I-imeyili yokwehluleka kwe-VPN ku-FortiGate: hlunga izinkambu, hhayi amalogi

Izinqumo ezimbili zicashile ku-«ngithumele i-imeyili uma ukungena ku-VPN kwehluleka». Okokuqala ukuthi isaziso silethwa kanjani: i-imeyili eyodwa ngomcimbi ngamunye, isifinyezo sokhathi, noma isexwayiso esivela kumqoqi. Okwesibili ukuthi umlayezo uqukethe ini. Ukungalungi kokuqala kugcwalisa ibhokisi leposi, futhi ukungalungi kwesibili kususa izinkambu ezenza isexwayiso sisebenze. Asikho isinqumo esidinga ukucindezela isigaba selogi ye-VPN, futhi yilowo umzila omfishane obhubhisa umkhondo wokucwaninga buthule.

Izinhlobo ezintathu zokuletha nokuthi iyiphi ifanele nini

Khetha ngokusekelwe ekutheni ubani ophendulayo nokuthi angashesha kangakanani, hhayi ngokusekelwe ekutheni yiluphi ukhetho olulula ukuluhlela. I-FortiGate eyodwa evikela ihhovisi elilodwa ingathethelela i-imeyili ngomcimbi ngamunye. Ukuhlelwa okufanayo egedeni elamukela imizamo yokugcwalisa ubufakazi bokungena obuntshontshiwe kukhiqiza izinkulungwane zemilayezo ngosuku futhi kuhlungwa kufolda okungekho oyifundayo.

Qala kurekhodi yomcimbi, hhayi emgqeni wesihloko

Funda umcimbi ogciniwe omelela kunguqulo oyisebenzisayo ngempela. Isithenjwa samalogi se-FortiOS 7.4.8 sibona ukwehluleka kokungena ku-SSL VPN njengomcimbi 39426, futhi izinkambu zawo zihlanganisa action, user, remip, reason, tunneltype kanye vd. Ukuklama isihlungi kusuka esihlokweni se-imeyili esithunyelwe kunokuba kusuke kuleyo rekhodi yilokho okwenza abantu bagcine befana negama lenkambu elibhalwa ngendlela ehlukile yi-firmware yabo. Vula ukwehluleka okubili noma okuthathu kwangempela futhi uqinisekise ukuthi izihlonzi ziyafana ngaphambi kokubhala isiqalisi. Imizuzu emihlanu eyithathayo mifishane kuneviki lesexwayiso esikhale kumcimbi ongafanele.

Umgqomo wokuzenzakalela uhlanganisa isiqalisi selogi yemicimbi nesenzo, futhi isiqalisi yindawo okufanele ibe khona inketho yomcimbi. Engeza kuphela izimo zenkambu ezingeziwe ezidingwa yisidingo sakho; isiqalisi esihlunga isethi encane yezinkambu sisahlinzeka ngokuziphatha okungahloliwe kwezinye.

Akha umzimba omfushane kusuka kuzinto ezisekelwayo

Ezinguqulweni ezibhala ukushintshwa kwezinkambu zelogi kwezenzo ze-imeyili, umzimba ungaba mfushane futhi usewusizo. Isimo esingezansi siyisibonelo; qinisekisa amagama ezimpawu kanye nokubhala kokushintsha ngokuqondene nenguqulo yakho ye-firmware ngaphambi kokuyamukela.

config system automation-trigger
    edit "ssl-vpn-login-fail"
        set event-type event-log
        set logid 39426
    next
end

config system automation-action
    edit "mail-vpn-fail"
        set action-type email
        set email-to "[email protected]"
        set email-subject "SSL-VPN login failed"
        set message "Account: %%log.user%% | Source: %%log.remip%% | Reason: %%log.reason%%"
    next
end

Ithempulethi ebonisa inkambu engenalutho ayifakazanga ukuthi umcimbi wawuntula leyo datha. Hlola igama lenkambu nokubhala kokushintsha kuqala, bese uhlola ngokwehluleka okulawulwayo okukodwa futhi ufunde umlayezo wangempela. Engeza ubunikazi bedivayisi kanye nesikhathi sokwenzeka ukuze ophendulayo athole irekhodi eliphelele ngaphandle kokuqagela ukuthi iyiphi iyunithi ethumele i-imeyili.

Thulisa umthamo ngaphandle kokususa irekhodi

Ukulawula ijubane, ukuqoqa kanye nokuhlobana kungokwesendlalelo sokuletha. Ukukhulisa izinga elincane lobucayi be-imeyili kukho konke kuyithuluzi elibuthuntu elifihla imicimbi engahlobene, futhi ukucisha isigaba selogi ye-VPN kubi nakakhulu: imicimbi iyeka ukubhalwa ngokuphelele. Gcina indawo yelogi egunyaziwe kanye nenqubomgomo yokugcina njengoba zazinjalo, futhi esikhundleni salokho vumela umzila wesaziso uthule kakhulu. Bhala phansi lokho okwacindezelayo, ngoba umuntu olandelayo uzothola isikhala ebhokisini leposi futhi udinga ukwazi ukuthi kwakungenziwa ngamabomu.

Uma umzila omusha uqinisekisiwe, susa noma yimuphi umthetho we-imeyili wakudala ohlangana nawo ngoshintsho olubuyekezwe. Ukuphetha ngemizila emibili ekhalayo yomibili, noma akukho ekhalayo ngoba endala yacishwa kuqala, kuwumphumela ojwayelekile wokuhlanza ngaphambi kokuhlola.

Funda ukwehluleka njengokwehluleka

Umcimbi wokuqinisekisa ohlulekile awusona isikhathi se-VPN esiphumelele, futhi igama lomsebenzisi kumcimbi akusona isabelo esiqinisekisiwe kumuntu. Hlobanisa isizathu nokungena okuphumelele, umsebenzi womsebenzisi owaziwayo kanye nemizamo ephindwayo ngaphambi kokumemezela i-akhawunti ukuthi isengozini, futhi usho esexwayisweni ukuthi yiziphi kulezo oziqinisekisile.

Thumela isaziso kuphela kubamukeli abagunyaziwe. Amagama e-akhawunti, izihlonzi zedivayisi zangaphakathi kanye namakheli omthombo zibucayi ngokokusebenza, futhi uhlu lokusabalalisa olukhula ngenxa yokunethezeka luba umzila wokuvuza. Umzila owodwa osebenzayo kanye nomkhondo wokucwaninga ophelele yiwo wonke umgomo.