调度三区和信息四区边界安全防护研究与实践

Research and Practice of Border Safety Protection of Dispatching Area Three and Information Area Four

信息化的飞速发展在给人们带来快捷、方便的同时也带来全球性的安全挑战,公司调度三区OMS网段与信息四区网段集中部署在信息四区核心交换机上,并无任何安全防护措施,给公司生产、经营带来较大安全隐患。公司通过利用主干交换机防火墙模块的虚拟墙功能,配置了省公司OMS、市公司OMS和市公司信息网三个接口,使各网络边界清晰明了,实现三个区域之间的访问控制,从而进一步提高公司信息安全管控水平,消除各类信息安全隐患。

The rapid development of informatization brings both rapidness and convemence and global satety challenge to people. The OM$ network segment of Dispatch Area Three and the network segment of Information Area Four of the company are centrally deployed at the core switch of Information Area Four, without any safety protection measure, bringing great potential safety hazards to the production and operation of the company. By use of the virtual wall function of firewall module of backbone switch,the company configures three interfaces including OMS of the provincial company,the OMS of municipal company and the information network of municipal company, making all network borders clear and realizing the access control among the three areas, and thus further improving the information safety control level of the company and eliminating various potential safety hazards.