PDF《网络专家,安全专家》

s) Encryption and Virtual Private Networks (VPN'

s)

18 18

18 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Management Management Building Building Distribution Distribution Core Core Edge Edge Server Server E E- -Commerce Commerce Corporate Internet Corporate Internet VPN/Remote Access VPN/Remote Access WAN WAN ISP ISP PSTN PSTN FR/ATM FR/ATM SAFE蓝图: 保护电子商务安全

19 19

19 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID ? 将安全解决方案整合到网络系统之中 ? 包括思科与其合作伙伴解决方案的特殊的配置 ? 以现有的网络功能为基础实验室测试时间超过 3,000 小时 ? 现已有五个SAFE白皮书: CCisco SAFE:面向企业网络的安全蓝 C将安全SAFE方案扩展到小型、中型与远程用户网络 CSAFE VPN: IPSec虚拟专用网系统介绍 CSAFE:无线LAN安全性深入分析 CSAFE:IP电话安全性分析大型企业的SAFE蓝图 SAFE 蓝图

20 20

20 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID To Edge Distribution Module To VPN/Remote Access Module To ISP Module Public Web Servers Content Inspection Servers Cisco IDS Appliance Cisco IOS Router Cisco PIX Firewall Inspect Outbound Traffic for unauthorized URLs Stateful Packet Filtering Basic Layer

7 Filtering Host DoS Mitigation Spoof Mitigation DDoS Rate-Limiting Basic Filtering Broad Layer 4C7 Analysis SMTP Content Inspection Host IDS for local attack mitigation Focused Layer 4C7 Analysis SAFE蓝图: 企业的网络模块

21 21

21 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID SAFE白皮书 ?Cisco SAFE:面向企业网络的安全蓝 ?将安全SAFE方案扩展到小型、中型与远程用户网络 ?SAFE VPN: IPSec虚拟专用网系统介绍 ?SAFE:无线LAN安全性深入分析 ?SAFE:IP电话安全性分析

22 22

22 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Campus/WAN Backbone Campus/WAN Backbone Campus LAN Campus LAN Mainframe Mainframe ISDN PSTN Multiservice WAN (Sonet, IP, ATM, Frame Relay) International Sales Offices International Sales Offices Suppliers Suppliers Telecommuters Telecommuters Mobile Users Mobile Users Multi-Gigabit Ethernet Multi-Gigabit Ethernet Storage Storage Video Conferencing Video Conferencing IP Telephony IP Telephony Enterprise Mobility Enterprise Mobility Content Networking Content Networking Security/VPN Security/VPN 集成的安全解决方案 - AVVID Program Architecture for Voice, Video and Integrated Data Architecture for Voice, Video and Integrated Data

23 23

23 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID 思科AVVID合作伙伴计划 安全与VPN产品解决方案 Interoperability Interoperability and Co Co- -existence existence with Cisco Security &

VPN Cisco Security &

VPN Products Products Identity Perimeter Security Secure Connectivity Security Management &

Monitoring Application Security

24 24

24 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Application and Application and Code Review Code Review Policy and Policy and Procedure Procedure Outsource Outsource Monitoring and Monitoring and Management Management Incident Incident Response Response Vulnerability Vulnerability Assessment Assessment Design and Design and Implementation Implementation Service Categories Service Categories 思科AVVID合作伙伴计划 安全与VPN产品解决方案

25 25

25 ? 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID AVVID合作伙伴计划指导 ? VPN &

移动客户――填补OS间的差异并参考 统一标 的客户架构 - NetLock, potentially others ? 权威认证――智能卡支持 - Aladdin, Gemplus, Schlumberger, ActivCard, potentially others ? DDOS/IDS――增加网络应用认证合作伙伴以扩大SAFE 电子商务架构 - Arbor Networks, potentially others ? 末端安全――扩展末端安全合作伙伴队伍 - Zone Labs, Sygate, potentially others ? 服务合作伙伴――强调服务认证