带外管理和带内审计系统的设计及应用

Design and Application of Out-of-band Management and Internal Audit System

随着内蒙古电力公司信息化建设的快速发展,数据中心机房IT设备原有的管理维护模式(远程管理和现场管理2种)缺乏对运维人员的有效监管,时效性不高,存在一定的安全隐患。为了满足数据中心机房设备集中化管理的要求,内蒙古电力(集团)有限责任公司设计了集监控、事故预警、管理维护功能于一体的带外管理和带内审计系统,不仅能够实现对服务器和网络设备的运维管理,还能够实时监控审计操作行为,对被授权人员和系统的网络行为进行记录、回放、分析,通过加强内、外部的网络行为监管,提高各业务系统的安全性和可靠性,确保各业务系统的稳定运行和快速排除故障。

With the rapid development of the construction of Inner Mongolia Electric Power Company, the existing managemenl of＂ the data center room of IT equipment mainlenance modes （remote management and site management）, the lack of eft）ctive supervision of the operation and maintenance personnel, timeliness was not high, there was a certain security hazard. In order to meet the requirements of the centralized management of the data center room equipment, Inner Mongolia Electric Power Company has designed a set of monitoring, warning of the accident, the management and maintenance functions in one-of-band management and the band audit system, not only the operation and maintenance management of servers and network devices the audit operation behavior, but also capable of real-time monitoring, network of authorized personnel and system behavior, recording, playback, analysis, and by strengthening the network of internal and external behavior supervision, improved the security and reliability of business systems to ensure that each business system stable operation and fast troubleshooting.