I-Azure VPN Client 3.4 inqamula njalo ngehora: imvamisa yokungena

Umsebenzisi oyedwa uxhumana, asebenze, bese ehlukaniswa kanye ngehora ngomlayezo wokuthi ukuqinisekisa nge-Microsoft Entra kuphelelwe yisikhathi. Ukuxhumana kabusha kuyasebenza futhi umjikelezo uphinda ngokwewashi lokuma. Esangweni le-point-to-site lapho kungafakwanga lutho khona, lelo phethini likhomba isitifiketi hhayi umhubhe. I-Azure VPN Client 3.4.0 yaqala ukusebenzisa imvamisa yokungena ye-Conditional Access phakathi neseshini esivele isungulwe, inqubomgomo iklayenti langaphambilini eyayiyihlola kuphela lapho kungena.

Hamba zombili izahluko eziyisithupha ngezansi ngokulandelana. Ngayinye iyaqinisekisa isimiso sezikhathi noma iyasikhipha, futhi ukuma ngaphambi kwesikhathi yiyo indlela isango elakhiwa kabusha ngayo ngaphandle kwesizathu.

Isinyathelo 1: funda umlayezo oqondile

Amagama ahlukanisa izingqimba. Umlayezo mayelana nokuqinisekisa kwe-Entra okuphelelwa yisikhathi uyisitatimende ngetokheni; iphutha lomhubhe noma inhlangano yezokuphepha akusiyo. Bhala futhi isikhathi esidlulile, silinganiswa kusukela ekuxhumaneni kuze kufike ekuhlukanisweni hhayi kusukela ekuqaleni kosuku lokusebenza.

Uma umsebenzisi ekwazi ukuxhumana kabusha ngokushesha futhi isango lisabonisa umhubhe onempilo, ubheke ukuphela kwetokheni hhayi i-peer efile.

Isinyathelo 2: thola inguqulo yeklayenti

Funda inguqulo kuhlelo lokusebenza, hhayi kurekhodi lokusabalalisa. Ushintsho lwafika nge-3.4.0, ngakho u-3.3.1 nabadala bagcina umhubhe osungulwe uphila kungakhathalekile inqubomgomo. I-laptop eyodwa engalawulwa enenguqulo endala isebenza kahle ngokuphelele ngesikhathi lonke iqembu liwa njalo ngehora: yilolo hlobo lokwehlukanisa olubuyisela abantu esangweni. Inguqulo iyisici seklayenti, futhi isango alazi ukuthi iyiphi inguqulo exhunyiwe.

Qala ngokubuyekeza idivayisi eyodwa yokuhlola bese ubheka iwashi. Idivayisi eqala ukuwa ngesikhathi senqubomgomo ngemva kokubuyekeza iqinisekisa indlela ngaphandle kokuthinta inqubomgomo yokukhiqiza.

Isinyathelo 3: thola lapho kuhlala khona inqubomgomo

Imvamisa yokungena iyisilungiselelo se-Conditional Access kunqubomgomo eqonde kuhlelo lokusebenza lebhizinisi i-Azure VPN. Ayikho kusisetshenziswa segiwe le-VPN, ayikho kukulungiselelwa kwe-point-to-site, futhi ayikho kuphrofayela yeklayenti. Sesha uhlelo lokusebenza lwe-Azure VPN ohlwini lwenqubomgomo bese ufunda izilawuli zeseshini.

Izinqubomgomo ezimbili zingasebenza kumsebenzisi oyedwa, futhi enzima kakhulu iyanqoba, ngakho inani ongakaze ulisethe lingaba yilo elisebenza. Hlola inqubomgomo eyisisekelo yesirenti sonke kanye naleyo eqondene nohlelo lokusebenza. Ubukhulu bombiko nawo ubalulekile: inqubomgomo ekhipha iqembu ikhiqiza isibalo sabantu abokuziphatha okuhlukile futhi ngaphandle kwencazelo ecacile.

Isinyathelo 4: yenza izibalo

Ukuhlukaniswa kwenzeka ngemva kwehora kunani lemvamisa yokungena, ekuziphatheni i-Microsoft eyikubhalayo kule klayenti, ngakho imvamisa yamahora ayisikhombisa inikeza cishe amahora ayisishiyagalombili okuxhumana. Lokho kushelela yikho okwenza inani elikhethelwe usuku lokusebenza lwamahora ayisishiyagalombili libonakale liphukile ntambama ngesikhathi ukuhlola kwamahora ayisishiyagalolunye kubonakala kuhle. Guqula isikhalazo sibe yizinombolo ngaphambi kokushintsha noma yini: isikhathi sokuxhumana, isikhathi sokuhlukaniswa, umehluko, bese uqhathanisa nenani lenqubomgomo kanye nehora elilodwa.

Uma umehluko ungahambisani naleso samba, umcabango wesimiso sezikhathi awulungile futhi kufanele uyeke ukulungisa inqubomgomo.

Isinyathelo 5: hlukanisa isimiso sezikhathi ne-rekey

I-rekey ye-IPsec, ukutholwa kwe-peer efile kanye nezikhathi zokungenzi lutho kukhiqiza ukuwa okungajwayelekile okuxhumene nomthamo wethrafikhi noma ukuthula, hhayi iwashi lokuma. Umsebenzisi owa phakathi nokudluliswa kanye nomsebenzisi owa ngemva kwesidlo sasemini esingenzi lutho bachaza izindlela ezihlukile. Buza ukuthi umsebenzisi wayenzani ngomzuzu ngaphambi kokuhlukaniswa.

Izinkinga zesitifiketi zibukeka ngenye indlela futhi: iklayenti lihluleka ukuxhumana esikhundleni sokulahlekelwa iseshini esebenzayo, futhi ukwehluleka kuyashesha. Isicelo se-MFA esingaqedi sibonakala njengokumiswa, hhayi njengokuphuma okuhlanzekile kwehora ngalinye okulandelwa ukuxhumana kabusha okuphumelelayo.

Isinyathelo 6: sabalalisa ngaphandle kwesimanga

Memezela ukubuyekezwa kweklayenti ngaphambi kokuba kufike kubasebenzisi ngesitolo, ngoba ushintsho lokuziphatha luhamba neklayenti. Khetha imvamisa ngokwemfuno: inani elihlanganisa usuku lokusebenza ukuze kusetshenziswe kalula, noma inani elifushane uma i-laptop elahlekile kufanele ilahlekelwe ukufinyelela ngokushesha. Bhala ukuthi iyiphi imfuno enqobile, ngoba isilungiselelo esifanayo sikhiqiza kokubili ukuvikelwa nesikhalazo. Bese uqinisekisa ukukhetha kudivayisi enenguqulo entsha esikhundleni sokulinganisa kusuka ku-pilot eyayisebenzisa endala.

Gcina umlayezo, inguqulo, inani lenqubomgomo kanye nesikhathi esilinganisiwe encwadini eyodwa. Lelo rekhodi liphendula umbiko olandelayo ngomzuzu owodwa esikhundleni sokwakha kabusha.