{"id":25369,"date":"2024-03-27T13:44:26","date_gmt":"2024-03-27T12:44:26","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/firewall-rules\/"},"modified":"2024-12-04T05:04:31","modified_gmt":"2024-12-04T04:04:31","slug":"firewall-rules","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/cs\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/security-configuration\/firewall-rules\/","title":{"rendered":"Pravidla br\u00e1ny firewall"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Pravidla br\u00e1ny firewall<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

N\u00e1zev<\/p>\n <\/td>

\n

N\u00e1zev pravidla<\/p>\n <\/td>\n<\/tr>\n

\n

Popis<\/p>\n <\/td>

\n

Popis pravidla<\/p>\n <\/td>\n<\/tr>\n

\n

Akce<\/p>\n <\/td>

\n

Ur\u010dete, zda toto pravidlo bude p\u0159enos blokovat, nebo povolovat. Vezm\u011bte pros\u00edm v \u00favahu, \u017ee mo\u017enost Blokovat m\u016f\u017ee tak\u00e9 blokovat provoz (v z\u00e1vislosti na zbytku konfigurace) mezi serverem MDM a za\u0159\u00edzen\u00edm. <\/p>\n <\/td>\n<\/tr>\n

\n

Sm\u011br<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Povolit proch\u00e1zen\u00ed okraje (dostupn\u00e9 pouze v p\u0159\u00edpad\u011b, \u017ee je polo\u017eka Sm\u011br<\/strong> nastavena na p\u0159\u00edchoz\u00ed provoz<\/strong>)<\/p>\n <\/td>

\n

Ozna\u010duje, \u017ee ur\u010dit\u00fd p\u0159\u00edchoz\u00ed provoz je povolen tunelovat p\u0159es NAT a dal\u0161\u00ed okrajov\u00e1 za\u0159\u00edzen\u00ed pomoc\u00ed tunelovac\u00ed technologie Teredo.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Programy a slu\u017eby<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Definice aplikac\u00ed, v\u0161e jinak<\/p>\n <\/td>

\n

Pokud nen\u00ed povoleno, budou br\u00e1ny v \u00favahu v\u0161echny aplikace.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

N\u00e1zev rodiny bal\u00ed\u010dk\u016f<\/p>\n <\/td>

\n

N\u00e1zev rodiny schr\u00e1nek, na kterou se pravidlo vztahuje.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Cesta k souboru aplikace<\/p>\n <\/td>

\n

\u00dapln\u00e1 aplikace, nap\u0159\u00edklad C:\\Windows\\System\\Notepad.exe, na kterou se pravidlo vztahuje.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Pln\u011b kvalifikovan\u00fd bin\u00e1rn\u00ed n\u00e1zev<\/p>\n <\/td>

\n

Pln\u011b kvalifikovan\u00fd bin\u00e1rn\u00ed n\u00e1zev, na kter\u00fd se pravidlo vztahuje. FQBN je \u0159et\u011bzec v n\u00e1sleduj\u00edc\u00edm tvaru: Vydavatel\\Produkt\\Filename,Verze} je ve tvaru: {Vydavatel\\Produkt\\Filename,Verze}. <\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

N\u00e1zev slu\u017eby<\/p>\n <\/td>

\n

Zadejte n\u00e1zev slu\u017eby (nap\u0159. „EventLog“). Seznam n\u00e1zv\u016f slu\u017eeb v prost\u0159ed\u00ed Powershell z\u00edsk\u00e1te p\u0159\u00edkazem „Get-Service“. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Protokoly a porty<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Protokol<\/p>\n <\/td>

\n

Protokol pou\u017e\u00edvan\u00fd pravidlem.<\/p>\n <\/td>\n<\/tr>\n

\n

Dostupn\u00e9 hodnoty:<\/p>\n

– Jak\u00fdkoli<\/p>\n

– Vlastn\u00ed<\/p>\n

– HOPORT<\/p>\n

– ICMPv4<\/p>\n

– IGMP<\/p>\n

– TCP<\/p>\n

– UDP<\/p>\n

– IPv6<\/p>\n

– IPv6-Route<\/p>\n

– IPv6-Frag<\/p>\n

– GRE<\/p>\n

– ICMPv6<\/p>\n

– IPv6-NoNxt<\/p>\n

– IPv6-Opts<\/p>\n

– VRRP<\/p>\n

– PGM<\/p>\n

– L2TP<\/p>\n <\/td>

\n

P\u0159i nastaven\u00ed na hodnotu Vlastn\u00ed<\/p>\n <\/td>

\n

Vlo\u017ete \u010d\u00edslo protokolu v rozsahu 0 a\u017e 255<\/p>\n <\/td>

\n

\u010c\u00edslo protokolu<\/p>\n <\/td>\n<\/tr>\n

\n

P\u0159i nastaven\u00ed na TCP nebo UDP<\/p>\n <\/td>

\n

Zadejte m\u00edstn\u00ed porty, jinak budou pou\u017eity v\u0161echny.<\/p>\n <\/td>

\n

M\u00edstn\u00ed porty, kter\u00e9 bude pravidlo pou\u017e\u00edvat, povoleny jsou tak\u00e9 porty rozsahu.<\/p>\n <\/td>\n<\/tr>\n

\n

M\u00edstn\u00ed p\u0159\u00edstav<\/p>\n <\/td>

\n

Jeden port nebo \u0159ada port\u016f. Nap\u0159. 100-120,200,300-320. <\/p>\n <\/td>\n<\/tr>\n

\n

Zadejte vzd\u00e1len\u00e9 porty, jinak budou pou\u017eity v\u0161echny.<\/p>\n <\/td>

\n

Vzd\u00e1len\u00e9 porty, kter\u00e9 bude pravidlo pou\u017e\u00edvat, povoleny jsou tak\u00e9 porty rozsahu.<\/p>\n <\/td>\n<\/tr>\n

\n

Vzd\u00e1len\u00fd port<\/p>\n <\/td>

\n

Jeden port nebo \u0159ada port\u016f. Nap\u0159. 100-120,200,300-320. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Oblast p\u016fsobnosti<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Zadejte m\u00edstn\u00ed IP, jinak libovolnou IP<\/p>\n <\/td>

\n

Sada m\u00edstn\u00edch IP adres, m\u016f\u017ee to b\u00fdt i rozsah IP adres odd\u011blen\u00fdch znakem –<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

M\u00edstn\u00ed IP adresa<\/p>\n <\/td>

\n

Sada jednotliv\u00fdch IP adres nebo rozsah IP adres odd\u011blen\u00fdch znakem –<\/p>\n <\/td>\n<\/tr>\n

\n

Zadejte vzd\u00e1len\u00e9 IP adresy, jinak libovolnou vzd\u00e1lenou IP adresu.<\/p>\n <\/td>

\n

Zadejte sadu vzd\u00e1len\u00fdch IP adres, m\u016f\u017ee to b\u00fdt i rozsah IP adres odd\u011blen\u00fdch znakem „-„.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vzd\u00e1len\u00e1 IP adresa<\/p>\n <\/td>

\n

Zad\u00e1n\u00ed jednotliv\u00fdch IP adres nebo rozsahu IP adres<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

\u017detony<\/p>\n <\/td>

\n

Tokeny, kter\u00e9 lze nastavit spolu se vzd\u00e1len\u00fdmi adresami. Tokeny Intranet, RmtIntranet a Ply2Renders jsou podporov\u00e1ny v syst\u00e9mu Windows 10, verze 1809 a nov\u011bj\u0161\u00ed. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Roz\u0161\u00ed\u0159en\u00e1 nastaven\u00ed<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Ur\u010dete profily, jinak budou pou\u017eity v\u0161echny.<\/p>\n <\/td>

\n

Pokud je zak\u00e1z\u00e1no, pou\u017eij\u00ed se v\u0161echny profily<\/p>\n <\/td>\n<\/tr>\n

\n

Dom\u00e9na<\/p>\n <\/td>

\n

Profil dom\u00e9ny<\/p>\n <\/td>\n<\/tr>\n

\n

Soukrom\u00e9<\/p>\n <\/td>

\n

Soukrom\u00fd profil<\/p>\n <\/td>\n<\/tr>\n

\n

Ve\u0159ejnost<\/p>\n <\/td>

\n

Ve\u0159ejn\u00fd profil<\/p>\n <\/td>\n<\/tr>\n

\n

Ur\u010dete rozhran\u00ed, jinak se pou\u017eij\u00ed v\u0161echna.<\/p>\n <\/td>

\n

Pokud je zak\u00e1z\u00e1no, budou pou\u017eita v\u0161echna rozhran\u00ed<\/p>\n <\/td>\n<\/tr>\n

\n

M\u00edstn\u00ed s\u00ed\u0165<\/p>\n <\/td>

\n

Rozhran\u00ed m\u00edstn\u00ed s\u00edt\u011b<\/p>\n <\/td>\n<\/tr>\n

\n

Vzd\u00e1len\u00fd p\u0159\u00edstup<\/p>\n <\/td>

\n

Rozhran\u00ed vzd\u00e1len\u00e9ho p\u0159\u00edstupu<\/p>\n <\/td>\n<\/tr>\n

\n

Bezdr\u00e1tov\u00e9 p\u0159ipojen\u00ed<\/p>\n <\/td>

\n

Bezdr\u00e1tov\u00e9 rozhran\u00ed<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

M\u00edstn\u00ed \u0159editel\u00e9<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

P\u0159id\u00e1n\u00ed autorizovan\u00fdch m\u00edstn\u00edch u\u017eivatel\u016f<\/p>\n <\/td>

\n

Umo\u017e\u0148uje p\u0159idat seznam m\u00edstn\u00edch u\u017eivatel\u016f, kte\u0159\u00ed budou toto pravidlo pou\u017e\u00edvat.<\/p>\n <\/td>\n<\/tr>\n

\n

Autorizovan\u00ed u\u017eivatel\u00e9<\/p>\n <\/td>

\n

Seznam opr\u00e1vn\u011bn\u00fdch m\u00edstn\u00edch u\u017eivatel\u016f pro toto pravidlo. U\u017eivatel mus\u00ed b\u00fdt ve form\u00e1tu SDDL (Security Description Definition language), nap\u0159. PC_NAME\\USERNAME. Toto pole nesm\u00ed b\u00fdt vypln\u011bno, pokud je pro pou\u017eit\u00ed tohoto pravidla nastaven n\u00e1zev slu\u017eby. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n","protected":false},"parent":25374,"menu_order":0,"template":"","class_list":["post-25369","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25369\/revisions"}],"predecessor-version":[{"id":26725,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25369\/revisions\/26725"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25374"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/media?parent=25369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}