园区网终端安全管控系统的构建

从终端安全存在隐患入手,着眼什么人能上网、什么机器能上网、上网的人有权做什么以及上网的人都做了什么等问题,辨析了终端安全的管控目标,提出了园区网终端安全管控系统的设计构想,同时,从区域、接入控制网关、引流规则、客户端和检查策略等角度对系统进行规划部署,并对准入权限控制、终端健康检查和终端用户行为管理的技术实现进行了详细阐述,对园区网终端安全管控系统的构建提出了建议。

Construction of Campus Network Terminal Security Management and Control System

Starting with some existing hidden troubles in temainal security, with a view to the problems of who can access the network, which computer can access the network, what rights the online user has and what the online user has done, this paper analyses the terminal security management and control target, proposes the design concept of campus network terminal security management and control system. At the same time, this paper plans and develops the system in aspects of region, access control gateway, drainage rule, client and checking strategy, describes in detail the technical realization of access permission control, terminal health examination and terminal user behavior management, and proposes the suggestions on construction of campus network terminal security management and control system.