Siza kukuxelela malunga nendlela engabizi kwaye ekhuselekileyo yokuqinisekisa ukuba abasebenzi abakude baxhunyiwe nge-VPN, ngaphandle kokubeka inkampani kwiingozi ezihloniphekileyo okanye zemali kwaye ngaphandle kokudala iingxaki ezongezelelweyo kwisebe le-IT kunye nolawulo lwenkampani.
Ngophuhliso lwe-IT, kuye kwenzeka ukutsala abasebenzi abakude kwinani elandayo lezikhundla.
Ukuba ngaphambili phakathi kwabasebenzi abakude kwakukho abameli bobugcisa bokudala, umzekelo, abaqulunqi, abakopishi, ngoku umgcini-mali, umcebisi wezomthetho, kunye nabameli abaninzi bezinye iingcali banokusebenza ngokulula ekhaya, betyelela iofisi kuphela xa kuyimfuneko.
Kodwa kuyo nayiphi na imeko, kuyimfuneko ukulungelelanisa umsebenzi ngokusebenzisa umjelo okhuselekileyo.
Olona khetho lulula. Setha i-VPN kumncedisi, umqeshwa unikwa igama eliyimfihlo lokungena kunye nesitshixo sesatifikethi seVPN, kunye nemiyalelo malunga nendlela yokumisela umxhasi weVPN kwikhompyutheni yakhe. Kwaye isebe le-IT liqwalasela umsebenzi walo ogqityiweyo.
Ingcamango ibonakala ingalunganga, ngaphandle kwento enye: kufuneka ibe ngumqeshwa owaziyo ukucwangcisa yonke into yedwa. Ukuba sithetha ngomphuhlisi wesicelo sothungelwano olufanelekileyo, kunokwenzeka ukuba uya kumelana nalo msebenzi.
Kodwa i-accountant, igcisa, umyili, umbhali wezobugcisa, umyili wezakhiwo, kunye nezinye iingcali ezininzi akufuneki ukuba ziqonde iingxaki zokuseta i-VPN. Nokuba umntu kufuneka aqhagamshele kude kwaye ancede, okanye eze buqu kwaye usete yonke into kwindawo. Ngako oko, ukuba kukho into eyeka ukusebenza kubo, umzekelo, ngenxa ye-glitch kwiprofayili yomsebenzisi, izicwangciso zomxhasi wenethiwekhi zilahlekile, ngoko yonke into kufuneka iphindwe kwakhona.
Ezinye iinkampani zibonelela ngelaptop enesoftware esele ifakiwe kunye nomxhasi wesoftware weVPN omiselweyo womsebenzi okude. Kwithiyori, kule meko, abasebenzisi akufanele babe namalungelo omlawuli. Ngale ndlela, iingxaki ezimbini zisonjululwa: abasebenzi baqinisekisiwe ukuba babonelelwe ngesoftware enelayisensi ehambelana nemisebenzi yabo kunye nomjelo wonxibelelwano osele ulungile. Ngexesha elifanayo, abanako ukutshintsha izicwangciso ngokwabo, okunciphisa ukuphindaphinda kweefowuni ukuya
uxhaso lobuchwepheshe.
Kwezinye iimeko oku kuluncedo. Umzekelo, ukuba nelaptop, unokuhlala ngokukhululekileyo kwigumbi lakho emini, kwaye usebenze ngokuzolileyo ekhitshini ebusuku ukuze ungavuki nabani na.
Yintoni eyona nto ingalunganga? Kuyafana ne-plus - sisixhobo esiphathwayo esinokuthwalwa. Abasebenzisi bawela kwiindidi ezimbini: abo bakhetha i-desktop yePC yamandla kunye nemonitha enkulu, kunye nabo bathanda ukuphatheka.
Iqela lesibini labasebenzisi livota ngezandla zombini kwiilaptops. Emva kokufumana i-laptop yenkampani, aba basebenzi baqala ukuhamba nabo ngovuyo kwiivenkile zokutyela, kwiindawo zokutyela, baye kwindalo kwaye bazame ukusebenza ukusuka apho. Ukuba nje ibinokusebenza, kwaye ingasebenzisi nje isixhobo esifunyenweyo njengekhompyuter yakho yenethiwekhi yoluntu kunye nolunye ulonwabo.
Kungekudala okanye kamva, i-laptop yenkampani ilahlekile kungekuphela nje kunye nolwazi lomsebenzi kwi-hard drive, kodwa kunye nokufikelela kwi-VPN emiselweyo. Ukuba i-checkbox "gcina igama lokugqitha" ikhangelwe kwiisetingi zomthengi weVPN, ngoko ke ukubala kwemizuzu. Kwiimeko apho ilahleko ingazange ifumaneke ngokukhawuleza, inkonzo yenkxaso ayizange ixelelwe ngokukhawuleza, okanye umqeshwa ofanelekileyo onamalungelo okuvimba akazange afumaneke ngokukhawuleza - oku kungajika kube yintlekele enkulu.
Ngamanye amaxesha ukunciphisa ukufikelela kulwazi kuyanceda. Kodwa ukunciphisa ufikelelo akuthethi ukusombulula ngokupheleleyo iingxaki zokuphulukana nesixhobo; yindlela nje yokunciphisa ilahleko xa idatha ityhilwa kwaye ibekwe esichengeni.
Ungasebenzisa i-encryption okanye ukuqinisekiswa kwezinto ezimbini, umzekelo ngeqhosha le-USB. Ngaphandle, ingcamango ibonakala ilungile, kodwa ngoku ukuba i-laptop iwela kwizandla ezingalunganga, umnini wayo uya kufuneka asebenze nzima ukuze afumane ukufikelela kwidatha, kuquka ukufikelela nge-VPN. Ngeli xesha, unokulawula ukuvala ukufikelela kwinethiwekhi yenkampani. Kwaye amathuba amatsha avulelwa umsebenzisi okude: ukukhangela ilaptop, okanye isitshixo sokufikelela, okanye zonke ngaxeshanye. Ngokusemthethweni, izinga lokukhusela liye landa, kodwa inkonzo yenkxaso yobugcisa ayiyi kuba nesithukuthezi. Ukongeza, umqhubi ngamnye okude ngoku kuya kufuneka athenge uqinisekiso lwezinto ezimbini (okanye ufihlo) ikhithi.
Ibali elahlukileyo elibuhlungu nelide liyingqokelela yomonakalo kwiilaptops ezilahlekileyo okanye ezonakeleyo (eziphoswe phantsi, zichithelwe ngeti emnandi, ikofu, kunye nezinye iingozi) kunye nezitshixo zokufikelela ezilahlekileyo.
Phakathi kwezinye izinto, ilaptop inamalungu oomatshini, anjengebhodi yezitshixo, izihlanganisi ze-USB, kunye nesivalo esinesikrini- zonke ezi zinto ziguga ubomi bazo benkonzo ngokuhamba kwexesha, zikhubazeke, zikhululeke kwaye kufuneka zilungiswe okanye zitshintshwe (izihlandlo ezininzi. , yonke ilaptop iyatshintshwa).
Yintoni ngoku? Akuvumelekanga ngokungqongqo ukuthatha ilaptop ngaphandle kwendlu kunye nomkhondo
uhamba?
Kwakutheni ukuze bakhuphe ilaptop?
Esinye isizathu kukuba ilaptop kulula ukuyidlulisela. Makhe size nenye into, nayo icuthene.
Awunako ukukhupha ilaptop, kodwa ukhuselwe i-LiveUSB flash drives ngoqhagamshelo lweVPN esele lucwangcisiwe, kwaye umsebenzisi uya kusebenzisa eyakhe ikhompyuter. Kodwa oku kwakhona ilotho: ngaba indibano yesoftware iya kuqhuba kwikhompyuter yomsebenzisi okanye hayi? Ingxaki inokuba kukunqongophala okulula kwabaqhubi abayimfuneko.
Kufuneka siqonde indlela yokulungelelanisa unxibelelwano lwabasebenzi ukude, kwaye kunqweneleka ukuba umntu anganikezeli kwisihendo sokuzulazula esixekweni ngelaptop yenkampani, kodwa uhlala ekhaya kwaye asebenze ngokuzolileyo ngaphandle komngcipheko wokulibala okanye ukulahlekelwa isixhobo esiphathiswe kuye kwindawo ethile.
Ufikelelo lweVPN olumileyo
Kuthekani ukuba awuboneleli ngesixhobo sokuphela, umzekelo, i-laptop, okanye ngokukodwa kungekhona i-flash drive eyahlukileyo yokudibanisa, kodwa isango lomnatha kunye nomxhasi we-VPN ebhodini?
Ngokomzekelo, i-router esele ilungile equka inkxaso yeeprotokholi ezahlukeneyo, apho uxhumano lweVPN sele lucwangcisiwe. Umqeshwa okude ufuna nje ukudibanisa ikhompyuter yakhe kwaye aqalise ukusebenza.
Yeyiphi imiba enceda ukusonjululwa koku?
- Izixhobo ezinokufikelela okucwangcisiweyo kwinethiwekhi yenkampani nge-VPN ayikhutshelwa ngaphandle kwendlu.
- Unokuqhagamshela izixhobo ezininzi kwitshaneli enye yeVPN.
Sele sibhale ngasentla ukuba kulungile ukukwazi ukujikeleza indlu ngelaptop, kodwa kuhlala kulula kwaye kulula ngakumbi ukusebenza ngekhompyuter.
Kwaye ungaqhagamshela iPC, ilaptop, i-smartphone, ithebhulethi, kunye ne-e-reader kwi-VPN kwi-router - nantoni na exhasa ukufikelela nge-Wi-Fi okanye i-Ethernet enentambo.
Ukuba ujonga imeko ngokubanzi, oku kunokuba, umzekelo, indawo yokudibanisa kwi-mini-ofisi apho abantu abaninzi banokusebenza.
Ngaphakathi kwecandelo elikhuselweyo elinjalo, izixhobo ezixhunyiwe zinokutshintshiselana ngolwazi, unokuququzelela into efana nesixhobo sokwabelana ngefayile, ngelixa unokufikelela okuqhelekileyo kwi-Intanethi, ukuthumela amaxwebhu okushicilela kumshicileli wangaphandle, njalo njalo.
Umnxeba weshishini! Kukho kakhulu kwesi sandi esivakala kwindawo ethile kwi-tube! Isitishi seVPN esisembindini sezixhobo ezininzi sikuvumela ukuba uqhagamshele i-smartphone ngenethiwekhi ye-Wi-Fi kwaye usebenzise umnxeba we-IP ukwenza umnxeba kwiinombolo ezimfutshane ngaphakathi kwenethiwekhi yeshishini.
Ngaphandle koko, kuya kufuneka wenze iifowuni eziphathwayo okanye usebenzise izicelo zangaphandle ezifana ne-WhatsApp, engasoloko ihambelana nomgaqo-nkqubo wokhuseleko wenkampani.
Yaye ekubeni sithetha ngokhuseleko, kubalulekile ukuphawula enye into ebalulekileyo. Ngesango le-VPN yehardware, unokuphucula ukhuseleko lwakho ngokusebenzisa izinto ezintsha zolawulo kwisango lokungena. Oku kukuvumela ukuba ukwandise ukhuseleko kwaye utshintshe inxalenye yomthwalo wokhuseleko lwezithuthi kwisango lomnatha.
Sisiphi isisombululo esinokusinikwa nguZyxel kule meko?
Sithathela ingqalelo isixhobo esifanele sikhutshelwe ukusetyenziswa okwethutyana kubo bonke abasebenzi abanako nabafuna ukusebenza bekude.
Ngoko ke, isixhobo esinjalo kufuneka sibe:
- ingabizi;
- ethembekileyo (ukuze ungachithi imali kunye nexesha ekulungiseni);
- ekhoyo ukuze ithengwe kumatyathanga okuthengisa;
- kulula ukuseta (yenzelwe ukuba isetyenziswe ngaphandle kokufowuna ngokuthe ngqo
ingcali eqeqeshiweyo).
Ayivakali iyinyani kakhulu, akunjalo?
Nangona kunjalo, isixhobo esinjalo sikhona, sikhona ngokwenene kwaye sikhululekile
-Zyxel ZyWALL VPN2S
I-VPN2S yi-firewall ye-VPN ekuvumela ukuba usebenzise uxhumano lwangasese
i-point-to-point ngaphandle kobumbeko olunzima lweeparamitha zenethiwekhi.
Umzobo 1. Ukubonakala kweZyxel ZyWALL VPN2S
Ubume besixhobo esifutshane
Iimpawu zeHardware
10/100/1000 Mbps RJ-45 izibuko
3 x LAN, 1 x WAN/LAN, 1 x WAN
Izibuko ze-USB
2 x USB 2.0
Akukho fan
ukuba
Umthamo wenkqubo kunye nokusebenza
SPI Firewall Throughput (Mbps)
1.5 Gbps
Ugqithiso lwe-VPN (Mbps)
35
Elona nani liphezulu leeseshoni zangaxeshanye. I-TCP
50000
Elona nani liphezulu leetonela ze-IPsec VPN ngaxeshanye [5] 20
Imimandla enokwenziwa ngokwezifiso
ukuba
IPv6 inkxaso
ukuba
Elona nani liphezulu leeVLAN
16
Iimpawu eziphambili zeSoftware
I-Multi-WAN Load Balance/Failover
ukuba
Inethiwekhi yabucala eyiyo (VPN)
Ewe (IPSec, L2TP phezu kwe-IPSec, PPTP, L2TP, GRE)
Umxhasi weVPN
IPSec/L2TP/PPTP
Uhluzo lomxholo
1 unyaka mahala
I-Firewall
ukuba
VLAN/Iqela leNdibaniselwano
ukuba
Ulawulo lwe-Bandwidth
ukuba
Ilog yesiganeko kunye nokubeka iliso
ukuba
Cloud Assistant
ukuba
Ulawulo LWERIMOTHI
ukuba
Qaphela: Idatha kwitheyibhile isekelwe kwi-OPAL BE microcode 1.12 okanye ngaphezulu
inguqulelo yamva.
Ziziphi iinketho zeVPN ezixhaswa yiZyWALL VPN2S
Enyanisweni, ukusuka kwigama kuyacaca ukuba isixhobo seZyWALL VPN2S ngokuyinhloko
yenzelwe ukudibanisa abasebenzi abakude kunye namasebe amancinci nge-VPN.
- Iprotocol ye-L2TP Over IPSec VPN ibonelelwe kubasebenzisi bokugqibela.
- Ukuqhagamshela i-mini-ofisi, unxibelelwano nge-Site-to-Site IPSec VPN inikwe.
- Kwakhona, usebenzisa iZyWALL VPN2S unokwakha uqhagamshelo lwe-L2TP VPN
umboneleli ngenkonzo yokufikelela kwi-Intanethi ngokukhuselekileyo.
Kufuneka kuqatshelwe ukuba olu lwahlulo lunemiqathango kakhulu. Ngokomzekelo, unako
indawo ekude qwalasela iSite-to-Site IPSec VPN uqhagamshelwano ngeyodwa
umsebenzisi ngaphakathi komjikelezo.
Ngokuqinisekileyo, konke oku kusetyenziswa i-algorithms ye-VPN engqongqo (IKEv2 kunye ne-SHA-2).
Ukusebenzisa ii-WAN ezininzi
Kumsebenzi okude, into ephambili kukuba ube nomjelo ozinzile. Ngelishwa, kunye kuphela
Oku akunakuqinisekiswa ngomgca wonxibelelwano nangona umboneleli othembekileyo.
Iingxaki zinokwahlulwa zibe ziindidi ezimbini:
- ukuhla kwisantya - umsebenzi wokulinganisa umthwalo we-Multi-WAN uya kunceda kule nto
ukugcina uxhulumaniso oluzinzileyo kwisantya esifunekayo; - ukusilela kwitshaneli - ngale njongo i-Multi-WAN failover function isetyenziselwa
ukuqinisekisa ukunyamezela iimpazamo kusetyenziswa indlela yophinda-phindo.
Ngawaphi amandla ehardware akhoyo kule nto:
- Izibuko lesine le-LAN lingamiselwa njengezibuko le-WAN elongezelelweyo.
- I-port ye-USB ingasetyenziselwa ukudibanisa imodem ye-3G / 4G, ebonelela
itshaneli yokugcina ngendlela yonxibelelwano ngeselula.
Ukonyuka kokhuseleko lwenethiwekhi
Njengoko kukhankanyiwe ngasentla, le ngenye yeenzuzo eziphambili zokusebenzisa ezizodwa
izixhobo ezisembindini.
I-ZyWALL VPN2S ine-SPI (i-Stateful Packet Inspection) umsebenzi we-firewall wokulwa neentlobo ezahlukeneyo zokuhlaselwa, kuquka i-DoS (Ukuphika kweNkonzo), ukuhlaselwa kusetyenziswa iidilesi ze-IP ze-spoofed, kunye nokufikelela kude okungagunyaziswanga kwiinkqubo, i-traffic network ekrokrayo kunye neepakethi.
Njengokhuseleko olongezelelweyo, isixhobo sinokucoca uMxholo ukuvala ukufikelela komsebenzisi kumxholo okrokrelayo, onobungozi kunye nongaphandle.
Ukuseta okukhawulezileyo nokulula kwamanyathelo ama-5 ngokuseta iwizadi
Ukuseta ngokukhawuleza umdibaniso, kukho iwizadi yokuseta efanelekileyo kunye nomzobo
ujongano kwiilwimi ezininzi.
Umzobo 2. Umzekelo wenye yezikrini zokuseta iwizadi.
Ulawulo olukhawulezayo nolusebenzayo, iZyxel inikezela ngepakethe epheleleyo yezixhobo zolawulo ezikude onokuthi uyiqwalasele ngokulula VPN2S kwaye uyibeke iliso.
Ukukwazi ukuphindaphinda izicwangciso kwenza lula kakhulu ukulungiswa kwezixhobo ezininzi zeZyWALL VPN2S zokudluliselwa kubasebenzi abakude.
VLAN inkxaso
Nangona i-ZyWALL VPN2S yenzelwe umsebenzi okude, ixhasa i-VLAN. Oku kukuvumela ukuba ukwandise ukhuseleko lwenethiwekhi, umzekelo, ukuba iofisi yosomashishini ngamnye ixhunyiwe, ene-Wi-Fi yeendwendwe. Imisebenzi ye-VLAN esemgangathweni, njengokunciphisa imimandla yosasazo, ukunciphisa i-traffic transmitted kunye nokusebenzisa imigaqo-nkqubo yokhuseleko, ifunwa kwiinethiwekhi zenkampani, kodwa ngokomgaqo zingasetyenziswa kumashishini amancinci.
Inkxaso ye-VLAN nayo iluncedo ekuququzeleleni inethiwekhi eyahlukileyo, umzekelo, kwi-IP telephony.
Ukuqinisekisa ukusebenza ngeVLAN, isixhobo seZyWALL VPN2S sixhasa umgangatho we-IEEE 802.1Q.
Ukuqulunqa
Umngcipheko wokuphulukana nesixhobo esiphathwayo esinetshaneli yeVPN emiselweyo ifuna izisombululo ngaphandle kokusasaza iilaptops zenkampani.
Ukusetyenziswa kwamasango e-VPN acwengileyo kwaye angabizi kakhulu akuvumela ukuba ulungelelanise ngokulula umsebenzi wabasebenzi abakude.
Imodeli ye-ZyWALL VPN2S yayiyilwe ekuqaleni ukudibanisa abasebenzi abakude kunye neeofisi ezincinci.
amakhonkco aluncedo
→
→
→
→
→
umthombo: www.habr.com