面向大型网络的防火墙系统设计

Design of a Firewall System Applied to Larger Networks

根据防火墙的固有弱点 ,提出了相应的解决方案。并根据大型网络的安全需要 ,综合包过滤Agent、入侵监测等技术设计了一种结合网络分析器和入侵检测的防火墙体系结构。该体系对于内外网络分别予以考虑 ,具备了内外兼防的能力 ,可有效防止安全攻击。

The limitation of a general firewall is analyzed,and some solutions of enhancing the security of networking systems are presented in this paper According to the security necessity of larger networks,the paper synthesizes the techniques of packed-filtering Agent and intrusion detection sysytem,etc ,and designs a new firewall system combined traffic sniffer and intrusion detection The system considers inner and outer networks separately,and it has the capability of protecting both them from security attacks effectively