{"id":8921,"date":"2024-07-08T08:27:05","date_gmt":"2024-07-08T08:27:05","guid":{"rendered":"https:\/\/vacif.com\/?p=8921"},"modified":"2024-12-05T08:47:32","modified_gmt":"2024-12-05T08:47:32","slug":"__trashed-5","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/__trashed-5\/","title":{"rendered":"PALO ALTO FIRMWARE 10.2 : C\u00c1CH C\u1ea4U H\u00ccNH NAT WEB RA M\u00d4I TR\u01af\u1edcNG INTERNET"},"content":{"rendered":"\n

T\u1ed5ng quan :<\/strong><\/p>\n\n\n\n

Trong Palo Alto Networks, t\u00ednh n\u0103ng NAT (Network Address Translation) Web \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c cung c\u1ea5p an ninh m\u1ea1ng v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp Internet. NAT Web \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u1ea9n \u0111\u1ecba ch\u1ec9 IP th\u1ef1c s\u1ef1 c\u1ee7a c\u00e1c m\u00e1y t\u00ednh trong m\u1ea1ng n\u1ed9i b\u1ed9 v\u00e0 thay th\u1ebf n\u00f3 b\u1eb1ng m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng, gi\u00fap b\u1ea3o v\u1ec7 s\u1ef1 ri\u00eang t\u01b0 v\u00e0 t\u0103ng c\u01b0\u1eddng an ninh m\u1ea1ng.<\/p>\n\n\n\n

Diagram :<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

M\u1ee5c l\u1ee5c :<\/strong><\/p>\n\n\n\n

1. C\u1ea5u h\u00ecnh NAS IP m\u00e1y ch\u1ee7 Web<\/strong><\/p>\n\n\n\n

2. C\u1ea5u h\u00ecnh rule cho web<\/strong><\/p>\n\n\n\n

3. Ki\u1ec3m tra k\u1ebft qu\u1ea3<\/strong><\/p>\n\n\n\n

N\u1ed9i dung c\u1ea5u h\u00ecnh :<\/strong><\/p>\n\n\n\n

1. C\u1ea5u h\u00ecnh NAS IP m\u00e1y ch\u1ee7 Web<\/strong><\/p>\n\n\n\n

C\u00e1c b\u1ea1n v\u00e0o Policies >> NAT >> Nh\u1ea5n Add <\/strong><\/p>\n\n\n\n

Name <\/strong>: \u0111i\u1ec1n t\u00ean b\u1ea5t k\u1ef3<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Tab Original Packet<\/strong><\/p>\n\n\n\n

Destination Zone : <\/strong>ch\u1ecdn WAN<\/p>\n\n\n\n

Destination Interface :<\/strong> c\u1ed5ng WAN interface<\/p>\n\n\n\n

Service :<\/strong> ch\u1ecdn https<\/p>\n\n\n\n

Source Address :<\/strong> t\u00edch ch\u1ecdn Any<\/p>\n\n\n\n

Destination Address : <\/strong>\u0111\u00e2y l\u00e0 c\u1ed5ng WAN \u0111\u1ec3 web ra v\u00e0o<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Tab Translated Packet<\/strong><\/p>\n\n\n\n

Translation Type :<\/strong> ch\u1ecdn Dynamic IP<\/p>\n\n\n\n

Translated Address : <\/strong>IP m\u00e1y ch\u1ee7 web<\/p>\n\n\n\n

Translated Port :<\/strong> 443<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

2. C\u1ea5u h\u00ecnh rule cho web<\/strong><\/p>\n\n\n\n

General :<\/strong> t\u00ean b\u1ea5t k\u1ef3<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Source Zone :<\/strong> WAN<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Destination Zone :<\/strong> ch\u1ecdn DMZ<\/p>\n\n\n\n

Destination :<\/strong> IP WAN<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Service :<\/strong> ch\u1ecdn HTTPS<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

3. Ki\u1ec3m tra k\u1ebft qu\u1ea3<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

T\u1ed5ng quan : Trong Palo Alto Networks, t\u00ednh n\u0103ng NAT (Network Address Translation) Web \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c cung c\u1ea5p an ninh m\u1ea1ng v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp Internet. NAT Web \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u1ea9n \u0111\u1ecba ch\u1ec9 IP th\u1ef1c s\u1ef1 c\u1ee7a c\u00e1c m\u00e1y t\u00ednh trong m\u1ea1ng n\u1ed9i b\u1ed9 v\u00e0 thay […]<\/p>\n","protected":false},"author":11,"featured_media":8922,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80],"tags":[22,23],"class_list":["post-8921","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","tag-nat-web","tag-palo-alto","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/8921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=8921"}],"version-history":[{"count":2,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/8921\/revisions"}],"predecessor-version":[{"id":19602,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/8921\/revisions\/19602"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/8922"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=8921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=8921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=8921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}