【正文】 市地稅局信息系 統(tǒng) 安全解決方案市地稅局信息系統(tǒng)安全解決方案市地稅局信息系 統(tǒng) 安全解決方案目 錄1 概述 ..................................................................................................................6 目的 ..................................................................................................................................6 主要內(nèi)容 ...........................................................................................................................6 目標(biāo)讀者 ...........................................................................................................................72 政策與標(biāo)準(zhǔn) .......................................................................................................83 信息安全體系框架 ..........................................................................................10 信息安全體系概述 ..........................................................................................................10 信息安全戰(zhàn)略目標(biāo) ......................................................................................................10 信息安全工作基本原則 ...............................................................................................11 信息安全體系目標(biāo)和范圍 ...........................................................................................13 等級保護(hù)設(shè)計(jì)思路 ..........................................................................................................13 系統(tǒng)識別與定級 ..........................................................................................................13 安全域劃分 .................................................................................................................13 安全域安全要求 ..........................................................................................................16 安全要求等級選擇 ......................................................................................................16 安全域安全技術(shù)要求 ..................................................................................................17 信息安全管理體系框架 ...................................................................................................17 安全管理體系概述 ......................................................................................................17 安全管理主要措施 ......................................................................................................19 一級安全管理措施指標(biāo) ...............................................................................................21市地稅局信息系 統(tǒng) 安全解決方案 二級安全管理措施指標(biāo) ...............................................................................................22 信息安全技術(shù)體系框架 ...................................................................................................24 第一級安全技術(shù)要求 ..................................................................................................24 第二級安全技術(shù)要求 ..................................................................................................24 信息安全運(yùn)行體系框架 ...................................................................................................254 安全域劃分 .....................................................................................................29 **市地稅局網(wǎng) 絡(luò)現(xiàn)狀 ........................................................................................................29 邊界和子網(wǎng) .................................................................................................................30 現(xiàn)有安全域狀況 ..........................................................................................................30 **市地稅局信息系 統(tǒng)安全劃分 .........................................................................................30 安全域劃分 .................................................................................................................315 安全技術(shù)解決方案 ..........................................................................................35 概述 ................................................................................................................................35 建設(shè)目標(biāo) ....................................................................................................................35 基本原則 ....................................................................................................................35 安全域設(shè)計(jì)方案 ..............................................................................................................38 安全域安全需求分析 ..................................................................................................39 安全域安全措施 ..........................................................................................................41 邊界防護(hù)解決方案 ..........................................................................................................43 邊界防護(hù)設(shè)計(jì)原則 ......................................................................................................43 防火墻部署方案 ..........................................................................................................45 防病毒解決方案 ..........................................................................................................46市地稅局信息系 統(tǒng) 安全解決方案 UTM 部署方案 ............................................................................................................49 VPN 設(shè)計(jì) ........................................................................................................................52 VPN 介紹 ...................................................................................................................52 VPN 設(shè)計(jì) ...................................................................................................................54 VPN 部署方案 ............................................................................................................56 內(nèi)網(wǎng)安全解決方案 ..........................................................................................................58 內(nèi)網(wǎng)管理系統(tǒng) .............................................................................................................58 補(bǔ)丁分發(fā)服務(wù)器 .........................................................