Prevent illegal outreach and illegal access management

Enterprises and public institutions have installed firewalls and intrusion detection devices on the internal network and the external network to protect the internal network. For dense networks, even strict regulations do not allow the connection of Internet and other external networks. However, illegal outreach and illegal access, etc., can easily undermine the uniqueness of network export regulations and other administrative regulations, causing major security risks.

Threats:

The internal personnel illegally outreached through Modem dialing, ADSL dialing, and mobile wireless dialing, which caused the gateway security system to fail. Virus infection, illegal information release, and sensitive information disclosure may occur.

In the classified units, although the internal and external networks are physically isolated, internal personnel may access the internal network computer to the external network cable, thereby damaging the management regulations and causing leakage;

External mobile computers and other devices access internal information through access to the internal switch network, causing security risks;

External mobile computers can also be directly connected to the computer network card in the confidential network through a direct connection to establish a peer-to-peer network, thereby causing information leakage.

The solution of Chinasec:

Through the Chinasec Trusted Network Security System, IP packet control technology makes illegal outbound connections unable to perform normal IP communications. Only specified computers and servers within the Intranet can communicate and effectively cut off all illegal outreach. Communication;

Through IP packet control technology, no matter what form of illegal access, such as switch access or peer-to-peer network access, cannot perform normal IP data exchange with intranet computers, effectively cutting off all illegal access behaviors;

Through the IP packet control technology, even if the intranet computer is connected to an external network, network communication cannot be performed. At the same time, an offline strategy can be set in combination with the monitoring system. Once the computer is removed from the intranet, the computer can be automatically locked to prevent the intranet computer from being connected. Occurrence of external network events;

Through IP binding technology, it is possible to prevent users from arbitrarily changing the computer's IP address and avoiding some management monitoring and auditing measures;

Through illegal IP blocking technology, it is possible to actively block computers that have not been certified or have not deployed a security system to access the internal network.

Provide detailed audit records.