一种内网端点安全系统的设计

当前很多企业部署了内部网络，并将内网作为信息发布和共享的平台，确保内网安全和端点安全的要求与日俱增，随着攻击工具和手段的日趋复杂多样，传统的防范手段已不能保证内网安全和端点安全。文章针对端点安全，研究了对非安全网络端点的识别和隔离方法，提出了一种内网端点安全系统的设计方案，基于现有网络设备和标准协议，可实现入侵检测和访问控制的功能，成本较低、结构简单、管理方便。

Design on Network Endpoint Security System

Many enterprises has deployed internal network, and share information on the network platform, the request about ensuring the security of internal network and endpoint becomes more urgent. The attack tools and methods become more complex and diverse, traditional defense methods are hard to protect the internal network security and endpoint security. Aiming at endpoint security, this paper studies the technique for identifying and isolate insecurity network endpoint, provides a network endpoint security system design solution based on current network equipments and standard protocols. Tiffs solution can implement intrusion detection and access control function, with low cost, simple structure and convenient management.