Tofino多芬诺工业网络安全防护要点详解.ppt

Tofino? Industrial Security Solution ? 2008, Byres Security Inc. * Once the firewall rules have been verified, the Tofino? Security Appliances may be switched to Operational mode to protect the network. At this point, Tofino? CMP is used to monitor the operation of the network. Periodic heartbeats are used to monitor the status and connectivity of each Tofino? SA. Also, any traffic that is blocked by the Tofino? will be immediately reported to Tofino? CMP as an exception heartbeat. For small or stand-alone installations, Tofino? CMP may be used by itself to monitor the Tofino? security appliances. For large facilities, Tofino? CMP can relay Tofino? heartbeat messages to an existing syslog server (RFC 3164) so that Tofino? may be integrated with the facility’s existing network management systems. Control devices are often installed in remote locations maintained by staff with little or no understanding of security technology. Thus it is critical to have a robust yet convenient means of remote management and administration based around a centralized management system. What makes the Tofino? Security System unique is that it is both a fully distributed security solution, yet it can be managed easily and securely from one central location (or even multiple locations). This allows optimal security efficiency and coordinated support for large industrial companies, but tailors the security response to the needs of a single control device. Tofino? Industrial Security Solution ? 2008, Byres Security Inc. * The Tofino? Industrial Security Solution is much more that a firewall since its dynamically Loadable Security Modules (LSM) can provide encryption, intrusion detection and control protocol-aware security solutions tailored to specific plant floor situations. For example, one Tofino? appliance might be configured to act as a firewall for a group of PLCs, while another might be configured to be an encryption system for DCS traffic. Tofino? appliances can even be loa