校園網路資訊安全威脅與應用技術探討.ppt

Agenda 網路安全潛在威脅分析 15min (網路病毒,蠕蟲,攻擊,垃圾郵件,p2p...) 校園網路安全解決方案與管理分析 20min 網路安全應用趨勢與技術探討 15min 個人使用者如何防範網路威脅 15min Case study 15min Break 10min 內容安全管理與展示 60min Config Practice 20min 資訊網路潛在威脅之探討分析 Customer Needs The Nature of Threats Has Evolved… The “Content Processing Barrier” is the Challenge to Network Protection Conventional Solutions Can’t Keep Up with Real-Time Communications 25%+ of virus infections delivered via Web traffic* (vs. email) Software AV scanning is too slow for Web traffic Conventional/Single Point Security Solution Do Not Solve these Problems Many Conventional Products are Needed for a “Complete” Solution 校園網路安全解決方案與管理分析 Many Conventional Products are Needed for a “Complete” Solution 防火牆 防火牆(Firewall)，架構在網路層（Network Layer）與傳輸層（Transfer layer），並可依據管理層面來看待封包，也就是傳送的方向。透過Firewall管理，並將網路位置（IP Address）、網路服務（TCP/UDP Port Number）、方向（Direction），三者排列組合成綿密的安全網。 高效能 擁有ICSA認證 提供NAT, Route和 Transparent模式 提供H.323 NAT功能 Policy-based 提供群組LDAP和Radius認證機制 提供WAN failover機制 提供超過 40種的標準協定或用戶自行定義的服務管控 e.g. Telnet, realaudio, FTP, GRE, Oracle*8 etc. 管理與控制 DHCP Relay與WINS 可統一管理防毒防火牆與VPN Firewalls Don’t Analyze Contents so they Miss Content Attacks Firewall Policy for VLAN, Zone and Interfaces/Ports Zone must contain VLAN and/or Interfaces/Ports before to be used in policy Must have “Address” assigned to the VLAN, Zone, or Interfaces/Ports before creating policy Use Content Profiles to provide different restriction to various group of IP Addresses. Creating Content Profile first before creating policy Services/ports for VPN Traffic Shaping – token bucket Firewall - VLAN Firewall policy can be applied for Interface, Zone, VLAN, an