{"id":8611,"date":"2023-11-19T15:37:06","date_gmt":"2023-11-19T08:37:06","guid":{"rendered":"https:\/\/vacif.com\/?p=8611"},"modified":"2023-11-19T15:37:06","modified_gmt":"2023-11-19T08:37:06","slug":"tim-hieu-ve-user-id-va-app-id-tren-dong-firewall-palo-alto","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/tim-hieu-ve-user-id-va-app-id-tren-dong-firewall-palo-alto\/","title":{"rendered":"T\u00ccM HI\u1ec2U V\u1ec0 USER ID V\u00c0 APP ID TR\u00caN D\u00d2NG FIREWALL PALO ALTO"},"content":{"rendered":"\n

T\u1ed5ng quan :<\/strong><\/p>\n\n\n\n

Firewall Palo Alto l\u00e0 m\u1ed9t trong nh\u1eefng gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng h\u00e0ng \u0111\u1ea7u, mang \u0111\u1ebfn kh\u1ea3 n\u0103ng ch\u1eb7n \u0111\u1ee9ng nh\u1eefng \u0111e d\u1ecda m\u1ea1ng ti\u1ec1m \u1ea9n. \u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1ch Palo Alto ho\u1ea1t \u0111\u1ed9ng v\u00e0 c\u1ea5u h\u00ecnh, ch\u00fang ta kh\u00f4ng th\u1ec3 b\u1ecf qua hai y\u1ebfu t\u1ed1 quan tr\u1ecdng: User ID v\u00e0 App ID. Trong b\u00e0i vi\u1ebft n\u00e0y, ch\u00fang ta s\u1ebd \u0111\u00e0o s\u00e2u v\u00e0o t\u00ecm hi\u1ec3u v\u1ec1 User ID v\u00e0 App ID tr\u00ean d\u00f2ng Firewall Palo Alto, kh\u00e1m ph\u00e1 c\u00e1ch ch\u00fang \u0111\u00f3ng vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c \u0111\u1ea3m b\u1ea3o an to\u00e0n cho h\u1ec7 th\u1ed1ng m\u1ea1ng c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n

M\u1ee5c l\u1ee5c :<\/strong><\/p>\n\n\n\n

I. App ID Palo Alto<\/strong><\/p>\n\n\n\n

1. \u0110\u1ecbnh ngh\u0129a v\u1ec1 APP ID<\/strong><\/p>\n\n\n\n

2. C\u00e1c App-ID x\u00e1c \u0111\u1ecbnh c\u00e1c \u1ee9ng d\u1ee5ng<\/strong><\/p>\n\n\n\n

3. \u01afu \u0111i\u1ec3m c\u1ee7a App-ID<\/strong><\/p>\n\n\n\n

II. User-ID Palo Alto<\/strong><\/p>\n\n\n\n

1. \u0110\u1ecbnh ngh\u0129a v\u1ec1 User-ID<\/strong><\/p>\n\n\n\n

2. C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a User-ID<\/strong><\/p>\n\n\n\n

3. \u01afu \u0111i\u1ec3m c\u1ee7a User ID<\/strong><\/p>\n\n\n\n

N\u1ed9i dung b\u00e0i vi\u1ebft :<\/strong><\/p>\n\n\n\n

I. App ID Palo Alto<\/strong><\/p>\n\n\n\n

1. \u0110\u1ecbnh ngh\u0129a v\u1ec1 APP ID<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

App-ID l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng ph\u00e2n lo\u1ea1i \u1ee9ng d\u1ee5ng \u0111\u1ed9c quy\u1ec1n c\u1ee7a Palo Alto Networks, c\u00f3 th\u1ec3 x\u00e1c \u0111\u1ecbnh b\u1ea5t k\u1ef3 \u1ee9ng d\u1ee5ng n\u00e0o, b\u1ea5t k\u1ec3 c\u1ed5ng, giao th\u1ee9c, m\u00e3 h\u00f3a hay c\u00e1c th\u1ee7 thu\u1eadt tr\u1ed1n tr\u00e1nh m\u00e0 \u1ee9ng d\u1ee5ng s\u1eed d\u1ee5ng. App-ID s\u1eed d\u1ee5ng nhi\u1ec1u c\u01a1 ch\u1ebf ph\u00e2n lo\u1ea1i, bao g\u1ed3m ch\u1eef k\u00fd \u1ee9ng d\u1ee5ng, gi\u1ea3i m\u00e3 giao th\u1ee9c \u1ee9ng d\u1ee5ng v\u00e0 ph\u01b0\u01a1ng ph\u00e1p heuristic, \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ch\u00ednh x\u00e1c c\u00e1c \u1ee9ng d\u1ee5ng.<\/p>\n\n\n\n

2. C\u00e1c App-ID x\u00e1c \u0111\u1ecbnh c\u00e1c \u1ee9ng d\u1ee5ng<\/strong><\/p>\n\n\n\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 c\u00e1ch App-ID x\u00e1c \u0111\u1ecbnh c\u00e1c \u1ee9ng d\u1ee5ng ch\u1ea1y tr\u00ean m\u1ea1ng c\u1ee7a b\u1ea1n: <\/strong><\/p>\n\n\n\n

L\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c so kh\u1edbp v\u1edbi ch\u00ednh s\u00e1ch \u0111\u1ec3 ki\u1ec3m tra xem n\u00f3 c\u00f3 \u0111\u01b0\u1ee3c ph\u00e9p tr\u00ean m\u1ea1ng hay kh\u00f4ng. Sau \u0111\u00f3, c\u00e1c ch\u1eef k\u00fd \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng cho l\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c ph\u00e9p \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh \u1ee9ng d\u1ee5ng d\u1ef1a tr\u00ean c\u00e1c thu\u1ed9c t\u00ednh \u1ee9ng d\u1ee5ng duy nh\u1ea5t v\u00e0 c\u00e1c \u0111\u1eb7c \u0111i\u1ec3m giao d\u1ecbch li\u00ean quan. Ch\u1eef k\u00fd c\u0169ng x\u00e1c \u0111\u1ecbnh xem \u1ee9ng d\u1ee5ng \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng tr\u00ean c\u1ed5ng m\u1eb7c \u0111\u1ecbnh c\u1ee7a n\u00f3 hay n\u00f3 \u0111ang s\u1eed d\u1ee5ng m\u1ed9t c\u1ed5ng kh\u00f4ng chu\u1ea9n. N\u1ebfu l\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c cho ph\u00e9p b\u1edfi ch\u00ednh s\u00e1ch, th\u00ec l\u01b0u l\u01b0\u1ee3ng s\u1ebd \u0111\u01b0\u1ee3c qu\u00e9t \u0111\u1ec3 t\u00ecm c\u00e1c m\u1ed1i \u0111e d\u1ecda v\u00e0 \u0111\u01b0\u1ee3c ph\u00e2n t\u00edch th\u00eam \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh \u1ee9ng d\u1ee5ng m\u1ed9t c\u00e1ch chi ti\u1ebft h\u01a1n. <\/p>\n\n\n\n

N\u1ebfu App-ID x\u00e1c \u0111\u1ecbnh r\u1eb1ng m\u00e3 h\u00f3a (SSL ho\u1eb7c SSH) \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng v\u00e0 c\u00f3 quy t\u1eafc ch\u00ednh s\u00e1ch gi\u1ea3i m\u00e3, th\u00ec phi\u00ean s\u1ebd \u0111\u01b0\u1ee3c gi\u1ea3i m\u00e3 v\u00e0 c\u00e1c ch\u1eef k\u00fd \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng l\u1ea1i tr\u00ean lu\u1ed3ng \u0111\u00e3 gi\u1ea3i m\u00e3. B\u1ed9 gi\u1ea3i m\u00e3 cho c\u00e1c giao th\u1ee9c \u0111\u00e3 bi\u1ebft sau \u0111\u00f3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u00e1p d\u1ee5ng c\u00e1c ch\u1eef k\u00fd d\u1ef1a tr\u00ean ng\u1eef c\u1ea3nh b\u1ed5 sung \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c \u1ee9ng d\u1ee5ng kh\u00e1c c\u00f3 th\u1ec3 \u0111ang tunneling b\u00ean trong giao th\u1ee9c (v\u00ed d\u1ee5: Yahoo! Instant Messenger \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng qua HTTP). <\/p>\n\n\n\n

B\u1ed9 gi\u1ea3i m\u00e3 x\u00e1c nh\u1eadn r\u1eb1ng l\u01b0u l\u01b0\u1ee3ng tu\u00e2n th\u1ee7 quy t\u1eafc c\u1ee7a giao th\u1ee9c v\u00e0 cung c\u1ea5p h\u1ed7 tr\u1ee3 cho NAT traversal . \u0110\u1ed1i v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u1eb7c bi\u1ec7t kh\u00f3 x\u00e1c \u0111\u1ecbnh v\u00e0 kh\u00f4ng th\u1ec3 x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c th\u00f4ng qua ph\u00e2n t\u00edch ch\u1eef k\u00fd v\u00e0 giao th\u1ee9c n\u00e2ng cao, ph\u01b0\u01a1ng ph\u00e1p heuristic ho\u1eb7c ph\u00e2n t\u00edch h\u00e0nh vi c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh danh t\u00ednh c\u1ee7a \u1ee9ng d\u1ee5ng. Khi \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh, ki\u1ec3m tra ch\u00ednh s\u00e1ch x\u00e1c \u0111\u1ecbnh c\u00e1ch x\u1eed l\u00fd \u1ee9ng d\u1ee5ng, v\u00ed d\u1ee5: ch\u1eb7n ho\u1eb7c cho ph\u00e9p v\u00e0 qu\u00e9t \u0111\u1ec3 t\u00ecm c\u00e1c m\u1ed1i \u0111e d\u1ecda, ki\u1ec3m tra xem c\u00f3 chuy\u1ec3n \u0111\u1ed5i t\u1ec7p tr\u00e1i ph\u00e9p v\u00e0 m\u1eabu d\u1eef li\u1ec7u hay kh\u00f4ng ho\u1eb7c \u0111\u1ecbnh h\u00ecnh b\u1eb1ng QoS. Tr\u01b0\u1edbc khi t\u1ea1o quy t\u1eafc ch\u00ednh s\u00e1ch ghi \u0111\u00e8 \u1ee9ng d\u1ee5ng, h\u00e3y \u0111\u1ea3m b\u1ea3o b\u1ea1n hi\u1ec3u r\u1eb1ng t\u1eadp h\u1ee3p c\u00e1c \u0111\u1ecba ch\u1ec9 IPv4 \u0111\u01b0\u1ee3c coi l\u00e0 m\u1ed9t t\u1eadp con c\u1ee7a t\u1eadp h\u1ee3p c\u00e1c \u0111\u1ecba ch\u1ec9 IPv6, nh\u01b0 \u0111\u01b0\u1ee3c m\u00f4 t\u1ea3 chi ti\u1ebft trong Ch\u00ednh s\u00e1ch.<\/p>\n\n\n\n

3. \u01afu \u0111i\u1ec3m c\u1ee7a App-ID<\/strong><\/p>\n\n\n\n

App-ID c\u1ee7a Palo Alto l\u00e0 m\u1ed9t t\u00ednh n\u0103ng b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 cung c\u1ea5p kh\u1ea3 n\u0103ng ph\u00e2n lo\u1ea1i v\u00e0 x\u00e1c \u0111\u1ecbnh \u1ee9ng d\u1ee5ng ch\u00ednh x\u00e1c h\u01a1n. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a b\u1ea1n b\u1eb1ng c\u00e1ch cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n cho c\u00e1c \u1ee9ng d\u1ee5ng c\u1ee5 th\u1ec3.<\/p>\n\n\n\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 \u01b0u \u0111i\u1ec3m c\u1ee7a App-ID c\u1ee7a Palo Alto:<\/strong><\/p>\n\n\n\n

    \n
  • Cung c\u1ea5p kh\u1ea3 n\u0103ng ph\u00e2n lo\u1ea1i \u1ee9ng d\u1ee5ng ch\u00ednh x\u00e1c h\u01a1n:<\/strong> App-ID s\u1eed d\u1ee5ng m\u1ed9t c\u01a1 s\u1edf d\u1eef li\u1ec7u \u1ee9ng d\u1ee5ng kh\u1ed5ng l\u1ed3 \u0111\u1ec3 ph\u00e2n lo\u1ea1i c\u00e1c \u1ee9ng d\u1ee5ng d\u1ef1a tr\u00ean c\u00e1c d\u1ea5u hi\u1ec7u k\u1ef9 thu\u1eadt v\u00e0 h\u00e0nh vi. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p b\u1ea1n ph\u00e2n bi\u1ec7t gi\u1eefa c\u00e1c \u1ee9ng d\u1ee5ng h\u1ee3p ph\u00e1p v\u00e0 \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i m\u1ed9t c\u00e1ch ch\u00ednh x\u00e1c h\u01a1n.<\/li>\n\n\n\n
  • Cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n:<\/strong> App-ID cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n cho c\u00e1c \u1ee9ng d\u1ee5ng c\u1ee5 th\u1ec3. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a m\u00ecnh kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 nh\u1eafm m\u1ee5c ti\u00eau.<\/li>\n\n\n\n
  • Gi\u00fap b\u1ea1n hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1ch s\u1eed d\u1ee5ng m\u1ea1ng c\u1ee7a b\u1ea1n:<\/strong> App-ID c\u00f3 th\u1ec3 cung c\u1ea5p cho b\u1ea1n th\u00f4ng tin v\u1ec1 c\u00e1ch ng\u01b0\u1eddi d\u00f9ng c\u1ee7a b\u1ea1n s\u1eed d\u1ee5ng m\u1ea1ng. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n x\u00e1c \u0111\u1ecbnh c\u00e1c khu v\u1ef1c c\u00f3 th\u1ec3 c\u00f3 r\u1ee7i ro b\u1ea3o m\u1eadt ti\u1ec1m \u1ea9n.<\/li>\n<\/ul>\n\n\n\n

    D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 v\u00ed d\u1ee5 c\u1ee5 th\u1ec3 v\u1ec1 c\u00e1ch App-ID c\u1ee7a Palo Alto c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a b\u1ea1n:<\/strong><\/p>\n\n\n\n

      \n
    • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng App-ID \u0111\u1ec3 ch\u1eb7n c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i:<\/strong> App-ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n x\u00e1c \u0111\u1ecbnh c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i v\u00e0 ch\u1eb7n ch\u00fang truy c\u1eadp v\u00e0o m\u1ea1ng c\u1ee7a b\u1ea1n.<\/li>\n\n\n\n
    • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng App-ID \u0111\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng c\u1ee5 th\u1ec3:<\/strong> App-ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng c\u1ee5 th\u1ec3, ch\u1eb3ng h\u1ea1n nh\u01b0 c\u00e1c \u1ee9ng d\u1ee5ng tr\u00f2 ch\u01a1i ho\u1eb7c m\u1ea1ng x\u00e3 h\u1ed9i.<\/li>\n\n\n\n
    • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng App-ID \u0111\u1ec3 gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng:<\/strong>\u00a0App-ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd.<\/li>\n<\/ul>\n\n\n\n

      II. User-ID Palo Alto<\/strong><\/p>\n\n\n\n

      1. \u0110\u1ecbnh ngh\u0129a v\u1ec1 User-ID<\/strong><\/p>\n\n\n

      \n
      \"\"<\/figure>\n<\/div>\n\n\n

      User-ID c\u1ee7a Palo Alto l\u00e0 m\u1ed9t t\u00ednh n\u0103ng b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 cung c\u1ea5p kh\u1ea3 n\u0103ng x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng ch\u00ednh x\u00e1c h\u01a1n. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a b\u1ea1n b\u1eb1ng c\u00e1ch cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n cho c\u00e1c ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3.<\/p>\n\n\n\n

      User-ID cho ph\u00e9p b\u1ea1n x\u00e1c \u0111\u1ecbnh t\u1ea5t c\u1ea3 ng\u01b0\u1eddi d\u00f9ng tr\u00ean m\u1ea1ng c\u1ee7a m\u00ecnh b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng nhi\u1ec1u k\u1ef9 thu\u1eadt kh\u00e1c nhau \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o r\u1eb1ng b\u1ea1n c\u00f3 th\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng \u1edf t\u1ea5t c\u1ea3 c\u00e1c v\u1ecb tr\u00ed b\u1eb1ng nhi\u1ec1u ph\u01b0\u01a1ng th\u1ee9c truy c\u1eadp v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh kh\u00e1c nhau, bao g\u1ed3m Microsoft Windows, Apple iOS, Mac OS, Android v\u00e0 Linux\u00ae \/ UNIX. Vi\u1ec7c bi\u1ebft ai l\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ee7a b\u1ea1n thay v\u00ec ch\u1ec9 bi\u1ebft \u0111\u1ecba ch\u1ec9 IP c\u1ee7a h\u1ecd cho ph\u00e9p<\/p>\n\n\n\n

      2. C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a User-ID<\/strong><\/p>\n\n\n\n

      User-ID c\u1ee7a Palo Alto ho\u1ea1t \u0111\u1ed9ng b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng m\u1ed9t s\u1ed1 k\u1ef9 thu\u1eadt \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng tr\u00ean m\u1ea1ng. C\u00e1c k\u1ef9 thu\u1eadt n\u00e0y bao g\u1ed3m:<\/strong><\/p>\n\n\n\n

        \n
      • X\u00e1c th\u1ef1c:<\/strong> User-ID h\u1ed7 tr\u1ee3 nhi\u1ec1u ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c, bao g\u1ed3m:\n
          \n
        • T\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u:<\/strong> \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng ph\u00e1p x\u00e1c th\u1ef1c c\u01a1 b\u1ea3n nh\u1ea5t.<\/li>\n\n\n\n
        • X\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA):<\/strong> 2FA th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt b\u1ed5 sung b\u1eb1ng c\u00e1ch y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p m\u1ed9t m\u00e3 x\u00e1c minh ngo\u00e0i t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u c\u1ee7a h\u1ecd.<\/li>\n\n\n\n
        • X\u00e1c th\u1ef1c d\u1ef1a tr\u00ean danh t\u00ednh:<\/strong> X\u00e1c th\u1ef1c d\u1ef1a tr\u00ean danh t\u00ednh s\u1eed d\u1ee5ng c\u00e1c d\u1ecbch v\u1ee5 x\u00e1c th\u1ef1c b\u00ean th\u1ee9 ba, ch\u1eb3ng h\u1ea1n nh\u01b0 Active Directory ho\u1eb7c Okta.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • Ph\u00e2n t\u00edch g\u00f3i:<\/strong> User-ID c\u00f3 th\u1ec3 ph\u00e2n t\u00edch c\u00e1c g\u00f3i m\u1ea1ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng d\u1ef1a tr\u00ean c\u00e1c d\u1ea5u hi\u1ec7u k\u1ef9 thu\u1eadt, ch\u1eb3ng h\u1ea1n nh\u01b0 \u0111\u1ecba ch\u1ec9 MAC, user agent, v\u00e0 c\u00e1c th\u00f4ng tin kh\u00e1c.<\/li>\n\n\n\n
        • \u0110\u1ecbnh danh d\u1ef1a tr\u00ean v\u1ecb tr\u00ed:<\/strong> User-ID c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ecbnh danh d\u1ef1a tr\u00ean v\u1ecb tr\u00ed \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng d\u1ef1a tr\u00ean v\u1ecb tr\u00ed c\u1ee7a h\u1ecd.<\/li>\n<\/ul>\n\n\n\n

          Khi m\u1ed9t ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i v\u1edbi m\u1ea1ng, User-ID s\u1ebd s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt n\u00e0y \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng \u0111\u00f3. N\u1ebfu ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh th\u00e0nh c\u00f4ng, User-ID s\u1ebd g\u00e1n m\u1ed9t ID ng\u01b0\u1eddi d\u00f9ng cho ng\u01b0\u1eddi d\u00f9ng \u0111\u00f3. ID ng\u01b0\u1eddi d\u00f9ng n\u00e0y sau \u0111\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 cho ng\u01b0\u1eddi d\u00f9ng \u0111\u00f3.<\/p>\n\n\n\n

          D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 v\u00ed d\u1ee5 c\u1ee5 th\u1ec3 v\u1ec1 c\u00e1ch User-ID c\u1ee7a Palo Alto c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng:<\/strong><\/p>\n\n\n\n

            \n
          • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 ch\u1eb7n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n ch\u1eb7n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3 v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c t\u00e0i nguy\u00ean nh\u1ea5t \u0111\u1ecbnh.<\/li>\n\n\n\n
          • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng d\u1ef1a tr\u00ean v\u1ecb tr\u00ed:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c t\u00e0i nguy\u00ean nh\u1ea5t \u0111\u1ecbnh d\u1ef1a tr\u00ean v\u1ecb tr\u00ed c\u1ee7a h\u1ecd.<\/li>\n\n\n\n
          • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd.<\/li>\n<\/ul>\n\n\n\n

            3. \u01afu \u0111i\u1ec3m c\u1ee7a User ID<\/strong><\/p>\n\n\n\n

            D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 \u01b0u \u0111i\u1ec3m c\u1ee7a User ID c\u1ee7a Palo Alto:<\/strong><\/p>\n\n\n\n

              \n
            • Cung c\u1ea5p kh\u1ea3 n\u0103ng x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng ch\u00ednh x\u00e1c h\u01a1n:<\/strong> User ID s\u1eed d\u1ee5ng m\u1ed9t s\u1ed1 ph\u01b0\u01a1ng ph\u00e1p \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng, bao g\u1ed3m:\n
                \n
              • IP address:<\/strong> \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng ph\u00e1p x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng c\u01a1 b\u1ea3n nh\u1ea5t. Tuy nhi\u00ean, n\u00f3 c\u00f3 th\u1ec3 kh\u00f4ng ch\u00ednh x\u00e1c n\u1ebfu ng\u01b0\u1eddi d\u00f9ng \u0111ang s\u1eed d\u1ee5ng proxy ho\u1eb7c VPN.<\/li>\n\n\n\n
              • MAC address:<\/strong> \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng ph\u00e1p x\u00e1c \u0111\u1ecbnh ng\u01b0\u1eddi d\u00f9ng ch\u00ednh x\u00e1c h\u01a1n IP address. Tuy nhi\u00ean, n\u00f3 c\u00f3 th\u1ec3 kh\u00f4ng ch\u00ednh x\u00e1c n\u1ebfu ng\u01b0\u1eddi d\u00f9ng \u0111ang s\u1eed d\u1ee5ng thi\u1ebft b\u1ecb di \u0111\u1ed9ng ho\u1eb7c thi\u1ebft b\u1ecb kh\u00f4ng d\u00e2y kh\u00e1c.<\/li>\n\n\n\n
              • User agent:<\/strong> User agent l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a d\u1eef li\u1ec7u HTTP \u0111\u01b0\u1ee3c g\u1eedi b\u1edfi tr\u00ecnh duy\u1ec7t web. N\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh lo\u1ea1i tr\u00ecnh duy\u1ec7t v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh m\u00e0 ng\u01b0\u1eddi d\u00f9ng \u0111ang s\u1eed d\u1ee5ng.<\/li>\n\n\n\n
              • X\u00e1c th\u1ef1c:<\/strong>\u00a0User ID h\u1ed7 tr\u1ee3 nhi\u1ec1u ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c, bao g\u1ed3m:\n
                  \n
                • T\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u:<\/strong> \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng ph\u00e1p x\u00e1c th\u1ef1c c\u01a1 b\u1ea3n nh\u1ea5t.<\/li>\n\n\n\n
                • X\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA):<\/strong> 2FA th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt b\u1ed5 sung b\u1eb1ng c\u00e1ch y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p m\u1ed9t m\u00e3 x\u00e1c minh ngo\u00e0i t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u c\u1ee7a h\u1ecd.<\/li>\n\n\n\n
                • X\u00e1c th\u1ef1c d\u1ef1a tr\u00ean danh t\u00ednh:<\/strong> X\u00e1c th\u1ef1c d\u1ef1a tr\u00ean danh t\u00ednh s\u1eed d\u1ee5ng c\u00e1c d\u1ecbch v\u1ee5 x\u00e1c th\u1ef1c b\u00ean th\u1ee9 ba, ch\u1eb3ng h\u1ea1n nh\u01b0 Active Directory ho\u1eb7c Okta.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                • Cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n:<\/strong> User ID cho ph\u00e9p b\u1ea1n \u00e1p d\u1ee5ng c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee5 th\u1ec3 h\u01a1n cho c\u00e1c ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a m\u00ecnh kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 nh\u1eafm m\u1ee5c ti\u00eau.<\/li>\n\n\n\n
                • Gi\u00fap b\u1ea1n hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1ch s\u1eed d\u1ee5ng m\u1ea1ng c\u1ee7a b\u1ea1n:<\/strong> User ID c\u00f3 th\u1ec3 cung c\u1ea5p cho b\u1ea1n th\u00f4ng tin v\u1ec1 c\u00e1ch ng\u01b0\u1eddi d\u00f9ng c\u1ee7a b\u1ea1n s\u1eed d\u1ee5ng m\u1ea1ng. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n x\u00e1c \u0111\u1ecbnh c\u00e1c khu v\u1ef1c c\u00f3 th\u1ec3 c\u00f3 r\u1ee7i ro b\u1ea3o m\u1eadt ti\u1ec1m \u1ea9n.<\/li>\n<\/ul>\n\n\n\n

                  D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 v\u00ed d\u1ee5 c\u1ee5 th\u1ec3 v\u1ec1 c\u00e1ch User ID c\u1ee7a Palo Alto c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 m\u1ea1ng c\u1ee7a b\u1ea1n:<\/strong><\/p>\n\n\n\n

                    \n
                  • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 ch\u1eb7n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n ch\u1eb7n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3 v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c t\u00e0i nguy\u00ean nh\u1ea5t \u0111\u1ecbnh.<\/li>\n\n\n\n
                  • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng d\u1ef1a tr\u00ean v\u1ecb tr\u00ed:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c t\u00e0i nguy\u00ean nh\u1ea5t \u0111\u1ecbnh d\u1ef1a tr\u00ean v\u1ecb tr\u00ed c\u1ee7a h\u1ecd.<\/li>\n\n\n\n
                  • B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng User ID \u0111\u1ec3 gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng:<\/strong> User ID c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                    T\u1ed5ng quan : Firewall Palo Alto l\u00e0 m\u1ed9t trong nh\u1eefng gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng h\u00e0ng \u0111\u1ea7u, mang \u0111\u1ebfn kh\u1ea3 n\u0103ng ch\u1eb7n \u0111\u1ee9ng nh\u1eefng \u0111e d\u1ecda m\u1ea1ng ti\u1ec1m \u1ea9n. \u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1ch Palo Alto ho\u1ea1t \u0111\u1ed9ng v\u00e0 c\u1ea5u h\u00ecnh, ch\u00fang ta kh\u00f4ng th\u1ec3 b\u1ecf qua hai y\u1ebfu t\u1ed1 quan tr\u1ecdng: User ID […]<\/p>\n","protected":false},"author":11,"featured_media":8640,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[70,80],"tags":[349,350],"class_list":["post-8611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-firewall","category-huong-dan-tai-lieu","tag-palo-alto-app-id","tag-palo-alto-user-id","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/8611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=8611"}],"version-history":[{"count":0,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/8611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/8640"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=8611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=8611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=8611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}