Isixwayiso se-AnyConnect seseva engathenjwa: yamukela noma yingenisa?

Unamathisela igama lomsingathi we-gateway ku-AnyConnect, iwindi liba bomvu noma mhlophe, futhi ingxoxo ibuza ukuthi uthembe iseva iklayenti engakwazi ukuqinisekisa isitifiketi sayo. Umnyakazo wemvelo ukuchofoza bese uqala ukusebenza, futhi yilokho kanye ukusabela okungalungile. Impendulo ibhalwa kuzintandokazi zeklayenti kuleyo mshini futhi isebenza ekuxhumaneni okulandelayo, ngakho le ngxoxo iyisinqumo sokucushwa esigqoke izingubo zesixwayiso sesikhathi esisodwa. Nansi indlela engiyihambayo, ngokulandelana okuvezwa iklayenti.

Qala ngesixwayiso osibona ngempela

Okubomvu nokumhlophe akuzona izinhlobo zobuhle. Isixwayiso esibomvu sisho ukuthi iphrofayili noma intando isethwe ukuvimba amaseva angathenjwa, ngakho iklayenti liyala ukuqhubeka kuze kushintshe leso silungiselelo; isixwayiso esimhlophe sisho ukuthi lizokuvumela uqhubeke uma uphendula ngokusobala. Kunesimo sesithathu esibukeka sifana kodwa esiziphatha ngendlela ehlukile: isitifiketi esiphelelwe yisikhathi, iklayenti elingasoze lasinikeza ukuthi singeniswe, ngoba ukungenisa ngeke kusenze sisebenze. Ukwehlukanisa lezi zintathu kuthatha isekhondi futhi kunquma konke okulandelayo.

Ngemuva kwakho konke kunesigaxa segama lezimbangela: isitifiketi se-gateway esisayinwe ngokwaso, i-CA eyimfihlo iphuzu lokugcina elingayithembi, noma igama lomsingathi elingekho ku-subject alternative names wesitifiketi. Noma iyiphi kulezi zintathu ikhiqiza ingxoxo efanayo futhi idinga ukulungiswa okuhlukile.

Funda isitifiketi ngaphambi kokuphendula ingxoxo

Vula imininingwane yesitifiketi kusixwayiso bese ubheka izinkambu ezintathu ngaphambi kokuthinta inkinobho. I-subject ne-SAN kufanele zibize i-gateway obufuna ukufinyelela kuyo ngempela, umkhiphi kufanele kube i-CA ephethwe yinhlangano yakho, futhi izinsuku zokusebenza kufanele zihlanganise namuhla. Bese uqhathanisa umbhalo weminwe we-SHA-256 nekhophi oyithole kwenye indawo hhayi ngalokhu kuxhumana, ikhasi lemibhalo yangaphakathi noma ithikithi, ngoba umbhalo weminwe ofundwe kuyo leyo ngxoxo awufakazi lutho. Uma ungatholi ikhophi ezimele, awunasisekelo sokwamukela okuhlukile.

Lesi yisinyathelo esihlukanisa ilabhorethri ne-gateway yokukhiqiza. Kumshini wokuhlola onesitifiketi esisayinwe ngokwaso osidalile izolo, ukuchofoza kuyavumeleka. Ku-gateway yenkampani lapho abasebenzisi bebhala khona imininingwane yokungena, isitifiketi ongakwazi ukusiqinisekisa siyisetho esingenzeka sokungena phakathi, futhi iklayenti iyona ngxenye kuphela esabuzayo umbuzo.

Yazi ukuthi impendulo ngayinye ibhalani esitolo sokuthemba

Ukuphendula yebo emubuzweni wokungenisa kwengeza isitifiketi se-gateway esitolo esithenjwayo seklayenti kuleyo mshini. Lokhu akukona okuhlukile kwisesheni ngasinye: ukuxhumana okulandelayo kungaqedwa ngaphandle kwesicelo esifanayo, okuyiyo inhloso kanye nengozi, ngoba akukho lutho esikrinini okukhumbuza umuntu ngomunye ukuthi okuhlukile kukhona. Ukuphendula cha kuqhubeka nokungena kwale sesheni kuphela. Zombili izindlela ziyakuxhuma, futhi eyodwa kuphela yazo ishintsha umshini.

Uma usesendleleni ebomvu, umzamo wokuqala awukona ukungena nhlobo. Ukulandelana kokufaka okubhaliwe umugqa we-connect olandelwa ukuqinisekiswa okubili, okushintsha intando bese kuphuma; iskripthi esikuthatha njengempumelelo sigcine isilungiselelo futhi asikaze saqinisekisa ubunikazi. Umbuzo wokungenisa isitifiketi uvela kuphela emzamweni olandelayo, yingakho abantu baphetha ngokuthi isicelo siyavela ngezikhathi ezithile.

Lokho kulandelana kubalulekile ekuzenzakaleleni, hhayi eminweni kuphela. Impendulo yeskripthi ethi yebo njalo iyaqhubeka nokusebenza ngemva kokushintsha kwe-gateway, futhi iyaqhubeka nokuthemba noma yisiphi isitifiketi esivelayo.

Bhala izimpendulo ngokulandelana okubuza ngakho iklayenti

Lapho iklayenti lixwayisa kodwa livumela ukuxhumana, izimpendulo zifika ngokulandelana okugxilile: connect, yebo ukuze uqhubeke, bese kuba umbuzo wokungenisa, bese kuba iqembu, igama lomsebenzisi nephasiwedi. Zibhale njengemigqa ehlukene kufayela lokufaka esikhundleni sokuqagela isikhathi sezicelo. Ukwenqaba ukungenisa ukushintsha kohlamvu olulodwa kulelo fayela, futhi yikho okuyisimo esiphephile sanoma yini egijima ngaphandle kokuqapha.

connect vpn2.example.net
y
n
GROUP
LOGIN
PASSWORD

Khetha ukusabalalisa i-CA yenhlangano kumaphuzu okugcina kunokufundisa yonke iskripthi ukwamukela isitifiketi seqabunga. Isitifiketi esikhishwe ngendlela efanele ne-SAN efanele sisusa isicelo kubo bonke, sigcina ukuqinisekisa kunengqondo, futhi asincikile ememorini yephuzu lokugcina elilodwa mayelana nesinqumo. Ukufaka i-CA yempande kuwushintsho olusinda kunokungenisa iqabunga, ngakho kuyiphatha njengokwethulwa okuphathwayo hhayi indlela emfishane yedeski losizo.

Susa okuhlukile okuphila isikhathi eside kune-gateway yabo

I-AnyConnect igcina lezi zintandokazi ngokwemishini ngayinye, ngakho izimpendulo ezindala ziyanqwabelana kumakhompyutha aphathwayo asuke ashintsha amahhovisi. Buyekeza izintandokazi ezigciniwe nezitifiketi ezingenisiwe kumaphuzu okugcina aphethwe, futhi uhlole ukuthi okuhlukile kusabiza igama lomsingathi elishintshe umnikazi. Intando eyamukela noma iyiphi iseva engathenjwa ibanzi kunesitifiketi eyadalelwa kona.

Iphethini efanele ukugcinwa incane: isitifiketi esithenjwayo sokusetshenziswa okuvamile, ukuhlolwa kombhalo weminwe kwangaphandle okubhaliwe kokuhlukile kwesikhashana, nomnikazi obiziwe osusa lokho uma ukufuduka kuphela. Uma uthola isilungiselelo esamukela noma iyiphi iseva kumshini owuphathayo, sithathe njengokutholakele hhayi njengokunethezeka.