Nyob zoo sawv daws! Kab lus no yuav tshuaj xyuas qhov ua haujlwm ntawm VPN hauv Sophos XG Firewall khoom. Hauv yav dhau los Tshooj Peb tau saib yuav ua li cas thiaj li tau txais cov kev tiv thaiv hauv tsev no tau dawb nrog daim ntawv tso cai tag nrho. Niaj hnub no peb yuav tham txog VPN kev ua haujlwm uas tau tsim rau hauv Sophos XG. Kuv yuav sim qhia koj tias cov khoom no tuaj yeem ua li cas, thiab tseem muab piv txwv ntawm kev teeb tsa IPSec Site-to-Site VPN thiab kev cai SSL VPN. Yog li cia peb pib nrog kev tshuaj xyuas.

Ua ntej tshaj plaws, cia peb saib ntawm daim ntawv tso cai:

Koj tuaj yeem nyeem ntxiv txog yuav ua li cas Sophos XG Firewall tau tso cai ntawm no:
txuas
Tab sis nyob rau hauv tsab xov xwm no peb yuav txaus siab rau cov khoom uas yog highlighted nyob rau hauv liab.

Lub luag haujlwm tseem ceeb ntawm VPN suav nrog hauv daim ntawv tso cai yooj yim thiab tsuas yog yuav ib zaug xwb. Qhov no yog daim ntawv tso cai nyob rau lub neej thiab tsis tas yuav rov ua dua tshiab. Lub Base VPN Options module suav nrog:

Site-rau-Site:

• SSL VPN
• IPSec VPN

Kev nkag mus rau thaj chaw deb (tus neeg siv VPN):

• SSL VPN
• IPsec Clientless VPN (nrog rau kev cai app dawb)
• L2TP
• PPTP

Raws li koj tuaj yeem pom, tag nrho cov kev cai nrov thiab hom kev sib txuas VPN tau txais kev txhawb nqa.

Tsis tas li ntawd, Sophos XG Firewall muaj ob hom kev sib txuas ntxiv ntawm VPN uas tsis suav nrog hauv kev tso npe nkag. Cov no yog RED VPN thiab HTML5 VPN. Cov kev sib txuas VPN no suav nrog hauv Network Protection subscription, uas txhais tau hais tias txhawm rau siv cov hom no koj yuav tsum muaj kev tso npe ua haujlwm, uas kuj suav nrog kev tiv thaiv network - IPS thiab ATP modules.

RED VPN yog tus tswv L2 VPN los ntawm Sophos. Hom kev sib txuas VPN no muaj ntau qhov zoo dua ntawm Site-to-site SSL lossis IPSec thaum teeb tsa VPN ntawm ob XGs. Tsis zoo li IPSec, RED tunnel tsim virtual interface ntawm ob qhov kawg ntawm lub qhov, uas pab daws teeb meem, thiab tsis zoo li SSL, qhov kev sib txuas virtual no tuaj yeem hloov kho tau. Tus thawj tswj hwm muaj kev tswj hwm tag nrho ntawm lub subnet hauv RED qhov, uas ua rau nws yooj yim dua los daws cov teeb meem routing thiab subnet tsis sib haum.

HTML5 VPN lossis Clientless VPN - Ib hom VPN tshwj xeeb uas tso cai rau koj xa cov kev pabcuam ntawm HTML5 ncaj qha rau hauv browser. Hom kev pabcuam uas tuaj yeem tsim kho:

• RDP
• Telnet
• SSH
• VNC
• FTP
• FTPS
• SFTP
• SMB

Tab sis nws tsim nyog xav tias hom VPN no tsuas yog siv tshwj xeeb thiab nws raug pom zoo, yog tias ua tau, siv hom VPN los ntawm cov npe saum toj no.

Xyaum ua haujlwm

Cia peb ua tib zoo saib yuav ua li cas los teeb tsa ntau yam ntawm cov tunnels, uas yog: Site-to-Site IPSec thiab SSL VPN Chaw Taws Teeb Nkag.

Site-to-Site IPSec VPN

Cia peb pib nrog yuav ua li cas teeb tsa Qhov Chaw-rau-Site IPSec VPN qhov ntawm ob lub Sophos XG Firewalls. Hauv qab lub hood nws siv zog Swan, uas tso cai rau koj mus txuas rau ib qho IPSec-enabled router.

Koj tuaj yeem siv qhov kev teeb tsa yooj yim thiab nrawm, tab sis peb yuav ua raws li txoj hauv kev kom, raws li cov lus qhia no, koj tuaj yeem muab Sophos XG nrog txhua yam khoom siv IPSec.

Cia peb qhib lub qhov rais teeb tsa txoj cai:

Raws li peb tau pom, muaj twb preset chaw, tab sis peb yuav tsim peb tus kheej.

Cia peb teeb tsa cov txheej txheem encryption rau thawj theem thiab theem ob thiab txuag txoj cai. Los ntawm kev sib piv, peb ua tib cov kauj ruam ntawm Sophos XG thib ob thiab txav mus rau kev teeb tsa IPSec qhov nws tus kheej

Nkag mus rau lub npe, hom kev ua haujlwm thiab teeb tsa cov kev txwv encryption. Piv txwv li, peb yuav siv Preshared Key

thiab qhia cov subnets hauv zos thiab tej thaj chaw deb.

Peb qhov kev sib txuas tau tsim

Los ntawm kev sib piv, peb ua tib qhov chaw ntawm Sophos XG thib ob, nrog rau kev zam ntawm hom kev ua haujlwm, nyob ntawd peb yuav teeb tsa kev sib txuas.

Tam sim no peb muaj ob qhov tunnels teeb tsa. Tom ntej no, peb yuav tsum qhib lawv thiab khiav lawv. Qhov no ua tau yooj yim heev, koj yuav tsum nyem rau ntawm lub voj voog liab nyob rau hauv lo lus Active kom qhib thiab ntawm lub voj voog liab nyob rau hauv Kev Sib Txuas kom pib qhov kev sib txuas.
Yog peb pom daim duab no:

Qhov no txhais tau tias peb qhov av ua haujlwm raug. Yog tias qhov ntsuas thib ob yog xim liab lossis daj, ces ib yam dab tsi tsis raug teeb tsa hauv cov cai encryption lossis cov subnets hauv zos thiab tej thaj chaw deb. Cia kuv ceeb toom koj tias cov chaw yuav tsum tau mirrored.

Cais, kuv xav qhia tias koj tuaj yeem tsim pab pawg Failover los ntawm IPSec tunnels rau kev ua txhaum cai:

Chaw taws teeb Access SSL VPN

Cia peb txav mus rau Chaw Taws Teeb Nkag SSL VPN rau cov neeg siv. Hauv qab lub hood muaj tus qauv OpenVPN. Qhov no tso cai rau cov neeg siv txuas los ntawm txhua tus neeg siv khoom uas txhawb nqa .ovpn cov ntaub ntawv teeb tsa (piv txwv li, tus neeg siv khoom sib txuas tus qauv).

Ua ntej, koj yuav tsum teeb tsa OpenVPN server cov cai:

Qhia meej txog kev thauj mus los rau kev sib txuas, teeb tsa qhov chaw nres nkoj, ntau yam ntawm IP chaw nyob rau kev sib txuas cov neeg siv nyob deb

Koj tseem tuaj yeem qhia qhov chaw encryption.

Tom qab teeb tsa lub server, peb pib teeb tsa cov neeg siv khoom sib txuas.

Txhua txoj cai kev sib txuas SSL VPN yog tsim rau ib pawg lossis rau ib tus neeg siv. Txhua tus neeg siv tuaj yeem muaj txoj cai sib txuas nkaus xwb. Raws li cov kev teeb tsa, qhov nthuav yog tias rau txhua txoj cai no koj tuaj yeem teev tus neeg siv uas yuav siv qhov chaw no lossis ib pab pawg los ntawm AD, koj tuaj yeem qhib lub checkbox kom tag nrho cov tsheb thauj mus los tau qhwv hauv VPN qhov lossis qhia qhov chaw nyob IP, subnets lossis FQDN npe muaj rau cov neeg siv. Raws li cov cai no, ib qho .ovpn profile nrog cov chaw rau cov neeg siv khoom yuav raug tsim.

Siv tus neeg siv lub portal, tus neeg siv tuaj yeem rub tawm ob qho .ovpn cov ntaub ntawv nrog cov chaw rau VPN tus thov kev pab, thiab cov ntaub ntawv VPN tus thov kev teeb tsa nrog cov ntaub ntawv sib txuas ua ke.

xaus

Hauv tsab xov xwm no, peb luv luv mus hla lub VPN ua haujlwm hauv Sophos XG Firewall khoom. Peb tau saib yuav ua li cas koj tuaj yeem teeb tsa IPSec VPN thiab SSL VPN. Qhov no tsis yog ib daim ntawv teev tag nrho ntawm qhov kev daws teeb meem no ua tau. Hauv cov ntawv hauv qab no kuv yuav sim tshuaj xyuas RED VPN thiab qhia tias nws zoo li cas hauv kev daws nws tus kheej.

Ua tsaug rau koj lub sijhawm.

Yog tias koj muaj lus nug txog kev lag luam version ntawm XG Firewall, koj tuaj yeem tiv tauj peb, lub tuam txhab Factor pawg, Sophos distributor. Txhua yam koj yuav tsum tau ua yog sau hauv daim ntawv dawb ntawm [email tiv thaiv].

Tau qhov twg los: www.hab.com