Ukuqinisa i-VPN ye-Windows: lungisa ubuqiniso ngaphambi komhubhe

Iseva yakho ye-Windows VPN icela igama lomsebenzisi nephasiwedi, futhi leyo ngxoxo eyodwa ifihla imisebenzi emithathu engahlobene. Eyodwa ifakazela ukuthi umuntu ungubani, enye ivimbela lowo obheka ucingo ukuthi angaphindi asebenzise lobo bufakazi, futhi enye inquma ukuthi yimaphi amakheli angawafinyelela ngemuva kwalokho. Izilungiselelo eziningi ezincane ziqinisa umhubhe kuqala bese zishiya imisebenzi emibili yokuqala kumavelu azo okuzenzakalelayo, futhi lolo uhlelo lokulandelana alulungile.

Sebenza ngokulandelana okusebenza ngakho umhlaseli. Kuqala lokho okungabanjwa ocingweni. Bese kuba lokho okungadlalwa futhi ngemuva kwalokho ngokurekhodwa. Ekugcineni, lokho umhlaseli oqinisekisiwe angakufinyelela uma esengaphakathi.

Imisebenzi emithathu, ingxoxo eyodwa

Ubunikazi yingxenye abantu abacabanga ngayo, futhi iyingxenye eyodwa kwezintathu yinkinga kuphela. Ubufakazi bobunikazi kufanele bumelane nombheki oqopha ukushintshana bese ezama futhi ngemuva kwalokho. Ukugunyazwa kuyisinqumo esihlukile iseva esithathayo ngemuva kokuba ubunikazi sebucacisiwe, futhi i-Windows ikugcina kusevisi ehlukile kunaleyo eqinisekisa imininingwane yokungena.

Uma zontathu zihlala kubhakete elilodwa lengqondo, umphumela ojwayelekile yiseva eqinisekisa ngamandla bese ivumela umsebenzisi ukuthi afinyelele konke. Ukulungisa lokho ngemuva kuba nzima kunokunquma inqubomgomo manje, ngoba ngaleso sikhathi iphrofayela yomlilo, ichibi lamakheli nemizila konke sekufaka phakathi umcabango wakudala.

Hlukanisa lezi zintathu emibhalweni yakho ngaphambi kokuthinta noma yisiphi isilungiselelo, bese uzilungisa kusukela kunxenye ebuthaka kakhulu ukhuphuke.

Kungani i-MS-CHAPv2 ingakwazi ukumelana nokuhlolwa kokudlala futhi

Uma iseva isamukela i-PPTP ne-MS-CHAPv2, umhubhe awuyivikeli iphasiwedi nganoma iyiphi incazelo ebalulekile. Inselelo nempendulo kungabanjwa futhi kuhlaselwe ngaphandle kwe-intanethi, futhi ngo-2012 isevisi yomphakathi yokugoba yabonisa ukubuyiselwa kusukela ekuxhawuleni okunjalo cishe ngosuku olulodwa kwiphasiwedi ejwayelekile. Iphasiwedi ende futhi eyinkimbinkimbi ikhuphula izindleko; ayikususi okokusebenza umhlaseli akudingayo kunethiwekhi.

Impande oyifunayo imininingwane yokungena engakwazi ukudlalwa futhi. I-EAP-TLS enezitifiketi zeklayenti inika idivayisi ngayinye ubunikazi bayo futhi ikuvumela ukuthi uhoxise idivayisi eyodwa ngqo.

Ukusabalalisa izitifiketi kuwumsebenzi wangempela: i-CA yangasese, indlela yokuhoxisa abaklayenti abayihlolayo, nohlelo lokuvuselela olumelana nokushintsha kwabasebenzi. Thatha lowo msebenzi njengephrojekthi hhayi njengesithiyo phakathi kwakho nomhubhe osebenzayo. Yabela isabelomali ngayo njengoba ubungayabela ukuze kushintshwe umlilo. Iphasiwedi eyabiwe ishibhile kuphela kuze kube ukuhoxiswa kokuqala.

Ukhiye owabiwe ngaphambili uqinisekisa umbhangqwana, hhayi umuntu

L2TP/IPsec ngokhiye owabiwe ngaphambili kufakazela ukuthi amasango amabili azi imfihlo eyodwa. Akusho lutho ngokuthi yimuphi umuntu oxhumayo, futhi akukwazi ukuhlukanisa isisebenzi esisodwa kwesinye kulelo zinga. Sebenzisa inani elide elingahleliwe, eledlula kakhulu izinhlamvu eziyishumi ezisikiselwa ezinye iziqondiso, ngoba noma ngubani obamba ukuxhawula angahlasela ukhiye ngaphandle kwe-intanethi.

Iklayenti ngayinye kuleyo phrofayela yaba imfihlo, ngakho ukususa umuntu oyedwa kusho ukuyabela futhi kubo bonke abasala. Gcina isinyathelo esihlukile sokuqinisekisa umsebenzisi phezu kwemfihlo yezinga lomshini, futhi shintshela ezitifiketini njengoba inani lamaklayenti likhula. Ukhiye owabiwe ngaphambili kuhlangene ne-MS-CHAPv2 yizingxenye ezimbili ezibuthakathaka, futhi eyesibili iyachitha eyokuqala.

Ukugunyazwa kuse-Network Policy Server

I-NPS ku-Windows inquma ukuthi ubani angaxhumana, futhi yenza lokho ngemuva kokuba ubuqiniso sesiphumelele. Lokho kwehlukanisa wukulawula ukuqinisa okusizo kakhulu kumkhiqizo, futhi izilungiselelo eziningi zikushiya kungathintwanga.

Sebenzisa imibandela yenqubomgomo ekhombisa imikhawulo yangempela: ubulunga beqembu, isikhathi lapho ukusekelwa kunabasebenzi, kanye nesimo sedivayisi esivela ekuhlolweni kwezempilo. Engeza isici sesibili lapho idatha ithethekisela khona ukungqubuzana, futhi khumbula ukuthi inqubomgomo ihlolwa kuwo wonke umzamo wokuxhumana, okukwenza kube ukulawula okuphilayo hhayi idokhumenti.

Ukubalwa kwe-RADIUS nakho kukunika irekhodi elilodwa lokuthi ubani waxhumana nini. Lelo rekhodi liwumehluko phakathi kokubuyekezwa kwesigameko nokuqagela, futhi likhona noma ngabe ukhona oyilikhayo noma cha.

Khawulela lokho ukungena okuphumelelayo kungakufinyelela

I-adaptha ye-VPN kufanele yehlele kuphrofayela yomlilo evumela izinsizakalo ezidingwa yindima yayo hhayi yonke inethiwekhi engaphansi. Umbuzo womzila uhlukile ekuhlungweni. Umhubhe ogcwele uvikela idivayisi yeklayenti futhi usunduza yonke i-byte ngolayini wakho ophezulu, kanti umhubhe ohlukanisiwe ugcina ukuhanjiswa kwendawo kusendaweni futhi uveza idivayisi kunoma iyiphi inethiwekhi esuke ikuyo.

Akukho kokubili ukukhetha okuyizinga elizenzakalelayo lezokuphepha. Kokubili kufanele kubhalwe eduze kwephrofayela yomlilo abayicabangayo.

Qinisekisa izindlela zokwehluleka

Hlola okufanele kugqekeze: iphasiwedi engalungile, isitifiketi esiphelelwe yisikhathi, idivayisi ehoxisiwe, umsebenzisi ongaphandle kweqembu. Ngakunye kufanele kwehluleke endaweni ehlukile, futhi irekhodi kufanele lisho ukuthi yikuphi. Gijimisa isethi ku-akhawunti yokuhlola kuqala, bese uyiphindaphinda kumsebenzisi wangempela. Ukunqatshwa okungena kurekhodi lezehlakalo ngaphandle kwesizathu kufanele kulungiswe kude ngaphambi kokuba udinge lelo rekhodi.

Bese uqinisekisa ukuthi yimaphi amachweba ashicilelwe nokuthi kungani. I-PPTP idinga i-TCP 1723 ne-GRE njengephrothokholi ye-IP hhayi ichweba, i-IKEv2 idinga i-UDP 500 no-4500, futhi i-L2TP idinga i-UDP 1701 kanye ne-IPsec. Ukuveza isixhumi sikhathi sokulawula ukuze iklayenti ixhumane akukona ukulungisa, kuwisigameko sesibili esilinde ukutholwa.

Ekugcineni, nquma ukuthi iseva irekhoda ini futhi isikhathi esingakanani. Iphuzu lokugcina elingenamlando wokuqinisekisa alikwazi ukuphendula umbuzo wokuqala ngemuva kwesigameko, okungukuthi ukuthi umzamo wawukade ugunyaziwe yini.