{"id":20653,"date":"2024-10-11T16:38:07","date_gmt":"2024-10-11T09:38:07","guid":{"rendered":"https:\/\/thegioifirewall.com\/?p=20653"},"modified":"2025-03-24T07:27:21","modified_gmt":"2025-03-24T07:27:21","slug":"huong-dan-su-dung-lets-encrypt-trong-sophos-firewall-v21","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/huong-dan-su-dung-lets-encrypt-trong-sophos-firewall-v21\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng Let’s Encrypt trong Sophos Firewall v21"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Gi\u1edbi thi\u1ec7u<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n


Sophos Firewall phi\u00ean b\u1ea3n 21 \u0111\u00e3 b\u1ed5 sung h\u1ed7 tr\u1ee3 cho Let’s Encrypt<\/strong>, m\u1ed9t t\u1ed5 ch\u1ee9c ch\u1ee9ng th\u1ef1c (CA) mi\u1ec5n ph\u00ed v\u00e0 t\u1ef1 \u0111\u1ed9ng \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1edfi Internet Security Research Group. M\u1ee5c ti\u00eau c\u1ee7a Let’s Encrypt l\u00e0 \u0111\u01a1n gi\u1ea3n h\u00f3a qu\u00e1 tr\u00ecnh c\u1ea5p v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 SSL\/TLS, t\u1eeb \u0111\u00f3 n\u00e2ng cao b\u1ea3o m\u1eadt v\u00e0 t\u00ednh ri\u00eang t\u01b0 cho web.
Ch\u1ee9ng ch\u1ec9 Let’s Encrypt c\u00f3 hi\u1ec7u l\u1ef1c trong 90 ng\u00e0y v\u00e0 s\u1ebd \u0111\u01b0\u1ee3c firewall t\u1ef1 \u0111\u1ed9ng gia h\u1ea1n tr\u01b0\u1edbc khi h\u1ebft h\u1ea1n. \u0110i\u1ec1u n\u00e0y gi\u00fap qu\u00e1 tr\u00ecnh qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 tr\u1edf n\u00ean d\u1ec5 d\u00e0ng v\u00e0 \u00edt r\u1eafc r\u1ed1i h\u01a1n.<\/p>\n\n\n\n

C\u00e1c tr\u01b0\u1eddng h\u1ee3p h\u1ed7 tr\u1ee3<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n


Sophos Firewall v21 h\u1ed7 tr\u1ee3 ch\u1ee9ng ch\u1ec9 Let’s Encrypt cho c\u00e1c giao di\u1ec7n nh\u01b0:<\/p>\n\n\n\n

    \n
  • WAF (Web Application Firewall)<\/li>\n\n\n\n
  • Email SMTP TLS<\/li>\n\n\n\n
  • C\u00e1c trang \u0111\u0103ng nh\u1eadp hotspot<\/li>\n\n\n\n
  • Web admin console<\/li>\n\n\n\n
  • C\u1ed5ng ng\u01b0\u1eddi d\u00f9ng, captive portal, VPN portal, v\u00e0 SPX portal<\/li>\n<\/ul>\n\n\n\n

    Tuy nhi\u00ean, Let’s Encrypt kh\u00f4ng h\u1ed7 tr\u1ee3 cho c\u00e1c d\u1ecbch v\u1ee5 VPN t\u1eeb xa, VPN site-to-site v\u00e0 Chromebook SSO.<\/p>\n\n\n\n

    Quy tr\u00ecnh c\u1ea5p ch\u1ee9ng ch\u1ec9 Let’s Encrypt<\/strong><\/p>\n\n\n\n

    \"A<\/figure>\n\n\n\n
      \n
    1. \u0110\u0103ng k\u00fd t\u00e0i kho\u1ea3n<\/strong>: Qu\u1ea3n tr\u1ecb vi\u00ean s\u1ebd nh\u1ea5n v\u00e0o n\u00fat “Register Account” \u0111\u1ec3 firewall g\u1eedi y\u00eau c\u1ea7u \u0111\u0103ng k\u00fd t\u1edbi m\u00e1y ch\u1ee7 Acme c\u1ee7a Let’s Encrypt.<\/li>\n<\/ol>\n\n\n\n
      \"A<\/figure>\n\n\n\n
        \n
      1. Y\u00eau c\u1ea7u ch\u1ee9ng ch\u1ec9<\/strong>: Firewall y\u00eau c\u1ea7u ch\u1ee9ng ch\u1ec9 cho t\u00ean mi\u1ec1n ho\u1eb7c nhi\u1ec1u t\u00ean mi\u1ec1n \u0111\u01b0\u1ee3c ch\u1ec9 \u0111\u1ecbnh.<\/li>\n<\/ol>\n\n\n\n
        \"\"\/<\/figure>\n\n\n\n
          \n
        1. X\u00e1c th\u1ef1c t\u00ean mi\u1ec1n<\/strong>: Firewall t\u1ea1o m\u1ed9t m\u00e1y ch\u1ee7 web \u1ea3o t\u1ea1m th\u1eddi v\u00e0 firewall rule, \u0111\u1ed3ng th\u1eddi cung c\u1ea5p m\u1ed9t t\u1ec7p x\u00e1c th\u1ef1c \u0111\u1ec3 ch\u1ee9ng minh quy\u1ec1n s\u1edf h\u1eefu t\u00ean mi\u1ec1n v\u1edbi Let’s Encrypt.<\/li>\n<\/ol>\n\n\n\n
          \"A<\/figure>\n\n\n\n
            \n
          1. C\u1ea5p ch\u1ee9ng ch\u1ec9<\/strong>: Sau khi x\u00e1c th\u1ef1c th\u00e0nh c\u00f4ng, Let’s Encrypt s\u1ebd c\u1ea5p ch\u1ee9ng ch\u1ec9 v\u00e0 firewall s\u1ebd t\u1ef1 \u0111\u1ed9ng l\u01b0u tr\u1eef v\u00e0 qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 n\u00e0y.<\/li>\n<\/ol>\n\n\n\n

            T\u1ea1o ch\u1ee9ng ch\u1ec9 Let’s Encrypt<\/strong>
            \u0110\u1ec3 t\u1ea1o ch\u1ee9ng ch\u1ec9 Let’s Encrypt trong Sophos Firewall:<\/p>\n\n\n\n

            \"A<\/figure>\n\n\n\n
              \n
            1. \u0110i\u1ec1u h\u01b0\u1edbng \u0111\u1ebfn ph\u1ea7n Certificates<\/strong>, ch\u1ecdn Let’s Encrypt<\/strong>. Nh\u1ea5n v\u00e0o Register account<\/strong><\/li>\n<\/ol>\n\n\n\n
              \"A<\/figure>\n\n\n\n
                \n
              1. \u0110i\u1ec1u h\u01b0\u1edbng \u0111\u1ebfn ph\u1ea7n Certificates<\/strong>, ch\u1ecdn Certificates<\/strong>. Nh\u1ea5n v\u00e0o Add<\/strong>.<\/li>\n<\/ol>\n\n\n\n
                \"A<\/figure>\n\n\n\n
                  \n
                1. \u1ede ph\u1ea7n Action<\/strong>, ch\u1ecdn Request Let\u2019s Encrypt certificate<\/strong>. \u0110\u1eb7t t\u00ean v\u00e0 ch\u1ecdn domain m\u00e0 b\u1ea1n mu\u1ed1n b\u1ea3o v\u1ec7. \u1ede ph\u1ea7n Hosted address<\/strong>, ch\u1ecdn port WAN c\u1ee7a firewall.<\/li>\n<\/ol>\n\n\n\n
                  \"A<\/figure>\n\n\n\n
                    \n
                  1. Firewall s\u1ebd t\u1ef1 \u0111\u1ed9ng t\u1ea1o c\u00e1c c\u1ea5u h\u00ecnh c\u1ea7n thi\u1ebft v\u00e0 g\u1eedi y\u00eau c\u1ea7u t\u1edbi Let’s Encrypt.<\/li>\n<\/ol>\n\n\n\n

                    S\u1eed d\u1ee5ng ch\u1ee9ng ch\u1ec9 Let’s Encrypt<\/strong>
                    Sau khi ch\u1ee9ng ch\u1ec9 \u0111\u01b0\u1ee3c c\u1ea5p:<\/p>\n\n\n\n

                      \n
                    • Qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng ch\u1ee9ng ch\u1ec9 n\u00e0y \u0111\u1ec3 b\u1ea3o m\u1eadt c\u00e1c c\u1ed5ng nh\u01b0 web admin console, user portal, captive portal, v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 li\u00ean quan.<\/li>\n\n\n\n
                    • Tr\u00ecnh duy\u1ec7t s\u1ebd hi\u1ec3n th\u1ecb k\u1ebft n\u1ed1i b\u1ea3o m\u1eadt v\u1edbi bi\u1ec3u t\u01b0\u1ee3ng \u1ed5 kh\u00f3a khi s\u1eed d\u1ee5ng ch\u1ee9ng ch\u1ec9 h\u1ee3p l\u1ec7 t\u1eeb Let’s Encrypt.<\/li>\n<\/ul>\n\n\n\n

                      K\u1ebft lu\u1eadn<\/strong>
                      Vi\u1ec7c t\u00edch h\u1ee3p Let’s Encrypt v\u1edbi Sophos Firewall v21 gi\u00fap \u0111\u01a1n gi\u1ea3n h\u00f3a vi\u1ec7c qu\u1ea3n l\u00fd ch\u1ee9ng ch\u1ec9 v\u00e0 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt cho h\u1ec7 th\u1ed1ng. H\u00e3y ki\u1ec3m tra c\u00e1c video h\u01b0\u1edbng d\u1eabn kh\u00e1c v\u00e0 truy c\u1eadp t\u00e0i li\u1ec7u h\u1ed7 tr\u1ee3 \u0111\u1ec3 t\u00ecm hi\u1ec3u th\u00eam chi ti\u1ebft.<\/p>\n","protected":false},"excerpt":{"rendered":"

                      Gi\u1edbi thi\u1ec7u Sophos Firewall phi\u00ean b\u1ea3n 21 \u0111\u00e3 b\u1ed5 sung h\u1ed7 tr\u1ee3 cho Let’s Encrypt, m\u1ed9t t\u1ed5 ch\u1ee9c ch\u1ee9ng th\u1ef1c (CA) mi\u1ec5n ph\u00ed v\u00e0 t\u1ef1 \u0111\u1ed9ng \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1edfi Internet Security Research Group. M\u1ee5c ti\u00eau c\u1ee7a Let’s Encrypt l\u00e0 \u0111\u01a1n gi\u1ea3n h\u00f3a qu\u00e1 tr\u00ecnh c\u1ea5p v\u00e0 gia h\u1ea1n ch\u1ee9ng ch\u1ec9 SSL\/TLS, t\u1eeb \u0111\u00f3 n\u00e2ng […]<\/p>\n","protected":false},"author":8,"featured_media":21149,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80],"tags":[110],"class_list":["post-20653","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","tag-firewall","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20653","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=20653"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20653\/revisions"}],"predecessor-version":[{"id":21140,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20653\/revisions\/21140"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/21149"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=20653"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=20653"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=20653"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}