http://www.5ixue.

com ()

Contents

http://www.5ixue.com ()

IT

IT

B-B
1-1

GTW

http://www.5ixue.com ()

http://www.5ixue.com ()

http://www.5ixue.com ()

OA

http://www.5ixue.com ()

http://www.5ixue.com ()

http://www.5ixue.com ()

http://www.5ixue.com ()



Internet
,
, ,
, Internet
Internet, Internet
, ,
, Internet.

http://www.5ixue.com ()

http://www.5ixue.com ()



""

ISP

http://www.5ixue.com ()

/

http://www.5ixue.com ()

http://www.5ixue.com ()

CISCO

http://www.5ixue.com ()



/
//

http://www.5ixue.com ()

VISION

http://www.5ixue.com ()

1
NETSCREENNORTELCISCO
2PC
CISCONOKIAWATCHGUARDSAMSUNG
3
CHECKPOINTNORTON

http://www.5ixue.com ()


4
LinkTrust CyberWall
LinkTrust CyberWall-100
WebGUI
NATVPNHA

IBM
IBMIBM
IBMIBM
IBM
NetChina
NetChina

http://www.5ixue.com ()

Gaunlet (NAI)
GauntletPGPMacfeeCybercops
NAIGauntlet Firewall Gauntlet VPN1
2 Macfee
javaactivex applet 3 VPN
VPN NAIPGP
PGP-Desktop SecurityVPN
windows 9x/nt/2000CAGuardIT

CA

win/2000win/nt1.1
Win20001.0
1)2)3)IP
4)

http://www.5ixue.com ()

Norton Personal Firewall 2000

2.0Anti-Virus 2000
-
-
-
- cookie
- Anti-Virus 2000
- Win9x/NT/2000

Lucent Managed Firewall v4.0

VPNIDS
Lucent Managed Firewall v4.0
lucent
InfernoTMNTsolaris
PentiumII333)...

http://www.5ixue.com ()


Firewall-1 (CheckPoint)

NATVPN
PIX (Cisco)

NAT
163/169
JavaActiveX
NetScreen

163/169
G

http://www.5ixue.com ()

WIN95WIN98
WIN95WIN98

WIN95WIN98
NetPolice

Linux

http://www.5ixue.com ()


Sky.net ()

http://www.5ixue.com ()


UNISECURE

-

UF3100UF3500
SecMailWebGate Web
SFeCA
SEM
Raptor (Axent

NetShine

Linux
http://www.5ixue.com ()

F600+

NetScreen

ServGate Technologies

NetScreen-5200

SG2000H

NAT

Firmware

7.03

4.0.0r2.0

2.34VF-B001P012

Screen

SGOS

CPU

PIII1G

750M RISC

PIII800

RAM

256M

256M

512M

16M

16M

256M

LAN

LAN

DHCP

mini-GBIC1000Base-

SX/LX

1000Base-SX

100Base-TX

10 8 Mini

GBIC
2

24 100Base-TX
DHCP

4000

AppleTalkIPX

IP

VP

1000Base-SX

1000Base-SX/LX

20G

10M/100M

DNS
VLAN

OS

IPSec

IPSecL2TPIKE

VPN

IP

IP

VPN

VPN

VPN 3DESDES DES3DESAES

CAST128

http://www.5ixue.com ()

NetEye IDS

LM IDS

//

/C/S

/C/S

KIDS

//

B/S

NetDT2000

/B/S

NETCOP

IDS

//

/C/S

/B/S

CISCO IDS4235

/B/S

eTrust

IDS

Enterasys Dragon
IDS

Sensor/squire/server

iS-One LinkTrust
appliance+
IDS 6.6

//

Symantec
Intruder Alert

ITA AdministratorITA Agent IAT EventViewer

IAT Manager

http://www.5ixue.com ()


1999
1999 7 IDC Intrusion DetectionVulnerability AssessmentIDnA
1998
1999 -2003 1998 1.36 39% 1999
2.62 (
1997 1998

1999

2000

2001

2002

2003

37.7

91.0

162.2 253.5 346.9 406.1 449.8 29%

141

78

56

37

17

11

65

54

49

46

67

62

58

20.3

45.3

99.4

183.5 295.5 422.7 528.1 51.8%

123

120

85

61

43

25

35

33

38

42

46

51

54

58.0

136.3 261.7 437.0 642.4 828.7 977.9 39.0

135

92

67

47

29

18

AXENTISSNAI

AXENT

40.0%

ISS

NAI

24.5% 11.7%

Bindview Cisco SecurityDynamics

4.5%

4.3%

3.4%

11.6%

AXENT ESM67.5%
ISS 47.6%AXENT NetRecon 38.5%
AXENT ITA 76.5 ISS RealSecure
52.9%

http://www.5ixue.com ()

http://www.5ixue.com ()

20
10
10
ST

YAHOOST

ISS
CHECKPOINT

1-2

http://www.5ixue.com ()



Cisco

Netscreen

Radware

http://www.5ixue.com ()

&

Service

Investment
Protection
Reliability
Performance

Product

Solution

http://www.5ixue.com ()

CISSP Certification
Information Service Security
Professional
ISC

CIW

http://www.5ixue.com ()

http://www.5ixue.com ()

Thank you

http://www.5ixue.com ()