infogo 发表于 2011-12-21 08:43

打造企业网络安全标准--浙江新界泵业选择盈高科技

<DIV>
<DIV class=center_content>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">客户名称:</SPAN></B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">浙江新界泵业有限公司</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><?XML:NAMESPACE PREFIX = O /><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">所属行业:</SPAN></B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-bidi-font-weight: bold">企业</SPAN><SPAN style="FONT-SIZE: 9pt; mso-bidi-font-weight: bold" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">客户简介:</SPAN></B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">浙江新界泵业有限公司具有自营进出口权,并取得</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>ISO9001</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">质量管理体系认证、</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>ISO14001</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">环境管理体系认证、</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>CCC</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">认证、</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>GS</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">认证和</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>CE</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">认证等;公司技术力量雄厚,测试设备先进,大、中专以上学历人员占员工总数的</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>30%</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">,在同行中具有明显的人才优势。公司是中国农业机械学会排灌机械学会副理事长单位,温岭市重中之重工业企业和行业龙头企业、浙江省重点民营企业、中国潜水泵行业的龙头企业。公司连续</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>6</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">届被台州市消费者协会评为“消费者信得过单位”;被省工商行政管理局评为“</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>AAA</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">”级“重信用、守合同”单位;连续</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>12</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">年被中国银行浙江省分行评为“</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>AAA</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">”级资信企业。公司被省经贸委、财政厅、国税局等九家单位联合认定为“浙江省诚信示范企业”,“新界牌”商标被认定为“中国驰名商标”,“新界”产品被评为“国家免检产品”和“浙江名牌产品”。公司营销网络遍及全球,产品远销东欧、西欧、中东、东南亚、美州、非洲各国,国际客户</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>120</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">多个,国内一级销售处</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>700</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">多个,二级销售商</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US>2500</SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: ‘Times New Roman‘; mso-hansi-font-family: ‘Times New Roman‘">多家。</SPAN><SPAN style="FONT-FAMILY: 'Times New Roman', 'serif'; FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">客户需求</SPAN></B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">:防止外来电脑终端非法接入网络;限制不符合安全管理规定的内部电脑终端直接访问网络资源;对内部的电脑终端进行安全管理,防止其未安装杀毒软件、重要补丁未安装等;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">应用规模:</SPAN></B><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">公司有</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>2</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">个厂区,需要管理的终端数目众多,设备放在老厂机房。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<DIV style="BORDER-BOTTOM: windowtext 1pt solid; BORDER-LEFT: medium none; PADDING-BOTTOM: 1pt; PADDING-LEFT: 0cm; PADDING-RIGHT: 0cm; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0cm; mso-element: para-border-div; mso-border-bottom-alt: solid windowtext .75pt">
<P style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0cm; MARGIN: 0cm 0cm 0pt; PADDING-LEFT: 0cm; PADDING-RIGHT: 0cm; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0cm; mso-border-bottom-alt: solid windowtext .75pt; mso-padding-alt: 0cm 0cm 1.0pt 0cm" class=MsoNormal><B style="mso-bidi-font-weight: normal"><SPAN style="LINE-HEIGHT: 150%; FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">实现功能</SPAN></B><SPAN style="LINE-HEIGHT: 150%; FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">:应用系统补丁分发、</SPAN><SPAN style="LINE-HEIGHT: 150%; FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>IP/MAC</FONT></SPAN><SPAN style="LINE-HEIGHT: 150%; FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">绑定、黑白名单、终端不能改</SPAN><SPAN style="LINE-HEIGHT: 150%; FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>IP</FONT></SPAN><SPAN style="LINE-HEIGHT: 150%; FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">禁用本地连接属性、软件分发。</SPAN><SPAN style="LINE-HEIGHT: 150%; FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0cm; MARGIN: 0cm 0cm 0pt; PADDING-LEFT: 0cm; PADDING-RIGHT: 0cm; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0cm; mso-border-bottom-alt: solid windowtext .75pt; mso-padding-alt: 0cm 0cm 1.0pt 0cm" class=MsoNormal><SPAN style="LINE-HEIGHT: 150%; mso-bidi-font-size: 10.5pt" lang=EN-US><O:P><FONT size=3 face=Calibri>&nbsp;</FONT></O:P></SPAN></P></DIV>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN style="LINE-HEIGHT: 150%; mso-bidi-font-size: 10.5pt" lang=EN-US><O:P><FONT size=3 face=Calibri>&nbsp;</FONT></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><FONT size=3><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-bidi-font-size: 10.5pt">应用背景:</SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN style="mso-bidi-font-size: 10.5pt" lang=EN-US><O:P></O:P></SPAN></B></FONT></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">在多年信息化建设中,新界泵业内部已建立起了较为完善的内部信息安全网,信息交换、信息共享的模式日趋成形。但是在从信息系统获取便捷的同时,各种应用系统被破坏后带来的危害和损失也提高到一个十分重要的层次,如何保证生产和办公信息系统的</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>7×24</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">小时不间断运行,保证内网设备的安全使用,为公司的信息中心管理者带来了新的问题。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: 60.9pt; MARGIN: 0cm 0cm 0pt -49.55pt; mso-line-height-rule: exactly; mso-char-indent-count: 6.74; mso-para-margin-left: -4.72gd" class=MsoNormal><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">网络现状</SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></B></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 47.25pt; mso-line-height-rule: exactly; mso-list: l0 level1 lfo1" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">ü<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">公司网络结构较为清晰,网络基础架构较为规范;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 47.25pt; mso-line-height-rule: exactly; mso-list: l0 level1 lfo1" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">ü<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">全网设备较为单一,核心交换机为</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>H3C5800</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">,新厂接汇聚交换机</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>H3C5120</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">,老厂接汇聚交换机</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>H3C3600</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">,接入层多为</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>HUB</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">集群;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: 60.9pt; MARGIN: 0cm 0cm 0pt -49.55pt; mso-line-height-rule: exactly; mso-char-indent-count: 6.74; mso-para-margin-left: -4.72gd" class=MsoNormal><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">内网安全风险</SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></B></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal align=left><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">非法接入</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal align=left><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">外来终端随意接入网络,给内网的安全带来重大隐患。不安全的终端会给内网带来大量病毒,破坏网络的正常运行;不安全的终端还可能非法侵入内网系统,从而造成内部重要数据的泄漏。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal align=left><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">终端未打齐补丁</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal align=left><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt">内部员工整体安全意识不足,接入设备不及时升级系统补丁的现象普遍存,无法对这些安全规范进行统一强制管理,这种情况下安全性低下的单台终端极易成为影响全网的威胁来源和跳板(如<SPAN lang=EN-US>ARP</SPAN>病毒攻击,中木马后对网络进行安全威胁等),造成重大安全事件的发生,带来巨大的安全风险。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal align=left><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt">另外员工计算机水平参差不齐,许多人面对计算机问题无法进行及时修复,由于点数多,范围分散,出现问题后管理员需要频繁奔赴现场进行维护,工作效率极低。<SPAN lang=EN-US><O:P></O:P></SPAN></SPAN></P>
<P style="TEXT-ALIGN: left; LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal align=left><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P><FONT face=Calibri>&nbsp;</FONT></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><A name=_Toc268953838><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-bidi-font-size: 10.5pt"><FONT size=3>盈高科技的企业内网安全解决方案</FONT></SPAN></B></A><B style="mso-bidi-font-weight: normal"><SPAN style="mso-bidi-font-size: 10.5pt" lang=EN-US><O:P></O:P></SPAN></B></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">本方案采用杭州盈高科技的准入安全管理平台,在老厂机房核心交换机旁部署</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>1</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">台</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>ASM</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">准入控制设备,新厂通过内部网络与设备通信,整个方案采用策略路由准入技术,合法设备经过客户端身份验证后入网进行正常操作,外来设备只有经过管理员审核批准后才能够接入公司网络,整个网络边界明确,入网流程清晰。</SPAN></P>
<P style="TEXT-ALIGN: center; LINE-HEIGHT: 20pt; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 2.02" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri"><IMG alt="" src="/userfiles/image/%E6%96%B0%E7%95%8C%E6%B3%B5%E4%B8%9A.jpg" width=500 height=390></SPAN></P>
<P style="LINE-HEIGHT: normal; TEXT-INDENT: 18.2pt; MARGIN: 0cm 0cm 0pt; mso-char-indent-count: 2.02" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><?XML:NAMESPACE PREFIX = V /><V:SHAPETYPE id=_x0000_t75 stroked="f" filled="f" path="m@4@5l@4@11@9@11@9@5xe" o:preferrelative="t" o:spt="75" coordsize="21600,21600"><V:STROKE joinstyle="miter"></V:STROKE><V:FORMULAS><V:F eqn="if lineDrawn pixelLineWidth 0"></V:F><V:F eqn="sum @0 1 0"></V:F><V:F eqn="sum 0 0 @1"></V:F><V:F eqn="prod @2 1 2"></V:F><V:F eqn="prod @3 21600 pixelWidth"></V:F><V:F eqn="prod @3 21600 pixelHeight"></V:F><V:F eqn="sum @0 0 1"></V:F><V:F eqn="prod @6 1 2"></V:F><V:F eqn="prod @7 21600 pixelWidth"></V:F><V:F eqn="sum @8 21600 0"></V:F><V:F eqn="prod @7 21600 pixelHeight"></V:F><V:F eqn="sum @10 21600 0"></V:F></V:FORMULAS><V:PATH o:connecttype="rect" gradientshapeok="t" o:extrusionok="f"></V:PATH><O:LOCK aspectratio="t" v:ext="edit"></O:LOCK></V:SHAPETYPE><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: normal; TEXT-INDENT: -54.65pt; MARGIN: 0cm 0cm 0pt -9.1pt; mso-char-indent-count: -6.07; mso-para-margin-left: -6.07gd" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P><FONT face=Calibri>&nbsp;</FONT></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><A name=_Toc268953839><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">新界泵业方案特点</SPAN></B></A><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></B></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">采用</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>PBR</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">策略路由技术</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 21.2pt; mso-line-height-rule: exactly; mso-para-margin-left: 2.02gd" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">利用策略路由准入技术,需要进入内网的机器都将先接受认证,通过安装客户端实现身份认证并进入网络。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">能够按区域、</SPAN><SPAN style="FONT-SIZE: 9pt"><FONT face=Calibri> </FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">部门等角色定义人员和访问权限</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-tab-count: 1"><FONT face=Calibri>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">在用户认证及设备通过病毒、补丁等安全信息检查后,</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>ASM</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">可基于终端用户的角色,向安全联动设备下发事先配置的接入控制策略,按照用户角色权限规范用户的网络使用行为。可以事先做好安全管理规划,根据需要划分多个安全域,然后管理员可以通过</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>ASM</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">设备根据角色的不同配置可访问的安全域。这样很好地解决在内网中做好区域访问布控的问题。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P><FONT face=Calibri>&nbsp;</FONT></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><FONT size=3><B><SPAN style="FONT-FAMILY: 宋体; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-bidi-font-size: 10.5pt">用户收益:</SPAN></B><B><SPAN style="mso-bidi-font-size: 10.5pt" lang=EN-US><O:P></O:P></SPAN></B></FONT></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">安全检测与修复</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri"></SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-tab-count: 1"><FONT face=Calibri>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">正式员工的终端设备在入网时必须经过规定的网络规范检查,包括检测计算机的杀毒软件安装和运行情况,检测计算机的桌面管理客户端安装和运行情况,检测计算机的操作系统补丁更新情况,检测计算机的共享情况,将检查结果自动上报,方便管理员统计审计;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri"></SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-tab-count: 1"><FONT face=Calibri>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">对不符合要求的终端设备能够进行智能自动修复,自动帮助计算机安装杀毒软件和升级病毒库,自动帮助计算机安装桌面客户端,自动帮助计算机更新补丁(补丁与</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>360</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">合作,具有分级机制,严格的多项测试确保补丁均能安装运行),自动关闭非法共享。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-spacerun: yes"><FONT face=Calibri>&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">通过</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><FONT face=Calibri>ASM</FONT></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">强大的安全检测与修复机制,确保新界泵业的入网计算机均具备符合管理要求的安全运行环境,避免了网络安全事故的发生。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">入网控制</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-spacerun: yes"><FONT face=Calibri>&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">根据入网计算机的身份和安全性,可以控制允许入网的计算机或人员,非法人员或不安全设备被直接隔离,拒绝其入网,无法获得任何重要业务资源,从而避免了核心数据泄漏;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-spacerun: yes"><FONT face=Calibri>&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">入网的员工将根据身份的角色(如归属部门、岗位等)被划分予相应的访问权限,从而接受网内的访问管理,避免越权访问和涉密资源的非法操作。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: -21pt; MARGIN: 0cm 0cm 0pt 42.2pt; mso-line-height-rule: exactly; mso-list: l1 level1 lfo2" class=MsoNormal><SPAN style="FONT-FAMILY: Wingdings; FONT-SIZE: 9pt; mso-fareast-font-family: Wingdings; mso-bidi-font-family: Wingdings" lang=EN-US><SPAN style="mso-list: Ignore">u<SPAN style="FONT: 7pt 'Times New Roman'">&nbsp; </SPAN></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">验证身份</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri"></SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-tab-count: 1"><FONT face=Calibri>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">本单位员工选择已有域身份进行登录,从而设备与使用设备的入网人员进行人机对应的负责制;</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri"></SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-tab-count: 1"><FONT face=Calibri>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">来宾访客选择来宾身份入网,可以访问来宾区域(一些可以供外来人员使用的资源)。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt 20.25pt; mso-line-height-rule: exactly" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P><FONT face=Calibri>&nbsp;</FONT></O:P></SPAN></P>
<P style="LINE-HEIGHT: 20pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly" class=MsoNormal><FONT size=3><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 宋体; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri; mso-bidi-font-size: 10.5pt">用户评价:</SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN style="mso-bidi-font-size: 10.5pt" lang=EN-US><O:P></O:P></SPAN></B></FONT></P>
<P style="LINE-HEIGHT: 20pt; TEXT-INDENT: 15.4pt; MARGIN: 0cm 0cm 0pt; mso-line-height-rule: exactly; mso-char-indent-count: 1.71" class=MsoNormal><SPAN style="FONT-SIZE: 9pt" lang=EN-US><SPAN style="mso-spacerun: yes"><FONT face=Calibri>&nbsp;</FONT></SPAN></SPAN><SPAN style="FONT-FAMILY: 宋体; FONT-SIZE: 9pt; mso-ascii-font-family: Calibri; mso-hansi-font-family: Calibri">盈高科技基于策略路由准入技术的内网安全平台性能稳定,通过对上行流量的监控做到对整个网络安全的保障,因为对下行流量的开放使得部署后对网络整体性能没有任何影响,同时在对终端进行安全检查时能够有效地落实公司信息部门的网络安全使用制度,效果很好。</SPAN><SPAN style="FONT-SIZE: 9pt" lang=EN-US><O:P></O:P></SPAN></P></DIV></DIV>
页: [1]
查看完整版本: 打造企业网络安全标准--浙江新界泵业选择盈高科技