Ukwenqatshwa kwendawo ku-Firebox: qala ngokuthola isigaba sokungena se-VPN
Umthetho ovimbela iklayenti le-VPN ngokuvamile umgomo wokungena, hhayi umthetho wokufinyelela komsebenzisi. Izihlolo eziyisithupha ezithola isigaba sangempela ngaphambi kokuthi ushintshe noma yini.
Umuntu kwelinye izwe akakwazi ukuxhuma, futhi umcabango wokuqala ukubheka umthetho onikeza ukufinyelela ezinsizeni zangaphakathi. Lowo mthetho usebenza ngemva kokwamukelwa, ngakho awukwazi ukuba yikho okwenqaba ithumbu. Isigaba esivimbayo sitholakala ndawana thize endleleni yokungena, futhi i-Firebox inendlela yokungena engaphezu kweyodwa kuye ngesevisi ye-VPN. Yenza izihlolo ngokulandelana futhi ume ngokushesha lapho esinye sazo sichaza ukwenqatshwa.
Ihlolo 1: qamba isevisi engenayo
Ku-Mobile VPN ene-SSL, i-Access Portal kanye ne-BOVPN phezu kwe-TLS, okokungena okuvelayo umgomo we-WatchGuard SSLVPN. Sebenzisa umkhawulo obuhloswe lapho, kusevisi elungiselelwe ngempela, esikhundleni sokucabanga kusuka kumthetho wokufinyelela womsebenzisi osebenza kamuva.
I-IPsec ithatha enye indlela. Umgomo we-IPSec owakhelwe ngaphakathi uvumela ithrafikhi ye-IPsec yangaphandle ukuthi ingene ku-Firebox ezinsizeni ezifanele ze-branch neze-VPN yeselula, futhi uthatha indawo ephambili kunomgomo we-IPSec owenziwe ngesandla. Uma iklayenti lakho lingeye-IKEv2, usendleleni yesibili leyo, futhi umgomo we-SSLVPN awunandaba.
Ukwenza iphutha lapha yilokho okuchitha intambama okuvamile kulo mkhakha: ukuhlela umgomo ongawuboni neze iphakethe, bese uphetha ngokuthi umkhawulo awusebenzi.
Ihlolo 2: funda ukwenqatshwa, hhayi ithiyori
Yenza umzamo owodwa olawulwayo ovunyelwe futhi uhlobanise izinto ezine: ikheli lomthombo lomphakathi leklayenti, isevisi yokungena eyayithinte, umgomo ohambisanayo, nanoma yisiphi isizathu se-Deny kusigcini. Umhlahlandlela we-WatchGuard wokuxazulula izinkinga ze-IKEv2 uphawula ukuthi indawo kanye nokuphathwa kwamaphakethe okuzenzakalelayo kungase kwenqabe ithrafikhi ngaphambi kokwamukelwa komgomo owakhelwe ngaphakathi, okusho ukuthi ukwenqatshwa okukubonayo kungase kusho isigaba ongakacabangi ngaso.
Ukuhlukaniswa kwezwe kulandela umthombo wenethiwekhi obonwe. Umsebenzisi ozulazulayo, i-NAT engaphezulu noma enye indlela egunyaziwe kungashintsha lokho i-Firebox ekubonayo, ngakho qinisekisa ikheli, hhayi incazelo yomsebenzisi yokuthi ukuphi. Cela ikheli lomphakathi elibonwa yiklayenti bese uliqhathanisa nomthombo kusigcini se-Firebox. Uma kuhluka, ukuhlukaniswa kulandela indlela okungekho muntu oyishiloyo.
Ihlolo 3: ingabe umgomo owakhelwe ngaphakathi usengumnikazi?
Uma umgomo we-IPSec owenziwe ngesandla ubonakala ungashaywa indiva, hlola ukuthi owakhelwe ngaphakathi usavuliwe yini. Umthetho wesandla ofihlwa umthetho wangaphakathi onamandla aphezulu kanye nomthetho wesandla okuwukuphela kokwamukelwa kuyizilungiselelo ezihlukene ezinobuso obubonakala bufana.
Nquma ukuthi iyiphi oyifunayo ukuba ibe ngumnikazi wendlela. Uma kungumgomo wesandla, lowo wangaphakathi kufanele unganyaziswa kuleyo thrafikhi, futhi yilapho ihlolo elilandelayo liqala khona.
Ihlolo 4: hlela okuzothatha indawo ngaphambi kokunyazisa
Ukunyazisa umgomo we-IPSec owakhelwe ngaphakathi kususa ukwamukelwa kwawo ezinsizeni ze-VPN ezithintekile. Lokho kufaka namathumbu e-branch okungenzeka ungawacabangi ngenkathi ulungisa uxhumano lomsebenzisi oyedwa weselula.
Qala ngokuhlela okuzothatha indawo ngokuphelele: yiziphi izinsizakalo ezidinga ukwamukelwa, yimiphi imikhawulo yomthombo ezizoyithola, nokuthi uzolawula kanjani idivayisi uma ushintsho lungahambi kahle. Gcina indlela ezimele yokuphatha nokubuyisela ivuliwe, ngoba iphutha lapha lingasusa ithumbu obungayisebenzisa ukuyilungisa. Bhala izinyathelo zokubuyisela kurekhodi loshintsho, kuhlanganise nokuthi ungafinyelela kanjani kudivayisi uma indlela ye-VPN ingekho. Bese uhlola ukuvuselelwa, hhayi kuphela uxhumano lokuqala.
Ukuxhumana okusebenzayo kanye nokuxoxisana kabusha kwakamuva kokubili kungase kuncike ekwamukelweni. Ushintsho olusebenza kuseshini oyihlolile kodwa lwehluleke ekushintsheni kokhiye okulandelayo umphumela ojwayelekile wokuthatha indawo yokwamukelwa ngaphandle kokuhlola ukuvuselelwa.
Ihlolo 5: gcina ubunikazi buhlukile endaweni
Indawo yengeza umongo esinqumweni sokungena. Ayisunguli ukuthi umsebenzisi ungubani, futhi akufanele ithathe indawo yezihlolo zobunikazi besango, ukugunyazwa kwe-akhawunti noma i-MFA.
Uma imfuneko yebhizinisi ingenye yabasebenzisi abagunyaziwe abavela ezindaweni ezigunyaziwe, udinga zombili izilawuli. Umthetho wendawo ovumela izwe lonke awuyona indawo yokufakazela ubuqiniso, futhi umsebenzisi ofakazelwe endaweni evinjiwe umbuzo womgomo hhayi iphutha.
Ihlolo 6: kubhale phansi futhi uqinisekise zombili izindlela
Bhala isevisi, umgomo wokungena, ububanzi bendawo obuhlosiwe, okungafakwanga kanye nomnikazi wokubuyisela. Bese uhlola indlela yeselula nokungenani indlela eyodwa yesayithi ngemva koshintsho, ukuze umkhawulo uhlale unamathele kusevisi owawukhelwe ukuyilawula.
Ekugcineni, funda kabusha ukwenqatshwa owaqala ngakho. Uma sekushintshile kusuka ekwenqatshweni kwendawo kuya ekwehlulekeni kokuqinisekisa noma kokugunyaza, inkinga yokungena isixazululiwe futhi enye isibonakala manje. Umhlahlandlela we-WatchGuard wokwenqatshwa kwe-IKEv2 iwumbhalo oyisethenjwa wokulandelana kwezigaba okuchazwe ngenhla.