I-VPN yezindawo ezimbili yakwaSophos ivuliwe kepha akukho thrafikhi: ilayisense noma umzila?

Ukusungula ubudlelwano be-IPsec, ukubona umzila kuthebula bese kusaphoqa isikhathi kusuka egatsheni iyinhlanganisela evamile kuSophos Firewall. KuSophos Firewall leyo nhlanganisela inezincazelo ezimbili ezijwayelekile okungenani: igebe ekudlulisweni, noma umbandela welayisense ye-Base ogcina ithuntsha livuliwe ngesikhathi idatha iyeka ukudlula. Zombili zikhiqiza izimpawu ezicishe zifane, ngakho indlela eyodwa ukuthi kuqoqwe ubufakazi obuzimele bakho kokubili. Zombili zivamile ngokwanele ukuthi akukho ngisho eyodwa engacatshangwa.

Ithuntsha lingaba khona ngaphandle kwedatha

Ubudlelwano be-IPsec buwubudlelwano bezokuphepha, hhayi isethembiso sokudlulisa amaphakethe. Isigaba 1 nesigaba 2 kungase kuqedwe ngesikhathi inqubomgomo ekhetha ithrafikhi, umzila oya esiqondisweni esikude noma indlela yedatha uqobo kungalungile. Isibonisi sethuntsha siphendula umbuzo owodwa bese sishiya eminye ivulekile.

Qala ngokusho ukuthi yiziphi iziqondiso okufanele zidlule nakuphi uhlangothi. Ithuntsha elingenayo ithrafikhi ethakazelayo libonakala lifana nethuntsha eliphukile ekhasini lesimo.

Ilayisense ye-Base ihlanganisa ini

I-Sophos ifaka i-VPN ngaphansi kwelayisense ye-Base, ngokwahlukene ne-Network Protection ne-Central Orchestration. Ngakho imojuli yokuzikhethela ephelelwe yisikhathi iyinkinga yayo, hhayi ubufakazi obuzenzakalelayo bokuthi i-IPsec yezindawo ezimbili idinga iphakethe elisha elikhokhelwayo. Bhala imodeli yedivayisi, inguqulo, ubuwena bokubhalisa nesimo se-Base Firewall. Bese uhlanganisa lokho namarekhodi omnikazi we-akhawunti ngohlelo lwelayisense olusekelwayo, futhi gcina izinombolo zochungechunge ngaphandle kwamanothi omphakathi.

Ipulatifomu nayo ishintsha umthetho. Amadivayisi asefwini, angokoqobo kanye nesofthiwe athola ilayisense ye-Base engenalo usuku lokuphela, kuyilapho ilayisense ye-Base yeyunithi yehadiwe iphela ekupheleni kwempilo yayo. Ukubhaliswa okumisiwe kuyisimo sesithathu phakathi kokuqinisekile nokuphelile, futhi kufanele ubufakazi obufanayo esikhundleni sokuqagela.

Fakazela umzila ngaphambi kokusola ilayisense

Fakazela indlela yokudlulisa ngokuzimela. Buza idivayisi ukuthi iyiphi indlela eyayizoyisebenzisa esiqondisweni esikude, bese uqinisekisa ukuthi inqubomgomo yezokuphepha ikhetha leyo thrafikhi nokuthi indlela yempendulo ikhona ngaphesheya. Umzila ongekho oya esiqondisweni esikude uhlala uyinkinga yokuhlela umzila, noma ngabe ilayisense inempilo engakanani.

ip route get 10.80.20.10

Uhlangothi oluphambene lubaluleke ngokulingana nolwangaphambili. Igatsha elingafinyelela ikomkhulu kodwa hhayi ngokuhlehla linegebe emzileni wokubuya noma kunqubomgomo, hhayi ukwehluleka kwendlela yedatha. Bhala ukuhamba okukodwa okuvunyelwe ezinhlangothini zombili ngaphambi kokufinyelela eziphethweni.

Gcina amarekhodi amabili ukuze ukulungiswa okulandelayo kube ngokwethembeka

Gcina amarekhodi amabili ahlukene bese uwafaka usuku. Okokuqala kuhlanganisa ilungelo: ikhasi lelayisense likhombisini, yikuphi ukubhalisa okwakusebenza nokuthi kwavunyelaniswa nini. Okwesibili kuhlanganisa ukudluliswa: iziqondiso, imizila, ubudlelwano bezokuphepha kanye nezibali zohlangothi zokuhamba okukodwa. Lapho izimpawu zishintsha ngemuva kokulungiswa, amarekhodi akhombisa ukuthi isiphi isincazelo esasilungile ngempela.

ipsec status

Lokhu kuziphatha kubalulekile ngoba ukulungiswa kwelayisense nokulungiswa komzila kubonakala kufana kusukela ku-ping ephumelelayo. Uma kokubili kwashintshwa ngesikhathi esisodwa, ufunde ukuthi insiza iyasebenza futhi akukho lutho mayelana nokuthi kungani yayingasebenzi. Shintsha into eyodwa, bese uphinda ukala lokho kuhamba, futhi umhlahlandlela wokuphela unquma ukuthi yini ilungelo lodwa elingayichaza.