【AS BOOTCAMP】V7.0-04-防火墙理论.pptVIP

5、防火墙的基本架构？ 7、PIX防火墙的软件版本？ 8、防火墙的许可证？ 13、ASA的诞生？ 14、ASA 5500：有效阻止蠕虫/病毒？ 15、ASA 5500：网络的“坏件消除”？ 16、ASA 5500:应用检查和控制？ 17、ASA 5500的VPN部署情况？ 18、ASA 5500所面对的市场？ 9、采用Cisco ASDM配置工具配置Cisco ASA防火墙？ ? 100 Mbps—100 megabits per second 100BaseTX communication. If the light is off, that port is using 10 megabits per second data exchange. ? LINK—Shows that data is passing on the network to which the connector is attached. ? FDX—Shows that the connection uses full-duplex data exchange where data can be transmitted and received simultaneously. If this light is off, half-duplex is in effect. ? POWER—On when the unit has power. ? ACT—On when the unit is the active failover unit. If failover is not enabled, this light is on. If failover is present, the light is on when the unit is the active unit and off when the unit is in standby mode. ? NETWORK—On when at least one network interface is passing traffic. POWER—On when the unit has power. ACT—On when the unit is the active failover unit. If failover is present, the light is on when the unit is the active unit and off when the unit is in standby mode. The LEDs display the following transmission states: ? 100Mbps—100 megabits per second 100BaseTX communication. If the light is off during network activity, that port is using 10 megabits per second data exchange. ? ACT—Shows network activity. ? LINK—Shows that data is passing through that interface. The following are fixed connectors on the back of the PIX 525: ? RJ-45—Network and console connectors. ? DB-15—Failover cable connector. ? USB—Not used at the present time. a、 ASA的诞生基于当前安全服务的问题。 IPS 服务 广泛攻击检测 精细分组检查 应用控制 动态响应 服务访问控制服务 分组检查 协议核实 准确实施 高永续性 防火墙 网络AV 服务病毒消除 间谍件、广告件、坏件检测和控制 恶意移动代码消除 非法访问进程滥用端口扫描畸形分组 应用误用DoS/攻击 已知攻击 受感染的流量 IPSec/SSL VPN 服务 SSL VPN IPSec VPN 基于用户的安全性 基于组的管理 集群 通道流量 有限保护 公共互联网 利用Anti-X防御特性阻止蠕虫和病毒……而且不会降低性能！ MS Blaster Slammer Code Red NIMDA W32.明天的威胁 ASA 5500 预防发作: 病毒检测 动态发作更新 全面分析: 保持清醒 应用层检查 协议异常检测 启发式分析 流量归一化 准确实施： 实时关联 风险评佑抵御攻击 进程取消与重设 公共互联网 利用Anti-