SNPA40SL01安全平台概述.ppt

? 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—1-* ? 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—1-* * ? 2005 Cisco Systems, Inc. All rights reserved. * ? 2005 Cisco Systems, Inc. All rights reserved. Cisco Security Appliance Technology and Features Firewall ? 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—2-* What Is a Firewall? A firewall is a system or group of systems that manages access between two or more networks. Outside Network DMZ Network Inside Network Internet Firewall Technologies Firewall operations are based on one of three technologies: Packet filtering Proxy server Stateful packet filtering Packet Filtering Limits information that is allowed into a network based on the destination and source address Data A B Data A C Internet DMZ: Server B Inside: Server C Host A AB-Yes AC-No Proxy Server Requests connections on behalf of a client that is inside the firewall and the Internet Outside Network Proxy Server Inside Network Internet Stateful Packet Filtering Data HTTP A B Internet DMZ: Server B Inside: Server C Host A 0 1 1026 80 49091 Syn 0 0 49769 Syn 1026 80 Source port Destination address Source address Initial sequence # Destination port Flag Ack State Table Limits information that is allowed into a network based not only on the destination and source addresses, but also on the packets state table content Security Appliance Overview ? 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—2-* Security Appliances: What Are They? Cisco security appliances deliver enterprise-class security for small-to-medium-sized business and enterprise networks in a modular, purpose-built appliance. Some features of Cisco security appliances are: Proprietary operating system Stateful packet inspection User-based authentication Protocol and application inspection Modular policy Virtual private networking Security contexts (virtual firewalls) Stateful failover capabilities Transpare