\u00e0 gi\u1ea3m thi\u1ec3u c\u00e1c l\u1ed7 h\u1ed5ng an ninh t\u1ed3n t\u1ea1i \u1edf gi\u1ea3i ph\u00e1p truy\u1ec1n th\u1ed1ng.<\/li>\n\n\n\n
    • T\u00e1ch bi\u1ec7t kh\u1ed1i \u0111i\u1ec1u khi\u1ec3n (control plane) \/ x\u1eed l\u00fd d\u1eef li\u1ec7u (data plane) tr\u00ean ki\u1ebfn tr\u00fac ph\u1ea7n c\u1ee9ng gi\u00fap h\u1ec7 th\u1ed1ng c\u00f3 t\u00ednh s\u1eb5n s\u00e0ng cao v\u00e0 kh\u00f4ng b\u1ecb gi\u00e1n \u0111o\u1ea1n khi th\u00f4ng l\u01b0\u1ee3ng qua kh\u1ed1i x\u1eed l\u00fd d\u1eef li\u1ec7u t\u0103ng \u0111\u1ed9t bi\u1ebfn.<\/li>\n\n\n\n
    • V\u1edbi giao di\u1ec7n gi\u00e1m s\u00e1t ACC (Applocation Command Center), ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb an ninh m\u1ea1ng c\u00f3 th\u1ec3 gi\u00e1m s\u00e1t to\u00e0n b\u1ed9 c\u00e1c \u1ee9ng d\u1ee5ng \u0111ang ch\u1ea1y trong h\u1ec7 th\u1ed1ng, c\u00e1c nguy c\u01a1 an ninh m\u1ea1ng v\u1edbi c\u00e1c th\u00f4ng tin chi t\u1ebft (v\u00ed d\u1ee5 nh\u01b0 virus, spyware, l\u1ed7 h\u1ed5ng \u1ee9ng d\u1ee5ng v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh, m\u1ea1ng botnet\u2026) ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c t\u1ea5n c\u00f4ng truy c\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng c\u0169ng nh\u01b0 c\u00f3 th\u1ec3 truy c\u00e2p ngay l\u1eadp t\u1ee9c \u0111\u1ebfn c\u00e1c ph\u1ea7n log chi ti\u1ebft c\u00f3 li\u00ean quan \u0111\u1ec3 c\u00f3 c\u00e1c th\u00f4ng tin chuy\u00ean s\u00e2u gi\u00fap cho vi\u1ec7c \u0111\u01b0a ra c\u00e1c k\u1ebf ho\u1ea1ch x\u1eed l\u00fd s\u1ef1 c\u1ed1 \u0111\u01b0\u1ee3c ch\u00ednh x\u00e1c.<\/li>\n\n\n\n
    • Gi\u1ea3i ph\u00e1p WildFire gi\u00fap ph\u00f2ng ch\u1ed1ng ch\u1ee7 \u0111\u1ed9ng c\u00e1c nguy c\u01a1 APT (unknown malware) v\u1edbi th\u1eddi gian \u0111\u00e1p \u1ee9ng nhanh t\u1eeb 30 \u0111\u1ebfn 60 ph\u00fat gi\u00fap gi\u1ea3m thi\u1ec3u c\u00e1c nguy c\u01a1 t\u1ea5n c\u00f4ng zero-day. \u0111\u1ed3ng th\u1eddi gi\u00fap c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng c\u00e1c m\u1eabu nh\u1eadn di\u1ec7n malware cho Threat Prevention v\u00e0 c\u1eadp nh\u1eadt c\u00e1c malware-sites cho b\u1ed9 l\u1ecdc URL filltering gi\u00fap cho kh\u00e1ch h\u00e0ng c\u00f3 \u0111\u01b0\u1ee3c m\u1ed9t s\u1ef1 b\u1ea3o v\u1ec7 to\u00e0n di\u1ec7n v\u00e0 ch\u1ee7 \u0111\u1ed9ng tr\u01b0\u1edbc c\u00e1c nguy c\u01a1 m\u00e3 \u0111\u1ed9c th\u1ebf h\u1ec7 m\u1edbi.<\/li>\n\n\n\n
    • Kh\u1ea3 n\u0103ng ph\u00e2n lo\u1ea1i b\u0103ng th\u00f4ng (QoS) \u0111\u1ebfn t\u1eebng ng\u01b0\u1eddi d\u00f9ng v\u00e0 \u1ee9ng d\u1ee5ng c\u0169ng nh\u01b0 gi\u00e1m s\u00e1t b\u0103ng th\u00f4ng theo th\u1eddi gian th\u1ef1c gi\u00fap kh\u00e1ch h\u00e0ng ch\u1ee7 \u0111\u1ed9ng d\u00e0nh b\u0103ng th\u00f4ng cho c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 ng\u01b0\u1eddi d\u00f9ng\/nh\u00f3m ng\u01b0\u1eddi d\u00f9ng c\u00f3 m\u1ee9c \u0111\u1ed9 \u01b0u ti\u00ean cao, \u0111\u1ea3m b\u1ea3o hi\u1ec3u n\u0103ng s\u1eed d\u1ee5ng trong th\u1eddi gian th\u1ef1c.<\/li>\n\n\n\n
    • Vi\u1ec7c b\u1ea3o v\u1ec7 truy c\u1eadp t\u1eeb xa th\u00f4ng qua GlobalProtect h\u1ed7 tr\u1ee3 c\u1ea3 IPSec v\u00e0 SSL VNP v\u00e0 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p s\u1eb5n tr\u00ean thi\u1ebft b\u1ecb s\u1ebd gi\u00fap kh\u00e1ch h\u00e0ng kh\u00f4ng c\u1ea7n ph\u1ea3i t\u1ed1n th\u00eam chi ph\u00ed mua license cho ng\u01b0\u1eddi s\u1eed d\u1ee5ng SSL VPN, t\u1ed1i \u01b0u v\u00e0 b\u1ea3o to\u00e0n chi ph\u00ed \u0111\u1ea7u t\u01b0.<\/li>\n\n\n\n
    • V\u1edbi vi\u1ec7c b\u1ea3o v\u1ec7 to\u00e0n di\u1ec7n v\u00e0 nh\u1ea5t qu\u00e1n cho c\u1ea3 m\u00f4i tr\u01b0\u1eddng v\u1eadt l\u00fd v\u00e0 \u1ea3o h\u00f3a, kh\u1ea3 n\u0103ng qu\u1ea3n tr\u1ecb v\u00e0 gi\u00e1m s\u00e1t t\u1eadp trung \u0111\u1ed3ng nh\u1ea5t cho c\u1ea3 hai m\u00f4i tr\u01b0\u1eddng, ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb an ninh c\u00f3 th\u1ec3 \u0111\u1ed3ng nh\u1ea5t c\u00e1c thi\u1ebft l\u1eadp tr\u00ean c\u1ea3 hai m\u00f4i tr\u01b0\u1eddng v\u00e0 ch\u1ee7 \u0111\u1ed9ng vi\u1ec7c qu\u1ea3n l\u00fd an ninh c\u0169ng nh\u01b0 t\u00e1ch bi\u1ec7t r\u00f5 r\u00e0ng tr\u00e1ch nhi\u1ec7m tr\u00ean m\u00f4i tr\u01b0\u1eddng \u1ea3o h\u00f3a v\u1ed1n \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp v\u00e0 qu\u1ea3n l\u00fd b\u1edfi ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb m\u00e1y ch\u1ee7 \u1ea3o h\u00f3a \u1edf gi\u1ea3i ph\u00e1p truy\u1ec1n th\u1ed1ng.<\/li>\n\n\n\n
    • V\u1edbi kh\u1ea3 n\u0103ng t\u1ea1o b\u1ea3o c\u00e1o n\u00e2ng cao (advanced reporting) \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p s\u1eb5n tr\u00ean thi\u1ebft b\u1ecb, kh\u00e1ch h\u00e0ng kh\u00f4ng c\u1ea7n ph\u1ea3i t\u1ed1n th\u00eam chi ph\u00ed mua th\u00eam module ho\u1eb7c ph\u1ea7n m\u1ec1m ri\u00eang \u0111\u1ec3 t\u1ea1o b\u00e1o c\u00e1o n\u00e2ng cao nh\u01b0 \u1edf gi\u1ea3i ph\u00e1p truy\u1ec1n th\u1ed3ng.<\/li>\n\n\n\n
    • Palo Alto c\u00f3 kh\u1ea3 n\u0103ng ki\u1ec3m so\u00e1t \u1ee9ng d\u1ee5ng, ng\u01b0\u1eddi d\u00f9ng, v\u00e0 n\u1ed9i dung v\u1edbi s\u1ef1 k\u1ebft h\u1ee3p s\u1eed d\u1ee5ng ba c\u00f4ng ngh\u1ec7 nh\u1eadn d\u1ea1ng ti\u00ean ti\u1ebfn: App-ID, User-ID and Content-ID.<\/li>\n\n\n\n
    • S\u1eed d\u1ee5ng b\u1ed1n c\u01a1 ch\u1ebf ph\u00e2n lo\u1ea1i d\u1eef li\u1ec7u kh\u00e1c nhau, App-ID\u2122 nh\u1eadn d\u1ea1ng ch\u00ednh x\u00e1c c\u00e1c \u1ee9ng d\u1ee5ng n\u00e0o th\u1ef1c s\u1ef1 \u0111ang ch\u1ea1y tr\u00ean h\u1ea1 t\u1ea7ng m\u1ea1ng m\u00e0 kh\u00f4ng ph\u1ee5 thu\u1ed9c v\u00e0o \u1ee9ng d\u1ee5ng \u0111\u00f3 \u0111ang ch\u1ea1y tr\u00ean c\u1ed5ng d\u1ecbch v\u1ee5 g\u00ec, giao th\u1ee9c n\u00e0o, hay \u0111\u00e3 \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a SSL hay kh\u00f4ng.<\/li>\n\n\n\n
    • Content-ID nh\u01b0 l\u00e0 m\u1ed9t engine qu\u00e9t d\u1ef1a tr\u00ean lu\u1ed3ng d\u1eef li\u1ec7u (stream-based engine) gi\u00fap ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c m\u1ed1i hi\u1ec3m h\u1ecda v\u00e0 gi\u1edbi h\u1ea1n vi\u1ec7c chuy\u1ec3n m\u1ed9t c\u00e1ch tr\u00e1i ph\u00e9p c\u00e1c t\u1eadp tin d\u1eef li\u1ec7u, n\u1ed9i dung nh\u1ea1y c\u1ea3m.<\/li>\n\n\n\n
    • User-ID cho ph\u00e9p nh\u00e0 qu\u1ea3n tr\u1ecb k\u1ebft h\u1ee3p th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng v\u1edbi \u1ee9ng d\u1ee5ng, t\u1ea1o policy, log d\u1eef li\u1ec7u v\u00e0 b\u00e1o c\u00e1o. H\u01a1n th\u1ebf n\u1eefa, \u0111i\u1ec1u n\u00e0y \u0111\u00e3 gi\u00fap cho Palo Alto  gi\u1ea3i quy\u1ebft \u0111\u01b0\u1ee3c th\u00e1ch th\u1ee9c v\u1ec1 m\u1eb7t t\u00edch h\u1ee3p v\u00e0 kh\u1ea3 n\u0103ng x\u1eed l\u00fd m\u00e0 r\u1ea5t nhi\u1ec1u c\u00e1c NG-Firewall kh\u00e1c ch\u01b0a gi\u1ea3i quy\u1ebft \u0111\u01b0\u1ee3c.<\/li>\n<\/ul>\n\n\n\n

      6<\/strong>. H\u00ecnh ch\u1ee5p th\u1ef1c t\u1ebf s\u1ea3n ph\u1ea9m c\u1ee7a Palo Alto Networks.<\/strong><\/h3>\n\n\n\n

      D\u01b0\u1edbi \u0111\u00e2y l\u00e0 h\u00ecnh \u1ea3nh th\u1ef1c t\u1ebf thi\u1ebft b\u1ecb Palo Alto PA-220<\/p>\n\n\n

      \n
      \"\"<\/figure>\n<\/div>\n\n
      \n
      \"\"<\/figure>\n<\/div>\n\n\n
        \n
      • T\u00fai nh\u1ef1a \u0111i k\u00e8m bao g\u1ed3m D\u00e2y v\u00e0 Adapter s\u1ea1c, d\u00e2y c\u00e1p console micro USB, c\u00e1c thanh ray v\u00e0 \u1ed1c v\u00edt,  d\u00e2y c\u00e1p m\u1ea1ng Ethernet c\u00f9ng s\u00e1ch h\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng.<\/li>\n<\/ul>\n\n\n
        \n
        \"\"<\/figure>\n<\/div>\n\n\n
          \n
        • Thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf nh\u1ecf g\u1ecdn. V\u1ecf l\u00e0m b\u1eb1ng kim lo\u1ea1i \u0111\u01b0\u1ee3c s\u01a1n t\u0129nh \u0111i\u1ec7n m\u00e0u xanh.<\/li>\n<\/ul>\n\n\n
          \n
          \"\"<\/figure>\n<\/div>\n\n\n
            \n
          • M\u1eb7t tr\u01b0\u1edbc c\u1ee7a thi\u1ebft b\u1ecb g\u1ed3m c\u00f3 t\u00ean c\u1ee7a nh\u00e0 s\u1ea3n xu\u1ea5t v\u00e0 logo v\u00e0 t\u00ean s\u1ea3n ph\u1ea9m Palo Alto PA-220, ph\u00eda d\u01b0\u1edbi b\u00ean ph\u1ea3i l\u00e0 c\u00e1c \u0111\u00e8n t\u00edn hi\u1ec7u \u0111\u1ec3 ch\u1ec9 tr\u1ea1ng th\u00e1i ho\u1ea1t \u0111\u1ed9ng c\u1ee7a thi\u1ebft b\u1ecb.<\/li>\n\n\n\n
          • Ngo\u00e0i ra c\u00f2n c\u00e1c c\u1ed5ng k\u1ebft n\u1ed1i nh\u01b0 sau :\n
              \n
            • 8 c\u1ed5ng ethernet \u0111\u01b0\u1ee3c \u0111\u00e1nh s\u1ed1 t\u1eeb 1 \u0111\u1ebfn 8.<\/li>\n\n\n\n
            • 1 c\u1ed5ng MGT RJ45 \u0111\u1ec3 k\u1ebft n\u1ed1i \u0111\u1ebfn giao \u0111i\u1ec7n qu\u1ea3n tr\u1ecb web.<\/li>\n\n\n\n
            • 2 c\u1ed5ng console 1 c\u1ed5ng RJ45 v\u00e0 1 c\u1ed5ng Micro USB.<\/li>\n\n\n\n
            • 1 c\u1ed5ng USB.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n
              \n
              \"\"<\/figure>\n<\/div>\n\n\n
                \n
              • Hai b\u00ean c\u1ee7a thi\u1ebft b\u1ecb l\u00e0 c\u00e1c l\u1ed7 th\u00f4ng gi\u00f3 \u0111\u1ec3 gi\u1ea3m t\u1ea3i nhi\u1ec7t. Thi\u1ebft b\u1ecb kh\u00f4ng d\u00f9ng qu\u1ea1t n\u00ean s\u1ebd kh\u00f4ng g\u00e2y ti\u1ebfng \u1ed3n trong l\u00fac ho\u1ea1t \u0111\u1ed9ng.<\/li>\n<\/ul>\n\n\n
                \n
                \"\"<\/figure>\n<\/div>\n\n
                \n
                \"\"<\/figure>\n<\/div>\n\n\n
                  \n
                • M\u1eb7t sau c\u1ee7a thi\u1ebft b\u1ecb g\u1ed3m l\u1ed7 th\u00f4ng gi\u00f3 v\u00e0 2 ch\u00e2n c\u1ea5m ngu\u1ed3n \u0111\u01b0\u1ee3c \u0111\u00e1nh d\u1ea5u l\u00e0 PWR1 v\u00e0 PWR2 d\u00f9ng \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi ngu\u1ed3n \u0111i\u1ec7n.<\/li>\n<\/ul>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  7<\/strong>. C\u00e1c t\u00ednh n\u0103ng n\u1ed5i b\u1eadt c\u1ee7a Palo Alto<\/strong><\/h3>\n\n\n\n

                  7.1 T\u00ednh n\u0103ng nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng UserID<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  D\u1ef1a tr\u00ean th\u00f4ng tin \u1ee9ng d\u1ee5ng \u0111\u1ec3 x\u1eed l\u00fd, h\u1ed7 tr\u1ee3 nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng v\u1edbi vi\u1ec7c h\u1ed7 tr\u1ee3 s\u1ed1 l\u01b0\u1ee3ng giao th\u1ee9c \u0111\u1ec3 nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng, t\u00edch h\u1ee3p s\u1eb5n t\u00ednh n\u0103ng nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng tr\u00ean thi\u1ebft b\u1ecb, kh\u00f4ng ch\u1ec9 h\u1ed7 tr\u1ee3 l\u1ea5y th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng t\u1eeb AD, Exchange, LDAP\u2026 m\u00e0 c\u00f2n t\u1eeb syslog servers, c\u00e1c c\u00f4ng c\u1ee5 x\u00e1c th\u1ef1c hay tr\u1ef1c ti\u1ebfp t\u1eeb c\u1eeda s\u1ed5 Captive Portal cho ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp.<\/p>\n\n\n\n

                  7.2 T\u00ednh n\u0103ng ki\u1ec3m so\u00e1t v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u1eb1ng ContentID<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  Ki\u1ec3m so\u00e1t c\u00e1c d\u1eef li\u1ec7u m\u00e3 h\u00f3a m\u00e0 kh\u00f4ng l\u00e0m gi\u1ea3m hi\u1ec7u su\u1ea5t c\u1ee7a h\u1ec7 th\u1ed1ng. T\u00edch h\u1ee3p t\u00ednh n\u0103ng Threat Prevention v\u00e0o firewall v\u1edbi c\u00e1c t\u00ednh n\u0103ng: d\u00f2 t\u00ecm v\u00e0 ch\u1eb7n viruses, spyware, worms v\u00e0 l\u1ed7 h\u1ed5ng \u1ee9ng d\u1ee5ng;  ki\u1ec3m so\u00e1t vi\u1ec7c truy\u1ec1n file hay th\u00f4ng tin nh\u1ea1y c\u1ea3m ra kh\u1ecfi h\u1ec7 th\u1ed1ng;  th\u1ef1c hi\u1ec7n scan ngay khi packet \u0111\u1ea7u ti\u00ean \u0111\u1ebfn, l\u1ecdc file theo ch\u1ee7ng lo\u1ea1i, gi\u1ea3i n\u00e9n file n\u00e9n \u0111\u1ec3 nh\u1eadn d\u1ea1ng c\u00e1c file b\u00ean trong, nh\u1eadn d\u1ea1ng \u0111\u1ebfn c\u1ea3 n\u1ed9i dung b\u00ean trong file<\/p>\n\n\n\n

                  7.3 T\u00ednh n\u0103ng l\u1ecdc web b\u1eb1ng URL Filtering.<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  C\u00e1c t\u00ednh n\u0103ng l\u1ecdc c\u1ee7a Palo Alto hi\u1ec7u qu\u1ea3 h\u01a1n r\u1ea5t nhi\u1ec1u so v\u1edbi c\u00e1c t\u00ednh n\u0103ng l\u1ecdc c\u1ee7a Firewall truy\u1ec1n th\u1ed1ng. Palo Alto c\u00f2n t\u00edch h\u1ee3p c\u01a1 s\u1edf d\u1eef li\u1ec7u v\u1edbi h\u01a1n 20 tri\u1ec7u URL v\u1edbi tr\u00ean 76 categories v\u00e0o trong firewall cho ph\u00e9p ki\u1ec3m so\u00e1t vi\u1ec7c l\u1ecdc URL b\u1ed5 sung cho kh\u1ea3 n\u0103ng ki\u1ec3m so\u00e1t \u1ee9ng d\u1ee5ng d\u1ef1a tr\u00ean c\u00e1c \u0111i\u1ec1u lu\u1eadt b\u1ea3o v\u1ec7 doanh nghi\u1ec7p t\u1eeb vi\u1ec7c tu\u00e2n th\u1ee7 m\u1ed9t s\u1ed1 c\u00e1c ti\u00eau chu\u1ea9n c\u0169ng nh\u01b0 t\u0103ng n\u0103ng su\u1ea5t l\u00e0m vi\u1ec7c v\u00e0 gi\u1ea3m c\u00e1c nguy c\u01a1 g\u00e2y h\u1ea1i \u0111\u1ebfn ngu\u1ed3n l\u1ef1c c\u00f4ng ty.<\/p>\n\n\n\n

                  7.4 Truy c\u1eadp \u1ee9ng d\u1ee5ng m\u1ed9t c\u00e1ch an to\u00e0n v\u1edbi AppID<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  C\u00f4ng ngh\u1ec7 App-ID \u2122 tr\u00ean T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 ti\u1ebfp theo c\u1ee7a Palo Alto x\u00e1c \u0111\u1ecbnh ch\u00ednh x\u00e1c c\u00e1c \u1ee9ng d\u1ee5ng trong t\u1ea5t c\u1ea3 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp qua m\u1ea1ng, bao g\u1ed3m c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng l\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n, s\u1eed d\u1ee5ng c\u1ed5ng \u0111\u1ed9ng ho\u1eb7c c\u1ed1 g\u1eafng \u1ea9n d\u01b0\u1edbi b\u1ee9c m\u00e0n m\u00e3 h\u00f3a. App-ID cho ph\u00e9p b\u1ea1n hi\u1ec3u v\u00e0 ki\u1ec3m so\u00e1t c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 ch\u1ee9c n\u0103ng c\u1ee7a ch\u00fang, ch\u1eb3ng h\u1ea1n nh\u01b0 truy\u1ec1n ph\u00e1t video so v\u1edbi tr\u00f2 chuy\u1ec7n, t\u1ea3i l\u00ean so v\u1edbi t\u1ea3i xu\u1ed1ng, chia s\u1ebb m\u00e0n h\u00ecnh so v\u1edbi \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa, v.v.<\/p>\n\n\n\n

                  7.5 L\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a an to\u00e0n m\u00e0 kh\u00f4ng th\u1ecfa hi\u1ec7p quy\u1ec1n ri\u00eang t\u01b0 v\u1edbi Decryption<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  Ng\u01b0\u1eddi d\u00f9ng d\u00e0nh h\u01a1n 80% th\u1eddi gian cho c\u00e1c trang web v\u00e0 \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Th\u1eadt kh\u00f4ng may, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c m\u00e3 h\u00f3a \u0111\u1ec3 che gi\u1ea5u c\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1eeb c\u00e1c thi\u1ebft b\u1ecb b\u1ea3o m\u1eadt.<\/p>\n\n\n\n

                  T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 ti\u1ebfp theo c\u1ee7a Palo Alto s\u1eed d\u1ee5ng gi\u1ea3i m\u00e3 d\u1ef1a tr\u00ean ch\u00ednh s\u00e1ch \u0111\u1ec3 cho ph\u00e9p c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt gi\u1ea3i m\u00e3 l\u01b0u l\u01b0\u1ee3ng \u0111\u1ed9c h\u1ea1i nh\u1eb1m m\u1ee5c \u0111\u00edch ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda, nh\u01b0ng v\u1eabn b\u1ea3o v\u1ec7 quy\u1ec1n ri\u00eang t\u01b0 c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 hi\u1ec7u su\u1ea5t c\u00f3 th\u1ec3 d\u1ef1 \u0111o\u00e1n \u0111\u01b0\u1ee3c.<\/p>\n\n\n\n

                  7.6 Ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n m\u1ed1i nguy n\u00e2ng cao<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  Ng\u00e0y nay, h\u1ea7u h\u1ebft c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i hi\u1ec7n \u0111\u1ea1i, bao g\u1ed3m c\u00e1c bi\u1ebfn th\u1ec3 ransomware, s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt ti\u00ean ti\u1ebfn \u0111\u1ec3 v\u1eadn chuy\u1ec3n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ho\u1eb7c khai th\u00e1c th\u00f4ng qua c\u00e1c thi\u1ebft b\u1ecb v\u00e0 c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt m\u1ea1ng. T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 ti\u1ebfp theo c\u1ee7a ch\u00fang t\u00f4i x\u00e1c \u0111\u1ecbnh c\u00e1c k\u1ef9 thu\u1eadt l\u1ea3ng tr\u00e1nh v\u00e0 t\u1ef1 \u0111\u1ed9ng ch\u1ed1ng l\u1ea1i ch\u00fang b\u1eb1ng c\u00e1c c\u00f4ng ngh\u1ec7 ph\u00f2ng ng\u1eeba m\u1ed1i \u0111e d\u1ecda ti\u00ean ti\u1ebfn \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t th\u00f4ng qua m\u1ed9t \u0111\u1ed9ng c\u01a1 th\u1ed1ng nh\u1ea5t, duy nh\u1ea5t:<\/p>\n\n\n\n

                  D\u1ecbch v\u1ee5 Threat Protection ho\u1ea1t \u0111\u1ed9ng v\u1edbi T\u01b0\u1eddng l\u1eeda Th\u1ebf h\u1ec7 Ti\u1ebfp theo \u0111\u1ec3 cung c\u1ea5p c\u00e1c kh\u1ea3 n\u0103ng c\u1ee7a h\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp (IPS) nh\u1eb1m ng\u0103n ch\u1eb7n c\u00e1c khai th\u00e1c l\u1ed7 h\u1ed5ng, tr\u00e0n b\u1ed9 \u0111\u1ec7m v\u00e0 qu\u00e9t c\u1ed5ng; b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng, tr\u1ed1n tr\u00e1nh v\u00e0 ph\u01b0\u01a1ng ph\u00e1p che gi\u1ea5u; v\u00e0 cung c\u1ea5p c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 ch\u1ed1ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 ki\u1ec3m so\u00e1t l\u1ec7nh v\u00e0 ki\u1ec3m so\u00e1t (C2).<\/p>\n\n\n\n

                  D\u1ecbch v\u1ee5 URL Filtering ch\u1eb7n truy c\u1eadp v\u00e0o c\u00e1c trang web l\u1eeba \u0111\u1ea3o v\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u00e3 bi\u1ebft ngo\u00e0i vi\u1ec7c gi\u1ea3m c\u00e1c r\u1ee7i ro li\u00ean quan \u0111\u1ebfn vi\u1ec7c truy\u1ec1n t\u1ec7p v\u00e0 d\u1eef li\u1ec7u tr\u00e1i ph\u00e9p.<\/p>\n\n\n\n

                  \u2022 D\u1ecbch v\u1ee5 ng\u0103n ch\u1eb7n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i WildFire\u00ae s\u1eed d\u1ee5ng nhi\u1ec1u ph\u01b0\u01a1ng ph\u00e1p ph\u00e2n t\u00edch \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c m\u1ed1i \u0111e d\u1ecda ch\u01b0a bi\u1ebft, bao g\u1ed3m ph\u00e2n t\u00edch t\u0129nh v\u1edbi Machine Learning, ph\u00e2n t\u00edch \u0111\u1ed9ng. Ki\u1ebfn tr\u00fac d\u1ef1a tr\u00ean \u0111\u00e1m m\u00e2y c\u1ee7a n\u00f3 h\u1ed7 tr\u1ee3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n m\u1ed1i \u0111e d\u1ecda \u1edf quy m\u00f4 l\u1edbn tr\u00ean m\u1ea1ng, \u0111i\u1ec3m cu\u1ed1i v\u00e0 \u0111\u00e1m m\u00e2y c\u1ee7a b\u1ea1n \u0111\u1ec3 ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda \u0111\u00e3 bi\u1ebft v\u00e0 ch\u01b0a bi\u1ebft.<\/p>\n\n\n\n

                  \u2022 D\u1ecbch v\u1ee5 b\u1ea3o m\u1eadt DNS \u00e1p d\u1ee5ng ph\u00e2n t\u00edch d\u1ef1 \u0111o\u00e1n v\u00e0 Machine Learning \u0111\u1ec3 ph\u00e1 v\u1ee1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng DNS cho C2 ho\u1eb7c \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u. T\u00edch h\u1ee3p ch\u1eb7t ch\u1ebd v\u1edbi T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 ti\u1ebfp theo c\u1ee7a ch\u00fang t\u00f4i mang \u0111\u1ebfn cho b\u1ea1n s\u1ef1 b\u1ea3o v\u1ec7 t\u1ef1 \u0111\u1ed9ng v\u00e0 lo\u1ea1i b\u1ecf s\u1ef1 c\u1ea7n thi\u1ebft c\u1ee7a c\u00e1c c\u00f4ng c\u1ee5 \u0111\u1ed9c l\u1eadp.<\/p>\n\n\n\n

                  7.7 K\u1ebft n\u1ed1i t\u1eeb xa v\u1edbi Global Protect<\/h4>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n

                  V\u1edbi vi\u1ec7c h\u1ed7 tr\u1ee3 c\u1ea3 hai giao th\u1ee9c SSL v\u00e0 IPSec, Global Protect gi\u00fap cho ng\u01b0\u1eddi d\u00f9ng d\u1ec5 d\u00e0ng truy c\u1eadp \u0111\u1ebfn h\u1ec7 th\u1ed1ng t\u1eeb b\u1ea5t k\u00ec n\u01a1i \u0111\u00e2u thu\u1eadn ti\u1ec7n cho vi\u1ec7c l\u00e0m vi\u1ec7c t\u1eeb xa v\u00e0 b\u1ea3o m\u1eadt h\u01a1n.<\/p>\n\n\n\n

                  8. C\u00e1c subcriptions \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong thi\u1ebft b\u1ecb Palo Alto.<\/h3>\n\n\n\n

                  8.1 Threat Prevention<\/h4>\n\n\n\n

                  Threat Prevention cung c\u1ea5p: Antivirus, ch\u1ed1ng ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p (l\u1ec7nh-v\u00e0-ki\u1ec3m so\u00e1t), v\u00e0 b\u1ea3o v\u1ec7 l\u1ed7 h\u1ed5ng. \u0110\u01b0\u1ee3c x\u00e2y d\u1ef1ng trong danh s\u00e1ch \u0111\u1ed9ng b\u00ean ngo\u00e0i m\u00e0 b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ec3 b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a b\u1ea1n ch\u1ed1ng l\u1ea1i m\u00e1y ch\u1ee7 \u0111\u1ed9c h\u1ea1i. Kh\u1ea3 n\u0103ng x\u00e1c \u0111\u1ecbnh m\u00e1y ch\u1ee7 b\u1ecb nhi\u1ec5m c\u1ed1 g\u1eafng k\u1ebft n\u1ed1i v\u1edbi t\u00ean mi\u1ec1n \u0111\u1ed9c h\u1ea1i.<\/p>\n\n\n\n

                  8.2 DNS Security<\/h4>\n\n\n\n

                  Cung c\u1ea5p kh\u1ea3 n\u0103ng k\u1ebft xu\u1ea5t DNS N\u00e2ng cao b\u1eb1ng c\u00e1ch truy v\u1ea5n DNS Security, m\u1ed9t d\u1ecbch v\u1ee5 d\u1ef1a tr\u00ean \u0111\u00e1m m\u00e2y c\u00f3 kh\u1ea3 n\u0103ng t\u1ea1o ra c\u00e1c ch\u1eef k\u00fd DNS s\u1eed d\u1ee5ng ph\u00e2n t\u00edch ti\u00ean \u0111o\u00e1n v\u00e0 Machine Learning ti\u00ean ti\u1ebfn. D\u1ecbch v\u1ee5 n\u00e0y cung c\u1ea5p truy c\u1eadp \u0111\u1ea7y \u0111\u1ee7 \u0111\u1ec3 li\u00ean t\u1ee5c m\u1edf r\u1ed9ng DNS d\u1ef1a tr\u00ean m\u1ed1i \u0111e d\u1ecda th\u00f4ng minh s\u1ea3n xu\u1ea5t b\u1edfi Palo Alto Networks.<\/p>\n\n\n\n

                  \u0110\u1ec3 thi\u1ebft l\u1eadp b\u1ea3o m\u1eadt DNS, tr\u01b0\u1edbc ti\u00ean b\u1ea1n ph\u1ea3i mua v\u00e0 c\u00e0i \u0111\u1eb7t gi\u1ea5y ph\u00e9p ch\u1ed1ng m\u1ed1i \u0111e d\u1ecda.<\/p>\n\n\n\n

                  8.3 URL Filtering<\/h4>\n\n\n\n

                  Cung c\u1ea5p kh\u1ea3 n\u0103ng kh\u00f4ng ch\u1ec9 ki\u1ec3m so\u00e1t quy\u1ec1n truy c\u1eadp web, m\u00e0 c\u00f2n l\u00e0 c\u00e1ch ng\u01b0\u1eddi d\u00f9ng t\u01b0\u01a1ng t\u00e1c v\u1edbi n\u1ed9i dung tr\u1ef1c tuy\u1ebfn d\u1ef1a tr\u00ean c\u00e1c danh m\u1ee5c URL \u0111\u1ed9ng. B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u b\u1eb1ng c\u00e1ch ki\u1ec3m so\u00e1t c\u00e1c trang web m\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 g\u1eedi th\u00f4ng tin \u0111\u0103ng nh\u1eadp doanh nghi\u1ec7p c\u1ee7a h\u1ecd.<\/p>\n\n\n\n

                  \u0110\u1ec3 thi\u1ebft l\u1eadp URL Filtering, b\u1ea1n ph\u1ea3i mua v\u00e0 c\u00e0i \u0111\u1eb7t \u0111\u0103ng k\u00fd cho m\u1ed9t trong c\u00e1c c\u01a1 s\u1edf d\u1eef li\u1ec7u URL filtering \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3: PAN-DB ho\u1eb7c BrightCloud. V\u1edbi PAN-DB, b\u1ea1n c\u00f3 th\u1ec3 thi\u1ebft l\u1eadp quy\u1ec1n truy c\u1eadp v\u00e0o \u1ee9ng d\u1ee5ng \u0111\u00e1m m\u00e2y c\u00f4ng c\u1ed9ng PAN-DB ho\u1eb7c tr\u00ean \u0111\u00e1m m\u00e2y ri\u00eang c\u1ee7a PAN-DB.<\/p>\n\n\n\n

                  8.4 Wildfire<\/h4>\n\n\n\n

                  M\u1eb7c d\u00f9 h\u1ed7 tr\u1ee3 WildFire\u00ae c\u01a1 b\u1ea3n \u0111\u01b0\u1ee3c bao g\u1ed3m nh\u01b0 m\u1ed9t ph\u1ea7n c\u1ee7a gi\u1ea5y ph\u00e9p Threat Prevention, d\u1ecbch v\u1ee5 \u0111\u0103ng k\u00fd WildFire cung c\u1ea5p c\u00e1c d\u1ecbch v\u1ee5 n\u00e2ng cao cho c\u00e1c t\u1ed5 ch\u1ee9c y\u00eau c\u1ea7u b\u1ea3o hi\u1ec3m ngay l\u1eadp t\u1ee9c cho c\u00e1c m\u1ed1i \u0111e d\u1ecda, c\u1eadp nh\u1eadt ch\u1eef k\u00fd WildFire th\u01b0\u1eddng xuy\u00ean, chuy\u1ec3n ti\u1ebfp lo\u1ea1i t\u1ec7p n\u00e2ng cao (APK, PDF, Microsoft Office v\u00e0 Java Applet), c\u0169ng nh\u01b0 kh\u1ea3 n\u0103ng t\u1ea3i l\u00ean c\u00e1c t\u1ec7p b\u1eb1ng API WildFire. \u0110\u0103ng k\u00fd WildFire c\u0169ng \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u n\u1ebfu t\u01b0\u1eddng l\u1eeda c\u1ee7a b\u1ea1n s\u1ebd chuy\u1ec3n ti\u1ebfp t\u1ec7p \u0111\u1ebfn thi\u1ebft b\u1ecb WF-500 t\u1ea1i c\u01a1 s\u1edf.<\/p>\n\n\n\n

                  8.5 Auto Forcus<\/h4>\n\n\n\n

                  Cung c\u1ea5p ph\u00e2n t\u00edch \u0111\u1ed3 h\u1ecda c\u1ee7a nh\u1eadt k\u00fd l\u01b0u l\u01b0\u1ee3ng t\u01b0\u1eddng l\u1eeda v\u00e0 x\u00e1c \u0111\u1ecbnh c\u00e1c r\u1ee7i ro ti\u1ec1m \u1ea9n cho m\u1ea1ng c\u1ee7a b\u1ea1n b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin m\u1ed1i \u0111e d\u1ecda t\u1eeb c\u1ed5ng th\u00f4ng tin AutoF Focus. V\u1edbi gi\u1ea5y ph\u00e9p ho\u1ea1t \u0111\u1ed9ng, b\u1ea1n c\u0169ng c\u00f3 th\u1ec3 m\u1edf t\u00ecm ki\u1ebfm T\u1ef1 \u0111\u1ed9ng l\u1ea5y n\u00e9t d\u1ef1a tr\u00ean nh\u1eadt k\u00fd \u0111\u01b0\u1ee3c ghi tr\u00ean t\u01b0\u1eddng l\u1eeda.<\/p>\n\n\n\n

                  8.6 Cortex Data Lake<\/h4>\n\n\n\n

                  Cung c\u1ea5p l\u01b0u tr\u1eef v\u00e0 t\u1ed5ng h\u1ee3p nh\u1eadt k\u00fd t\u1eadp trung d\u1ef1a tr\u00ean \u0111\u00e1m m\u00e2y. D\u1ecbch v\u1ee5 ghi nh\u1eadt k\u00fd \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u ho\u1eb7c r\u1ea5t khuy\u1ebfn kh\u00edch \u0111\u1ec3 h\u1ed7 tr\u1ee3 m\u1ed9t s\u1ed1 d\u1ecbch v\u1ee5 ph\u00e2n ph\u1ed1i tr\u00ean n\u1ec1n t\u1ea3ng \u0111\u00e1m m\u00e2y kh\u00e1c, bao g\u1ed3m Magnifier, d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y GlobalProtect v\u00e0 d\u1ecbch v\u1ee5 qu\u1ea3n l\u00fd Trap.<\/p>\n\n\n\n

                  8.7 Global Protect<\/h4>\n\n\n\n

                  Cung c\u1ea5p c\u00e1c gi\u1ea3i ph\u00e1p di \u0111\u1ed9ng v\u00e0 \/ ho\u1eb7c kh\u1ea3 n\u0103ng VPN quy m\u00f4 l\u1edbn. Theo m\u1eb7c \u0111\u1ecbnh, b\u1ea1n c\u00f3 th\u1ec3 tri\u1ec3n khai c\u00e1c gateway v\u00e0 c\u1ed5ng GlobalProtect (kh\u00f4ng c\u1ea7n ki\u1ec3m tra HIP) m\u00e0 kh\u00f4ng c\u1ea7n gi\u1ea5y ph\u00e9p. N\u1ebfu b\u1ea1n mu\u1ed1n s\u1eed d\u1ee5ng c\u00e1c t\u00ednh n\u0103ng n\u00e2ng cao c\u1ee7a GlobalProtect (ki\u1ec3m tra HIP v\u00e0 c\u1eadp nh\u1eadt n\u1ed9i dung li\u00ean quan, \u1ee8ng d\u1ee5ng di \u0111\u1ed9ng GlobalProtect, k\u1ebft n\u1ed1i IPv6 ho\u1eb7c GlobalProtect Clientless VPN), b\u1ea1n s\u1ebd c\u1ea7n gi\u1ea5y ph\u00e9p GlobalProtect (\u0111\u0103ng k\u00fd) cho m\u1ed7i c\u1ed5ng.<\/p>\n\n\n\n

                  8.8 Virtual System<\/h4>\n\n\n\n

                  Gi\u1ea5y ph\u00e9p n\u00e0y l\u00e0 b\u1eaft bu\u1ed9c \u0111\u1ec3 cho ph\u00e9p h\u1ed7 tr\u1ee3 cho nhi\u1ec1u h\u1ec7 th\u1ed1ng \u1ea3o tr\u00ean t\u01b0\u1eddng l\u1eeda series PA-3200. Ngo\u00e0i ra, b\u1ea1n ph\u1ea3i mua gi\u1ea5y ph\u00e9p Virtual System n\u1ebfu b\u1ea1n mu\u1ed1n t\u0103ng s\u1ed1 l\u01b0\u1ee3ng h\u1ec7 th\u1ed1ng \u1ea3o v\u01b0\u1ee3t qu\u00e1 s\u1ed1 c\u01a1 s\u1edf \u0111\u01b0\u1ee3c cung c\u1ea5p theo m\u1eb7c \u0111\u1ecbnh tr\u00ean PA-5200 Series v\u00e0 t\u01b0\u1eddng l\u1eeda PA-7000 Series (s\u1ed1 c\u01a1 s\u1edf thay \u0111\u1ed5i theo n\u1ec1n t\u1ea3ng). T\u01b0\u1eddng l\u1eeda PA-800 Series, PA-220 v\u00e0 VM-Series kh\u00f4ng h\u1ed7 tr\u1ee3 c\u00e1c h\u1ec7 th\u1ed1ng \u1ea3o.<\/p>\n","protected":false},"excerpt":{"rendered":"

                  1. Palo Alto Networks l\u00e0 g\u00ec ? Palo Alto Networks l\u00e0 c\u00f4ng ty an ninh m\u1ea1ng h\u00e0ng \u0111\u1ea7u th\u1ebf gi\u1edbi. C\u00e1c c\u00f4ng ngh\u1ec7 c\u1ee7a Palo Alto Networks mang l\u1ea1i cho 65.000 kh\u00e1ch h\u00e0ng doanh nghi\u1ec7p s\u1ee9c m\u1ea1nh \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u00e0ng t\u1ef7 ng\u01b0\u1eddi tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. Palo Alto Networks l\u00e0 t\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 […]<\/p>\n","protected":false},"author":2,"featured_media":906,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"enable","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[4,80],"tags":[],"class_list":["post-853","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-giai-phap","category-huong-dan-tai-lieu","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/853","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=853"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/853\/revisions"}],"predecessor-version":[{"id":865,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/853\/revisions\/865"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/906"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=853"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=853"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}