资源描述:
《思科防火墙技术汇总(cisco firewall technology summary)》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、思科防火墙技术汇总(CISCOfirewalltechnologysummary)AtotaloffourtypesofCISCOfirewalltechnologysummary200705Monday14October09:51P.M.weknowthattherearefourtypes:firewallfirewallintegratedrouter,firewallintegratedproxyserver,hardwareandsoftwarefirewallspecialandspecialcombinationoffirewall.Ciscofirewallsolutionco
2、ntainsthefirstandfourthtypesoffourtypes,namely:firewallintegratedrouteranddedicatedsoftwareandhardwarefirewall.Firewalltechnologyintegratedinrouter1、ACLtechnologyinrouterIOSstandardequipmentACLAccessControlList(accesscontrollist),AccessList(accesslist),itisthebasisfortheIOSFirewallFeatureSet,IOSoper
3、atingsystemisCiscolineinterfacerouterunified(InternetOperationSystem,networkoperatingsystem)partofthestandardconfiguration.Thismeansthatafterbuyingarouter,theACLfunctionisalreadyavailable,andnoextramoneyisneeded.2,IOSFirewallFeatureSet(IOSfirewallpackage)IOSFirewallFeatureSetACLisonthebasisoffurther
4、improvementofsafetycontrol,thenamesuggests,itisasetofspecializedsoftwarefortheadditionalfirewallfunctionpackage,canbeobtainedthroughtheIOSupgrade,andcanbeloadedintoapluralityofCiscorouterplatform.Atpresent,thefirewallsoftwarepackageapplicablerouterplatformincludesCisco1600,1700,2500,2600and3600,belo
5、ngtothemiddleandlowendseries.Formanysmallandmediumenterpriseuserswhotendtousethe"all-in-onesolution"(integratedsolution)andstrivetosimplifymanagement,itcanmeetthedemandtoalargeextent.Thereasonwhywedonotimplementtheintegratedfirewallfunctiononhigh-enddevicesistoavoidthecoreworkofbackboneroutersthataf
6、fectlargenetworks-dataforwarding.Insuchanetwork,adedicatedfirewalldeviceshouldbeused.FeaturesofCiscoIOSfirewall:Lcontextbasedaccesscontrol(CBAC)providesapplicationbasedsecurityscreeningforadvancedapplicationsandsupportsthelatestprotocolsLJavapreventssmallappsthathavelittlemotivationtodownloadLaddsde
7、nialofservicedetectionandpreventionfunctionsonthebasisofexistingfunctionality,thusincreasingprotectionAfterdetectingsuspiciousbehavior,thelcansendalertsandsystemrecorderrormessagestothecentralmanageme