Isibali sikhathi se-VPN esingenzi lutho sibala ithrafikhi, hhayi umsebenzi wekhibhodi
Isikhathi sokuvala sokungenzi lutho sesango sibuka amaphakethe emhubheni, hhayi ikhibhodi yakho. Hlukanisa izikhathi zokungenzi lutho, izikhathi zokukhiya isikrini ngaphambi kokushintsha noma yiziphi.
Isibali sikhathi esinqamula iseshini ye-VPN engenzi lutho sibala amaphakethe, hhayi ukuchofoza izinkinobho. Ibona ukungabikho kokuxhumana emhubheni, ngakho-ke ikhompuyutha ephathekayo enemeyili, i-ejenti eyisipele noma iklayenti lengxoxo ngemuva ayibukeki ingenzi lutho kuyo. Lelo qiniso elilodwa lichaza izinkomba zombili zesikhalazo esijwayelekile: iseshini esinda ekudleni kwasemini ende, kanye neseshini efa phakathi nomsebenzi osebenzayo. Nquma ukuthi yiliphi iwashi olwa nalo ngaphambi kokuthi uyofuna isilungiselelo.
Okubonwa isibali sikhathi
Ku-Cisco ASA i-knob iyi-vpn-idle-timeout, isethwe ngaphansi kwenqubomgomo yeqembu noma inqubomgomo yomsebenzisi, futhi ikala isikhathi ngaphandle komsebenzi wokuxhumana. Iyunithi ingamaminithi, okuzenzakalelayo kuzuzwa njengefa, futhi isheke lisebenza ngokumelene nokubala kwethrafikhi kuseshini kunokuphikisana nanoma yini isistimu yokusebenza eyaziyo mayelana nemishini yokufaka. Isango alinalwazi noma umuntu ukukhibhodi. Iyazi ukuthi igcine nini ukubona iphakethe lalelo klayenti.
Iwashi lesibili yi-vpn-session-timeout, futhi liphelele. Iqala lapho iseshini isungulwa futhi iphelelwa yisikhathi kungakhathaliseki ukuthi umhubhe umatasa kangakanani. Iseshini ephela ngemva kwehora elilodwa ngqo lokusetshenziswa kanzima yileso sibali-sikhathi, hhayi isibali sikhathi esingenzi lutho, futhi alikho inani lokuthayipha elizosinweba.
Funda womabili amanani ngaphambi kokushintsha noma yikuphi, ngoba ayahluleka ngezindlela ezibukeka zifana nesihlalo somsebenzisi.
Amawashi amathathu ahlukene abantu bawabiza ngokuthi awasebenzi
Izinqubomgomo ezintathu ezingahlobene zichazwa njengesibali-sikhathi sokungenzi lutho, futhi eyodwa kuphela yazo emayelana nokuthula kwenethiwekhi.
| Measure | What it observes | How it fails |
|---|---|---|
| Gateway idle timeout | No packets from the client on the tunnel | Drops after a quiet period, survives background traffic |
| Gateway session timeout | Elapsed time since the session was established | Drops at a fixed interval no matter how active the tunnel is |
| Screen lock and device policy | Human presence at the device | Session stays up while the laptop sits unattended and unlocked |
Umugqa wesithathu yilowo abantu abawufunayo ngempela uma bethi i-VPN kufanele ikhiywe lapho othile ehamba. Isibali sikhathi se-VPN asikwazi ukukala ubukhona. Uma imfuneko iwukuthi ikhompuyutha ephathekayo engagadiwe ilahlekelwa ukufinyelela, lokho kuyingxenye yenqubomgomo yokukhiya isikrini nedivayisi, lapho ingaphoqelelwa ngaphandle kwethrafikhi engemuva.
Ukuxuba lezi zintathu kukhiqiza izicelo ezinjengokunqamula ngemuva kwemizuzu engamashumi amathathu yokungathayipha, okungekho isango le-VPN elingakwazi ukulisebenzisa ngokwethembeka.
Thola inqubomgomo engumnikazi walokhu kuxhumana
Khomba iklayenti kanye nephrothokholi ngaphambi kokubheka isilungiselelo. Iphrofayela eyakhelwe ngaphakathi ye-macOS Cisco IPsec, uxhumano lwe-L2TP lwendabuko kanye ne-Cisco Secure Client azivezi izilawuli ezifanayo, futhi isithombe-skrini sebhokisi lokuhlola lokunqamula-uma-ingenzi lutho kwelinye lawo akuwona ubufakazi mayelana nezinye. Amaphrofayili omdabu adalula okuncane ngale kweseva, i-akhawunti kanye nemfihlo eyabiwe. Isibali sikhathi sihlala esangweni.
Ku-ASA, funda inqubomgomo esebenzayo yomsebenzisi noma iqembu kunenqubomgomo ezenzakalelayo yawo wonke umuntu:
show running-config group-policy NAME | include timeout
show vpn-sessiondb detail anyconnect filter name USEROkukhiphayo kwemininingwane yeseshini kuklelisa ukungenzi lutho kanye nokuphela kwesikhathi kweseshini okusetshenziswe ngempela, kanye nesikhathi esisele. Leyo yinqubomgomo esebenzayo, ifa lifakiwe, leyo ngcaphuno yokuqalisa-config engakwazi ukukutshela yona. Qhathanisa neqembu okholelwa ukuthi umsebenzisi ukulo, ngoba inqubomgomo yomsebenzisi idlula inqubomgomo yeqembu.
Kungani iMac yakho ibukeka ixhunyiwe ngemuva kwemizuzu engamashumi amathathu
Ithrafikhi yangemuva iyimpendulo evamile, futhi ayisona isiphazamisi. Imeyili, ukuvumelanisa isithombe, ukuhlola isibuyekezo, iklayenti lengxoxo elibambe isokhethi livuliwe, noma ithebhu yesiphequluli enesokhethi lewebhu ngalinye likhiqiza amaphakethe isango elibalwa njengomsebenzi. Umhubhe uhlala ulungile ngoba usetshenziswa ngempela, hhayi nguwe. Buka izinto zokubala kunesikrini uma ufuna ubufakazi.
Isithombe sesibuko iseshini eyehlayo ngenkathi uthayipha, okuwukuphela kwesikhathi seseshini noma ushintsho lwenqubomgomo yomlawuli, hhayi ukungenzi lutho.
Kunomphumela ohlangothini lweklayenti okufanele ukwazi nawo. Amanye amaklayenti athumela ama- keepalive awo noma ama-dead-peer probe, futhi lawo maphakethe asetha kabusha isibali esingasebenzi sesango. Kungakho i- keepalive yengezwe ukuze kunqotshwe isikhathi sokuvala isebenza, futhi kungani kuyithuluzi elingalungile: ishintsha ubufakazi isibali-sikhathi esibubonayo ngaphandle kokushintsha imfuneko yokugunyazwa ngemuva kwenqubomgomo.
Shintsha i-knob elungile ngaphandle kokuphula iphuzu layo
Uma umgomo uwukuqeda isigaba soxhumo ngemva kokungasebenzi kwenethiwekhi okugunyaziwe, cela lokho kanye ngolimi lwenqubomgomo, futhi ugcine ubude besikhathi beseshini njengenani elihlukile nelihlosiwe. Yibe usuyivivinya ngaphansi kwenqubo yomlawuli ngomsebenzi wangemuva obalelwe wona.
Uma umgomo uwukumisa ukufinyelela lapho umuntu eshiya ideski, i-VPN isendlalelo esingalungile sokuyiphoqelela.
Ungalokothi wengeze i-keeveave ekhiqiza ithrafikhi ukuze nje ugcine iseshini iphila idlule inqubomgomo ebhalelwe ukuyiqeda. Lokho kuguqula isilawuli sibe okusemthethweni, futhi sitholakala ekuhlolweni kwemali esikhundleni sethikithi. Shintsha inqubomgomo, noma ushintshe imfuneko.