【正文】 國家電網(wǎng)公司 信息網(wǎng)絡安全等級保護設備 IPS 入侵防護系統(tǒng) 解決方案建議書 2 目 錄 1 典型網(wǎng)絡風險分析 .................................................................................................4 病毒、蠕蟲泛濫 ................................................................................................4 操作系統(tǒng)和應用軟件漏洞隱患 ........................................................................4 系統(tǒng)安全配置薄弱 ............................................................................................5 各種 DOS 和 DDOS 攻擊的帶來的威脅 ..........................................................5 與工作無關的網(wǎng)絡行為 ....................................................................................6 2 安全產品及解決方案效能分析 .............................................................................6 傳統(tǒng)安全技術的薄弱之處 ................................................................................6 防火墻 .........................................................................................................7 入侵檢測 .....................................................................................................7 補丁管理 .....................................................................................................7 入侵防御系統(tǒng)簡介 ............................................................................................8 3 領信信息安全保障解決方案介紹 .........................................................................9 領信信息安全保障體系 ....................................................................................9 安氏領信入侵防御系統(tǒng)介紹 .......................................................................... 11 領信入侵防御系統(tǒng)主要功能 ................................................................... 11 領信入侵防御系統(tǒng)產品特點 ...................................................................12 領信入侵防御系統(tǒng)支持的工作模式 .......................................................14 入侵防御系統(tǒng)推薦部署流程 ...................................................................15 IPS 的學習適應期階段 .....................................................................16 IPS 的 Inline 模式工作階段 .............................................................17 4 入侵防御系統(tǒng)部署建議 .......................................................................................17 系統(tǒng)組件 說明 ..................................................................................................17 集中部署方式 ...........................................................................................18 分布部署方式 ...........................................................................................19 部署準備 ...................................................................................................20 邊界防護部署 ..................................................................................................21 3 重點防護部署 ..................................................................................................21 5 入侵防御系統(tǒng)安全策略配置與應用 ...................................................................22 6 項目過渡方案及應急預案 ...................................................................................23 過渡方案 ..........................................................................................................23 應急預案 ..........................................................................................................24 7 工程實施方案 ........................................................................................................25 分工界面 ..........................................................................................................25 工程設計 ..........................................................................................................26 產品生產及出廠驗收 ......................................................................................26 設備運輸、包裝與到貨安排 ..........................................................................26 到貨驗收 ..........................................................................................................27 安裝調試及系統(tǒng)集成 ......................................................................................28 系統(tǒng)測試 ..........................................................................................................28 初步驗收 ..........................................................................................................28 系統(tǒng)試運行 ......................................................................................................28 最終驗收 ......................................................................................................28 工程實施進度表 ..........................................................................................29 8 系統(tǒng)驗收測試計劃 ...............................................................................................30 系統(tǒng)上線測試 ..................................................................................................30 用戶管理功能 ..................................................................................................31 引擎工作模式配置 ..........................................................................................31 組件管理 ..........................................................................................................31 策略配置 ..........................................................................................................32 威脅事件收集顯示 .................