省级电子政务网安全策略配置优化

The Province Electronic Government Information Network Security Policy Configuration Optimization

文章着重介绍了思科PIX535防火墙实现政务网与Internet网的地址转换,将内部地址与外部地址进行一对一静态映射,对内外网进行逻辑隔离,从而保证内网安全的功能应用。防火墙的作用是控制外部的非信任网络对内部信任网络的访问,以及内部网络中不同区域之间的相互访问。

The article introduced the NAT （network address translation） function of cisco pix535 firewall rule configuration. The NAT was achieved by static mapping for internal address and external address. Logical isolating was created between two networks. Thus NAT protected internal network safe running.