Ungayisebenzisa kanjani iWindows Defender Firewall ukuvikela inethiwekhi yakho ye-IoT

Ukuphepha kwenethiwekhi ye -IoT kanye nezindawo ze-OT akukhona nje ukubuyekeza i-firmware noma amadivayisi okuhlukanisa: kuncike ekutheni uhlunga kanjani ithrafikhi ku- Windows nge-firewall. I-Windows Defender Firewall ikuvumela ukuthi unqume ukuthi yini engena nokuthi yini ephumayo kuphrofayela ngayinye yenethiwekhi, futhi lokho kungenza umehluko phakathi kwesigameko esincane nenkinga enkulu.

Ngaphezu kokuvikela i-PC yakho, i-firewall ingakusiza ukuthi ubone futhi ulawule ithrafikhi ethinta izingxenye zezimboni, kokubili kumanethiwekhi asekhaya anamadivayisi axhunyiwe kanye nasezitshalweni ezinezinzwa, ama-PLC, noma ama-HMI. Sizochaza ukuthi singayilungiselela kanjani isinyathelo ngesinyathelo nokuthi ihambisana kanjani namanethiwekhi e-OT/IoT , okuhlanganisa ukuhlukaniswa, imodeli ye-Purdue, amaphuzu okuqapha, ngisho nokufakwa ngama-diode edatha.

Iyini iWindows Defender Firewall futhi isiza kanjani kunethiwekhi ye-IoT?

I-Windows firewall isebenza njengesihlungi, ivumela noma yenqabela ukuxhumana okusekelwe emithethweni. Ivimba ukufinyelela okungagunyaziwe futhi inciphisa ubungozi ngokulawula amakheli e-IP, amachweba, kanye nezindlela zohlelo. Kumanethiwekhi anamakhamera, izinzwa, noma amadivayisi ahlakaniphile, ukukhawulela ithrafikhi kubalulekile ekunciphiseni izindawo zokuhlasela.

Kusuka kuhlelo lokusebenza lwe-Windows Security, ungabuka futhi uphathe isimo sayo sohlobo ngalunye lwenethiwekhi: isizinda, sangasese, noma somphakathi. Ungayinika amandla noma uyikhubaze ngephrofayili bese ufinyelela izinketho ezithuthukisiwe ezikuvumela ukuthi ulungise ukuziphatha kwayo ezindaweni ezahlukene.

Amaphrofayili enethiwekhi: okuyimfihlo, okusesidlangalaleni, kanye nesizinda

Uma uxhuma ikhompyutha yakho, ungamaka inethiwekhi njengeyimfihlo noma yomphakathi. Inethiwekhi yangasese (isb., inethiwekhi yakho yasekhaya) ithatha ukwethembana phakathi kwamadivayisi, okuwavumela ukuthi atholane futhi abelane ngamafolda enethiwekhi ku-Windows 11. Ngokuphambene nalokho, inethiwekhi yomphakathi (isb., i-Wi-Fi yesitolo sekhofi) ayithembekile kangako futhi kufanele ivikelwe kakhulu.

Ukukhetha iphrofayili efanele kushintsha izinga lokuchayeka kanye nemithetho ezenzakalelayo esetshenziswayo. Kumanethiwekhi omphakathi, kunengqondo ukuqinisa ukuxhumana okungenayo , kuyilapho kumanethiwekhi azimele ungavumela imisebenzi ethile yangaphakathi uma uthemba imishini.

Lungiselela i-Windows Defender Firewall kusuka ku-Windows Security

Ukuze ulungise kalula i-firewall, iya ku-Windows Security bese uvula isigaba se-Firewall kanye ne-Network Protection. Khetha iphrofayili esebenzayo (isizinda, sangasese, noma esesidlangalaleni) bese uvumela i-Microsoft Defender Firewall ukuthi iqale ukuhlunga ithrafikhi kulowo mongo.

Uzothola nokulawula okuwusizo kakhulu: Vimba konke ukuxhumana okungenayo, kufaka phakathi lokho okuvela ohlwini lwezinhlelo zokusebenza ezivunyelwe. Uma kukhethiwe, i-firewall ayinaki okuhlukile futhi ivimba konke okuvela kuleyo phrofayela . Lokhu kwandisa ukuphepha, kodwa kungaphula izinhlelo zokusebenza ezidinga ukulalela ukuxhumana.

Iphaneli efanayo inikeza ukufinyelela kwezinye izici. Ukuvumela uhlelo lokusebenza ukuthi ludlule ku-firewall kunezela okuhlukile (noma kuvula ama-port athile) uma uhlelo lokusebenza olusemthethweni luvinjiwe. Sebenzisa lokhu ngokuhlakanipha: ukuvula ama-port ngokungadingekile kungadala ubuthakathaka bokuphepha.

Uma kunenkinga ngokuxhumeka kwakho konke, sebenzisa i-Network and Internet Troubleshooter. Le wizard ingaxilonga futhi ilungise ngokuzenzakalelayo izinkinga ezivamile zenethiwekhi kanye ne-firewall.

Ungalungisa futhi izilungiselelo zesaziso ze-firewall uma uthola izexwayiso eziningi kakhulu noma ungazitholi. Ukulawula izinga lesaziso kukusiza ukuthi ugweme ukuphuthelwa amabhlogo abalulekile ngaphandle kokukuxina ngemiyalezo.

Inketho yezilungiselelo ezithuthukisiwe ivula ikhonsoli yakudala ye-Windows Defender Firewall. Lapho ungakha imithetho yokuphepha engenayo, ephumayo, kanye nokuxhumeka , futhi ubuyekeze amalogi okuqapha. Isexwayiso: Ukushintsha imithetho ngaphandle kolwazi olufanele kungadala ubuthakathaka noma kuphule izinhlelo zokusebenza.

Uma konke kuhamba kabi, kuba nenkinobho ephuthumayo: Buyisela ama-firewall kuzilungiselelo ezizenzakalelayo. Lokhu kubuyisela ikhompyutha esimweni sayo sokuqala futhi, uma usenkampanini, isebenzisa kabusha izinqubomgomo zenkampani.

Vimba uhlelo futhi uphathe abagunyaziwe

Kunezimo lapho ufuna ukuvimbela uhlelo lokusebenza ukuthi lufinyelele ku-inthanethi (ukugwema i-telemetry, ukulanda , imidlalo eku-inthanethi engagadiwe, noma izibuyekezo ezingqubuzanayo). Isixazululo esisebenza kahle kakhulu ukudala umthetho wokuphuma ovimba ifayela elisebenzisekayo lohlelo.

1. Vula i-Start menu bese uya ku-Control Panel. Finyelela ku-Windows Defender Firewall bese uchofoza kokuthi Izilungiselelo Ezithuthukile.
2. Kuphaneli engakwesokunxele, khetha Imithetho Ephumayo. Kufasitelana elingakwesokudla, chofoza Umthetho Omusha.
3. Khetha Uhlobo Lomthetho: Uhlelo, bese uchofoza Okulandelayo. Ikhombisa le ndlela yohlelo bese uthola i-.exe ukuze uvimbele (noma ubhale indlela yayo uma uyayazi).
4. Hlola okuthi Vimba uxhumano bese uqhubeke. Kusebenza Kusizinda, Okuyimfihlo kanye Nomphakathi (okuvamile) futhi unikeze igama elichazayo emthethweni.

Umthetho uqala ukusebenza uma usuqedile. Ungawubuka futhi uwuhlele ku-Outbound Rules. Ukuze uwuvimbele okwesikhashana, mane uvale/uvule umthetho ngokuchofoza kwesokudla njengoba kudingeka.

Kuthiwani uma udinga ukuvumela uhlelo lokusebenza oluthembekile ukuthi ludlule? Ukusuka kuphaneli eyinhloko, iya ku-Vumela uhlelo lokusebenza noma isici nge-Windows Firewall. Chofoza okuthi Shintsha izilungiselelo bese ukhetha okuthi Okuyimfihlo noma Okusesidlangalaleni njengoba kudingeka (ungavuli izinhlelo zokusebenza ezinedatha ebucayi kumanethiwekhi omphakathi).

Izendlalelo zenethiwekhi ye-OT/IoT kanye ne-Purdue Model

Kumanethiwekhi ezimboni kanye nawe-IoT, akuwona wonke amadivayisi noma izinsizakalo ezisebenza ezingeni elifanayo. Ukwakheka kuvame ukuhlukaniswa ngamadivayisi e-endpoint (ama-PC, amaseva, amadivayisi we-IoT) kanye namadivayisi enethiwekhi (amaswishi, ama-firewall, ama-router, kanye nama-access points), ahlelwe ngezendlalelo.

Imiklamo eminingi ilandela imodeli yokulandelana enezingqimba ezintathu: Ukufinyelela, Ukusabalalisa, kanye ne-Core. Ingqimba yokufinyelela isingatha izindawo zokugcina eziningi futhi ngokuvamile incike esangweni elizenzakalelayo lokuhambisa ngaphandle kwe-subnet. Ingqimba yokusabalalisa ihlanganisa ukufinyelela futhi isebenzise izinsizakalo (ukuhambisa nge-VLAN, i-QoS, izinqubomgomo), kanti i-core inikeza ipulazi leseva kanye nokuhamba okusheshayo, okuphansi.

Ngaphezu kwalokho, imodeli yokubhekisela ye-Purdue yandisa ukuhlukaniswa ezindaweni ze-OT/ICS ngamazinga 0 kuya ku-5. Izinga 0 lifaka phakathi izinzwa, ama-actuator, kanye nezinto zenqubo (ukulinganisa, ukushayela, kanye nokuqalisa). Izinga 1 lifaka phakathi abalawuli abafakiwe (ama-PLC, ama-RTU, ama-DCS) alawula la madivayisi asensimini.

Izinga lesi-2 ligxile ekuqapheni: ama-HMI, ama-alamu, ukuphathwa kwe-batch, kanye neziteshi zokulawula , ezivame ukusebenza ngemishini ejwayelekile kanye nezinhlelo zokusebenza (i-Windows noma i-UNIX ). Lezi zinhlelo zixhumana nama-PLC/RTU futhi ngezinye izikhathi zishintshana ngedatha ngamazinga aphezulu.

Amazinga 3 no-3,5 ahlanganisa inethiwekhi yezimboni kanye neyomngcele wendawo: izinhlelo zokusebenza zokuphathwa kwemisebenzi yezimboni (imibiko yokukhiqiza, ukuhlaziya, ukuhlela , i-AD yezimboni, amaseva amafayela, noma ama-terminal ). Idatha ngokuvamile ihlanganiswa ne-IT kusukela lapha.

Amazinga 4 no-5 ahambisana ne-IT yenkampani: izinsizakalo ezihlanganisiwe eziphethwe yinhlangano lapho izinhlelo zebhizinisi zikhona khona.

Ukubekwa kwezinzwa namaphoyinti omgwaqo athokozisayo

Ukuze kuqashwe kalula amanethiwekhi e-OT nge-Defender ye-IoT, izinzwa zithola ithrafikhi eboniswayo (i-SPAN kuma-switch noma i-TAP). Imbobo yokuphatha yenzwa ixhuma kunethiwekhi yokuphatha noma yenkampani ukuthumela idatha ku-portal ye-Azure, ngaphandle kokuthi umngcele uyivimbela.

Ungayibamba kuphi ithrafikhi ewusizo? Thola izixhumi ezixhumanisa isango elizenzakalelayo nokushintsha kokusabalalisa noma okuyinhloko. Lawa amaphuzu "athakazelisayo" ngoba athola ithrafikhi ephuma esigabeni se-IP , okukuvumela ukuthi ubone ukuxhumana kwezinye izingxenye.

Akuzona zonke ithrafikhi ezi-unicast: cabanga kokubili ukusakazwa kanye nokusakaza okuningi. Ithrafikhi yokusakaza kanye nokusakaza okuningi ivame ukufinyelela kuzo zonke izinto eziku-subnet , kufaka phakathi isango, ngakho-ke zivame ukumbozwa. Ngokuhlola i-IGMP, ukudlulisela phambili ama-multicast kwenziwa ngcono, kodwa ukulethwa kumphathi othile akuqinisekisiwe.

Ithrafikhi ye-Unicast ingahamba ngqo ukusuka emthonjeni iye endaweni ethile ngaphandle kokufinyelela kubo bonke ababungazi. Ukuze uthole lokhu, kuyalulekwa ukubeka izinzwa kumaswishi okufinyelela , ngaleyo ndlela uthwebule izingxoxo ebezizodlula isango elizenzakalelayo.

Uma uthumela ithrafikhi kuzinzwa, amanye amadivayisi abonisa uhlangothi olulodwa kuphela. Qapha zombili izinkomba ukuze uthuthukise umongo wezingxoxo kanye nokunemba kokutholwa.

Kuma-subnet abalulekile, amanye amathrafikhi angase angafinyeleli iphuzu elijwayelekile lesithakazelo. Cabanga ngokungeza ama-RSPAN, ama-TAP, noma ezinye izixazululo ezizinikele ukubhekana nethrafikhi engajwayelekile noma izikhala zokubonakala.

Uma usebenza ngama-gateway angaqondisiwe (i-Waterfall, i-Owl, i-Hirschmann) ngama-data diode, unezimo ezimbili. Kunconywa: beka izinzwa ze-OT ngaphandle komphetho ukuze uthole i-SPAN engaqondisiwe kusuka kunethiwekhi kuya echwebeni lokuqapha lenzwa (elifanele ukusetshenziswa okukhulu). Ngaphandle kwalokho, zibeke ngaphakathi komphetho bese uthumela izexwayiso ze-UDP syslog nge-diode.

Kulesi simo sokugcina, izinzwa zihlukaniswe ngaphandle futhi zidinga ukuphathwa kwendawo: akukho ukuxhumana kwefu noma ukuphathwa okuvela ku-Azure , futhi izibuyekezo zobuhlakani kumele zisetshenziswe ngesandla. Uma udinga izinzwa ezixhunywe efwini, zibeke ngaphandle komngcele.

Ukugeleza kwethrafikhi: ngaphakathi nangaphandle kwesegimenti

Ukuziphatha komzila kuncike ekutheni indawo okuyo ingaphakathi noma ingaphandle kobubanzi bemaski ye-subnet yomthombo. Amadivayisi aqhathanisa ikheli le-IP lendawo okuyo ne-subnet yawo bese enquma ukuthi azothumela isicelo ngqo noma esangweni. Le nqubo ingase ibangele izicelo ze-ARP zokuxazulula amakheli e-MAC.

Uma indawo okuyo ingaphandle kwesigaba, idivayisi ithumela ithrafikhi esangweni layo elizenzakalelayo njenge-hop yokuqala. Ukubeka inzwa kuleyo interface kuqinisekisa ukuthi konke okuphuma esigabeni kuyabonakala , okubalulekile ekuboneni ukuxhumana okungavamile kwezinye izindawo.

Isibonelo: I-PC enekheli le-IP elingu-10.52.2.201/24 iqala ukuxhumana ku-10.17.0.88. Uhlelo lubala ukuthi i-10.17.0.88 ayikho ku-10.52.2.0/24 , ngakho-ke iqondisa ithrafikhi esangweni layo. Leli phuzu lilungele ukuqapha ukugeleza.

Uma indawo oya kuyo ingaphakathi kwebanga (isb., 10.52.2.17 kuya ku-10.52.2.131 nge /24), ithrafikhi ayiweli esangweni, ixazululwa kusetshenziswa i-ARP ukuthola ikheli le-MAC yendawo oya kuyo , futhi ilethwa endaweni. Ngaphandle kokubamba ukufinyelela, lokhu kugeleza kwangaphakathi kwesigaba kungase kungatholakali.

Izizathu zokuvimba izinhlelo nge-firewall

I-firewall iqapha futhi ilawule ukuxhumana okungenayo nokuphumayo ngokwemithetho. Kufana nokulawula umngcele wedijithali : inquma ukuthi ubani ongena nokuthi ubani ophumayo ngokusekelwe engcupheni. Izinhlelo zokuvimba zivimbela ukufinyelela okungagunyaziwe, i-malware , kanye nokuziphatha okungafuneki.

Ngaphezu kwalokho, ungavimbela izibuyekezo ezizenzakalelayo eziphula ukuhambisana, zivimbele amapulatifomu emidlalo yabantwana, noma zivimbele izikhangiso nokuxhumeka kumanethiwekhi omphakathi we-Wi-Fi angavikelekile. Imithetho ehlanganisiwe inikeza ukulungiswa okudingayo ngezinye izikhathi empilweni yakho yansuku zonke.

Ezinye izindlela zokukhawulela ukuxhumana ku-Windows, macOS, ne-Linux

Ku-Windows, uma ungafuni ukushintsha noma yiziphi izilungiselelo, ungashintsha i-Airplane Mode kusuka ku-Action Center ukuze unqamule uxhumano lwakho lwe-inthanethi okwesikhashana. Luvale ukuze lubuyele esimweni esijwayelekile uma usuqedile. Kukhona futhi ama-firewall ezinkampani zangaphandle amahhala atholakalayo uma ukhetha izixhumi ezihlukile noma izici ezengeziwe.

Ku-macOS, iya kuzilungiselelo zesistimu (noma Izintandokazi), thola isigaba seNethiwekhi/Ukuphepha kanye Nobumfihlo, bese uya ku-Firewall. Yivule, bese ngaphansi kwe-Izinketho, engeza izinhlelo zokusebenza bese ukhetha ukuvumela noma ukuvimba ukuxhumana okungenayo . Khumbula ukuthi ukuvimba ukuxhumana kungathinta ukuncika phakathi kwezinhlelo zokusebenza.

Ku -Linux (Ubuntu), i-UFW yenza kube lula ukuphatha: faka nge-`sudo apt-get install ufw`, hlola isimo nge-`sudo ufw status`, bese uchaza imithetho eyisisekelo ngaphambi kokuyivumela . Vumela i-SSH nge-`sudo ufw vumela i-ssh`, vumela i-HTTP/HTTPS nge-`sudo ufw vumela i-http/https`, bese uyisebenzisa nge-`sudo ufw enable`. Hlola isimo nge-`sudo ufw status`.

Ukulungiswa, izaziso, ukuvala ukusebenza kwesikhashana nokubuyisela

Ukulungisa izinga lesaziso kukusiza ukuthi uhlale unolwazi ngamabhulokhi abalulekile ngaphandle komsindo oweqile. Isigaba sezilungiselelo zesaziso ku-Windows Security yilapho ungalungisa khona izexwayiso ze-firewall.

Uma udinga ngempela ukuvala i-firewall, yenza iphrofayili ngephrofayili bese ucabangela ngokucophelela lokho okwenzayo. Akukhuthazwa ukukhubaza i-firewall ngokuphelele ngoba kuveza uhlelo lwakho ebuthakathakeni . Kungcono ukudala okuhlukile okulawulwayo noma ukukhubaza umthetho othize isikhathi esilinganiselwe.

Ukuze uyicime, iya ku-Control Panel: System and Security > Windows Defender Firewall > Yivule noma uyivale. Ungayikhubaza ngokwephrofayili ngayinye, kodwa uhlelo ngokwalo lukuxwayisa ukuthi lokhu akukhuthazwa . Yivule futhi ngokushesha okukhulu.

Uma ukucushwa sekuphazamisekile, buyisela okuzenzakalelayo futhi kuphaneli efanayo yomlilo bese ulandela imiyalelo. Ukubuyisela isimo sokuqala kuxazulula ukungahambisani futhi kuphinda kusetshenziswe izinqubomgomo zenhlangano yakho, uma zikhona.

Unezinsika ezimboziwe: amaphrofayili enethiwekhi akhethwe kahle, imithetho yokungena/yokuphuma elungisiwe kahle, okuhlukile okufanelekile, ukubonakala kumanethiwekhi e-OT/IoT ngezinzwa ezindaweni ezibalulekile, kanye nezinqubo zokuvimba izinhlelo zokusebenza noma ukusetha kabusha izilungiselelo. Le ndlela ebanzi inciphisa izingozi kokubili kwi-PC yakho kanye nasezigabeni zezimboni futhi ikuvumela ukuthi usabele ngokunembile lapho kudingeka.

I-athikili ehlobene:

Hlola ukuxhumana kwenethiwekhi ku-Windows nge-TCPView, TCPvcon, ne-Netstat

Isaka

Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.