Mukambani yedu, semamwe akawanda maIT uye kwete makambani eIT, mukana wekuwana kure wavapo kwenguva yakareba, uye vashandi vazhinji vakaishandisa kunze kwekudikanwa. Nekupararira kweCCIDID-19 munyika, dhipatimendi redu reIT, nechisarudzo che manejimendi ekambani, rakatanga kutamisa vashandi vaidzoka kubva kune dzimwe nyika kuenda kubasa kure. Ehe, takatanga kudzidzira kuzviparadzanisa nevamwe kumba kubva pakutanga kwaKurume, kunyangwe isati yatanga. Pakazosvika pakati paKurume, mhinduro yaive yatoyedzerwa kukambani yese, uye mukupera kwaKurume isu tese takapotsa tachinjika kune imwe nzira nyowani yebasa kure kure kune wese munhu.
Nehunyanzvi, kushandisa kure kure kune network, isu tinoshandisa Microsoft VPN (RRAS) - seimwe yeWindows Server mabasa. Paunosangana netiweki, zviwanikwa zvemukati zvakasiyana zvinowanikwa, kubva ku sharepoints, mafaera ekugovera masevhisi, bug trackers kune CRM system; kune vazhinji, izvi ndizvo zvese zvavanoda pabasa ravo. Kune avo vachine nzvimbo dzekushandira muhofisi, kuwana RDP kunogadziriswa kuburikidza neRDG gedhi.
Sei wakasarudza sarudzo iyi kana kuti nei yakakodzera kusarudza? Nekuti kana iwe uchitova nedura uye zvimwe zvivakwa kubva kuMicrosoft, ipapo mhinduro iri pachena, zvingangove zviri nyore, nekukurumidza uye zvakachipa kune IT department rako kuti riite. Iwe unongoda kuwedzera mashoma maficha. Uye zvichave nyore kune vashandi kugadzirisa Windows zvikamu pane kudhawunirodha nekugadzirisa mamwe macustomer ekuwana.
Paunenge uchiwana iyo VPN gedhi pachayo uye mushure, kana uchibatanidza kune nzvimbo dzekushandira uye zvakakosha zvewebhu zviwanikwa, isu tinoshandisa maviri-chinhu chechokwadi. Zvamazvirokwazvo, zvingava zvinoshamisa kana isu, semugadziri wezvinhu zviviri-zvechokwadi mhinduro, tisina kushandisa zvigadzirwa zvedu isu pachedu. Uyu ndiwo chiyero chedu chekambani; mushandi wega wega ane chiratidzo chine chitupa chemunhu, chinoshandiswa kutsigira pahofisi yebasa kune dura uye kune zvemukati zvekambani zviwanikwa.
Maererano nehuwandu, zvinopfuura 80% zvezviitiko zvekuchengetedza ruzivo zvinoshandisa mapassword asina simba kana akabiwa. Naizvozvo, kuunzwa kwehuviri-chinhu chechokwadi kunowedzera zvakanyanya chiyero chese chekuchengetedza chekambani nezviwanikwa zvayo, zvinokutendera kuti udzikise njodzi yekuba kana password kufungidzira kusvika kunenge zero, uye zvakare kuve nechokwadi kuti kutaurirana kunoitika nemushandisi anoshanda. Paunenge uchiita pKI zvivakwa, kuvimbiswa kwepassword kunogona kuvharwa zvachose.
Kubva pane yeUI maonero emushandisi, chirongwa ichi chakapusa pane kupinda mukati uye password. Chikonzero ndechekuti password yakaoma haichada kurangarirwa, hapana chikonzero chekuisa zvimiti pasi pekhibhodi (kutyora zvese zvinofungidzirwa zvekuchengetedza mitemo), iyo password haitomboda kuchinjwa kamwe chete mazuva makumi mapfumbamwe (kunyangwe izvi zvisiri kwenguva refu ichionekwa seyakanakisa tsika, asi munzvimbo dzakawanda dzichiri kudzidzira). Mushandisi anongoda kuunza isina kuomesesa PIN kodhi uye kwete kurasikirwa nechiratidzo. Chiratidzo pachacho chinogona kuitwa nenzira yekadhi yakangwara, iyo inogona kutakurwa zviri nyore muchikwama. RFID tag inogona kuisirwa mukati mechiratidzo uye smart kadhi yekuwana nzvimbo dzehofisi.
Iyo PIN kodhi inoshandiswa pakusimbisa, kupa mukana kune ruzivo rwakakosha uye kuita cryptographic shanduko uye cheki.Kurasa chiratidzo hakutyisi, nekuti hazvibviri kufungidzira iyo PIN kodhi; mushure mekuedza kushoma, ichavharwa. Panguva imwecheteyo, iyo smart card chip inodzivirira ruzivo rwakakosha kubva pakubvisa, cloning uye kumwe kurwiswa.
Chii chimwe?
Kana mhinduro kunyaya yekuwana kure kubva kuMicrosoft isina kukodzera kune chimwe chikonzero, saka unogona kuita PKI zvivakwa uye kugadzirisa maviri-chinhu chechokwadi uchishandisa edu smart makadhi mune akasiyana VDI zvivakwa (Citrix Virtual Apps uye Desktops, Citrix ADC, VMware. Horizon, VMware Unified Gateway, Huawei Fusion) uye hardware kuchengetedza masisitimu (PaloAlto, CheckPoint, Cisco) uye zvimwe zvigadzirwa.
Mimwe yemienzaniso yakakurukurwa munyaya dzedu dzakapfuura.
Muchinyorwa chinotevera tichataura nezve kumisikidza OpenVPN nehuchokwadi uchishandisa zvitupa kubva kuMSCA.
Hapana chitupa chimwe chete
Kana kushandisa PKI zvivakwa uye kutenga zvishandiso zvehadhi yemushandi wega wega zvinotaridzika zvakanyanya kuomarara kana, semuenzaniso, hapana tekinoroji mukana wekubatanidza smart kadhi, saka pane mhinduro ine-imwe-nguva passwords yakavakirwa pane yedu JAS yekusimbisa server. Sevatenderi, unogona kushandisa software (Google Authenticator, Yandex Key), hardware (chero RFC inoenderana, semuenzaniso, JaCarta WebPass). Anenge ese akafanana mhinduro anotsigirwa seakangwara makadhi/tokens. Isu takataurawo nezve mimwe mienzaniso yekumisikidza mune yedu yapfuura ma post.
Nzira dzechokwadi dzinogona kubatanidzwa, kureva, neOTP - semuenzaniso, vashandisi venhare chete ndivo vanogona kubvumidzwa kupinda, uye malaptop / matafura emhando yepamusoro anogona kusimbiswa chete uchishandisa chitupa pachiratidzo.
Nekuda kwechimiro chebasa rangu, shamwari dzakawanda dzisiri tekinoroji dzakangouya kwandiri pachangu kuti dzibatsirwe mukugadzira nzira yekuenda kure. Saka takakwanisa kumboita kakudongorera kuti ndiani aibuda mumamiriro ezvinhu uye sei. Paive nezvishamiso zvinofadza apo asiri makambani akakura kwazvo anoshandisa mabhureki ane mukurumbira, kusanganisira ane maviri-factor authentication mhinduro. Paivewo nezviitiko, zvaishamisa kune zvakapesana, apo makambani makuru kwazvo uye anozivikanwa (kwete IT) akakurudzira kungoisa TeamViewer pamakomputa avo ehofisi.
Mumamiriro ezvinhu aripo, nyanzvi kubva kukambani "Aladdin R.D." kurudzira kutora nzira ine hunyanzvi yekugadzirisa matambudziko ekuwana kure kune yako yekambani zvivakwa. Pachiitiko ichi, pakutanga kwehutongi hwekuzviparadzanisa nevamwe, takatanga .
Source: www.habr.com