Vimba idivayisi eyodwa ku-VPN ngaphandle kokukhubaza i-akhawunti yonke

Isisebenzi esisodwa, amakhompyutha aphathwayo amabili, futhi eyodwa kuphela yazo okufanele ilahlekelwe ukufinyelela. Ukukhubaza i-akhawunti kuyisigxobo esisobala kodwa kujezisa ububanzi obungalungile, kuyilapho ukususa iphrofayela egciniwe kusihloko sokugcina kuyisiphakamiso hhayi ukulawula. Isinqumo sifika ezimweni ezintathu: ingabe ikhona inkomba yedivayisi i-VPN engayiqinisekisa, ingabe lolu xhumano oluthile luyayihlola ngempela, nokuthi yini ofuna yenzeke kudivayisi hhayi kumuntu. Phendula ngalolo hlelo, futhi ukuphoqelela ngokuvamile kuzikhethela kona.

Isimo sokuqala: ingabe bukhona ubufakazi bedivayisi i-VPN engabuqinisekisa?

Ikheli lomthombo kwabelwana ngalo ngemuva kwe-NAT yasehhovisi futhi liyashintsha kumanethiwekhi eselula. Igama lomsingathi yilokho idivayisi ekushoyo, ikheli le-MAC lilingiswa kalula, futhi inani lokubhalisa lingabhalwa yinoma yini enelungelo lendawo. Akukho kulokhu okuyinkomba kuze kube yilapho okuthile kuyiqinisekisa. Ubufakazi bedivayisi obhaliswe ngokwehlukile, njengesitifiketi esikhishwe kuleyo ndawo yokugcina, iwukuphela kokukhetha okunikeza ukuhoxiswa umgomo omncane kune-akhawunti yomsebenzisi.

Ubufakazi bubalwa kuphela uma uxhumano luziqinisekisa ngalo futhi luqinisekisa uchungechunge kuzo zonke izimo zokuzama. Ifayela elilele esitolo somshini alifakazi lutho.

Isimo sesibili: ingabe lolu xhumano luyaluhlola?

Izimfanelo zendawo yokugcina azizona zonke. Ku-ASA, umhlahlandlela we-ASDM DAP we-Cisco uhlukanisa ulwazi lwe-AAA lomsebenzisi kuzimfanelo zokuhlola indawo yokugcina, futhi ukuthi iziphi izimfanelo ziyatholakala kuncike kuphrothokholi yokufinyelela kude esetshenziswayo, amathuluzi e-posture afakiwe nelayisense. Ukuhlola kokubhalisa kudinga indlela yokuqoqa esekelwayo, futhi ngisho nalapho kubika lokho ithuluzi lendawo yokugcina elikubonile, hhayi ukuthi umshini yiwo omethembayo.

Ngakho umbuzo ongokoqobo mncane: kule tunnel, ngaleli klayenti nangale ejenti ye-posture, iyiphi imfanelo efika igcwele futhi ithembekile? Uma impendulo ingekho, inqubomgomo ebhalwe ngokuphambene nayo izofanisa lutho noma ifanise konke, futhi yomibili imiphumela imbi kakhulu kunokukhiya kwe-akhawunti obekugwenywa.

Isimo sesithathu: ukwenqaba, ukulungisa, noma ukufinyelela okumncane?

Imiphumela emithathu iyatholakala futhi ayishintsheki. Ungaqeda isikhathi, okususa ukufinyelela ngokuphelele; ungabeka idivayisi ekuhlukaniseni esimweni lapho ifinyelela khona kuphela izinsiza zokulungisa; noma ungashiya isikhathi futhi unciphise i-ACL yezinsiza zayo kulezo zinto ezimbalwa idivayisi eyisadinga. Izenzo zesikhathi ze-DAP nama-ACL ezinsiza aphendula imibuzo ehlukene, ngakho ukukhetha kumayelana nokuthi umuntu kufanele abekezelele kangakanani umonakalo oseceleni.

Kukhompyutha ephathwayo elahlekile noma entshontshiwe impendulo ngokuvamile ukuqeda. Kumshini owehlulekile ukuhlolwa kwe-posture, ukulungisa kumnene futhi kusebenza ngokulinganayo.

Nquma ukuthi kwenzekani uma ubufakazi bungekho

Indlela yokuzenzakalela ibaluleke kakhulu kunomthetho owubhalele isimo esihle. Uma imfanelo elindelekile ingafiki neze ngoba i-ejenti ye-posture yephukile, inqubomgomo eyidingayo ingawela kokuzenzakalela okwamukela isikhathi. Funda umphumela wokuzenzakalela futhi uhlole ngamabomu isimo sokungabi khona kobufakazi, ngoba yiso leso simo umhlaseli osusa i-ejenti azosethula.

Amarekhodi amaningi e-DAP afanayo ahlanganiswa esikhundleni sokuxazululwa ngokulandelana kokufana kokuqala okulula, futhi ukubaluleka kwawo kwe-ACL kuyindlela ehlukile ekukhetheni amarekhodi. Funda incazelo yokuhlanganisa emhlahlandleleni ngaphambi kokucabanga ukuthi irekhodi eliqinile liyawina.

Phatha izikhathi esezivele zikhona, bese uhlola zombili izinto

Ukushintsha umthetho wokwamukela noma ukuhoxisa ubufakazi akuchazi ukuthi kwenzekani esikhatheni esivele simisiwe futhi esidlulisa ithrafikhi. Uma ukususwa ngokushesha kuyisidingo, landela inqubo esekelwayo yokuqeda nokuhlola kabusha isikhathi, esikhundleni sokulinda ukuxhumana okulandelayo. Lesi yisinyathelo esivame ukweqiwa ngesikhathi sehlakalo, futhi yilo umehluko phakathi kwenqubomgomo nomphumela.

Hlola ngomsebenzisi ofanayo ovunyelwe kuzo zombili izinsiza ngaphansi kokuhlolwa okuvunyelwe. Idivayisi evinjiwe kufanele ithole ukwenqaba noma umphumela wokulungisa ohlosiwe, kanti enye kufanele igcine izinsiza zayo ezigunyaziwe kuphela. Lokho kuqinisekisa umngcele wedivayisi ngaphandle kokuhoxisa okunye ukufinyelela komuntu okuvunyelwe.

Uma ungeke ukwazi ukwenza leyo miphumela emibili ihluke, inkinga isebufakazini, hhayi enqubomgomeni, futhi akukho kulungiswa kwemithetho okuzoyilungisa.