VPN's: IPSec vs. SSL

Ndezvipi Zvakagadzirwa Zvakanaka Kwauri?

Mumakore akapfuura kana hofisi yekune imwe nzvimbo yaidiwa kuti iwirirane nekombiyuta yekombiyuta kana yekutengesa mukambani yekambani, zvaireva kuisa mitsara yakatsaurirwa yakagadzirwa pakati pezvimbo. Iyi mitsetse yakatsaurirwa yakapa hurumende dzakananga uye dzakachengeteka pakati pezvivako, asi dzaive dzinodhura zvikuru.

Kuti vagare vashandisi vemafambisi makambani aizofanira kugadzirisa dhauriro yakatsaurirwa-iri mumaseji ekusvikirira kure (RAS). I-RAS ingadai ine modem, kana akawanda modem, uye kambani inofanira kunge ine mutsara wefoni unomhanya kune modem imwe neimwe. Vashandi vanoshandisa foni vanogona kushamwaridzana newetaneti nenzira iyi, asi inhanho yaifamba zvishoma nezvishoma uye yakaita kuti zvive nyore kuita basa rakawanda rinobudirira.

Nekuuya kweInternet zvakawanda zvezvo zvakachinja. Kana iwe webhusaji yemasevhisi uye unyanzvi hwekutengesa huripo, kuwirirana kwemakombiyuta pasi rose, saka sei ikambani ikambani inoshandisa mari nekuumba misoro yekutungamirira kuburikidza nekushandisa mitsetse yakatsaurirwa yakagadzirwa uye kuisa-mumabhanki emodem. Wadii kungotanga kushandisa Indaneti?

Zvakanaka, dambudziko rekutanga nderokuti iwe unoda kukwanisa kusarudza ndiani anoona kuti ndeupi ruzivo. Kana iwe uchingotanga kuzarura mambure ose kuInternet zvingave zvisingakwanisi kushandisa nzira dzinoshanda dzekuchengeta vashandi vasingabvumirwi kubva pakuwana ushamwari hwekambani. Makambani anoshandisa matani emari kuti avake moto uye dzimwe nzira dzekuchengetedzwa kwenhungamiro inotarirwa kunyatsoona kuti hakuna munhu ari paIndaneti anogona kupinda mukati memukati.

Unobatanidza sei kuda kuvhara Internet yevanhu kubva pakusvika mukati memukati nekunoda kuti vashandisi vako vari kure kurega inhare yeInternet senzira yekubatanidza neukama mukati? Unoshandisa Virtual Private Network (VPN ). VPN inoumba "tunnel" chaiyo inobatanidza magumo maviri. Iyo nzira mumugwagwa weVPN yakavharidzirwa kuitira kuti vamwe vashandisi veIndaneti vasaona nyore nyore kutarisana kwekutaurirana.

Nokushanda kweVPN, kambani inogona kupa rusununguko rwemukati wehutachiona hwekunze kune vatengi munyika yose pane chero nzvimbo nekunyoresa paIndaneti. Inoderedza hutungamiri uye hutano hwezvemari hunobatanidza nechetsika inoshandiswa mitsara yakazara-nzvimbo network (WAN) uye inobvumira vashandisi vari kure nevashambadziri kuti vabudirire. Zvinonyanya kukosha, kana zvikashandiswa zvakanaka, zvinodaro pasina kuita kuti kuchengeteka uye kuvimbika kwekombiyuta zvirongedze uye nedhidhiro pane imwe purogiramu yekambani.

Mutambo weVPN unotenderera pa IPSec (Internet Protocol Security) kusvika kune imwe nzira pakati pemagumo maviri. IPSec inoshanda pa Network Layer yeOSI Model- kuchengetedza zvose data inofamba pakati peiviri endpoints pasina sangano kune chero ripi zvaro. Kana yakabatanidzwa neIpSec VPN kakombiyuta yekombiti "inowanikwa" nhengo yakazara yekambani yekambani yekuona uye inokwanisa kuwanika rese network.

Ruzhinji rwe IPSec VPN mhinduro dzinoda hutatu-hardware uye / kana software. Kuti uwane IPSec VPN, nzvimbo yekushanda kana chipikicha chiri mubvunzo inofanira kuva neIpSec client software application yakaiswa. Izvi zvose pro na con.

Izvo ndeyekuti inopa humwe humwe hutete hwekuchengeteka kana ikashandisi yemakambani inoda haisi kungoita sarudzo yakakodzera yeVPN client software kuti ione ku IPSec VPN yako, asi zvakare inofanirwa kuigadzirirwa zvakanaka. Izvi ndezvipingamupinyi zvakare zvinoshandiswa nemumwe munhu asingabvumirwi kubhadhara asati awana rusununguko rwako.

Izvozvi ndezvekuti inogona kuva mutoro wezvemari yekuchengetedza ma-licensiti e-software yeklayiti uye nhepfenyuro yekusimbiswa kwekambani yekuisa nekugadzirisa software yekombiji pamakona ose ari kure-kunyanya kana vasingakwanisi kuva panzvimbo yepasiti kuti vagadzire software ivo pachavo.

Ndiyo iyi con inowanzoitwa seimwe yenzira dzakakura kune wepikisa SSL ( Secure Sockets Layer ) VPN mhinduro. SSL ndiyo inowanzoita protocol uye ma web browser akawanda ane SSL zvigadziridzirwa akavakwa. Saka inenge kese makombiyuta munyika yose atove akashongedzerwa nekodzero "client software" kuti iungane kune SSL VPN.

Imwe pro ye SSL VPN ndeyekuti vanobvumira zvakanyatsoshandiswa kugona kuwanikwa. Chokutanga pane zvose vanopa tunnel kune mamwe maitiro asi panzvimbo yeiyo yese yekambani LAN. Saka, vashandisi veSLL VPN kuwirirana vanogona kungopinda maitiro avo avakagadzirirwa kuti vasvike panzvimbo pehutaneti. Chechipiri, zvakajeka kupa kodzero dzakasiyana-siyana dzekuwana kune vashandisi vakasiyana-siyana uye vane huwandu hwegranular pamusoro pekushandisa kwevashandi.

A con SSL VPN's kunyange iwe uri kuwana sarudzo (s) kuburikidza newebhu web browser iyo inoreva kuti inoshanda chete kune web-based applications. Zvinokwanisika ku-web-shandisa mamwe maitiro kuitira kuti atoneke kuburikidza neS SSL VPN, asi kuita kudaro kunowedzera kuoma kwechigadziro uye kunopedza zvimwe zvezvakaitika.

Kuva neruzivo rwakananga chete kune web-enabled-enabled webSLL zvinorevawo kuti vashandi havakwanisi kuwana mazano e-network sevashanduri kana kuchengetedzwa kwepakati uye havagoni kushandisa VPN yekugovera mafaira kana mafikisi emafaira.

SSL VPN yave ichiwana mukupararira nekufarirwa; kunyange zvakadaro haisi iyo nzira yakarurama yezviitiko zvose. Saizvozvowo, IPSec VPN's haina kukodzera pane imwe nguva kana. Vatengesi vari kuramba vachikudziridza nzira dzekuwedzera hushanda hwe SSL VPN uye iyo teknolojia iyo iwe unofanira kutarisisa zvakanyanya kana iwe uri mumusika wekuchengetedzwa kwakachengeteka kwekugadzirisa mitambo. Kubva zvino, zvakakosha kunyatsoongorora zvinodiwa zvevashandi vako vari kure uye kuongorora zvinobudirira uye zvakanakira pane imwe sarudzo yekuona kuti chii chinonyanya kukubatsira iwe.