Today we locate information age, may also say that is also viral and the hacker big line of its road's time, like this said that is truly somewhat pessimistic, but today's network indeed so, from Internet to the enterprise in the net, to may access the net from the personal computing the handset platform, does not have the place is safe. Each network virus's attack, can let the family user, the enterprise users, 800 hot lines even is the operator headache brain is hot. After however has experienced the viral crisis time and time again, the people already started to ponder that the network was safe. Now any enterprise sets up the network to be able to consider purchases the firewall, and had more and more family users even the broadband access end also to add on the firewall on own computer, believe the near future, we might see will also present the firewall on the handset.
Speaking of many small and medium-sized enterprises, firewall's disposition has often not reflected enterprise's service demand. If has not unified the enterprise internal demand to firewall's protection execution establishment to carry on the earnest full definition, increases has the possibility to firewall's on safe filtration rule to permit the unsafe service and the correspondence passes, thus the enterprise network brings the nonessential danger and the trouble. The firewall may compared to make together the data strainer, if has formulated the reasonable filtration rule beforehand, it might intercept does not gather the rule the data message, thus plays the filtration the role. On the contrary, if the rule is not correct, will work just the opposite.
Which functions should the small and medium-sized enterprise firewall have
How to implement firewall's disposition reasonably? First, which functions generally lets us have a look at the small and medium-sized enterprise firewall to have:
1. Dynamic package filtration technology, dynamic maintenance through firewall's all correspondence condition (connection), based on connection filtration;
2. May take deployed NAT (Network Address Translation, network address transformation) the place, uses the NAT technology, the limited IP address tendency or the static state will correspond with the internal IP address, will use for to alleviate the address space short question;
3. May establish the trust territory with not to trust between the territory the data difference strategy;
4. May define the rule plan, causes the system in some to be possible to begin using automatically for a while with the closure strategy;
5. Has the detailed journal function, supplies the firewall to conform to the regular text information, the system administration information, the system failure information record, and supports the diary server and the diary derives;
6. Has IPSec the VPN function, may realize the cross Internet security long-distance access;
7. Has the mail notice function, may inform the systematic warning through the transmission mail the network administrator;
Other pages: : 1 * 2 * 3 * Next>>
|
You are here: hacking technology
> firewall
> Content
Category: Home
> firewall