Dulmar

Workspace Blocking waa sifo u oggolaanaysa macaamiisha ChatGPT Enterprise inay xaddidaan gelitaanka goobo shaqo oo gaar ah oo ChatGPT ah, iyadoo hubinaysa in isticmaalayaashu geli karaan oo ku dhex shaqayn karaan goobaha shaqada ee la oggol yahay. Sifadani waxay hubisaa in isticmaalayaasha ururkaaga ku jira lagu xaddido gelitaanka goobo shaqo oo gaar ah, oo la ansixiyay.

Sida ay u shaqayso

• Dejinta header gaar ah: Waxaad habaynaysaa goobaha shaqada ee la oggol yahay adigoo ku daraya header HTTP gaar ah, ChatGPT-Allowed-Workspace-Id, habaynta shabakaddaada. Header-kani wuxuu ka kooban yahay hal ama ka badan aqoonsiyada goobaha shaqada (UUID-yo) oo cayimaya goobaha shaqada ee isticmaalayaashu geli karaan.

• ChatGPT wuxuu shaandheeyaa gelitaanka:

  • Marka isticmaale galo ChatGPT Enterprise, nidaamku wuxuu hubiyaa in goobta shaqada ee uu isku dayayo inuu galo ay la mid tahay mid ka mid ah UUID-yada goobaha shaqada ee ku qoran header-ka ChatGPT-Allowed-Workspace-Id.

  • Haddii isticmaaluhu isku dayo inuu galo goob shaqo oo aan ku qornayn header-ka, ChatGPT si toos ah ayuu u shaandheeyaa codsigan, isagoo xannibaya gelitaanka goobtaas shaqada. Ilaa iyo inta isticmaaluhu heli karo ugu yaraan hal goob shaqo, shaandhayntu si aamusnaan ah ayay u dhacdaa. Xaaladaha uu isticmaaluhu ku dhammaado isagoo aan heli karin wax goobo shaqo ah shaandhaynta ka dib, wuxuu heli doonaa khalad 403 Forbidden.

  • Kaliya goobaha shaqada ee ku qoran header-ka ayaa la geli karaa, goob kasta oo kale oo shaqo (oo ay ku jiraan goobaha shaqada ee shakhsi ahaaneed) nidaamku wuu shaandheeyaa.

• Taageeridda goobo shaqo oo badan: Haddii ururkaagu u baahan yahay inuu oggolaado gelitaanka in ka badan hal goob shaqo, waxaad header-ka ku dari kartaa UUID-yo goobo shaqo oo badan, oo hakadyo lagu kala saaray iyada oo aan meel bannaan u dhexayn.

Dejinta

Tallaabada 1: Hel Aqoonsiga goobta shaqada

Si loo oggolaado gelitaanka goobo shaqo oo gaar ah, waxaad u baahan doontaa inaad hesho Workspace UUID-ka goob kasta oo shaqo oo la oggol yahay. UUID-kan waxaa laga heli karaa dejimaha maamulka ChatGPT:

• Gal akoonkaaga maamulka ChatGPT Enterprise.

• Tag bogga Dejimaha Maamulka.

• Hel Aqoonsiga goobta shaqada (UUID) ee u dhiganta goob kasta oo shaqo oo aad rabto inaad oggolaato.

Tusaale Workspace UUID: 437adf77-4085-4b22-b7b1-de7b6f5ec6c0

Tallaabada 2: Iibiyeyaasha SASE

Hirgelinnada heer shirkadeed oo dhan, ururradu waxay la shaqayn karaan la-hawlgalayaashooda Secure Access Service Edge (SASE). La-hawlgalayaashani waxay ku dhaqangelin karaan sifada Workspace Blocking heerka shabakadda.

Tallaabada 3: Habaynta

• Ogolow goobo shaqo oo badan (haddii loo baahdo):Si loo oggolaado gelitaanka goobo shaqo oo badan, geli Workspace UUID-yada oo hakadyo lagu kala saaray.

• Cayim beegsiga URL-ka:

  • Hubi in header-ka lagu dabaqay URL-ka ChatGPT. U deji shaandhada URL-ka inay ku dabaqanto oo keliya codsiyada loo diro https://chatgpt.com/*

Tallaabada 4: Maareynta khaladaadka

• Khaladka 403 Forbidden: Haddii isticmaale isku dayo inuu galo goob shaqo oo aysan jirin goobo shaqo oo la heli karo shaandhaynta ka dib, wuxuu arki doonaa khalad 403 Forbidden, fariinna waxay muujin doontaa inaan loo oggolayn inuu galo goobta shaqada.

• Khaladka 400 Bad Request: Haddii qiimaha header-ku si khaldan u qaabaysan yahay (tusaale, UUID-ka goobta shaqadu khaldan yahay), dhammaan codsiyada leh header-kaas waxay ku fashilmi doonaan khalad 400 Bad Request.

Tallaabada 5: Xannib isticmaalka ChatGPT ee qarsoon (aan la gelin)

ChatGPT sidoo kale waa la isticmaali karaa iyada oo aan wax akoon ah ama goob shaqo ah jirin; waxaan ugu yeernaa badeecaddeenna qarsoon ama aan la gelin. Si wax ku ool ah loo xannibo isticmaalka noocan ah, la shaqee iibiyahaaga SASE si aad u xannibto gelitaanka URL-yada ka bilaabma https://chatgpt.com/backend-anon/, ama isticmaal isla habaynta biraawsarka ee aad u adeegsatay gelinta header-rada si aad sidoo kale u xannibto URL-yada leh horgalahaas.

Tallaabada 6: Tixgeli waafaqsanaanta barnaamijyada ChatGPT ee desktop-ka iyo moobilka

Barnaamijyada ChatGPT ee desktop-ka iyo moobilku waxay hirgeliyaan certificate pinning. Tani waxay xaddidaysaa kooxda shahaadooyinka server-ka ee macmiilku aqbali doono, iyadoo ku daraysa ilaalin dheeraad ah oo ka dhan ah weerarrada dhexgalka horumarsan (MiTM) marka shahaado sax ah la dhaawacay. Hubinta pinning-ku waxay dhacdaa ka dib marka shahaadada server-ka hore loogu ansixiyo shahaadooyinka xididka ee la aaminsan yahay.

Si barnaamijyada ChatGPT ee desktop-ka iyo moobilku si habboon ugu shaqeeyaan marka SSL inspection la hawlgeliyo (taas oo loo baahan yahay si loo hirgeliyo kontaroollada shabakadda ee kor ku xusan), waxaad u baahan doontaa inaad shahaadooyinkaaga ku darto liiska pin-ka, kuna qaybiso macaamiisha adigoo adeegsanaya MDM. Halkan ka eeg tilmaamaha faahfaahsan: https://docsend.com/view/rrk4mx9aashcekp7

Su’aalaha badanaa la isweydiiyo

Workspace Blocking ma ka shaqayn doonaa aaladaha moobilka ee iOS, macOS iyo barnaamijyada Android?

Workspace Blocking oo loo maro gelinta header-ka shabakadda waxaa lagu dhaqangelin karaa barnaamijyada ChatGPT ee ku jira aaladaha la maamulo halkaas oo ka-reebitaannada certificate pinning lagu geeyay MDM sida kor lagu sharxay.

Haddii urur doonayo inuu ka hortago isticmaalayaasha inay galaan ChatGPT (oo ay ku jiraan akoonnada shakhsi ahaaneed) iyagoo adeegsanaya barnaamijyada iOS, macOS iyo Android, waxay habayn karaan firewall-ka shabakaddooda, proxy-ga, ama adeegga SASE si ay u xannibaan gelitaanka domainnadan soo socda:

• Barnaamijka Android: android.chat.openai.com

• Barnaamijka webka ee desktop-ka: desktop.chatgpt.com

• Barnaamijka iOS: ios.chat.openai.com

Fadlan ogow in xannibaadda gelitaanka domainnada kor ku xusan ay xannibayso dhammaan taraafikada ku socota barnaamijyada, taas oo ka dhigan in qofna uusan ChatGPT ka geli karin madalladan, iyadoon loo eegin inuu isticmaalayo akoon shakhsi ah ama akoon Enterprise ah.