{"id":48534,"date":"2024-03-27T13:44:26","date_gmt":"2024-03-27T12:44:26","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/firewall-rules\/"},"modified":"2024-12-04T05:04:33","modified_gmt":"2024-12-04T04:04:33","slug":"firewall-rules","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/sk\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/security-configuration\/firewall-rules\/","title":{"rendered":"Pravidl\u00e1 br\u00e1ny firewall"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Pravidl\u00e1 br\u00e1ny firewall<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

N\u00e1zov<\/p>\n <\/td>

\n

N\u00e1zov pravidla<\/p>\n <\/td>\n<\/tr>\n

\n

Popis<\/p>\n <\/td>

\n

Opis pravidla<\/p>\n <\/td>\n<\/tr>\n

\n

Akcia<\/p>\n <\/td>

\n

Ur\u010dite, \u010di toto pravidlo bude blokova\u0165 alebo povo\u013eova\u0165 prev\u00e1dzku. Zoh\u013eadnite, \u017ee mo\u017enos\u0165 Blokova\u0165 by mohla blokova\u0165 aj prev\u00e1dzku (v z\u00e1vislosti od zvy\u0161ku konfigur\u00e1cie) medzi serverom MDM a zariaden\u00edm. <\/p>\n <\/td>\n<\/tr>\n

\n

Smer<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Povoli\u0165 prech\u00e1dzanie hran\u00edc (k dispoz\u00edcii len vtedy, ke\u010f je smer<\/strong> nastaven\u00fd na prich\u00e1dzaj\u00facu prev\u00e1dzku<\/strong>)<\/p>\n <\/td>

\n

Ozna\u010duje, \u017ee \u0161pecifick\u00e1 prich\u00e1dzaj\u00faca prev\u00e1dzka je povolen\u00e1 na tunelovanie cez NAT a in\u00e9 okrajov\u00e9 zariadenia pomocou technol\u00f3gie tunelovania Teredo.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Programy a slu\u017eby<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Definujte aplik\u00e1cie, v\u0161etky inak<\/p>\n <\/td>

\n

Ak nie je povolen\u00e1, bude bra\u0165 do \u00favahy v\u0161etky aplik\u00e1cie<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

N\u00e1zov rodiny bal\u00edkov<\/p>\n <\/td>

\n

N\u00e1zov rodiny bal\u00edkov, na ktor\u00fa sa pravidlo bude vz\u0165ahova\u0165.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Cesta k s\u00faboru aplik\u00e1cie<\/p>\n <\/td>

\n

Cel\u00e1 aplik\u00e1cia, napr\u00edklad C:\\Windows\\System\\Notepad.exe, na ktor\u00fa sa pravidlo bude vz\u0165ahova\u0165<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Plne kvalifikovan\u00fd bin\u00e1rny n\u00e1zov<\/p>\n <\/td>

\n

Plne kvalifikovan\u00fd bin\u00e1rny n\u00e1zov, na ktor\u00fd sa pravidlo vz\u0165ahuje. FQBN je re\u0165azec v nasleduj\u00facom tvare: {Vydavate\u013e\\Produkt\\Filename,Version} <\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

N\u00e1zov slu\u017eby<\/p>\n <\/td>

\n

Zadajte n\u00e1zov slu\u017eby (napr. „EventLog“). Zoznam n\u00e1zvov slu\u017eieb m\u00f4\u017eete z\u00edska\u0165 v prostred\u00ed Powershell spusten\u00edm pr\u00edkazu „Get-Service“. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Protokoly a porty<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Protokol<\/p>\n <\/td>

\n

Protokol pou\u017e\u00edvan\u00fd pravidlom.<\/p>\n <\/td>\n<\/tr>\n

\n

Dostupn\u00e9 hodnoty:<\/p>\n

– Ak\u00e9ko\u013evek<\/p>\n

– Vlastn\u00e9<\/p>\n

– HOPORT<\/p>\n

– ICMPv4<\/p>\n

– IGMP<\/p>\n

– TCP<\/p>\n

– UDP<\/p>\n

– IPv6<\/p>\n

– IPv6-Route<\/p>\n

– IPv6-Frag<\/p>\n

– GRE<\/p>\n

– ICMPv6<\/p>\n

– IPv6-NoNxt<\/p>\n

– IPv6-Opts<\/p>\n

– VRRP<\/p>\n

– PGM<\/p>\n

– L2TP<\/p>\n <\/td>

\n

Ke\u010f je nastaven\u00e1 na mo\u017enos\u0165 Vlastn\u00e9<\/p>\n <\/td>

\n

Vlo\u017ete \u010d\u00edslo protokolu v rozsahu 0 a\u017e 255<\/p>\n <\/td>

\n

\u010c\u00edslo protokolu<\/p>\n <\/td>\n<\/tr>\n

\n

Pri nastaven\u00ed na TCP alebo UDP<\/p>\n <\/td>

\n

Zadajte miestne porty, inak sa pou\u017eij\u00fa v\u0161etky<\/p>\n <\/td>

\n

Miestne porty, ktor\u00e9 bude pravidlo pou\u017e\u00edva\u0165, povolen\u00e9 s\u00fa aj porty rozsahu<\/p>\n <\/td>\n<\/tr>\n

\n

Miestny pr\u00edstav<\/p>\n <\/td>

\n

Jeden port alebo rad portov. Napr. 100-120,200,300-320. <\/p>\n <\/td>\n<\/tr>\n

\n

Zadajte vzdialen\u00e9 porty, inak sa pou\u017eij\u00fa v\u0161etky<\/p>\n <\/td>

\n

Vzdialen\u00e9 porty, ktor\u00e9 bude pravidlo pou\u017e\u00edva\u0165, povolen\u00e9 s\u00fa aj porty rozsahu<\/p>\n <\/td>\n<\/tr>\n

\n

Vzdialen\u00fd port<\/p>\n <\/td>

\n

Jeden port alebo rad portov. Napr. 100-120,200,300-320. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Rozsah p\u00f4sobnosti<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Zadajte miestne IP, inak \u013eubovo\u013en\u00e9 IP<\/p>\n <\/td>

\n

Sada lok\u00e1lnych IP adries, m\u00f4\u017ee to by\u0165 aj rozsah IP adries oddelen\u00fdch znakom –<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Miestna IP adresa<\/p>\n <\/td>

\n

S\u00fabor jednotliv\u00fdch IP adries alebo rozsah IP adries oddelen\u00fdch znakom –<\/p>\n <\/td>\n<\/tr>\n

\n

Zadajte vzdialen\u00e9 IP adresy, inak ak\u00fako\u013evek vzdialen\u00fa IP adresu<\/p>\n <\/td>

\n

Zadajte sadu vzdialen\u00fdch IP adries, m\u00f4\u017ee to by\u0165 aj rozsah IP adries oddelen\u00fdch znakom „-„.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vzdialen\u00e1 IP adresa<\/p>\n <\/td>

\n

Zadanie jednotliv\u00fdch IP adries alebo rozsahu IP adries<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

\u017det\u00f3ny<\/p>\n <\/td>

\n

Tokeny, ktor\u00e9 mo\u017eno nastavi\u0165 spolu so vzdialen\u00fdmi adresami. Tokeny Intranet, RmtIntranet a Ply2Renders s\u00fa podporovan\u00e9 v syst\u00e9me Windows 10, verzia 1809 a nov\u0161ia. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Roz\u0161\u00edren\u00e9 nastavenia<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Ur\u010dite profily, inak sa pou\u017eij\u00fa v\u0161etky<\/p>\n <\/td>

\n

Ak je vypnut\u00e9, pou\u017eij\u00fa sa v\u0161etky profily<\/p>\n <\/td>\n<\/tr>\n

\n

Dom\u00e9na<\/p>\n <\/td>

\n

Profil dom\u00e9ny<\/p>\n <\/td>\n<\/tr>\n

\n

S\u00fakromn\u00e1 str\u00e1nka<\/p>\n <\/td>

\n

S\u00fakromn\u00fd profil<\/p>\n <\/td>\n<\/tr>\n

\n

Verejnos\u0165<\/p>\n <\/td>

\n

Verejn\u00fd profil<\/p>\n <\/td>\n<\/tr>\n

\n

Uve\u010fte rozhrania, inak sa pou\u017eij\u00fa v\u0161etky<\/p>\n <\/td>

\n

Ak je vypnut\u00e9, pou\u017eij\u00fa sa v\u0161etky rozhrania<\/p>\n <\/td>\n<\/tr>\n

\n

Miestna sie\u0165<\/p>\n <\/td>

\n

Rozhranie lok\u00e1lnej siete<\/p>\n <\/td>\n<\/tr>\n

\n

Vzdialen\u00fd pr\u00edstup<\/p>\n <\/td>

\n

Rozhranie vzdialen\u00e9ho pr\u00edstupu<\/p>\n <\/td>\n<\/tr>\n

\n

Bezdr\u00f4tov\u00e9 pripojenie<\/p>\n <\/td>

\n

Bezdr\u00f4tov\u00e9 rozhranie<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Miestni riaditelia<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Pridanie autorizovan\u00fdch miestnych pou\u017e\u00edvate\u013eov<\/p>\n <\/td>

\n

Umo\u017e\u0148uje prida\u0165 zoznam miestnych pou\u017e\u00edvate\u013eov, ktor\u00ed bud\u00fa pou\u017e\u00edva\u0165 toto pravidlo<\/p>\n <\/td>\n<\/tr>\n

\n

Autorizovan\u00ed pou\u017e\u00edvatelia<\/p>\n <\/td>

\n

Zoznam opr\u00e1vnen\u00fdch miestnych pou\u017e\u00edvate\u013eov pre toto pravidlo. Pou\u017e\u00edvate\u013e mus\u00ed by\u0165 vo form\u00e1te SDDL (Security Description Definition Language), napr. PC_NAME\\USERNAME. Toto pole sa nesmie vyplni\u0165, ak je na pou\u017e\u00edvanie tohto pravidla nastaven\u00fd n\u00e1zov slu\u017eby <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n","protected":false},"parent":48539,"menu_order":0,"template":"","class_list":["post-48534","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48534","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48534\/revisions"}],"predecessor-version":[{"id":50165,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48534\/revisions\/50165"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48539"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/media?parent=48534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}