IBM China Company Ltd

2004/12
IBM

Copyright IBM Corporation 2004

 IBM China Company Ltd.

2 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

OA


-
-
-
-
-




- (SUN SOLARIS/IBM AIX/HP UX /WIN 2000)
- Oracle/ DB2/ Sql Server / Domino/ Exchange
- (WebSphere Portal/ BEA WebLogic/ Sun One Portal/ Oracle AS Portal/ MS SharePoint)
- DNS,FTP,VPN

4 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

1
31

5 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

2

- WEB VPN
IIS, Apache) - CheckPoint VPN
- DNS - Nortel VPN
windows DNS, Unix Bind) - IBM VPN
- FTP
IIS, WU-ftp)
-
Domino, Exchange) -
- CISCO
-
Solaris, win2000, HP UX, AIX)
- CISCO PIX
- Oracle - Netscreen
- DB2 - CheckPoint
- Domino
- SQL Server

- Symantec
- Websphere Portal -
- BEA Weblogic -
- SUN One Portal
- Oracle AS Portal
- MS Sharepoint

6 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

- 5
IBM

- 25

IBM SUN
HP UNIX WIN 2000 IBM AIX
SOLARIS
Microsoft
IBM SUN ONE
Oracle9iAS BEA
Office
IBM
Portal Sharepoint
6.0
portal weblogic
Portal
websphere
Server
IBM Exchange Domino
SQL Server
Oracle9i DB2
2000
Norton Trend


Nortel


Contivity
IBM VPN Checkpoint
VPN 1700

DNS FTP

CISCO PIX Netscreen Checkpoint

CISCO
CISCO

7 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

9 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

NISS

10 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

- - - - -
- - - - -
- - - -
- -
-VPN
-
- -
- -
-
-
-

11 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

VPN
Oracle
DB2 Checkpoint
Domino
Nortel
SQL Server
IBM
Websphere Portal Sun Solaris
BEA WebLogic
Sun One Portal IBM AIX
Oracle AS Portal CISCO Win 2000
MS SharePoint
HP UX

CISCO PIX
Netscreen
Domino
Exchange Checkpoint
WEB


IIS
Apache
DNS


Windows DNS

UNIX BIND
(BIND9)
FTP

IIS
Wu-Ftpd

12 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

14 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

(1)
/

- - - - -
- - - - -
- - - -
- -
-VPN
-
- -
- -
-
-
-

15 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

2


-
-
-
-
-

-
-
-
-
-

16 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

3
19


-


/

-

17 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

/1

Plan
Plan

Do
Do Act
Act

Check
Check

18 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

/2

PDCA

1 1

2 2

3 3

3 4

19 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

3A

- - - -
- -VPN - -
- - - -
- - -
-
-

- - (, , )
- PKI/ -

- -
- -

- - Provisioning
- - -

20 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

Internet

21 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

(SOC)

22 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

()
()


- TELNETHTTPFTPSMTPPOP3


-
DoS


-

23 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

Internal Zone, Admin

Zone, Interconnection ZoneISS
UNIX

IDS

24 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
-

25 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

/






IT

(


)

26 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
- Internet
-

27 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

- /

User Provisioning
-

- 1 2 3 4 ...


Something you know Web
LDAP Domino Oracle ...

Something you have
(,
,
Something you
EAI)
areSomething DMZ

DMZ

you do

-






SSO

28 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
-

29 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

- Why?
- What?
- How?

(role)
(responsibility)(liability)

30 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
-
-
-

-
-
-

31 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

- /
-
-
-

-

-

-
-
Web, FTP, SMTP
-

33 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
/

-

-




-
-
-

34 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-






-



-

WebFTP

35 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

/

-



-





-




-

WebFTP

/

36 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

WebFTP HTTPHTTPSFTPHTTP
FTP
Web

37 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

/
-
/

/
- /




- /
/

38 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-

-
-

-
-

-

39 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
- /

- /
- /
/
-
-
-
-
-
- /
-

- /
-
-
/

40 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
-

-
-

-
-

41 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-

-

42 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-

-




-

43 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-
-
-

-

-
""
-

-

-

45 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

46 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

1.
2.
3.

47 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
SQL

-
SQL

- VPN

48 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-
-

-


-

49 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-



-

-

-


-

50 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-

-
- CPU

-
-
-
-
-

-
-
-

51 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

-



-


-


-
-

52 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

PKI

53 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

Packet Filter
Proxy
Circuit Proxy
Dynamic Packet Filter
Stateful Inspection
Adaptive Proxy
Deep Packet Inspection

55 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

NAT

56 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

Screening Router
Dual Homed Gateway
Screened Host Gateway
Screened Subnet

57 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

58 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

59 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

VPNIPsec SSL



802.1Q

60 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

61 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

IP


IP

62 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

63 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

64 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

65 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

(1)

isp

Router

External DMZ

Main FW
External
Web Server External
DNS Server

Internal
Web Server Internal Desktop
Internal Email Server
DNS Server

66 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

(2)

isp

Router

External DMZ

External External Main FW

Web Server
DNS Server

Internal DMZ

Internal Internal
Web Server Email Server Internal FW

Internal
DNS Server

Desktop Desktop

67 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

68 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004

 IBM China Company Ltd.

70 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

OA



MIS
MIS

BOSS

71 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

72 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

73 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

OAOA
OA

74 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

PSTN
CMNET VPN

75 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

76 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

CMNet
BOSS

CMNet

DCN



1

SOC


MIS

/ISP MIS OA
OA


77 Bank of China 2004 Copyright IBM Corporation 2004
 IBM China Company Ltd.

78 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

79 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

e-learning


OA




DMZ
DMZ

80 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

81 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

82 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

83 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

84 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

85 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

DMZ

DMZ
DMZ
DMZ

86 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

87 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

88 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

89 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

90 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

91 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

1 1 1 1 1 5

2 2 1 2 2 9

3 2 2 3 3 13

3 3 3 3 3 15

92 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd.

93 Bank of China 2004 Copyright IBM Corporation 2004

 IBM China Company Ltd

Copyright IBM Corporation 2004