Check Point Firewall helps Telecom enterprises build secure networks

The large telecommunications service operators provide the indispensable telecommunications, communications and information services, in order to ensure the level of service, the stability of its operating system, reliability and security have a strong demand for security, for example, its telecommunications data network (DCN) has adopted in the field of Internet security, the first check Point Software Technology Co., Ltd. Firewall program, to provide the network with adequate security protection.

The security challenges facing existing DCN networks

The DCN network of the telecommunication Company is a data communication network dedicated to all its specialized network management systems. Wuhan, Beijing and Shanghai are the core nodes of 3 DCN networks, which are interconnected with 31 provincial nodes in the country, constituting the backbone network of DCN network. A province of telecommunications under the 11 cities and nodes, a number of county-level nodes, a typical three-level structure (provincial-city-level-county).

Provincial Center backbone network up through two E1 lines to the national DCN backbone core nodes, Shanghai and Wuhan, and through the E1 line and 128K DDN to connect all over the city center, the county-level node routers will eventually through the 2 2M main link to the respective city. The existing security protection measures of integrated DCN are as follows: Different VLAN are divided on switch, but almost all VLAN are interconnected.

DCN Network has a small number of firewall systems, but mainly used to prevent illegal access from outside the network, such as dial-up users, not to the city system between the partition, can not prevent the city subsystem between the unsafe access.

Some routers are configured with access control lists (Acl,access controls list), but ACLs do not implement complex security control policies.

Network and system equipment by its fixed password protection, but the fixed password is easy to decipher, once breached that obtains the corresponding authority, if the illegal use, its consequence is unimaginable.

Based on the above security analysis, the telecom company's DCN network faces the following safety challenges:

§ Use routers to configure access control lists to achieve border security control, but the function is weak, can not effectively protect the network.

§ has a small number of firewalls, but without centralized control, security needs to be improved.

§ Static password protection device, it is easy to get control by hackers, which leads to the security of the whole network down.

Solution Introduction

Check Point works with Opsec (Open Platform for Security) partner I-security to provide an integrated security solution for the telecommunications company's DCN network, which uses a check point because it is a gigabit network with a large flow of information VPN-1 Pro for Enterprises and I-security SP-5500.

Check Point VPN-1 Pro is one of the most secure VPN schemes in the industry, providing firewall, VPN, and intrusion prevention protection, integrating check Point proprietary stateful inspection, application Intelligence and One-click VPN technology has the advantages of simplifying IPSEC/SSL VPN deployment, intelligent application and Network layer protection, reducing the cost of remote access and site and site access, and centralizing management.