资源描述：
《FSR6_Cisco 安全管理中心解决方案(喻超,Cisco高级安全.pdf》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。
1、安全管理中心解决方案SMC(SecurityManagementCenter)喻超R&S,SecurityCCIE#5329,CISSP2006-3CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.1目录•当前的安全管理挑战•信息安全管理的体系结构•思科安全监控管理平台CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential2Copyright©2003,CiscoSystems,Inc.Allrightsreserved.PrintedinU
2、SA.Presentation_ID.scr面临的安全管理挑战CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential3挑战:目前的安全环境是混合模式•Best-in-classprotectionrequiresmultiple,purpose-builtsecuritydevicestoproperlyprotectenvironment•Enterprisestypicallyselectbest-of-breed,exacerbatingthecomplexityofthetask
3、•Nostandardmessageformat•Demandinstantaneousresponsetoattack•QuickenablingneworlocalvendordevicessupportCHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential4Copyright©2003,CiscoSystems,Inc.Allrightsreserved.PrintedinUSA.Presentation_ID.scr挑战:防御的复杂性CHN-0007©2005CiscoSyste
4、ms,Inc.Allrightsreserved.CiscoConfidential5挑战:需要处理太多的安全信息……防火墙记录IDS报警CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential6Copyright©2003,CiscoSystems,Inc.Allrightsreserved.PrintedinUSA.Presentation_ID.scr挑战:在复杂的网络中定位威胁的来源……∏Log/Alert∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏∏
5、∏∏∏∏∏∏∏∏∏∏∏CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential7挑战:今天安全管理的模式行动总是太过迟缓网络运营安全运营操作步骤:1.报警2.调查3.防御10KWin,防火墙收集网络拓扑信息阅读和分析100sUNIX安全知识海量数据…重复IDS/IPS防病毒软件路由器/交换机VPN认证服务器漏洞扫描CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential8Copyright©2003,CiscoSys
6、tems,Inc.Allrightsreserved.PrintedinUSA.Presentation_ID.scr统一的实时安全信息预警管理-SIM（SecurityInformationManagement)网络运营安全运营风险评估安全知识RiskSecurityAssessmentknowledgebase10KWin,防火墙统一的安全信息预警中心100sUNIX防病毒IDS/IPS软件路由器/交换机VPN漏洞扫描认证服务器CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential9
7、信息安全管理的体系结构CHN-0007©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidential10Copyright©2003,CiscoSystems,Inc.Allrightsreserved.PrintedinUSA.Presentation_ID.scr信息安全管理的外延关联分析实时监控NeedtomonitorMuchmeaninglessMulti-vendorrawdata...Networks…事件收集安全响应CollectingsecurityHowtorapidlydeployinfo
8、rmationabout
