I-VPN ku-iPad ngaphandle kokubuza iphasiwedi: izitifiketi noma ukungena okugciniwe
Iphasiwedi egciniwe nesitifiketi sedivayisi kususa isicelo ngezindlela ezihlukene. Qhathanisa kokubili, bese unquma ngokwehlukana ukuthi yini evula ithumbu.
«Yeka ukungibuza iphasiwedi» empeleni kuhlanganisa izidingo ezintathu esikhalazweni esisodwa, futhi ukusetshenziswa ku-iPad kuphendula kuzo ezindaweni ezihlukene. Isicelo sivela ekuqinisekiseni, isikhathi sivela ekusebenzeni, futhi ukusabalala sivela ekuphoqweni. Qala ngokukhetha imininingwane yokungena esusa isicelo, bese unquma ngokwehlukana ukuthi yini enquma ukuthi ithumbu livuleka nini. Ukuhlanganisa lezi zinqumo ezimbili yikho okwenza iphasiwedi egciniwe igcine isekuphrofayilini esalinde ukuthintwa.
| Saved or shared secret | Device certificate | |
|---|---|---|
| What the user sees | no prompt while the credential stays valid | no prompt, no password to rotate |
| What the admin manages | the secret in the profile and its distribution | enrollment, expiry and revocation per device |
| Typical failure | gateway demands a second factor | expired or revoked certificate |
Izinkinga ezimbili esikhalazweni esisodwa
Ukulungiselelwa kwe-IKEv2 yomdabu ku-iPad kungabhekisela kwiphasiwedi noma kwisitifiketi, futhi ukhiye AuthenticationMethod unquma ukuthi yikuphi okusebenzayo, kuyilapho PayloadCertificateUUID ibiza imininingwane yokungena enikeza ubunikazi. Ukuthi isango lizokwamukela yikuphi kwalokho kuwumbuzo womgomo wesiphakamiso, hhayi ukuthanda komxhasi. Ngakho into yokuqala okufanele isungulwe ukuthi yini isevisi ye-VPN evumayo, ngoba i-iPad ayikwazi ukuxoxisana iye endleleni enqatshwa olunye uhlangothi.
Kungemva kwalokho kuphela okunengqondo ukukhuluma ngokuthi ithumbu lisebenza nini, okuyisethi ehluke ngokuphelele yokhiye bephrofayili.
Ukukhetha kokuqala: imininingwane yokungena i-iPad engayisebenzisa futhi
Iphasiwedi ye-akhawunti egciniwe noma imfihlo eyabiwe yanelisa isango eliqinisekisa umsebenzisi noma iqembu, futhi isusa isicelo inqobo nje uma imfihlo isasebenza. Ubuthakathaka bayo umjikelezo wokuphila: imfihlo isephrofayilini, amadivayisi amaningi angayabelana, futhi ukuyishintsha kusho ukuthinta yonke iphrofayili eyiphetheyo. Uma isevisi iphinda ifune isici sokusetshenziswa kanye noma imvume yokuxhumana, akukho kulungiselelwa lwasekhaya oluguqula lowo mgomo ube ukungena okungagadiwe.
Iphasiwedi egcinwe uhlelo lokusebenza olulodwa nayo ayitholakali ngokuzenzakalela kolunye uhlobo lwe-VPN, yingakho i-akhawunti efanayo ingayeka ukubuza kumxhasi oyedwa futhi ibuze njalo kwesinye.
Ukukhetha kwesibili: isitifiketi sedivayisi esinokhiye waso
Isitifiketi sisusa isicelo ngendlela eqinile, ngoba i-iPad ikhombisa ukuthi inokhiye wangasese esikhundleni sokuphinda imfihlo. Lokho kudinga ukuthi isitifiketi seqabunga nokhiye waso kufike ngendlela yokubhalisa evunyelwe, futhi isango lamukele ukuqinisekiswa ngesitifiketi kwalokho kuxhumana. Ukungenisa isitifiketi se-CA kuphela kunika idivayisi izinto zokuthemba futhi akukho okunye, okuwukwehluleka okuvamile nokuthule.
Inani ngumsebenzi womjikelezo wokuphila. I-iPad ngayinye ithola ubunikazi bayo ukuze idivayisi elahlekile ikhishwe ngaphandle kokuphinda kukhishwe lonke iqembu, futhi izinsuku zokuphelelwa ziba izehlakalo zangempela zokusebenza. Isitifiketi esiphelelwa ngokuthule sibonakala sifana ncamashi nokuphazamiseka kwe-VPN ngakusasa lapho kwenzeka khona.
Khetha ngokwalokho okwamukelwa yisango, hhayi ngokuthanda
Buza umphathi we-VPN imibuzo emibili: yiziphi izindlela zokuqinisekisa isevisi eyamukelayo kulolu hlobo lomxhasi, nokuthi ngabe enye yazo idinga ukufakwa kokuxhumana. Uma impendulo iyisitifiketi kuphela, hlela ukubhalisa nokuvuselela. Uma impendulo iyiphasiwedi kanye nesici sesibili, vuma ukuthi isicelo ngumgomo futhi uyeke ukusithatha njengokonakala kwedivayisi. Uma kokubili kwamukelwa, isitifiketi siyaphumelela kumjikelezo wokuphila weqembu eliqondisiwe futhi iphasiwedi iyaphumelela emizamweni yokulungiselela yamadivayisi ambalwa.
Bhala indlela ekhethiwe ekurekhodweni kokusetshenziswa eduze kwesihlonzi sephrofayili, ngoba uma kungenjalo umuntu olandelayo othinta iphrofayili uzokhetha enye.
Bese uhlukanisa ukusebenza nokuqinisekisa
I-VPN On Demand ivula ithumbu lapho umbandela olungiselelwe ufana, kungaba isizinda se-DNS, uhlobo lwesikhombisi noma inethiwekhi ehlangene, futhi i-Apple ikubhala njengokungadingi ukuxhumana komsebenzisi. Lokho kufaneleka kahle ezinsizeni eziyimfihlo okufanele zifinyeleleke kuphela lapho okuthile zicela. Lokho akufani ne-Always On ephethwe, egcina ukusabalala kuphoqelelwe futhi iletha izidingo zayo zokuqondisa nephrofayili.
Imininingwane yokungena esebenzayo ayisizi kukho kokubili. Ama-iPad amaningi anesitifiketi esihle ngokuphelele futhi asalinde ukuthintwa ngesandla ngoba awukho umthetho wokucela owake waqala.
Lethula isidingo ngendlela umphathi angayisebenzisa: le iPad kufanele ifinyelele lezi zinsiza ngaphandle kokufakwa komsebenzisi okuphindaphindiwe, ngalolu hlobo lwemininingwane yokungena, nangaphansi kwale mithetho yokusebenza nokuphazamiseka. Uma isevisi yamanje ingakwazi ukuhlangabezana nalezo zimo, izicelo eziphindaphindiwe ziwumgomo osebenza ngendlela okuhleliwe.