The perfect combination of security and network topology

IP network is one of the basic network of enterprise, and network security is the basis of guaranteeing the quality of network. With the rapid development of broadband services, the enterprise's data services are more and more, so the security of network and information is increasingly important. At the same time, the opening of the Internet has brought more and more security risks to the network operation, and the security management of Internet network is urgently needed to be strengthened. For enterprises, the corresponding security management system and the construction of detection means is also imperative.

IP network is large in scale and complex in system, which includes all kinds of network equipment, server, workstation, business system and so on. The security field has evolved into complex and diverse sub domains, such as firewalls, intrusion detection, identity authentication, etc. These security areas are usually built independently in the various business systems, and with the deployment of large-scale security facilities, the cost of security management is rising rapidly, while the security infrastructure products and their resulting information management become increasingly prominent problems. The problem of IP network security management mainly includes the following several aspects:

(1) Massive events.

The various it devices present in the enterprise provide a lot of security information, especially the security system. For example, security Incident Management systems and vulnerability scanning systems. These huge amounts of information are causing administrators to be overwhelmed by the risk of ignoring important but relatively small alarms. Mass event is one of the major challenges faced by modern enterprise security management and auditing.

(2) isolated security information.

Relatively independent it devices produce relatively isolated security information. The enterprise lacks the intelligent correlation analysis method to analyze the connection between multiple security information, thus revealing the essence of security information. For example, what kind of security event is a real security event, does it really affect the operation of the business system, and so on.

(3) Knowledge "island".

Many cutting-edge security technologies are often only understood by a few people within the enterprise, and they lack the means to share these knowledge to improve the overall security level of the enterprise. At present, the security field is becoming larger and smaller, and the experts in various fields lack a communication platform to ensure the continuous accumulation and release of these knowledge.

(4) Customary conflict.

In the past, operation and maintenance are based on the operation of the assets + network, but the security is based on the security event of the Operation dimension. Every time a security problem arises, a large range of maintenance is required, such as the emergence of virus problems will make the security operation and maintenance work is different from the previous operation of the work habits.

With the rapid development of IP technology, network security has gradually become a key problem affecting the further development of the network. In order to enhance the security of User Service platform system and network security management level, enhance competitiveness, IP network security management from a single security product management development to security incident management, and finally developed to the security management system, that is, security management and operation and maintenance management of the integrated management platform. Mocha BSM How to achieve it?

Cross-Vendor management platform

Mocha BSM Network Focus supports a variety of network protocols, IP, Framerelay, PPP, HDLC, ATM and so on. Support Cisco, Huawei, Juniper, H3C, foundry brand of network equipment, in addition to check Point, NetScreen, Tiancheng, Green Alliance IDs, and other network security equipment into which, unified management, unified display, The enterprise administrator only through this unified platform will network, the security equipment entire management.