Cisco Secure Client Always-On: qala ngokufaka iphrofayela
I-Cisco Secure Client Always-On idinga ukuthi iphrofayela yedivayisi yokugcina ibe khona ngaphambi kokuqinisekisa: hlola ububanzi ngaphambi kokungena, ukulethwa, inqubomgomo yokuhluleka namanethiwekhi athenjiwe.
Izilungiselelo zohlangothi lwedivayisi azikwazi ukwenza ikhompyutha ephathekayo engabhalisiwe ukuthi iziphathe njengedivayisi yokugcina ephethwe, futhi ukusatshalaliswa okuningi kwe-Always-On kuyama kulelo gebe. I-Cisco Secure Client iqinisekisa inqubomgomo ngokusebenzisa iphrofayela esekhompyutheni, ngakho ukulethwa kwaleyo phrofayela kuyingxenye yohlelo lokuqinisekisa, hhayi imininingwane yalo. Landela izinyathelo ezinhlanu ezingezansi ngokulandelana, futhi ume kwesokuqala esingagcini, ngoba isinyathelo sakamuva asikwazi ukubuyisela igebe langaphambilini.
Isinyathelo sokuqala: nquma ukuthi umthetho uqala ngaphambi kokungena yini
I-Always-On isungula umhubhe ngemva kokungena komsebenzisi, futhi imibhalo yomkhiqizi isho ngokucacile ukuthi ayisunguli ukuxhumana lapho kungekho muntu ongenayo. Uma isidingo sakho kuwumhubhe okhona ngaphambi kwesikrini sokungena se-Windows, lesi isici esingalungile futhi akukho ukulungiswa kwephrofayela okukushintshayo. Ukufaka iphrofayela ngaphambili akuguquli ukuziphatha kwangemva kokungena kube ukuziphatha kwangaphambi kokungena.
Bhala isidingo njengenye yezindlela ezine ezihlukene zokuziphatha, bese uhlola ngayinye ngayinye. Ukuxhumana okukodwa okuphumelelayo kufakazela icala elijwayelekile kuphela, futhi ezinye ezintathu yikhona lapho amathikithi okusekela evela khona. Phawula ukuthi umugqa upi isidingo sakho esiwudinga ngempela, ngoba iqembu elidinga kuphela ukuziphatha kwangemva kokungena lingasidlula impikiswano yangaphambi kokungena. Ithebula uluhlu lokwamukela, hhayi uluhlu lwezifiso.
| Behaviour | What you are proving |
|---|---|
| First use on a new machine | The profile arrived before any user connection |
| After logon | The tunnel starts without the user opening the client |
| Trusted network entry | The client stays off where it should |
| Tunnel cannot establish | The failure policy does what you decided |
Uma isidingo kuwumugqa wesibili kuphela, ingxenye esele yaleli khasi isasebenza, kodwa ukuhlolwa kokwamukela kushibhe kakhulu.
Isinyathelo sesibili: qinisekisa ukuthi iphrofayela isivele isedivayisini yokugcina
Ukuqinisekisa kufunda iphrofayela yasendaweni, ngakho umbuzo wokuqala ukuthi ingabe lelo fayela likhona ngaphambi kokuthi umsebenzisi axhumane nhlobo. Iphrofayela elandwa ngesikhathi sokuxhumana kokuqala okuphumelelayo ilethwa ngemuva kakhulu kumshini okufanele uvikelwe kusukela ekungeneni kwawo kokuqala. Yithumele ne-installer noma ngokulawulwa kwedivayisi yokugcina, futhi ubheke ukuba khona kwefayela njengokuhlolwa kokwakha, hhayi njengokulindela.
Get-Service vpnagent | Select-Object Status, StartType
Get-ChildItem 'C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile'
Get-Content 'C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile\profile.xml' | Select-String -Pattern AlwaysOnUkufakwa okudala kwe-AnyConnect kugcina lelo fayela elifanayo kufolda elinegama elihlukile, ngakho qinisekisa indlela yenguqulo yeklayenti oyifakayo esikhundleni sokukopisha indlela encwadini yakudala yokusebenza. Isevisi kufanele ibe iyasebenza futhi isethwe ukuthi iqale ngokuzenzakalela, ngoba i-ejenti emisiwe iyidivayisi yokugcina engaqinisekisiwe kungakhathalekile ukuthi iphrofayela ithini.
Uma iphrofayela ingekho, ma ume lapha. Ukulungisa inqubomgomo yokuhluleka noma uhlu lwamanethiwekhi athenjiwe kumshini ongenayo iphrofayela kuwumsebenzi osendleleni engasebenzi nhlobo.
Isinyathelo sesithathu: khetha ngamabomu ukuziphatha kokuhluleka
Okwenzekayo lapho umhubhe ungeke ukwazi ukuphakama kuyisinqumo esihlukile kukona ukuthi umhubhe uqala ngokuzenzakalela yini. Inqubomgomo yokuhluleka kokuxhumana inquma ukuthi idivayisi yokugcina ingasebenzisa i-inthanethi ngesikhathi ukusungulwa kuqhubeka kuhluleka, futhi lezi zilungiselelo ezimbili zivame ukudidaniswa ngoba zombili ziseduze nezinketho ze-Always-On. Khetha eyodwa ngamabomu futhi ubhale isizathu.
Ukuvimba konke ukuxhumana kuzwakala kuqinile futhi kukhiqiza uhlobo lwayo lwezigameko: umsebenzisi osenethiwekhi lapho ingasifiki khona isango akakwazi ukulanda ukulungisa obekuzobuyisela isevisi. Ukuvumela ukufinyelela kwe-inthanethi kugcina umshini usetshenziseka futhi kwenza buthaka isiqiniseko sokuthi ithrafiki ivikelwe. Zombili izimpendulo zingase zibe zilungile, kodwa akukho nokukodwa okuyisimo esizotholwa ngesikhathi sokuphazamiseka.
Ukuziphatha kokuphinda kuzame kuyingxenye yesinqumo esifanayo. Iklayenti elizama unomphela lifihla isango eliphukile ekugadweni, kuyilapho iklayenti eliyekayo ngemva komzamo owodwa libonakala liphukile kumsebenzisi. Nquma ukuthi idivayisi yokugcina kufanele iqhubeke izama isikhathi esingakanani ngaphambi kokuthi inqubomgomo yokuhluleka ithathe izintambo, futhi uhlole leso sikhathi esikhundleni sokusicabanga.
Isinyathelo sesine: chaza ukuthi yini ebhekwa njengethenjiwe
Ukutholwa kwamanethiwekhi athenjiwe kusebenzisa imibandela ekwiphrofayela yeklayenti, njengezizinda ze-DNS ezilungisiwe noma amaseva e-DNS athenjiwe, ukuze kunqunywe ukuthi idivayisi yokugcina isivele isenethiwekhi lapho umhubhe ungadingeki khona. Lolo hlu yiwo wonke umthetho, ngakho uhlu olungenalutho noma oluzuzwe njengefa lwenza lesi sici singasebenzi noma singalindeleki.
Ungakushintshi ngesicabango mayelana nesigaba senethiwekhi se-firewall ye-Windows. Umshini ungaba kunethiwekhi enomaka wesizinda futhi usaba endaweni ongayithembi, futhi umshini onephrofayela yomphakathi ungaba ngaphakathi kwesakhiwo sakho. Imibandela yokutholwa kufanele ichaze amanethiwekhi akho ngokuqondile, hhayi okuthile okumelela wona.
Hlola ukudlula kuzo zombili izinhlangothi, kuhlanganise nalelo cala lapho idivayisi yokugcina isuka kunethiwekhi ethenjiwe iya kokungathenjiwe ngesikhathi isikhathi sesikhala sivuliwe. Ukunqamuka nokuxhuma kabusha izigameko ezihlukene, futhi inqubomgomo ebhekana nesokuqala kuphela ishiya isikhala lapho umhubhe ungekho.
Isinyathelo sesihlanu: yenza inqubomgomo yedivayisi yokugcina ibe nzima ukuyihoxisa
Ukuqinisekisa kudivayisi yokugcina kunamandla ngokulingana nezilawuli zedivayisi ngokwayo. Amalungelo omlawuli wasendaweni avumela umsebenzisi ukuthi amise isevisi ye-ejenti, ashintshe iphrofayela noma akhiphe iklayenti, futhi ifolda yephrofayela abasebenzisi abajwayelekile abangabhala kuyo iwumthetho ongabe umuntu ekuwuhlela. Kokubili izinkinga zokuphathwa kwedivayisi yokugcina i-VPN headend engeke ikuxazululele zona. Buza ithimba ledeskithophu ukuthi yikuphi kulezi zimo ezimbili okusebenzayo ngaphambi kokuthembisa ukuqinisekisa, futhi ubhale impendulo ohlelweni lokufaka.
Nquma izinga lokukhiya ngeso lokugcina indlela yokubuyisela. Iphrofayela evimbela umsebenzisi ukuthi afinyelele i-inthanethi futhi emvimbe nasekulungiseni iklayenti iguqula ucingo lokusekela lube ukuhambela endaweni, ngakho gcina indlela yokubuyisela ebhaliwe engathembeli ekutheni umhubhe usebenza.
Gcina ukuqinisekiswa kwesitifiketi sesango kuvuliwe, futhi usabalalise iphrofayela kuphela ngesiteshi osithembayo. Iklayenti elikhiyiwe elamukela iphrofayela evela emthonjeni ongalindelekile lishintshile umngcele wokuthembana esikhundleni sokuwuqinisekisa.