fortigate防火墻管理系統(tǒng)應(yīng)用-資料下載頁
2024-09-29 21:23本頁面
【導(dǎo)讀】臺大資工網(wǎng)管室陳鴻偉。兩個不同網(wǎng)路間的安全閘道。追蹤及控制網(wǎng)路的連線?？梢詫γ恳粋€網(wǎng)路連線選擇允許,拒絕,可設(shè)定各項網(wǎng)路服務(wù)可用頻寬。隔離不當(dāng)使用網(wǎng)路者。統(tǒng)一的管理平臺與介面,全面掌握網(wǎng)路脈動。兼具集中與分散之有效網(wǎng)路安全監(jiān)控。將企業(yè)內(nèi)部使用的保留位址轉(zhuǎn)換為合法位址。隱藏內(nèi)部主機的真實位址,被免遭受攻擊?？梢宰屍髽I(yè)內(nèi)部使用更多的主機。將內(nèi)部來源IP轉(zhuǎn)址成FG外部網(wǎng)路介面IP,Fortigate會記錄NAT轉(zhuǎn)址表.將內(nèi)部來源IP轉(zhuǎn)址成FG所定義IPpool中的IP,Fortigate會記錄NAT轉(zhuǎn)址
【正文】 f both are configured the RADIUS object is attempted first and then if no response the Local password is used ? RADIUS Accounting packets sent for Admin users ? PKI allows a user to be authenticated on presentation of a valid certificate ? Users directly connected to the WebUI, no username or password is required RADIUS ? FortiGate acts as a work access server (NAS) ? User information passed to the RADIUS server ? User authenticated based on the RADIUS servers response ? Object identifies the IP address and shared secret of up to two RADIUS servers ? RADIUS object can be used for all services supporting authentication ? Radius Accounting for Admin users LDAP ? FortiGate configured as LDAP client for LDAP server or Active Directory ? Supports LDAP protocol functionality defined in RFC2251 for looking up and validating user names and passwords ? FortiOS supports three LDAP Auth Types: ? Simple: provides simple password authentication without search capabilities (default). ? Anonymous: binds to the server as an Anonymous user. It then performs the LDAP search and the secondary bind. ? Regular: binds (logs on) to the LDAP server with a userspecified username and password. It then performs the LDAP search and secondary bind. Types of SSL VPN ? Web Application mode ? Secured access to a portal interface ? Available via any browser supporting SSL version 2 or 3 ? Tunnel mode ? Virtual IP assignment (Similar to PPP) ? Uses ActiveX and Java controls ? Host security is based only on firewall policies SSL VPN – Configuration ? VPN SSL Config SSL VPN – Configuration ? User User Group Thanks
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1