Kuse-Wi-Fi yasehhovisi kodwa usabuzwa nge-VPN? Nakhu isizathu

I-laptop ise-SSID yenkampani, isicelo sesitifiketi samukelwe, kodwa uhlelo lokusebenza lwewebhu lusacela i-VPN. Kubonakala njengomsebenzi ophindiwe, futhi kwesinye isikhathi kunjalo. Ukungena kabili ngokuvamile kuphoqelela izinqumo ezihlukene, futhi indlela okuwukuphela kwayo yokwazi ukuthi okwesibili kufanelekile yini ukubuza ukuthi kushintsha ini.

Ukungena kunethiwekhi yisinqumo sokwamukela

Ukusetshenziswa kwe-802.1X kuphendula umbuzo owodwa: ingabe le divayisi noma lo msebenzisi angaxhumana nalesi nethiwekhi? Iphoyinti lokufinyelela lidlulisela imininingwane yokuqinisekisa kuseva ye-RADIUS, futhi impendulo ingaba nezimfanelo ezibeka isikhathi sesimo ku-VLAN ethile noma zisebenzise isihlungi. Lokho ukwamukela nokuhlukanisa, hhayi ukugunyaza noma yiluphi uhlelo oluthile.

Lapho isikhathi sesimo samukelwe, isixhumanisi esingenantambo siyabhalwa ngemfihlo phakathi kwekhasimende nephoyinti lokufinyelela. Ukuvikelwa kuphela lapho, emaphethelweni enethiwekhi enezintambo.

Konke okungale kwaleyo phoyinti ukuhlelwa kwemizila okuvamile ngaphakathi kwesakhiwo, nanoma yikuphi ukufinyeleleka kwangaphakathi okuvunyelwa yileyo ngxenye.

Okokuvikelwa yi-EAP-TTLS ngempela

EAP-TTLS yakha umhubhe we-TLS ngesikhathi sokuqinisekisa futhi isebenzisa indlela yangaphakathi ngaphakathi kuwo. Indlela yangaphakathi ivamise ukuba yi-PAP, futhi ukubonakala kwayo kumklamo akusho ukuthi iphasiwedi iwela emoyeni ngombhalo ocacile, ngoba umhubhe we-TLS yiwo oyithwalayo. Ikhasimende kusafanele liqinisekise ubunikazi beseva futhi lithembe i-CA efanele, futhi i-SSID ejwayelekile akukona lokho kuqinisekisa. Funda ukukhethwa kwendlela yangaphakathi njengefomethi yemininingwane yokuqinisekisa, hhayi njengesitatimende mayelana nokubhalwa ngemfihlo kwangaphandle.

Lokhu ukushintshana kokuqinisekisa, hhayi umhubhe wedatha wethrafikhi yakamuva ye-laptop.

Lapho ukuqinisekisa kuphela, umhubhe we-TLS awusekho futhi amaphakethe ekhasimende ahamba phezu kwengxenye eyamukelwe. Ukudida lezi zinto ezimbili kuyimpande yenkolelo yokuthi ukubhalwa ngemfihlo kwe-Wi-Fi kakade kwenza umsebenzi we-VPN.

I-VPN iyisinqumo sesibili, esincane

I-VPN iphendula umbuzo ohlukile: yimiphi imithombo yangasese lobu bunikazi obungayifinyelela, futhi ngaphansi kwaziphi izimo? Iphela egedeni elinomgomo walo, ukuhlola kobunikazi kwayo futhi kaningi nezidingo zesimo sedivayisi. Iqoqo elifinyelelekayo ngemuva kokuphakama komhubhe ngokuvamile lincane kunenethiwekhi yangaphakathi yesakhiwo futhi lincike endimeni ethile.

Yingakho indima yokulungisa ingamukelwa ku-Wi-Fi njengawo wonke umuntu futhi isadinga umhubhe ukuze ifinyelele isethi yezindawo zokuphatha. Isinqumo se-Wi-Fi senziwe endaweni yokufinyelela; lesi senziwe egedeni.

Zombili izigaba zingabhalwa ngemfihlo futhi zisasebenza imigomo engahlobene.

Lapho ukwethemba okusekelwe endaweni kuhluleka khona

Ukuthatha inethiwekhi yasehhovisi njengokuthembekile ngokuzenzakalela kuyahluleka ngesizathu esilula: indawo yenethiwekhi iyisici soxhumano, hhayi somuntu. Umhlahlandlela we-zero-trust we-NIST usho lokho ngokuqondile, futhi yingakho ukufinyelela emthonjeni kunqunywa ngesicelo ngasinye hhayi ngesakhiwo. Noma ubani ongena ku-SSID efanayo uthola indawo efanayo. Yingakho futhi i-laptop ekhompromithezile kunethiwekhi yabasebenzi ifanele ukungabaza okufanayo njengaleyo ekunethiwekhi yezivakashi.

Umphumela ongokoqobo ukuthi ukugunyaza kohlelo lokusebenza kusafanele kube khona. I-VPN enikeza isethi yezindawo yonke, kanye nohlelo oluthemba noma yisiphi isicelo esivela kuleyo sethi, isesinyathelweni esisodwa ukusuka osukwini olubi.

Akukho sigaba esithatha indawo yesinye, ngoba ziphendula imibuzo emikhakheni ehlukene.

Indlela yokwazi ukuthi ukungena kwesibili kufanelekile yini

Buza umnikazi wenethiwekhi imibuzo emibili: yini efinyelelekayo ngemuva kokuxhuma kwe-VPN, futhi yiziphi izimo zobunikazi noma zedivayisi ezihlolwayo ukuze kuvunyelwe? Bese uqinisekisa izimpendulo ngokuhlola okuphendulayo ngempela. Uma umhubhe ungashintshi ukufinyeleleka noma isiqinisekiso, kungase kube umkhuba wokusebenza hhayi ukulawula, futhi leso yisinqumo somnikazi hhayi into umsebenzisi okufanele ayigweme.

Futhi bheka izindlela eziqondile ezingahlosiwe, ngoba umthombo ofinyeleleka ngaphandle komhubhe wenza umhubhe ube umhlobiso nje.

Bhala phansi umngcele ngamunye nenjongo yawo, futhi umuntu olandelayo ngeke adinge ukuqagela ukuthi kungani kukhona ukungena okubili.