010-6298822 010-82899313 http://www.th-dascom.com.cn 9 5 1
1....3 1.1...4 1.1.1...4 1.1.2...5 1.2...6 1.3...7 1.3.1...7 1.3.2...8 1.3.3...8 1.3.4...8 1.3.5...9 1.3.6...9 2....9 2.1...9 2.2...10 2.2.1...10 2.2.2...11 2.2.3...12 2.2.4...15 3....15 3.1...15 3.1.1...15 3.1.2...16 3.1.3...18 3.2...21 3.2.1...21 3.2.2...22 3.2.3...26 3.3...26 3.3.1...26 3.3.2...27 3.3.3...29 4....30 4.1...30 4.2...32 4.3...34 2
1. 80 Internet Intranet 3
1.1 Extranet Intranet 1.1.1 Extranet Internet Internet FRISDNXDSLPSTN Internet Internet Internet 1.1 4
FRDDN ISDN 1.1 1.1.2 Web Internet 1.2 5
CISCOSYSTEMS CISCOSYSTEMS CISCOSYSTEMS Internet FTP DNS SERVER MAIL SERVER WWW Workstation Sales server Other server 1.2 1.2 C/S(Client/Server) Internet Web 6
Intranet Web Web HTTP Web Web Intranet Extranet C/S B/W/D 1.3 1.3.1 C/S MIS Internet Web Web Web B/S B/S/D C/Sclient/server Web C/Sclient/server 7
1.3.2 C/S Web 1.3.3 Internet C/S Web 1.3.4 Web 8
1.3.5 B/W/D B to B B to C B to C B to B B to B 1.3.6 CIMSERPCRMCAD/CAM/CAE C/S 2. 2.1 CPUTPC 9
2.1 2.2 2.2.1, 10
2.2.2 Internet Internet Internet Web Internet 1) 2) Internet 11
IP TCP VPN Web 2.2.3 12
WWW E-MAILDNS DNSWWW 1) WWWFTP 2) IPMAC IC Web 3) 13
4) : DNS Internet Internet/Intranet hacker IP BIND-NDS DNS UDP ID -IP WWW Web Server Hacker Web Server Internet Web server CGI Web 14
2.2.4 3. 3.1 3.1.1 15
VPN DMZ VPN 3.1.2 1. NetST NetST VPN 1) 3.1 16
DMZ 3.1 2) IP TCP 3.2 2. NetDT 1) 17
IDS VPN NetDT IDS 2) 3.1.3 1. NetST NetST 1) NetST 18
64byte 128byte 256byte 512byte 1024byte NetST1000 NetST2000 60 74 99.77 100 100 NetST3000 420 620 900 900 930 NetST5000 480 660 960 970 970 MTBF 50000 (Lately) 30-40US 2) NetST NetST SYN flood 1414100 250 19
Smurf attack 0 Ping of death 0 Teardrop attack 0 Land-based attack 200 Ping sweep 1000 9 Ping flood 0 3) JAVA OSPFIPXNETBEUISNMP VPN, 6 (LB) IP DHCP 20
2. NetDT NetDT NetDT NetDT 3.2 3.2.1 WWW 21
3.2.2 WebST WebST Intranet Extranet WebST Internet WebST Intranet 1) WebST WebST Kerberos URL Web Java 2) WebST WebST WebST WebSEAL WebSEAL HTTP Web 22 Web NetSEAT HTTP WebSEAL WebSEAL WebSEAL ACL WebSEAL HTTP Web WebSEAL WebSEAL RPC NetSEAT HTTP NetSEAT
NetSEAL NetSEAL TCP NetSEAL FTPTelnet NetSEAL WebSEAL NetSEAL WebST Java WebST ACL NetSEAL/WebSEAL Java-DCE WebST NetSEAT Win95/98/2000 WebSEAL/NetSEAL NetSEAT NetSEAT IP IP NetSEAT WebST PKMS WebST SSL Web WebSEAL PKMS SSL PKMS SSL WebST NetSEAT SSL PKMSPKMS WebST RPC SSL WebSEAL PKMS Internet Internet WebST 23
WebST 3.2 WebST Internet WWW FTP WebST WebSEAL NetSEAL DNSEmail WebST WebST WebST WebST WebST Web 1) WebST WebSEAL PKMS WebST 2) WebSEAL Web NetbSEAL 3) Web WebSEAL WebST Smart Junction Web WebSEAL 24
NetSEAT WebSEAL NetbSEAL Internet 4) NetSEAL NetSEAT WebST NetSEL 5) WebST 6) WebST 25
3.2.3 Web GUI WebST URL APIApplication Programming Interface Web Web 3.3 3.3.1 Internet Internet 26
3.3.2 1. WebCM 1) WebCM Internet URL WebCM URL URL Internet 2) WebCM WebCM URL WebCM WebCM WebCM URL URL Internet IP IP URL WebCM WebCM URL WebCM URL WebCM Internet 27
Internet WebCM Internet 2. WebCM WebCM WebCM WebCM NetST Checkpoint WebCM 1) Internet Intranet NetST WebCM URL WebCM 3.1 WebCM WebCM WebCM3100WebCM3200 3.1 28
2) WebCM Internet Intranet URLWebCM WebCM 3.2 WebCM WebCM1100WebCM1100E 3.3.3 URL 160 Internet URL IP URL URL 29
OPSEC Check Point Firewall NetST 48 160 Internet 4. 4.1 ISDNPSTN Internet Internet Internet VPN 30
Internet WWW 4.1 WWW 4.1 WebST 31 WebST
VPN VPNVPN IP IP NetST VPN Internet Internet WebCM3200 WebCM3200 FTP Internet 4.2 32
4.2 1) NetST 2) 3) VPN NetST VPN 4) 5) WebCM Internet VPN NetST2303 WebCM WebCM NetST2303 NetDT NeTDT Internet 33 4.2
4.3 4.3 1) NetST2103 2) WebCM 3) NetDT NetSC 34
Internet NetST2103 WebCM WebCM NetDT NetDT 1 2 NetDT NetSC 4.3 35