Uma sikhuluma ngokuqala ibhizinisi, enye yezinsika eziyisisekelo ukuxhumana. Inethiwekhi yendawo, noma i-LAN, ngokuyisisekelo uhlelo oluvumela wonke amakhompyutha, amaphrinta, namadivayisi ehhovisi ukuthi asebenzisane futhi abelane ngedatha kalula . Kuyithuluzi elihle kakhulu lokuthola amandla okusebenza, kodwa-ke, ngokuvula umnyango wokuxhumana nokuxhuma konke kwi-inthanethi, sishiya nefasitela livulekile lezinkinga uma singagxili kakhulu ekuphepheni.
Ukuba nengqalasizinda evikelwe kahle akugcini nje ngokuqinisekisa i-Wi-Fi esheshayo, kodwa futhi kuqinisekisa ukuthi ulwazi lwenkampani oluyimfihlo aluweli ezandleni ezingafanele. Ngezinye izikhathi sicabanga ukuthi ngenxa yokuthi siyihhovisi elincane, asiyona into yokuhlaselwa, kodwa iqiniso liwukuthi izigebengu ze-inthanethi azinandaba nosayizi welogo, kodwa kunalokho ubuthakathaka bokuphepha kwedijithali. Yingakho ukuvikela inethiwekhi yendawo kuyimali edingekayo ukuze kugwenywe izimanga ezingajabulisi ezingabiza izinkulungwane zama-euro noma, okubi nakakhulu, zonakalise idumela lomkhiqizo.
Iyini ngempela inethiwekhi ye-LAN futhi isebenza kanjani?
Kulabo abangajwayelene naleli gama, i-LAN imele i- Local Area Network . Iyinethiwekhi yokuxhumana exhumanisa amakhompyutha akhiwe esakhiweni esifanayo noma aseduze kakhulu. Inzuzo yayo eyinhloko ukuthi ivumela abasebenzisi ukushintshanisa amafayela nezinsiza ngaphandle kokuphatha amadrayivu e-USB, ngaleyo ndlela ithuthukise ukuhamba komsebenzi.
Inqubo ilula: amadivayisi axhuma nge-router kanye nenethiwekhi ephakathi. Ukuze batshele ukuthi baxhumana nobani, basebenzisa amakheli e-MAC (afana ne-ID yangempela yedivayisi) kanye namakheli e-IP , okuyimalebula anengqondo anikezwe yiseva noma i-router. Uma uxhumano lunezintambo, yi-Ethernet; uma lungenantambo, yi-WLAN.
Ngokuphathelene nokwakhiwa kwezakhiwo, kunezinhlobo eziningana. Ezinye izinkampani zikhetha isakhiwo seklayenti-iseva , lapho ikhompyutha ephakathi ilawula futhi iphatha yonke into, okuyinto ekahle kakhulu ekugcineni ukulawula. Ezinye zisebenzisa inethiwekhi yontanga-kuya-kontanga (P2P), evame kakhulu emakhaya noma emabhizinisini amancane lapho ikhompyutha ngayinye inedatha yayo futhi yabelana ngayo njengoba kudingeka.
Izingxenye ezibalulekile zengqalasizinda
Ukuze lolu hlelo lonke lusebenze, sidinga ihadiwe ethile. Ama-switch ayizingqondo eziqondisa ithrafikhi, njengoba azi kahle ukuthi iyiphi i-port okufanele ithunyelwe kuyo ulwazi, okwenza asebenze kahle kakhulu kunezindawo ezindala. Ngakolunye uhlangothi, ama-router asebenza njengebhuloho phakathi kwenethiwekhi yethu yendawo kanye nomhlaba omkhulu we-inthanethi.
Siphinde sithole izindawo zokufinyelela ze-Wi-Fi (ama-WAP), avumela omakhalekhukhwini noma ama-laptop ukuthi axhumeke ngaphandle kwentambo, kanye nama-firewall , asebenza njenge-bouncer ekilabhini yasebusuku, enquma ukuthi ubani ongangena nokuthi ubani ongangeni. Uma isignali ingafiki ekhoneni lehhovisi, ama-repeater asetshenziswa ukukhulisa isignali nokususa izindawo ezifile.
Kuye ngesidingo, ama-VLAN (ama-Virtual LAN) angasetshenziswa , okuvumela inethiwekhi ebonakalayo ukuthi ihlukaniswe ngama-subnet amaningana anengqondo. Lokhu kubaluleke kakhulu ekuphepheni, njengoba ungahlukanisa, isibonelo, ithrafikhi yokuphatha nethrafikhi yezivakashi, ukuvimbela othile oya emhlanganweni ukuthi angangeni kumarekhodi ezimali enkampani.
Izinsongo ezivame kakhulu kanye nokuhlaselwa kwamanethiwekhi e-LAN
Masingazikhohlisi, abaphangi banamacebo okudala. Esinye sezinsongo ezivame kakhulu i-malware , engangena ngesinamathiselo se-imeyili esilula bese isula isizindalwazi sakho noma ibambe ulwazi lwakho njengesibambiso sesihlengo. Kukhona nokulalela, lapho abahlaseli bethola khona ukufinyelela kuma-microphone noma kuma-video call ukuze bantshontshe izimfihlo zezinkampani.
Okunye ukuhlasela okubi ukufaka ubuthi noma ukukhwabanisa nge-DNS. Empeleni, umhlaseli ukhohlisa iseva yegama ukuthi iqondise kabusha ithrafikhi kumawebhusayithi mbumbulu abonakala efanelekile, ngaleyo ndlela yeba iziqinisekiso zokungena kwabasebenzi ngaphandle kokuthi baqaphele.
Kukhona futhi amasu alula kakhulu njengokuhogela nokusnooping , okuhlanganisa ukuhlaziya nokuthwebula ithrafikhi yenethiwekhi. Ngenkathi eyokuqala ingasebenzi, eyokugcina ingalawula idatha. Futhi asikwazi ukukhohlwa ukuqhekeka kwamaphasiwedi , okusebenzisa amandla amakhulu ukuqagela amaphasiwedi alula njenge-"123456" noma igama lenja yomphathi.
Amasu asebenzayo okuvikela inethiwekhi yendawo
Ukuze ugweme ukubhajwa ungalindele, isinyathelo sokuqala ukusebenzisa ukulawula ukufinyelela okuqinile . Iphasiwedi iyodwa ayanele; ngokufanelekile, kufanele kusetshenziswe ukuqinisekiswa kwezinto ezimbili (2FA), futhi ukuze kube nokuphepha okukhulu, kufanele kusetshenziswe izikena zeminwe noma ze-retinal. Kubalulekile ukuthi amaphasiwedi abe yinkimbinkimbi, afake izimpawu, futhi ashintshwe njalo ukuze kugcinwe ukuphepha kwawo.
Ukugcina isofthiwe yakho kanye nehadiwe kusesikhathini kuyizinto ezibalulekile zokuphepha kwe-inthanethi. Ama-patch okuphepha awawona nje okokubukisa; akhona ukuvala ubuthakathaka obuvele buyaziwa ngabaphangi. Uma une-router ene-firmware yeminyaka emithathu edlule, empeleni unikeza isihluthulelo sehhovisi lakho kumuntu wokuqala ongena ngomnyango.
Ukubethela idatha kungenye ithuluzi elibalulekile. Ukusebenzisa amaphrothokholi afana ne -SSL noma i-TLS kuqinisekisa ukuthi noma umuntu ekwazile ukubamba ulwazi, uzobona kuphela ingxubevange yezinhlamvu ezingenamsebenzi. Ukuze kufinyelelwe kude, ama-VPN (ama-Virtual Private Networks) asindisa impilo, njengoba edala umhubhe ophephile futhi afihle indawo yomsebenzisi, ebavikela ikakhulukazi lapho bexhuma kumanethiwekhi omphakathi e-Wi-Fi.
Amathuluzi okuvikela nokuphatha athuthukisiwe
Njengoba inkampani ikhula, i-antivirus yamahhala ayisanele. Kuba nesidingo sokuqalisa izinhlelo zokuthola nokuvimbela ukungena (i-IDS/IPS) , eziqapha inethiwekhi ngesikhathi sangempela futhi zivimbele noma yikuphi ukuziphatha okusolisayo ngaphambi kokuba kubangele umonakalo. Ukulawulwa Kokufinyelela Kwenethiwekhi (i-NAC) nakho kuyasiza kakhulu, njengoba kuhlola ukuthi idivayisi isesikhathini yini ngaphambi kokuyivumela ukuthi ingene kunethiwekhi.
Kulabo abafuna ukuphathwa okulula, kunezixazululo ze -Unified Threat Management (UTM) . Empeleni, kuyisisombululo "esihlanganisa konke" esihlanganisa i-firewall, i-VPN, kanye nokutholwa kokungena kudivayisi eyodwa, okwenza kube lula kakhulu ukuphathwa kokuphepha ngaphandle kokushintsha phakathi kwezinhlelo eziyishumi ezahlukene.
Asikwazi ukukhohlwa ukuvimbela ukulahleka kwedatha (i-DLP) , okuvimbela ulwazi olubalulekile, njengemininingwane yekhadi lesikweletu noma amarekhodi ezokwelapha, ukuthi lungaphumi kunethiwekhi yenkampani ngaphandle kwemvume. Futhi ekugcineni, ukuphepha kwe-endpoint kunesibopho sokuvikela yonke idivayisi ye-endpoint (omakhalekhukhwini, amaphilisi, ama-laptop), njengoba ngayinye iyindawo yokungena engaba khona yokuhlasela.
Isici somuntu: isixhumanisi esibuthakathaka kakhulu
Ungachitha izinkulungwane zama-euro ku-firewall engcono kakhulu emakethe, kodwa uma isisebenzi sichofoza kusixhumanisi se -phishing esithembisa imiklomelo yamahhala, lonke uhlelo lungawa. Iphutha lomuntu liwubuthakathaka obuvame kakhulu futhi okunzima kakhulu ukululungisa ngesofthiwe.
Isixazululo yimfundo. Ukuhlela izingxoxo ngemikhuba yokuphequlula ephephile nokufundisa abasebenzi ukuthi baqaphele ama-imeyili asolisayo kubalulekile. Ithimba elinolwazi oluhle liyindlela yokuqala nengcono kakhulu yokuzivikela kunoma iyiphi inhlangano, esebenza njengesihlungi somuntu ngaphambi kokuba usongo lufinyelele ezinhlelweni zobuchwepheshe.
Ukuba ne-LAN enamandla nephephile kuhilela ukuhlanganisa ubuchwepheshe obusezingeni eliphezulu, njengokwehlukaniswa kwe-AI ne-VLAN, nokuphathwa kokufinyelela okuhlakaniphile kanye nokuqeqeshwa kwabasebenzi okuqhubekayo. Ekugcineni, kumayelana nokudala izendlalelo zokuzivikela lapho ukubethela, izibuyekezo eziqhubekayo, kanye nokuqonda okuvamile kusebenza ndawonye ukuqinisekisa ukuqhubeka kwebhizinisi kanye nokuphepha kwedatha.
