【正文】 網(wǎng)絡(luò)安全策略 .............................................................................................................................. 7 2 網(wǎng)絡(luò)設(shè)計原則 ....................................................................................................................................... 7 3 網(wǎng)絡(luò)安全的方案設(shè)計 ............................................................................................................................. 8 總體設(shè)計方案 .............................................................................................................................. 8 網(wǎng)絡(luò)拓?fù)浞桨冈O(shè)計 ....................................................................................................................... 9 網(wǎng)絡(luò)拓?fù)鋱D設(shè)計 ................................................................................................................. 9 IP 地址分配策略 ................................................................................................................. 9 內(nèi)部網(wǎng)絡(luò) IP 地址分配 ........................................................................................................ 9 外部網(wǎng)絡(luò) IP 地址分配 .......................................................................................................10 4 設(shè)備選型及配置 ...................................................................................................................................10 防火墻 .......................................................................................................................................10 產(chǎn)品概述 ..........................................................................................................................10 配置過程 ........................................................................................................................... 11 路由器 ........................................................................................................................................ 11 產(chǎn)品概述 .......................................................................................................................... 11 配置過程 ..........................................................................................................................12 中心交換機(jī) .................................................................................................................................12 二級交換機(jī) .................................................................................................................................13 入侵檢測系統(tǒng)（ IDS） .................................................................................................................13 產(chǎn)品概述 ..........................................................................................................................13 配置過程 ..........................................................................................................................13 5 服務(wù)器的安裝和配置 ............................................................................................................................14 Web/DNS 服務(wù)器的配置 ..............................................................................................................14 郵件服務(wù)器的配置 .....................................................................................................................14 文件服務(wù)器的配置 .....................................................................................................................15 6 安全管理規(guī)則 .......................................................................................................................................15 使用中的網(wǎng)絡(luò)安全問題 ...............................................................................................................15 網(wǎng)絡(luò)安全的外部問題 ........................................................................................................15 網(wǎng)絡(luò)安全的內(nèi)部問題 .........................................................................................................16 網(wǎng)絡(luò)防護(hù) ...................................................................................................................................16 3 登陸控制 ..........................................................................................................................16 防火墻 ..............................................................................................................................17 后期安全服務(wù) ............................................................................................................................17 網(wǎng)絡(luò)拓?fù)浞治? ...................................................................................................................17 操作系統(tǒng)補(bǔ)丁升級 ............................................................................................................18 防病毒軟件病毒庫定期升級 ...............................................................................................18 服務(wù)器定期掃描加固 .........................................................................................................18 防火墻日志備份、分析 ......................................................................................................18 入侵檢測等安全設(shè)備日志備份 ...........................................................................................18 服務(wù)器日志備份 ....................................