Gwaje-gwajen karɓa don ƙofar VPN ta ƙirƙira tare da tabbatarwa da matakai biyu
Ku tabbatar da ƙofar mataki-mataki: rajista, shiga, ƙin yarda, sokewa da dawowa, kowanne da takarda da yanayin cin nasara da aka rubuta kafin gwaji.
Masu sayarwa suna kwatanta wannan na’ura a matsayin ta ƙirƙira kuma mai iya matakai biyu, kuma babu ɗayan kalmomin da ke amsa tambayoyin da ke yanke shawarar sayan. Wace hoton hypervisor ake goyon baya, waɗanne abokan ciniki za su iya yin rajista, me mataki na biyu yake tabbatarwa da gaske, da abin da ke faruwa idan mai ba da shaida ya faɗi, duk a buɗe suke. Mayar da su matakan karɓa da za ku iya gudanarwa a gwajin shiri, kuma shawarar ba za ta dogara kan yadda takardar bayanai take da rarrashi ba. Takardar da ke ƙasa tsari ne na waɗannan shaidu, ba jerin darajar kayayyaki ba.
Abin da mai bayarwa ya tabbatar game da wannan turawar
Fara da tattara turawar a shafi ɗaya: hypervisor ko girgije, tsarin baƙo, hoton da ake goyon baya da mu’amalolin da na’urar ke tsammani. Ƙara masu amfani da tsarin aikinsu, ko ana sarrafa na’urori, da yadda rajista da shiga ya kamata su yi aiki. Sannan hanyar shiga ta sirri: manhajoji da prefixes, tsarin DNS, hanyoyin dawowa, da ko fita intanet ta jama’a ɓangare ne na tayin.
Aiki ma yana cikin wannan shafin: wanda ke kula da na’urar, daga ina sabuntawa ke zuwa, inda rajistar aukuwa ke zuwa, yadda ake kare tsari, da wace manufar dawowa kasuwancin ya amince da ita a zahiri. Ka nemi mai bayarwa ya tabbatar da wannan haɗin kai tsaye, ba cewa manhajar tana aiki a na’urar ƙirƙira ba. Ka nuna dogaro na waje kamar mai ba da shaida ko sabis ɗin lasisi, domin ɓangare ne na turawar ko an kawo su tare da ita ko ba a kawo ba. Shafin turawa marar dogaro mai suna yawanci shafin turawa ne mai dogaro da ba a sani ba.
Ku tabbatar mataki na biyu mataki ne na biyu
Faɗi sunan mai tabbatarwa da hanyar tabbatarwa, kuma faɗi wace shaida kowane mataki ke kafawa. Neman kalmar sirri sau biyu a jere ba mataki na biyu ba ne, kuma kalmar sirri da lambar amfani ɗaya magana ce daban da mai tabbatarwa na sirri da aka ɗaure da sabis ɗin. Rubuta hanyar da kuke saya ba lambar da ke kan akwatin ba.
Jure wa phishing wata siffa ce daban, kuma jagorar NIST game da masu tabbatarwa tana ɗaukarta haka: lambar da za a iya yaudarar mai amfani ya tura ta har yanzu tana cika tabbatarwa mai matakai da yawa amma ta kasa wannan ƙarin sharadi. Nemi siffar a fili idan tana da muhimmanci a gare ku. Sannan ka nemi nuni daga irin abokin ciniki da masu amfaninku suke amfani da shi a zahiri, wanda ya haɗa rajista, ƙalubalen da aka ƙi ko ya ƙare, dawowa bayan rasa mai tabbatarwa, da soke mai amfani ɗaya yayin da wasu suka ci gaba da haɗi. Ka riƙe tabbatar da shaidar ƙofar cikin iyaka, domin abokin ciniki da ya amince da kowace ƙofa ya matsar da matsalar maimakon magance ta.
Rubuta yanayin cin nasara kafin ka karya komai
Teburin da ke ƙasa shi ne ɓangaren takardar da ke jure haɗuwa da mai bayarwa, domin kowane layi yana neman takarda maimakon tabbaci. Cika yanayin cin nasara kafin gwajin shiri, kuma ɗauki layin da ba shi da shaida a matsayin layin da ya faɗi. Matakai biyar sun ƙunshi abin da ƙofa ya kamata ta yi.
| Acceptance stage | Evidence to keep | Pass condition |
|---|---|---|
| Enrolment | Enrolment record with the device type and the identity used | A new device enrols once, and nobody else can enrol it afterwards |
| Sign-in with the second factor | Session record naming both factors and the gateway identity that was checked | The session carries the expected identity and the gateway certificate validated |
| Denial of an unapproved destination | Log line from the control that refused the flow, with the policy name | The flow is refused and the refusal is attributable to one control |
| Revocation of one user | Revocation timestamp and the sessions that survived it | The named user is out and unaffected users keep working |
| Restore from configuration backup | Restored version plus a probe of a revoked identity | The revision matches the backup and revoked identities stay revoked |
Rajista ce ta farko domin duk abin da ke gaba ya dogara da ita: na’urar da ba za ta iya yin rajista ba ba za a iya gwada ta ba. Shiga wani mataki ne dabam da rajista, kuma ƙin yarda shi ne matakin da yawancin takardu suke mantawa, domin ƙofar da ke karɓar kowa ba ta tabbatar da cewa tana ƙin wani ba. Sokewa da dawowa suna ɗauke da mafi yawan haɗarin aiki, kuma duka biyu arha ne a gwada su a kwafi.
Ku yi gwajin shiri a kan kwafin, ba a kan ƙofar da ke aiki ba
Gudanar da matakan da ke kawo cikas a kan kwafin dandamali, bin hanyar turawa da aka goyon baya, kuma ajiye kowace shaida tare da kwananta da sigar tsarinta. Layin sake kunnawa ba a amsa shi da sake kunnawa daga console, kuma layin dawowa ba a amsa shi da fitar da tsari ba. Lura wace yanayi ke dawowa da kanta da abin da ya kamata ya sake haɗuwa, domin wannan bambancin ne ƙungiyar aiki ke gado. Gwajin shiri kuma ita ce kawai damar auna lokacin dawowa ba tare da bayanin katsewa ba.
Yi rikodin yanayin mai ba da shaida a lokacin kowane gwaji, domin layin katsewa da aka gwada da mai ba da shaida lafiyayye yana tabbatar da akasin abin da takardar ke iƙirari. Masu bita biyu a gwajin shiri ɗaya suna kama abubuwa daban-daban, kuma na biyu yawanci yana samun layin da shaidarsa hoton allo ne na dashboard. Ka riƙe wannan shaidar manne da layin da ta ke, ba a cikin babban fayil mai sunan aikin ba.
Auna nauyin aikin da ƙungiyarku za ta gudanar
Ku amince da nauyin aiki mai kama da mako na yau da kullum, sannan ku auna shi a inda kuke niyyar turawa: lokaci ɗaya, gaurayen zirga-zirga, da taga kulawa da ƙungiyar take da shi a zahiri. Adadin throughput da aka tallata yana kwatanta yanayin dakin gwaji kuma ba ya faɗin komai game da masu amfaninku. Auna dawowa da manufar dawowa, ba da shirin ba.
Takardar ta cika lokacin da kowane mataki yana da takarda kuma kowace takarda tana da kwanan wata. Na’urar da wani ke kulawa, tare da shaida ga kowane layi, saye ne daban da mafi tsayin jerin akwatunan da aka yi wa alama.