Ngabe ukuhlolwa kwesimo sedivayisi ye-VPN akubambi? Landela umbiko kuqala
I-ejenti yakho yendawo yokugcina ibika isimo esiphilile, kodwa uhlelo lwangaphakathi lusavuleka. Dlula isiqoqi, isinqumo nesivimbo, bese ufakazela ukwenqatshwa ngesicelo esisodwa.
Uma ikhompyutha ephathwayo okwami isiginesha zayo ze-antivirus eyeka ukuvuselelwa emavikini adlule isengakwazi ukuvula uhlelo lwakho lwangaphakathi, idokhumenti yenqubomgomo ayiyona into engalungile ngokuvamile. Izinhlelo ezintathu ezihlukene kufanele zivumelane ngaphambi kokuba ukufinyelela kunqatshwe: okuthile kukala indawo yokugcina, okuthile kuguqula lokho kukala kube yisinqumo sokuvumela noma sokwenqaba, futhi okuthile kukhahlela ngempela ithrafikhi. Uma idivayisi engahambisani nayo ingena noma kunjalo, kukhona ukuxhumana okukodwa kwalokho okungekho noma ithembela ebufakazini obekungafanele. Izihlolo ezingezansi zihamba ngalolo hlelo, futhi ngayinye inendawo yokuma.
Isivimbo yisinyathelo sokugcina, hhayi esokuqala
Ukuqinisekisa nokuma kwedivayisi kuphendula imibuzo ehlukene. Ukungena ngempumelelo kufakazela ukuthi imininingwane yokungena yethuliwe; akusho lutho ngohlelo olusebenza emshinini oyethulile. Yileli gebe elenza iphrofayela yeklayenti elikopishiwe likwazi ukuhambisa isikhathi sokusebenza esibukeka siphilile siye kumsingathi ongaphilile.
Umsebenzi wokuhambisana kwezindawo zokugcina unamagama akhona salolu chungechunge. Imodeli yereferensi ye-NEA ku-RFC 5209 ihlukanisa umsebenzi kusiqoqi, isinyathelo sokuhlola kanye nendawo yokuphoqelela, futhi isho ngokusobala ukuthi iklayenti eliqamba amanga ngesimo salo ngokwalo lingaphandle kwemodeli. Leso sixwayiso sibaluleke ukudlula umdwebo: imojuli yeplatifomu ethembekile ayigqamisi isilinganiso esizibikele sona sibe yiqiniso.
Gcina isiqoqi sithembekile mayelana nobubanzi. Kufanele sibike izimfanelo ezishiwo inqubomgomo yakho, kudivayisi ecela ukufinyelela, kanye nokuncane okunye. I-ejenti yokubala ehluza wonke amaphakethe afakiwe iyithuluzi elihlukile kunesiqoqi sesimo, futhi umehluko uyinkinga yokugcina kanye neyokunemba ngasikhathi sinye. Uma umbiko ungeke uboshelwe kubunikazi bedivayisi eyodwa, umhloli uqagela ukuthi iyiphi imshini asanda kuyivumela.
Idashibhodi ekhombisa isimo esibomvu ayisiwona ukulawula. Buza ukuthi umsebenzisi onqatshiwe usengafinyelela ini: i-wiki, ukwabelana ngamafayela, imbobo yedathabheyisi? Ukulungiswa kudinga indawo eyodwa emincane, futhi konke okunye kungemuva kwesivimbo.
Funda umbiko ngaphambi kokufunda umthetho
Qala emthonjeni hhayi kuthiki eliluhlaza yeklayenti. Ku-Windows, isilinganiso sendawo sivela ku-Defender noma kumkhiqizo ozibhalise ku-Security Center, futhi kokubili kungafundwa ngaphandle kwekhonsoli yomhlinzeki:
Get-MpComputerStatus | Select-Object AMServiceEnabled, RealTimeProtectionEnabled, AntivirusSignatureLastUpdated
Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct | Select-Object displayName, productStateUmyalo wesibili ubuyisela inombolo ephelele ebizwa ngokuthi productState. Amabhithi ayo abhalwe ngokukhululekile futhi abahlinzeki bapakisha amafulegi okuvumela nokwesikhathi ngendlela ehlukile, ngakho qinisekisa kunokuba uhlaziye. Amaphakethe abantu besithathu nawo ashiya umugqa ku-Security Center ngemuva kokukhipha, futhi lowo ubika ngohlelo olungasekho kudiski.
Iminyaka iyinkambu abantu abayeqayo. Isigxivizo sesikhathi sesiginesha sisho okuthile kuphela uma siqhathaniswa newashi yomshini owenza ukuhlola, ngakho kuguqula kube yisikhathi esiphakathi kunokulinganisa ngamehlo:
$sig = (Get-MpComputerStatus).AntivirusSignatureLastUpdated
[int](New-TimeSpan -Start $sig -End (Get-Date)).TotalHoursManje inqubomgomo inenombolo eyodwa yokufunda. Uma umthetho wakho uthi amahora angu-72, yilowo nalowo mubalo ewusebenzisayo, futhi ikhompyutha ephathwayo elele iviki iyohluleka ngaphandle kokuthi othile achaze ilebula. Bhala umkhawulo eceleni komyalo, ngoba kokubili kuyahlukana uma ithuluzi lendawo yokugcina lishintshwa.
Guqula isimo ngasinye sedivayisi sibe yisinqumo esibhaliwe
Izingxabano eziningi ngesimo ziyizingxabano ngomugqa ongaziwa. Yinqume ngaphambi kwesigameko sokuqala, kuthebula elisho ubufakazi, isinqumo kanye nomnikazi, ukuze kungabikho ozakhela okuthile ekhonsolini yesango.
| Evidence the assessor has | Verdict | What it protects against |
|---|---|---|
| Timestamp inside the policy window, protective service running | Admit to normal applications | Nothing yet; the other checks still apply |
| Timestamp older than the window | Deny, admit remediation page only | Signature rollback and dormant laptops |
| Service disabled or reporting off | Deny, escalate to the endpoint owner | An agent reporting stale success |
| No report at all for this session | Treat as deny, never as healthy | Agents that fail open under load |
Umugqa ophansi yiwo lapho imikhiqizo ihluka khona. Amanye amasango enqaba ukuxhumana futhi achaze ukuthi kungani; amanye avumela umhubhe ukuba ukhuphuke futhi asebenzise inqubomgomo ekhawulelwe; ambalwa abuyela kumbiko wokugcina owaziwayo omuhle. Yibo laba bokuqala ababili kuphela abavikelekayo, futhi kufanelekile ukuhlola ukuthi eyakho yenza yiphi.
Gcina ubunikazi nemvume emizileni yabo. Ikhompyutha ephathwayo edlula zonke izivivinyo zesimo isadinga ugunyaziso lomuntu olufanele lohlelo, futhi isitifiketi sedivayisi sifakazela ukuba nokhiye, hhayi isimo sohlelo lwamafayela. Ukucindezela konke lokhu kube yi-boolean eyodwa iyona ndlela i-akhawunti yedeskithophu yosizo ethola ngayo ukufinyelela okuhlala njalo ekukhiqizeni.
Hlola indlela yokuphoqelela ngesicelo, hhayi ngedashibhodi
Ukuphoqelela kuyisici sesicelo, ngakho kukala ngesicelo esisodwa. Faka umshini ongahambisani emhubheni futhi wenze ucingo umsebenzisi wangempela angalwenza:
curl -sS -o /dev/null -w '%{http_code}
' --max-time 5 https://app.internal.example/healthUkuphendula okungu-200 okuvela kudivayisi obekufanele ivinjelwe kusho ukuthi isinqumo asikaze safika endleleni yedatha. Izizathu ezimbili ezijwayelekile: inqubomgomo ixhunywe eqenjini i-akhawunti yokuhlola engakaze ihlanganyele nalo, noma uhlelo lungafinyelelwa ngomzila i-VPN engayona umnikazi wawo.
Qala ngokuhlola umqagelo womzila. Uma igama langaphakathi lixazululeka libe yikheli iklayenti elivele lifinyelela ngalo nge-LAN yendawo, umhubhe awunandaba futhi ayikho inqubomgomo ezosebenza. Qhathanisa lelo kheli nomzila oqhutshwa yisango. Ku-OpenVPN, inqubomgomo yeklayenti ngalinye isemafayeleni akhiwe ngokhiye ngokwegama elivamile, ngakho kulula ukuyihlola:
ls /etc/openvpn/ccd/
cat /etc/openvpn/ccd/laptop-17Ifayela eliqukethe disable linqamula lelo klayenti ngokuphelele, kuyilapho umugqa we-push "route ..." unciphisa lapho lingafinyelela khona. Kokubili ukuphoqelela, futhi kokubili kuyabonakala kunoma ubani ohluza umbiko.
Hlola izimo ezine ku-akhawunti eyodwa yokuhlola
Ukuhlola kokugcina kuyi-matrix encane, hhayi indlela ejabulisayo. Hamba ne-akhawunti eyodwa yokuhlola ezimweni ezine: zamanje, isiginesha ephelelwe yisikhathi, ukuvikelwa kucishiwe, i-ejenti engafakiwe. Kwesinye ngasinye, bhala isinqumo kulogi yokuhlola, isimo se-HTTP uhlelo olubuyisayo, nokuthi ikhasi lokulungisa lilayishiwe yini.
foreach ($case in 'current', 'stale', 'disabled', 'absent') {
Get-MpComputerStatus | Select-Object AMServiceEnabled, AntivirusSignatureLastUpdated
curl.exe -sS -o NUL -w "%{http_code}
" --max-time 5 https://app.internal.example/health
}Imininingwane emibili kulula ukuyiphosa. Okokuqala ukuphindaphinda: umbiko othathwe ngesikhathi umshini uphilile akumele wamukelwe sesheni elandelayo kuleyo divayisi, ngakho funa isigxivizo sesikhathi esiboshelwe kuxhumano lwamanje. Bese kuba ukususa: ukukhipha i-ejenti kufanele kukhiqize ukwenqatshwa okufanayo nombiko osudlule, hhayi ukudlula okuhlanzekile, futhi lesi yisimo esivame ukungahlolwa neze.
Uma i-matrix ihambisana nethebula, nikela izinto ezintathu kumuntu ozosebenzisa isango ngokulandelayo: imiyalo, umkhawulo kanye nemiphumela emine elindelekile. Lokho kunikela kuyikho okuyikho okuphakelwayo kwangempela, ngoba idizayini yesimo ephila kuphela kudokhumenti yenqubomgomo iyaphambuka okokuqala lapho ithuluzi lendawo yokugcina lishintsha inkambu yalo yokubika.