基于IPSec的域安全策略研究

Research on IPSec security policy in domain

为了保护在网络上传输的数据域内Web服务器、数据库服务器等免受攻击,提出一种保护域安全的方法,构建一个域安全策略系统,使用IPSec进行身份验证、加密网络数据,保护Web服务器、数据库服务器及其他服务器之间的通信.在Web服务器、数据库服务器中指派IPSec客户端策略,在域控制器中指派IPSec域安全服务器策略,数据库服务器只开放一个TCP端口1433和Web服务器通信.实验表明,域安全策略系统内的计算机之间通信时会建立一条安全的通道,能有效地保护通信安全.

In order to protect the transmission of data on the Internet and Web server,database server in the domain from attack, a method of Domain Security is proposed, a domain security policy system is built. Assigned IPSec Client Policy in Web server and database server, Assigned IPSec domain secure server strategy in Domain controller, Only open a TCP port 1433 between Database server and Web server Communications, Experiments show that the Communications in Domain Security Policy System can Build a safe passage to Protect Communications Security.