Kungani umthetho we-VPN ungeke uvimbe ukulayishwa kwefayela elilodwa
Ukufinyelela isevisi nokulawula ukuthi yimaphi amafayela aphumayo kuyizimfuno ezimbili. Beka umthetho lapho ifayela libonakala khona: i-imeyili, uhlelo lokusebenza noma i-ejenti yendawu yokugcina.
Ithimba elincane licela ukufinyelela kude ezinhlelweni zalo zomsebenzi futhi ngokuphefumula okukodwa licela ukuthi izithasiselo ezithile ziyeke ukuphuma enkampanini. Zombili izicelo zizwakala njengoshintsho olulodwa lwe-VPN. Ziyizimfuno ezimbili ezinamaphuzu okusebenzisa ahlukene, futhi umthetho owenelisa owokuqala awenzi lutho kowesibili. Qala ngokuqamba isenzo nedatha, bese ukhetha ingxenye engabona ngempela.
Isicelo esisodwa, izimfuno ezimbili
Imfuneko yokuqala imayelana nokufinyeleleka: yimaphi abasebenzisi namadivayisi angavula ukuxhumana kuyiphi isevisi. Eyesibili imayelana nokuziphatha ngemva kokuba lokho kuxhumana sekukhona: yimaphi amadokhumenti angasekwa, anamathiselwe noma alayishwe. Ithubhu lisebenza kowokuqala futhi ngokwakhiwa aliboni owesibili.
Ukulawula kwezinga le-IP kudlulisa amaphakethe. Akuhlaziyi ukulayishwa okuyingxenye eziningi, akuhloli i-PDF futhi akunqumi ukuthi ispredishithi inezinombolo ze-akhawunti yini. Ukulindela lokho kukho akulona iphutha lokuhlela; iyiphutha lesigaba.
Shono imfuneko ngokuzwakalayo ngaleso simo ngaphambi kokufuna umkhiqizo. «Abasebenzisi bangafinyelela ingosi yamafayela» kanye no-«abasebenzisi abakwazi ukulayisha uhlu lwamakhasimende engosini yamafayela» yimisho ehlukene, futhi owesibili kuphela ochaza inqubomgomo yokuqukethwe.
Khetha ingxenye engabona ifayela
Ukuphoqelela kufanele kwenzeke lapho ifayela lifundeka khona. Nge-imeyili, ngokuvamile kuyipulatifomu ye-imeyili noma isango, esivele isebenza ngezithasiselo futhi engazihlola ngaphambi kokulethwa. Ekulayishweni kwesiphequluli kusevisi egunyaziwe, uhlelo lokusebenza ngokwalo lungaba ukuphela okuwukuphela okubona okuqukethwe. Nge-laptop elawulwayo ekopisha amafayela kumidiya ekhishwayo, i-ejenti yendawu yokugcina ibona umsebenzi.
| Where the file moves | Component that can see it |
|---|---|
| Email attachment | Mail gateway or mail platform policy |
| Upload to a web application | The application, or an inspection proxy that terminates TLS |
| Copy to USB or local folder | Endpoint agent on the device |
| Anything inside the tunnel | Nothing, unless one of the above is present |
Amanye amaphakheji okufinyelela kude ezentengiselwano ahlanganisa i-ejenti yendawu yokugcina, ukulawula kwewebhu kanye nemojuli yokuvimbela ukulahleka kwedatha. Lezo zingxenye zingase ziqinise inqubomgomo yokuqukethwe, kodwa amandla awekho kwithubhu, asemojulini. Funda ukuthi iphakheji liqukethe ini ngempela ngaphambi kokuthembisa umphumela.
Imodeli ewusizo yokuqhathanisa yi- sihlaziyo se-Purview sokuvimbela ukulahleka kwedatha yakwa-Microsoft: ichaza izinqubomgomo ngokwezinhlobo zolwazi olubucayi, izindawo nemisebenzi. Leso sigama simayelana nokuqukethwe nezenzo, hhayi ngezandulela ze-IP.
I-TLS iyasinda ethubhini, ngakho hlela lokho
Ukubethela kohlelo lokusebenza kuxoxwa phakathi kwekliyenti nesevisi, futhi ithubhu le-VPN lithwala lawo ma-byte ngaphandle kokuwavula. Ngakho isango elisendleleni alitholi ngokuzenzakalela ikhono lokuhlukanisa isithasiselo, kungakhathaliseki ukuthi ingakanani ingxenye yomzila elinayo.
Ukuze uhlole okuqukethwe ngesikhathi sokuhamba udinga ingxenye eqeda i-TLS ngesitifiketi esithembekile, futhi leso yisinqumo esikhulu sokwakha esinemiphumela yaso yobumfihlo nokusebenza. Akusona isikhwama sokuhlola kusiphrofayili se-VPN. Amakliyenti kufanele athembe isitifiketi sokuhlola, izinhlelo ezibophela izitifiketi zizofa, futhi umsebenzisi uthola ikhono lokufunda ithrafikhi ebingakwazi ukuyifunda ngaphambili. Lezi yizizathu zokuthi lesi sinqumo singesomnikazi wokuphepha hhayi esowenza ithubhu.
Ngakho impendulo eqotho ku-«ingabe i-VPN ingavimbela lokhu kulayisha» ngokuvamile ngu-cha, ilandelwa yindlela ehlukile ebambekayo. Indlela ehlukile ingaba imikhawulo yezinga lohlelo, umthetho we-imeyili noma inqubomgomo yendawu yokugcina, futhi ngayinye inomniki ongayishintsha.
Bhala ukuhlolwa kokwamukela ngaphambi komthetho
Umthetho wokuqukethwe udinga izibonelo ezimbili, hhayi esisodwa: isenzo esivunyelwe okufanele siqhubeke sisebenza, kanye nesenzo esinqatshelwe okufanele simiswe. Hlola kokubili kusukela ezinhlelweni nasemadivayisini asemkhakheni, ngoba inqubomgomo esebenza kusiphequluli esisodwa kuphela akuyona inqubomgomo eyacelwa uthile.
curl -sS -o /dev/null -w '%{http_code}\n' -F '[email protected]' https://files.plant.example/upload
curl -sS -o /dev/null -w '%{http_code}\n' -F '[email protected]' https://files.plant.example/uploadIsicelo sokuqala kufanele senqatshwe yingxenye ephethe umthetho, futhi owesibili kufanele uphumelele. Uma kokubili kuphumelela, ukulawula akukho emzileni. Uma kokubili kwehluleka, uye waphula isevisi esikhundleni sokuyivikela, okuwumphumela ovame kakhulu womthetho obhalwe ngaphandle kwesibonelo esivunyelwe.
Nquma kusengaphambili ukuthi umsebenzisi ubona ini, ubani onganikeza okuhlukile nokuthi uphi umphathi aqinisekisa khona isinqumo ngemuva. Ukulayisha okuvinjiwe ngaphandle komlayezo kukhiqiza ithikithi losekelo, futhi umthetho ongenakuhlolwa muntu ukhiqiza ingxabano. Kokubili kungagwenywa ngomusho owodwa wemibhalo obhalwe ngaphambi kokuthi inqubomgomo iqale.
Ekugcineni, gcina izimfuno ezimbili kumathikithi ahlukene anabanikazi abahlukene. Ukuzihlanganisa ngaphansi kwe-«VPN» kuqinisekisa ukuthi ithimba lenethiwekhi lizocelwa ukuxazulula inkinga yokuqukethwe, nokuthi inkinga yokuqukethwe izomenyezelwa ukuthi ixazululiwe lapho ithubhu likhuphuka.