I-Desktop Ekude nge-VPN: kusiphi isehluleki osikho?

Ithuluzi lakho liyasebenza, i-wiki yangaphakathi iyalayisha, kodwa i-Desktop Ekude isala ukuxhuma. Leyo nhlanganisela ijwayelekile, ngoba i-VPN inikeza umzila oya esibungwini kuyilapho isevisi yedeskithophu kufanele ilalele, ivunyelwe yi-firewall yayo, futhi ikulungele ukuqinisekisa i-akhawunti. Izitebhisi ezine zokwehluleka ziphakathi kwethuluzi elisebenzayo nesikhathi esisebenzisekayo, futhi ngasinye sehluleka ngomlayezo ohlukile. Funda umlayezo kuqala, ngoba usho isitebhisi.

Izinto ezine zokwehluleka ezibonakala njengento eyodwa

Izitebhisi zihlelwe: igama lixazululeka libe ikheli eliyimfihlo elihlosiwe umklamo, imbobo iphendula i-handshake ye-TCP, isibungu samukela ukuxhumana ngokwenqubomgomo yaso, futhi ukungena esikhathini kuyaphumelela. Isitebhisi ngasinye senza esilandelayo singahlolwa, yingakho ukushintsha izilungiselelo ze-RDP ngaphambi kokuba inethiwekhi ilungiswe kudala umsindo kuphela. Isibonakaliso sibonakala sifana kusukela ohlangothini lomsebenzisi kuzo zozine izimo. Ukuhlukanisa kwazo kwenziwa umlayezo weklayenti kuphela.

Iwebhusayithi yangaphakathi esebenzayo ayifakazeli lutho kulezi zine. Ifakazela ukuthi isibungu esikunethiwekhi efanayo saphendula kwelinye imbobo ngolunye usizo. Thatha lokho njengobufakazi mayelana nokuhamba komzila hhayi okunye.

Hlola ngokulandelana futhi ubhale umphumela. Ukugxuma esikrinini sokungena ngoba imbobo iphendule kuyindlela yokuchitha intambama yonke enkingeni ye-firewall etholwe isitebhisi sokuqala.

Kukhona okulalele ku-3389?

Qala ngegama, ngoba igama elixazululeka ekhilini elingalungile lenza ukuhlolwa konke okulandelayo kungasebenzi. Buza isixazululi sethuluzi ukuthi igama lisho ukuthini, bese uqhathanisa impendulo nekheli eliyimfihlo elihlosiwe umklamo, hhayi impendulo ephumelelayo. Igama elixazululeka ekhilini lomphakathi yinkinga yonke, futhi akukho shintsho lwe-RDP oluyolungisa:

nslookup desktop.corp.example
Resolve-DnsName desktop.corp.example

Bese uhlola imbobo hhayi isibungu. I-handshake ye-TCP eqediwe ku-3389 ihlukanisa ukufinyeleleka kukho konke okungaphezulu:

Test-NetConnection -ComputerName desktop.corp.example -Port 3389

Gijima lolo hlolo kusukela ku-LAN nokusukela ethuluzini, ngoba umehluko phakathi kwemiphumela emibili ubeka iphutha emzileni we-VPN. Kukhona ama-firewall amabili emzileni futhi kulula ukuwadida: inethiwekhi kufanele ivumele ikheli lethuluzi leklayenti ukuthi lifinyelele isibungu, futhi i-firewall yesibungu ngokwayo kufanele ivumele umthombo ofanayo embotsheni elalele. Umthetho obekelwe umkhawulo ku-subnet ye-LAN awusihlanganisi isiqoqwana samaklayenti e-VPN, futhi lesi yisizathu esivamile sokuphela kwesikhathi esibikwa abasebenzisi abakude kuphela. Hlola ububanzi, hhayi ukuba khona komthetho.

Umzila wokubuya nawo ufanelwe ukuhlolwa okufanayo. Izimpendulo zidinga umzila wokubuya oya esiqoqwaneni samaklayenti, hhayi oya ku-LAN, futhi ukuhumusha obuso besibungu kushintsha umthombo ozoboniswa ilogi yakho. Uma imbobo iphendula ngakolunye uhlangothi hhayi ngakolunye, ingxenye engekho ngokuvamile ingumzila wokubuya.

Funda umlayezo ngaphambi kokufunda ukuhlelwa

Isitebhisi sesithathu ukuthi isibungu senqabe ukuxhumana ngokwenqubomgomo yaso, okuvame ukubonakala njengembobo evuleka futhi ivaleke ngokushesha. Kukhona okuphendule, futhi lokho kuwulwazi olusizayo hhayi ukuthula. Uma i-handshake iqedile futhi isikhathi safa ngokushesha, inethiwekhi ilungile futhi isibungu siyanquma. Bheka izimvume ze-Desktop Ekude ngaphambi kokuthinta inethiwekhi futhi.

Isici singavunyelwa emshinini kuyilapho ukufinyelela kunqunyelwe emaqenjini athile, futhi umlaleli angaboshelwa ngezindlela ezikhipha ikheli obufike ngayo. Ukuqinisekisa kwezinga lenethiwekhi kwengeza isango elihluleka ngaphambi kokulayisha ideskithophu, futhi umbhalo walo wephutha uhlukile kunephasiwedi engalungile. Qhathanisa umlayezo weklayenti nelogi yezehlakalo yesibungu, ngoba umlayezo usho isango kanti ilogi isho i-akhawunti.

Ukungena esikhathini kuwumkhawulo waso

Ukuqinisekisa kungokwesevisi yedeskithophu, hhayi kwe-VPN. Ubunikazi bethuluzi ne-akhawunti yedeskithophu yizinto zokuqinisekisa ezihlukene ezinemigomo ehlukene yokukhiya, ngakho ke ithuluzi elisebenzayo lifakazela kuphela ukuthi ithuluzi likwamukele. Ukukhiya i-akhawunti yedeskithophu akukuphazamisi ithuluzi, futhi okuphambene nakho kuyiqiniso.

Gcina kokubili kuphelele. Uma umzila oyimfihlo ungekho, lungisa umzila, ngoba ukushicilela umlaleli ku-inthanethi kushintshanisa iphutha lokufinyeleleka ngedeskithophu eveziwe. Futhi ungakhululi izivivinyo zobunikazi besikhathi lapho uzodinga ukuwela isixwayiso sesitifiketi esivele ngasikhathi sinye. Isitifiketi esizisayinele ku-RDP listener siveza isixwayiso ngokomklamo, ngakho ukusamukela kuyisinqumo hhayi isigaba.

Bala imizamo ngaphambi kokuphinda uzame. Imikhawulo yokukhiya yedeskithophu ibala ukungena okuhlulekile ngokwehlukile ekwehlulekeni kwe-VPN, futhi iklayenti eliphinda lizame ngesikhathi lingeqa umkhawulo ngesikhathi usahlela umthetho. Yindlela efanayo yokuzama ngokuhambisana evala ama-akhawunti ngemuva kokushintsha iphasiwedi.

Isikhathi singathwala ini, futhi sihlala kuphi

Funda inqubo yokuphuma evunyelwe ngaphambi kokuba uyidinge. Ukuvala iwindi kungase kuhlukanise kuphela umbono kuyilapho isikhathi siqhubeka ngokwenqubomgomo yaso ehleliwe, okuyinto ebalulekile kusibungu esabiwe noma esihloliwe. Phuma ngaphakathi kwesikhathi lapho inqubomgomo ikulindele.

Bese unquma ukuthi isikhathi singathwala ini, ngoba ibhodi lokunamathisela, amadrayivu aqondisiwe, ukuqondiswa kwephrinta nokudluliswa kwamafayela kuhambisa idatha phakathi kwezinhlelo zasendaweni nezikude lapho inqubomgomo ivuma khona. Uhlelo olushicilelwe olusebenza ngaphesheya alusona umkhawulo ongenakulandwa ngokuzenzakalela, futhi isikhathi esibonakala sifundeka kuphela singathwala ibhodi lokunamathisela. Hlola umsebenzi wangempela hhayi ukuxhumana: vula ifayela, sebenzisa uhlelo futhi uqinisekise ukuqondiswa okudingayo. Umhlahlandlela we-Microsoft wokufinyelela ideskithophu ekude kusukela ngaphandle uchaza izinketho zokuvezwa ezisekelwayo, futhi uyisithenjwa esingcono kunomlaleli womphakathi owengezwe ngaphansi kwengcindezi.