网络准入控制技术在内网安全产品中的应用-研究.pdfVIP

网络准入控制技术在内网安全产品中的应用研究 RESEARCH ON NETWORK ACCESS CONTROL TECHNOLOGIES IN INTRANET SECURITY PRODUCTS ABSTRACT Computer and network bring convenience to people ’s work and life and at the same time also bring the great challenge of information security. To protect the intranet network information resources security and integrity, to establish a reliable and controlled intranet network, are the problems that modern enterprisers need to consider and solve. The functions of intranet security products can be roughly divided into: network insert control, network operation and maintenance management, terminal security check-up, terminal desktop operation and maintenance, network access control. The network insert control is the first line of defense of network security: only legal computers can be allowed to access network; Network access control is the second line: the legal computers can access the intranet after examination and qualification. Along with the science and technology development, the network insert and access control technologies are also in constant evolution and progress. This paper introduces and analyzes some common technologies. Combined with intranet security product eCop Baosight Intranet Patrol of which we have participated in the development, the paper detailed introduces two excellent solutions: network access control solution based on client scanning and switch block, network access control solution based on the client block and isolation. The client scanning is based on the principle of ARP, which is more real-time, comprehensive and quick deployment easily covering whole intranet. Bases on SNMP protocol, switch block can directly clos