Isicelo se-MFA se-VPN senqatshiwe: iklayenti kufanele senze ini

Isicelo se-MFA esenqatshiwe sibonakala njengenkinga yenethiwekhi futhi akusiyo. Iseva icele isici sesibili, isici sabuya singesihle noma asifikanga nhlobo, futhi iseshini yanqatshwa ngaphambi kokuthi kube khona ithaneli. Okulandelayo umbuzo wokuziphatha kweklayenti: ukuveza ukwehluleka nokuvumela umsebenzisi ukuthi aqale umzamo ohlanzekile, noma ukuphinda uzame ngezindlela ezidala izicelo eziningi futhi ekugcineni zivule ukuvikelwa kwe-akhawunti. Indlela yesibili iyona okwenza ikhodi eyodwa ebhalwe ngokungalungile ibe i-akhawunti evaliwe.

Hlola ukuthi yisiphi isicelo esihlulekile

Qala ngokukhomba ukuthi yisiphi isicelo esihlulekile. Isaziso se-push, ikhodi ye-TOTP, isiqinisekiso se-FIDO kanye nokugeleza kwe-SAML kwehluleka ngendlela ehlukile, futhi iklayenti ngokuvamile liyazi ukuthi licele okupi. Ukunqatshwa, inselelo ephelelwe yisikhathi kanye nokwehluleka kokulethwa okungakaze kufinyelele kudivayisi—konke kuphetha ngephutha elifanayo jikelele, ngakho umehluko uvame ukusala kuphela esimweni seklayenti ngokwalo.

Leso simo kufanele sibhalwe ngokunemba. Bhala isikhombi senslelelo noma inkomba yokuthengiselana, uhlobo lwesici, isigxivizo sesikhathi kanye nomphumela, kodwa ungalokothi ubhale ikhodi noma isiqinisekiso. Isikhombi senslelelo yisona esivumela umphathi ukuthi athole umcimbi ohlangothini lombiki wobunikazi; ngaphandle kwaso ingxoxo yosizo iqala nge-«kwesinye isikhathi phakathi nehora eledlule» futhi ngokuvamile iphelela lapho. Kubheke njengemethadatha yokuxilonga, hhayi njengemfihlo.

Phinda uzame kanye, ngamabomu, ngenselelo entsha

Ukuphinda kufanele kube umzamo omusha ngenselelo entsha, hhayi ukuphinda okudala. Lapho iklayenti lisebenzisa futhi inselelo yangaphambilini, umbiki wobunikazi uyayinqaba njengendala noma, okubi kakhulu, wamukela imvume ebiyenzelwe umzamo wangaphambilini. Cela inselelo entsha, yibonise futhi uvumele umsebenzisi ukuthi asebenze kokukwiskrini manje.

Imizamo emibili enekhefu elifushane phakathi kwayo iyisisekelo esinengqondo; umjikelezo ongenamkhawulo awusona. Uma umzamo wesibili wehluleka ngendlela efanayo, yima futhi ubike esikhundleni sokuqhubeka.

Lokho iklayenti okufanele lingakwenzi

Iklayenti akufanele lenze izinto eziningi ezibonakala zilusizo kodwa zingelona. Akufanele liqhubeke lithumela izaziso ze-push kuze kube umuntu uqhafaza okuthi «vuma», ngoba lokho kufundisa abasebenzisi ukuvuma izicelo abangaziqalanga, futhi yileyo ndlela yokuziphatha amakhithi okukhwabanisa ancike kuyo. Akufanele libuyele esicini esibuthakathaka ngenxa yokuthi esinamandla sehlulekile, futhi akufanele licishe ukuhlolwa kobunikazi beseva ukuze lidlule isikhalazo sesitifiketi esivela ngasikhathi sinye. Ngayinye yalezi zindlela ezintathu ezimfushane iguqula ukwehluleka kokuqinisekisa kube umcimbi wokuphepha.

Futhi akufanele ligwinye ukwehluleka buthule. Iklayenti elivala uxhumano futhi likhombisa isijikelezi lishiya umsebenzisi ngaphandle kokuqonda ukuthi kufanele liphinde lizame, linde noma lishayele usizo. Veza ukwehluleka kanye nohlobo lwesici nekhodi emfishane, gcina umlayezo ungenazo izimfihlo, futhi wenze isenzo sokuphinda sibe sobala hhayi esizenzakalelayo.

Uma isicelo singaqalwanga umuntu osesihlukanisini sokubhala, isenzo esifanele ukuyeka sinqatshiwe nokubika ngesiteshi sosizo esiqinisekisiwe. Ukuvuma isicelo ukuze kumiswe umsindo yiphethini yokwehluleka, hhayi ikhambi.

Lokho okufanele kubhalelwe usizo

Kusizo, irekhodi eliwusizo lincane. Isikhathi esilinganiselwe kanye nesigaba sesikhathi, i-akhawunti, iklayenti kanye nenguqulo, uhlobo lwesici, kanye nesimo esingeyona imfihlo somzamo ngamunye: kuceliwe, kunqatshiwe, kuphelelwe yisikhathi, kuvunyiwe kodwa kwanqatshwa inqubomgomo.

Naka futhi amawashi eklayenti neseva. I-TOTP iwukuhlolwa kwewindi lesikhathi, ngakho idivayisi eshiywe yisikhathi ikhiqiza amakhodi abonakala evumelekile futhi ehluleka njalo, futhi iklayenti elibika ikhodi engavumelekile ngaphandle kokusho ukushiywa yisikhathi luthumela abantu ukuthi basethe kabusha izifakazelo ezingakaze zibe namaphutha. Umsebenzisi okungena kwakhe kuhluleka njalo kufanele ahlole inguqulo yeklayenti esekelwayo, isimo sokubhalisa kanye nokugeleza kokubuyisela okubhalwe phansi ngaphambi kokudala izicelo ezengeziwe.

Indlela yokubuyisela ifanele ukunakekelwa okulingana nendlela yokungena. Umgudu wokusebenza wedivayisi elahlekile ukhona khona ukuze ukunqatshwa kungabi yimvume yokweqa ukuqinisekisa, futhi iklayenti kufanele lixhumanise inqubo ebhalwe phansi yenhlangano esikhundleni sokuzakhela eyalo.

Umgomo okufanele kwakhiwe phezu kwawo ukuthi ukunqatshwa umphumela, hhayi isithiyo. Kubike kanye, ngokucacile, nangomongo owanele wokwenza into, futhi uvumele umzamo olandelayo ukuthi ube musha. Umhlahlandlela we-CISA mayelana ne-MFA emelana nokukhwabanisa uchaza ukuthi kungani iphethini yokuthi «buza kuze kuvunywe» iyingozi kusukela ekuqaleni, futhi iyona nkomba efanele ukucashunwa lapho othile ephakamisa umjikelezo wokuphinda uzame. Konke iklayenti elikwenezayo ngemva kokunqatshwa kufanele kwenze isinqumo esilandelayo sibe lula kumuntu, hhayi ukumphuca isinqumo.