Babu akwatin Ajiye Kalmar Sirri a FortiClient? Ƙofar ce ke yanke hukunci

Ka gama shigar FortiClient, ka haɗa da SSL VPN na ofis kuma ka nemi maɓallin ajiye kalmar sirri wanda babu shi kwata-kwata. Sake shigar da abokin ciniki ba ya dawo da shi, haka ma share ramin da sake ƙara shi ba ya amfani. A cikin bayanin SSL VPN, katangar wuta ce ke yanke shawara ko abokin ciniki zai iya ajiye bayanan shiga kwata-kwata. Don haka rashin akwatin zaɓi yawanci yana nufin manufa ta zo daga ƙofar, ba wai mai shigarwa ya kasa ba.

Wannan bambanci yana da muhimmanci kafin ka fara gyara fayiloli: ɗaya daga cikin waɗannan hanyoyin tattaunawa ce da mai katangar wuta, ɗayan kuma aikin dakin gwaji ne da za a sake rubuta shi.

Duba tashar kafin ka taɓa na'urar

Ka ce wanda ke kula da FortiGate ya buɗe tashar SSL VPN da raminka ke nunawa ya karanta saitin ajiye kalmar sirri. Lokacin da zaɓin ya kasance a kashe, ana sa ran FortiClient ya ɓoye maɓallin kuma ya ƙi ajiye bayanan shiga. Na'urar tana bin ƙa'idar ne maimakon ta lalace.

Gwaji ɗaya mai sauri yana raba manufa da bayanin da ya lalace: shiga tashar da har yanzu ke barin ajiya, sannan ka koma naka. Idan maɓallin ya bayyana a tashar da ke barin, kuma ya ɓace a wadda aka kulle, tsaya a nan ka nemi canjin a ƙofar. Duk abin da ke ƙasa aikin fili ne don ɗan hayar dakin gwaji ko bayanin gwaji, kuma babu ɗayansu da ya wuce shawarar uwar garke. Sabunta bayani ko haɓaka abokin ciniki zai sake rubuta gyaran gida.

Windows na riƙe tutar a cikin maɓallin rami

Ramin da aka ajiye suna zaune ƙarƙashin mai amfani na yanzu, maɓalli ɗaya ga kowace haɗi, kuma tutar bayyanuwa tana kusa da bayanan haɗin:

HKEY_CURRENT_USER\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels<tunnel name>
show_remember_password = 1

Sanya darajar a 1, fita daga abokin ciniki daga tire maimakon rufe tagarsa, sannan ka sake buɗe shi. A cikin gine-ginen 5.x wannan tuta na iya zama ƙarƙashin reshen Wow6432Node na HKEY_LOCAL_MACHINE, don haka duba can idan maɓallin kowane mai amfani ba ya nan. Wasu gine-ginen 6.x suna sake rubuta darajar bayan haɗi mai nasara, wanda ke bayyana akwatin da ke jure shiga ɗaya kuma ya ɓace a na gaba. Idan maɓallinka ba shi da irin wannan darajar kwata-kwata, ƙirƙira ta a matsayin zaren maimakon yin hasashen wasu sunaye.

Ɗauki rijista a matsayin matakin gyara kuskure. Yanayin rijista mai rai ba ya ganuwa ga mai gudanarwa na gaba, kuma babu sabuntawar kaya da zai adana shi.

A macOS, bi abokin ciniki don samun fayilinsa

Abokin cinikin macOS na riƙe saitunan kowace haɗi ƙarƙashin /Library/Application Support/Fortinet/FortiClient/conf, a cikin ƙamus ga kowane rami. Maɓallin da za a saita shi ne AllowSavePassword, kuma yana buƙatar karanta 1 yayin da maɓallan haɗi ta atomatik a cikin wannan ƙamus suka kasance cikakke. Sake farawa abokin ciniki idan ka gama.

Hasashen ainihin fayil yana ɓata lokaci a kan gini da ba a sani ba. Gudanar da opensnoop yayin da kake ƙara ramin, sannan ka karanta hanyoyin da abokin ciniki ya taɓa; fayilin da ya rubuta shi ne ke ɗauke da tutar. Gyara wannan fayil yayin da abokin ciniki a rufe kuma aikin ya ƙare. Minti biyar na bibiya suna doke bincike a duk tsarin fayil kowane lokaci.

Ka fifita zagayowar fitarwa, gyarawa da dawo da ita

Sabbin abokan ciniki suna barin ka ka kai duk tsarin saitin ta hanyar fayil motse-motsi, wanda ya fi sauƙin maimaitawa da miƙa wa wata na'ura fiye da tiyatar rijista kai tsaye:

• Fitar daga saitunan abokin ciniki, haɗa da saitunan mai amfani, sannan ka saita kalmar sirrin fitarwa.
• Buɗe fayil ɗin ka saita show_remember_password a 1.
• Buɗe makullin a cikin abokin ciniki; Dawo da ita ba ya yin komai yayin da yake a kulle.
• Maido da fayil ɗin da aka gyara sannan ka ba da kalmar sirrin fitarwa.

Maɓallin ya kamata ya bayyana a shiga na gaba. Ka nisanta fayil ɗin da aka fitar daga manyan fayiloli na tarayya da maƙala na tikiti, domin yana bayyana raminka kuma yana iya ɗauke da sirrin da aka ɓoye.

Idan maidowa ta yi aiki amma akwatin ya sake ɓoyewa bayan haɗi, ƙofar tana sake tabbatar da manufa a kowace shiga kuma babu fayil na gida da zai riƙe saitin dadewa.

Share sirrin kafin ya rikide zuwa kulle asusu

Abokin cinikin layin umarni na Linux ba shi da akwatin zaɓi kwata-kwata, don haka murfin da ke ba da kalmar sirri a stdin shine amsar da aka saba kuma ba ya ajiye komai. A kowace dandamali, kawarwa abin dogaro ita ce mayar da haɗin zuwa tambaya lokacin shiga, ko share ramin gaba ɗaya.

Bayanan shiga da aka ajiye suna rayuwa fiye da canjin kalmar sirri da ke lalata su, kuma gazawar da ke biyo baya tana kama da katsewar VPN: ƙi, sake gwadawa, sannan kulle asusu. Share darajar da aka ajiye kafin ka juya kalmar sirri, kuma duba jerin ramuka don tsofaffin shigarwa waɗanda har yanzu ke ɗauke da ɗaya. Sirrin yana zaune a ɓoye a cikin ma'ajiyar abokin ciniki, don haka gyara shi da hannu banza ne. Share ramin ya fi sauri kuma ba ya barin komai.

Yi aiki da shi bisa tsari: tabbatar da saitin tashar tare da mai katangar wuta, tabbatar da tushen da bayanin da ke barin, riƙe gyare-gyaren rijista ko plist a cikin dakin gwaji, kuma ka san wane fayil ke riƙe sirrin don ka iya cire shi. Rashin akwatin zaɓi a tashar da ke barin ajiya matsala ce ta na'urar, kuma tarihin abokin ciniki shine wuri na gaba da za a duba.