Blue Shield Campus Network security solution

Objective

With the rapid development of Internet technology, access to the Internet users in exponential form of linear growth, all walks of life computer Information Network and other information technology applications continue to deepen, so that everyone feel the hurried footsteps of information. Schools as a base for training talents, keep up with the pace of the times, adapt to the trend, have access to the Internet, more and more campus network through the DDN line with the Internet, so that teachers and students in the school can be free to browse the Internet, find their content and the desire for knowledge, feel the network brought by these rich information resources, To provide a broader learning environment. At the same time, online "hackers" may also be the opportunity to break into the school intranet, destroying the data on the campus server, so that the security of the school network is threatened. Moreover, the school to the students online education and Internet management also faces new challenges. Based on the actual situation and comprehensive consideration, the main problems are as follows:

1. Internal Database Security issues

Campus Network and ordinary enterprises are different, because the general enterprise Internet is mainly "against the outside", to prevent hackers on the Internet attacks on the internal network, and installed in the campus Web firewall, both the need for "anti-external" function, but also the "inside" function. The so-called "inside", is because many of the students are network enthusiasts, driven by curiosity, may be downloaded from the Internet hacker tools to the Internet, or campus network internal servers to attack, mainly in the school's internal some may store important information of the server, such as, Storage of the main test for teachers to use the library, for students have a great temptation, in curiosity or to meet certain simple psychological needs, and disregard the consequences of the campus internal server attacks, so that the school's internal information suffered unnecessary losses.

2. Management of students ' access to the Internet

The management of students ' Internet is mainly managed from three aspects:

The limitations of the students ' browsing websites are mainly the restrictions of some yellow outlets and movie outlets. It's not good for the students, it's also a network-bandwidth-intensive Internet access.

2. The problem of students ' Internet cost statistics. When students surf the internet, traffic must have a statistical report so that they can charge for a certain standard.

3 students on the Internet to the popular network statistics, timely understanding of students online trends, is conducive to a more step-by-step guide students to live a good online life.

In view of the actual problems above, my company in the relevant departments of support and Cooperation, research and development of the Blue Shield Firewall Professional Edition of the campus network, facing the major institutions and secondary schools, and promote the use.

I. Typical network scenarios

As shown in the following illustration:

Two. Main functional features

1. Software and hardware integration structure

Firewall for users, just a similar hardware device, the whole system using black box design, firewall system and hardware closely combined to play the highest hardware efficiency, reduce the operating system problems caused by the possibility of network vulnerabilities, improve the system's own security.