企业网络建设安全策略探讨

企业内部网络安全是建立企业网络信息系统时需解决的重大问题。对计算机网络安全机制的防火墙技术和入侵检测技术进行了对比与分析。防护墙是一种边界安全防护层,经过仔细配置,能够在内部、外部网络之间建立一道安全屏障,降低网络被入侵的风险。但单一的防火墙技术只能在相对的时期内保证网络的安全,需要不断的维护、调整、升级其安全策略。监测与检测技术从安全技术层面为网络管理部门提供了进一步实施安全管理和维护的手段,使其既能防范来自外部的非法入侵又能防范来自内部的恶性破坏以及人为的误操作。提出了企业网络建设中这两项技术应用的重要作用。

Discussion About the Safety Strategy of Enterprise Network Construction

The safety of internal network is an important issue to be considered for an enterprise in setting up its network information system. A contrast and analysis are presented between the firewall technology and intrusion detection technology. Firewall is a kind of protective system designed to safeguard the internal network from intrusion. But a simple- functioned firewall can only ensure the network safety in a certain period and its safety strategy needs constant maintaining, adjusting and updating. The monitoring and detecting technology further ensures the means of safety management and maintenance for the network department, enables the prevention of intrusion from the outside and the violation from inside the network as well. Some new light on the importance of the application of these two technologies are throwed in the construction of enterprise network.