realsecure（realsecure）.docVIP

realsecure（realsecure） 1. what is the Realsecure? Answer: Realsecure is an automatic identification and response attack system. It is in your network, monitor network traffic, looking for attempted attacks and unauthorized access. When Realsecure detects an attack, it can have several response modes, including records of attacks, notify the network administrator, and automatically cut off the connection. 2. Realsecure can identify those network events? Answer: Realsecure can identify two kinds of network events: Aggressive behavior: Show some of the features of network behavior, there are people with unauthorized operation of the system in the network and / or data. For example: SATAN Ping floods, WinNuke browser, packets, SYN, floods, IP, half browsing, and attempt to access operation of unauthorized ROOT. Non aggressive behavior (process): The network administrator may network behavior of these non aggressive interest. As the network administrator of HTTP operation, can know whos on the network, they will go to what place; the analysis of WINDOWS file sharing access conditions, can know a connection to the financial department of the Ministry of construction and e-mail decoding and so on. Realsecure contains the most comprehensive set of features for attack recognition. 3. Realsecure can monitor and decode what kind of deal? Answer: Realsecure filtering and decoding any TCP/IP protocol. The network administrator can configure the Realsecure filter rules, so specified: Protocol (TCP, UDP, ICMP), source port, destination port, source IP address, and / or destination IP address. Realsecur can explain the following web services: Web surfing, e-mail, file transfer, remote login, chat, talk and other. Realsecure analysis of the scope of services will be frequent expansion, in order to obtain the latest version, you should often visit the ISS web site: . In addition, Realsecure will be able to monitor and decode Windows under the network environment of Microsoft CIFS/SAM