诌议基于网络防火墙的DMZ设置教学

Discussion on Teaching of DMZ Setting Based on Network Firewall

防火墙（Fire Wall）作为一种隔离控制技术,是目前保护计算机网络安全的主要措施。DMZ是位于内部网络和外部网络之间的小网络区域,通过部署基于网络防火墙的DMZ,更加有效地保护了可信内部网络和服务器,让网络工程专业学生进一步掌握了学习防火墙的重要性。网络安全防御体系的组成部分中的DMZ无疑是十分重要的,再结合基于主机的防护、入侵检测系统及其他安全措施,极大地提高了公共服务及整个网络系统的安全性能。

As a kind of isolation control technology, fire wall is the main measure to protect computer network security at present. DMZ is a small network area located between the internal network and external network, a trusted internal network and server are protected more effectively through the deployment of DMZ based on network firewall. This let the students, which majored in network engineering, further understand the importance of learning firewall. DMZ, a part of the network security defense system, is very important, combined with protection based on host, intrusion detection system and other security measures,greatly improve the safety performance of public service and the whole network system.