【正文】 1 / 34內(nèi)網(wǎng)安全解決方案上海寶信軟件股份有限公司2022 年 5 月 22 日2 / 34目 錄第 1 章 背景與現(xiàn)狀 ...................................................................................................................................................5 項(xiàng)目背景 ............................................................................................................................................5 建設(shè)內(nèi)網(wǎng)安全管理系統(tǒng)的必要性 ....................................................................................................6第 2 章 建設(shè)目標(biāo)和原則 ...........................................................................................................................................8 設(shè)計(jì)目標(biāo) ............................................................................................................................................8 設(shè)計(jì)原則 ............................................................................................................................................8 設(shè)計(jì)依據(jù) ..........................................................................................................................................10第 3 章 問題分析與解決思路 .................................................................................................................................11 外來用戶的接入控制 ......................................................................................................................11 IP 地址管理問題 ..............................................................................................................................11 用戶資產(chǎn)信息管理問題 ..................................................................................................................11 軟硬件違規(guī)行為監(jiān)控 ......................................................................................................................13 非法外聯(lián)問題 ..................................................................................................................................13 網(wǎng)絡(luò)拓?fù)洳榭磁c安全事件定位困難 ..............................................................................................14 服務(wù)器與端口監(jiān)控困難 ..................................................................................................................15 缺乏完整的用戶授權(quán)認(rèn)證系統(tǒng) ......................................................................................................15第 4 章 系統(tǒng)架構(gòu)與內(nèi)網(wǎng)安全解決方案 .................................................................................................................17 ECOP 系統(tǒng)架構(gòu) .................................................................................................................................17 ECOP 系統(tǒng)功能模塊 .........................................................................................................................18 內(nèi)網(wǎng)安全解決方案 ..........................................................................................................................19第 5 章 系統(tǒng)功能實(shí)現(xiàn) .............................................................................................................................................20 IP 地址管理子系統(tǒng) ..........................................................................................................................20 客戶端管理子系統(tǒng) ..........................................................................................................................20 客戶端的安裝、卸載和升級 ..........................................................................................................20 客戶端資產(chǎn)信息管理模塊 ..............................................................................................................21 客戶端軟硬件監(jiān)控模塊 ..................................................................................................................22 非法外聯(lián)監(jiān)控模塊 ..........................................................................................................................22 網(wǎng)絡(luò)拓?fù)涔芾碜酉到y(tǒng) ......................................................................................................................23 掃描子網(wǎng) /路由器層網(wǎng)絡(luò)拓?fù)?.........................................................................................................23 掃描子網(wǎng)邏輯拓?fù)?..........................................................................................................................24 掃描子網(wǎng)物理拓?fù)?..........................................................................................................................25 交換機(jī)端口控制 ..............................................................................................................................25 展現(xiàn)網(wǎng)絡(luò)設(shè)備重要 MIB 信息 .........................................................................................................25 服務(wù)監(jiān)視與端口掃描子系統(tǒng) ..........................................................................................................26 系統(tǒng)管理子系統(tǒng) ..............................................................................................................................26 身份認(rèn)證與授權(quán)模塊 ......................................................................................................................26 報(bào)警與日志管理模塊 ......................................................................................................................27 系統(tǒng)備份模塊 ..................................................................................................................................283 / 34第 6 章 ECOP 系統(tǒng)主要優(yōu)勢 ....................................................................................................................................29 技術(shù)優(yōu)勢 ..........................