Iklayenti le-Fortinet Linux: hlola isango ngaphambi kokulungisa

Umhlahlandlela ogciniwe uthi faka imitapo yolwazi engu-32-bit, hlanganisa itimu ye-GTK futhi usebenzise isifaki kusukela kutheminali. Ingxenye yalelo seluleko yayilungile kokukhishwa okuthile kweklayenti, futhi akukho lutho kukho okungabuyisela imodi yethumbu isango elingasayinikezi. Ngaphambi kokushintsha iphakethe, thola isigaba sokuqala esihlulekile. Lokhu kuhamba kusukela esangweni kuya ngaphakathi, ngoba izimpendulo zikhona zishibhile futhi ukulungiswa kwendawo okungalungile yikho okuthatha isikhathi esiningi.

Ukuhlola 1: shono isigaba esihlulekile

Izigaba ezintathu zihluleka ngezindlela ezihlukene. Uhlelo aluqali, luyacala futhi lenqaba ubunikazi besiphakamiso, noma luyaxhuma futhi isango alinayo insizakalo yohlobo oluyidingayo. Ukuhluleka ngakunye kushiya ubufakazi baso: iphutha lomlayishi, umlayezo wesitifiketi, noma impendulo yesango ebalula imodi engatholakali.

Bhala lokho ngaphambi kokuthinta noma yini. Konke okulandela leli phuzu kuncike ekutheni isiphi isigaba osishilo, futhi lezi zilungiso ezintathu azinazinto ezifanayo.

Ukuhlola 2: ukukhishwa kwesango nemodi yethumbu

Imodi yethumbu ayisekho ezangweni zamanje, futhi ithebula lokuhlanganisa le-FortiClient 7.4.4 ne-Linux yilapho lokho kubhalwe khona: i-FortiOS 7.6.3 nakwamuva ayisanikezi imodi yethumbu ye-SSL VPN futhi iqondisa abaphathi ku-IPsec. Gcina umkhiqizo, ukukhishwa kanye nemodi kuhlangene nalo musho uma uwuphinda. Awusho lutho ngayo yonke imikhiqizo ye-Fortinet, futhi awusho lutho ngezici zokufinyelela kwewebhu ezisekhona. Ukuhambisana kwezinguqulo jikelele nokutholakala kwemodi eyodwa yethumbu kuyizivivinyo ezihlukene.

Buza umnikazi wesango izinto ezimbili: isiphi isikhishwa isango elisisebenzisayo, futhi yiziphi izindlela zokufinyelela ezivuliwe namuhla. Cela impendulo ngokubhaliwe, kanye nochungechunge lokukhishwa nekhasi lezilungiselelo noma umugqa wokuhlela okwavela kuwo, ngoba isiqinisekiso somlomo yiso esibuyisela abantu emhlahlandlelweni ogciniwe. Bese uhlola leyo mpendulo ngokumelene namanothi esango noma imethrikhi yomthengisi yalokho kukhishwa ngqo. Isiphequluli esibonisa ingosi yewebhu sikhombisa ukuthi ingosi iyaphendula, hhayi okunye.

Ukuhlola 3: uhlelo lweklayenti olugunyazwa umnikazi

Thola uhlelo nenguqulo yeklayenti le-Linux okugunyaziwe, bese uhlola uhlelo lokusebenza olusekelwayo, isakhiwo, ideskithophu nokugeleza kokuqinisekisa. Imethrikhi engu-7.4.4 iyisibonelo esiboshelwe enguqulweni, akuyona isincomo seklayenti elisha kakhulu futhi akuyona isethembiso kukho konke okuphuma kuyo. Buza ukuthi iyiphi iklayenti umnikazi azoyisekela ngempela, ngoba leyo mpendulo iyingxenye yokufuduka hhayi umcabango wakamuva. Iklayenti elifa ngaphambi kokuba iphakethe lalo lokuqala lifinyelele esangweni likhombisa okuthile ngekhompyutha ephathwayo, hhayi ngensizakalo.

Imitapo yolwazi engu-32-bit netimu ehlanganisiwe kushintsha lokho okungagcwaliseka yibhanari; akushintshi lokho okusekelwa umthengisi. Uma uhlelo lokusebenza noma ukugeleza kokuqinisekisa kungaphandle kwemethrikhi, umbuzo wokufaneleka usuphenduliwe.

Ukuhlola 4: cela iphrofayela yokushintsha

Uma inhlangano isuka emodini yethumbu ye-SSL VPN yaya ku-IPsec, cela iphrofayela entsha nenqubo yokubhalisa engxoxweni efanayo. Ungaqambi kabusha ukuhlela kwe-SSL bese ucabanga ukuthi izinkambu zizolandela: iphrofayela ye-IPsec ibalula inguqulo ye-IKE, isango elikude nobunikazi balo, indlela yokuqinisekisa, kanye nezihlungi zokuhamba ezamukelwa wuhlangothi ngalunye. Inqubomgomo ye-akhawunti nedivayisi nayo ingasetshenziswa ngendlela ehlukile. Ukuqamba kabusha kwenza iklayenti elibonakala lihleliwe kodwa elingaxoxisani lutho.

Funda iphrofayela ngaphambi kokuyethemba. Kufanele iveze inguqulo ye-IKE neziphakamiso, ukuthi ukuqinisekisa kusebenzisa isitifiketi noma ukhiye owabiwe ngaphambili, ukuthi yiziphi izixazululi zendawo nezasekude ezikhethiwe, nokuthi isango lilindele ini njengobunikazi balo. Qinisekisa ukuthi iklayenti le-Linux eligunyaziwe liyayisekela leyo ndlela yokuhlela, ngoba incwadi yokufuduka ayisona isitatimende sokulingana kwezici kukho konke ukukhishwa kweklayenti. Iklayenti elizimele njenge-openfortivpn akusona isihumushi se-OpenVPN, ngakho thatha konke okunye okune-SSL egameni njengokungagunyaziwe kuze kube umnikazi usho okunye kule modi, lokhu kugeleza kokungena kanye nale nqubomgomo yedivayisi.

Ukuhlola 5: ukuncika kwendawo, bese kuqinisekisa futhi kubhaliswe

Lapho isango neklayenti sekucacile, ukuhluleka kokuqalisa kuyinkinga yokupakisha, futhi imiyalelo yephakethe elinakekelwayo iyisihlobo okufanele silandelwe. Ukuhluleka kobunikazi be-TLS kungokomsebenzi: ama-ankile okuthembela negama elilindelekile kuwukuhlela kwakhe, hhayi okuthile okudluliswayo endaweni. Lezi yizigaba ezimbili lapho umhlahlandlela ogciniwe wawuke waba usizo khona.

Akukho kokubili okuxazululwa ngokwamukela isitifiketi esingaziwa noma ngokucisha ukuhlolwa kwesimo sedivayisi. Gcina ukuhlolwa kwe-MFA nedivayisi endaweni yako, ngoba ukubuyisela ukuxhumana ngokuyenza buthaka kushintsha ukuphazamiseka ngezigameko. Uma imodi isihambile, akukho ifulegi lendawo eliyibuyisayo.

Ngemva koshintsho olugunyaziwe, finyelela insiza yangasese ehlosiwe, qinisekisa ukuxazululwa kwe-DNS futhi uxhume kabusha kanye. Bhala iklayenti, ipulatifomu, ukukhishwa kwesango nemodi yethumbu ndawonye, ngoba umuntu olandelayo udinga kuzo zone. Uhlelo oluvuleka ngempumelelo lwedlule isigaba sokuqalisa sendawo, hhayi okunye.