Sanibonani! Uyemukelwa esifundweni sesishiyagalombili sesifundo . Kuvuliwe ΠΈ Ezifundweni esizijwayele ngamaphrofayili okuphepha ayisisekelo, manje sesingakwazi ukukhulula abasebenzisi ku-inthanethi, sibavikele kumagciwane, sibeke umkhawulo ekufinyeleleni izinsiza zewebhu nezinhlelo zokusebenza. Manje umbuzo uphakama mayelana nokuphatha amarekhodi abasebenzisi. Unganikeza kanjani ukufinyelela kwe-inthanethi eqenjini elithile labasebenzisi kuphela? Iqembu elilodwa labasebenzisi lingavinjelwa kanjani ukuthi livakashele amawebhusayithi athile, kanti elinye lingavunyelwa? Ungazihlanganisa kanjani izixazululo ezikhona zokuqapha irekhodi lomsebenzisi ne-firewall ye-FortiGate? Namuhla sizoxoxa ngalezi zinkinga futhi sizame ukwenza konke ngokusebenza.
Okokuqala, ake sibheke izindlela zokuqinisekisa ezisekelwa yi-FortiGate. Empeleni zimbili zazo - ezasendaweni nezikude.
Indlela yasendaweni iyindlela elula yokuqinisekisa. Kulokhu, idatha yomsebenzisi igcinwa endaweni ku-FortiGate. Abasebenzisi bendawo bangahlanganiswa babe ngamaqembu. Futhi ngesisekelo sabasebenzisi noma amaqembu, hlukanisa ukufinyelela kuzinsiza ezahlukahlukene.
Uma ukuqinisekiswa kwesilawuli kude kusetshenziswa, abasebenzisi baqinisekiswa ngamaseva akude. Le ndlela iwusizo lapho ama-FortiGates amaningi edinga ukuqinisekisa abasebenzisi abafanayo, noma uma sekuneseva yokuqinisekisa kunethiwekhi.
Uma iseva ekude iqinisekisa abasebenzisi, i-FortiGate ithumela imininingwane efakwe umsebenzisi kuleyo seva. Le seva, yona, ihlola ukuthi ingabe izifakazo zikhona yini kusizindalwazi sayo. Uma kunjalo, umsebenzisi ugunyazwe ngempumelelo ohlelweni.
Kuyafaneleka ukunaka iqiniso lokuthi kuleli cala, izifakazo zomsebenzisi azigcinwa ku-FortiGate, futhi inqubo yokuqinisekisa ngokwayo yenzeka kuseva ekude.
Kuyafaneleka futhi ukusho indlela ye-Fortinet Single Sign On. Ikuvumela ukuthi uhlele ukuqinisekiswa okusobala kwabasebenzisi besizinda ku-FortiGate usebenzisa idatha evela kubalawuli besizinda. Ngeshwa, ukucatshangelwa kwalo mshini kungaphezu kobubanzi besifundo sethu.
I-FortiGate isekela izinhlobo eziningi zamaseva okuqinisekisa njenge-POP3, RADIUS, LDAP, TACAS+. Sizobheka ukusebenza neseva ye-LDAP.
Ividiyo ihlanganisa ithiyori eyisisekelo, kanye nokusebenza nabasebenzisi bendawo kanye neseva ye-LDAP.
Esifundweni esilandelayo sizobheka ukusebenza ngamalogi, ikakhulukazi sizobheka amakhono esixazululo se-FortiAnalyzer. Ukuze ungaphuthelwa, landela izibuyekezo eziteshini ezilandelayo:
Source: www.habr.com