Isiqinisekisi se-VPN esilahlekile: shintsha ngaphandle kokucisha i-MFA

Othile ulahlekelwa ucingo futhi ithikithi lifika njenge-VPN ephukile. Lolo hlaka lulungile kabili: i-akhawunti isekhona, futhi isango lisathemba umhlinzeki wobunikazi, ngakho ingxenye eyodwa ephukile into eyodwa umuntu angasenayo. Yiphatha njengokubuyisela hhayi ukuphazamiseka: qinisekisa umceli, bhalisa esikhundleni, susa indlela elahlekile, bese ufakazela ukuthi i-akhawunti iyasebenza. Konke lokhu kucabanga ukuthi uhlelo lwalubhaliwe ngaphambi kokulahlekelwa, ngoba ukuluqamba phakathi nocingo yikho okwenza i-MFA igcine icishiwe kubo bonke.

Isinyathelo 1: funda izinto ezibhalisiwe kurekhodi, hhayi enkumbulweni

Umbuzo wokuqala awukho ukuthi iyiphi idivayisi elahlekile, kodwa ukuthi yini enye i-akhawunti engayisebenzisa. I-akhawunti ingaba nephasiwedi kanye ne-push, ikhodi esekelwe esikhathini, ukhiye wehadiwe kanye namakhodi okubuyisela aphrintiwe, futhi ukulahlekelwa okukodwa kuzo kwenzeka okuhluke ngokuphelele ekulahlekelweni okukodwa kuphela. Funda uhlu lwezindlela ohlelweni lobunikazi esikhundleni sokucela umsebenzisi ukuthi alukhumbule, futhi ku-Microsoft Entra tenant umbuzo uwumugqa owodwa:

Get-MgUserAuthenticationMethod -UserId [email protected]

Bese ubhala irekhodi lokubuyisela ngenkathi i-akhawunti isasebenza: isikhombisi se-akhawunti, izinto ezibhalisiwe, lapho amakhodi okubuyisela akhona, ubani ongaqinisekisa umceli ngokuzimela, kanye nokuthi i-akhawunti ifinyelela ziphi izinhlelo. Kugcine kusethi yempahla evikelwe eqenjini elivele liyisebenzisa, ungakugcini kwinothi enamakhodi asebenzayo. Lezo zinkambu ezinhlanu zishintsha ucingo lokwethuka lube uhlu lokuhlola, futhi isiqondiso se-NIST somjikelezo wokuphila kwesiqinisekisi sithatha ukubuyisela njengengxenye yobufakazi hhayi okuhlukile kukho.

Rekhoda itshaneli yokuqinisekisa njengenkambu yayo, ngoba yiyo ingxenye abantu abayeqayo. Inombolo yocingo exhunywe ku-akhawunti ayiyona itshaneli ezimele lapho umuntu ocela ephethe ucingo naye.

Isinyathelo 2: qinisekisa umceli ngaphandle komzila ohlulekayo

Yenza ukuhlolwa kobunikazi ngomzila ongaxhomekekile ku-VPN, ebhokisini leposi noma kudivayisi elahlekile. Ukushayela umnxeba emuva kunombolo evela kurekhodi labasebenzi, noma ukuhlola ubuso nobuso nomphathi osevele kukhathalogi, kokubili kuyasebenza; umlayezo wengxoxo othunyelwe ku-akhawunti ebuyiselwayo awusebenzi. Ukuhlola kumayelana nomuntu, hhayi nekhono lakhe lokuphendula imibuzo nge-akhawunti, ngoba imininingwane ye-akhawunti iyavuza. Rekhoda ukuthi ubani oqinisekise isicelo nanini, ngoba umhloli olandelayo uzofuna kokubili.

Lapho isicelo sifika ngokuphuthuma nengcindezi yokweqa ukuhlola, yiso leso sikhathi sokwehlisa ijubane. Inkohliso yokubuyisela ibukeka njengozakwethu onosizo ogijimayo.

Isinyathelo 3: bhalisa esikhundleni, bese ususa into endala

Bhalisa isiqinisekisi esisha ngokugeleza kokubhalisa okujwayelekile, ungakwenzi ngokweqa kokuphatha. Bese ususa indlela elahlekile ngokucacile, ngoba ukubhalisa esikhundleni kushiya isiqinisekisi sangaphambili sigunyaziwe kuze kube umuntu uyasusa. Uma idivayisi endala ingaba sezandleni zomunye, thatha ukususa njengokuphuthumayo futhi landela inqubo yesehlakalo hhayi eyokubuyisela. Khansela izikhathi ezikhona esigabeni esifanayo, ngoba isikhathi esidalwe ngaphambi koshintsho singasiphila:

Revoke-MgUserSignInSession -UserId [email protected]

Ukususa into kubo bonke abanye, noma ukwehlisa ukuhlolwa kwesitifiketi sesango, kushintsha ukubuyisela komuntu oyedwa ngokuphazamiseka okuthinta konke ukusetshenziswa. Gcina ushintsho lungaphakathi kwe-akhawunti eyodwa futhi unyuse uma ubufakazi bukhomba ekuphulweni okubanzi. Bhala ethikithini ukuthi iyiphi into esusiwe nokuthi iyiphi ethathe indawo yayo.

Isinyathelo 4: fakazela ukuthi i-akhawunti iyasebenza kuzo zombili izinhlangothi

Ngema kanye ngento entsha ngokusebenzisa iklayenti elisekelwayo, bese uqinisekisa ukuthi i-akhawunti isafinyelela izinsiza ebizifinyelela ngaphambi kokulahlekelwa. Hlola insiza eyodwa edinga umhubhe neyodwa engawudingi, ukuze ukwehluleka kukhombise ungqimba olufanele. Zama ukungena ngengxenye esusiwe futhi ulindele ukwenqatshwa hhayi umbuzo, okuyinto efakazela ukuthi ukususa kusebenzile. Inselele ehlulekayo kusuka kudivayisi ebhalisiwe ekhona inkinga yombuzo, hhayi isizathu sokubhalisa konke kabusha.

Bese ucela umsebenzisi ukuthi aqedele ukungena okufanayo ngaphandle kokuqondisa. Ukuhlola kwakho okuphumelele kufakazela ukucushwa; umzamo wakhe ufakazela ukudluliswa.

Vala ithikithi ngesigxivizo sesikhathi sokungena okuphumelele nangegama lento esetshenziswayo manje. Buyekeza irekhodi lokubuyisela esigabeni esifanayo, ukuze ukulahlekelwa okulandelayo kuqale kusethi yempahla enembile hhayi ephelelwe yisikhathi.

Isinyathelo 5: susa umbandela owenza lokhu kwaba buhlungu

Ucingo ngalunye lokubuyisela ubufakazi mayelana nokwakhiwa kokubhalisa. Uma i-akhawunti inento eyodwa kuphela, funa eyesibili kubo bonke kulelo qembu. Uma amakhodi okubuyisela ayekulaptop elahlekile, shintsha lapho ekhona. Uma ukuqinisekisa kwakudinga umphathi oseholidini, qoka oweqa. Ukulungisa ngakunye kuthatha intambama futhi kususa ihora elibi kakhulu kwisehlakalo esilandelayo.

Bese ufunda kabusha irekhodi lesinyathelo sokuqala uma liqhathaniswa neqiniso. Ingabe libala izinto ezikhona ngempela, futhi ingabe itshaneli yokuqinisekisa isafinyelela kumuntu? Incwadi yokuqondisa okungekho ocwilayo eyibuyekeza iwohloka ibe idokhumenti abantu abayiziba phakathi nocingo eyayibhalelwe yona.