高职院校内网安全立体防护实践

Three-Dimensional Protection Practice of Intranet Security in Higher Vocational Colleges

网络安全法的正式实施,标志着网络安全等级保护进入2.0时代,对高校网络安全防护提出了更高的要求。结合扬州工业职业技术学院网络安全防护实践,阐述了一种内网安全立体防护方案:通过校园有线无线准入准出的一体化认证,部署核心插卡式防火墙及数据中心VMware NSX,实现了内网的精细化管控,提升了内网安全防护能力。

The official implementation of the Cyber Security Act of the People's Republic of China marks the entry into the 2.0 era of nationally cybersecurity protection,which puts forward higher requirements for the network security protection in colleges and universities.To address this requirement,this paper elaborates a three-dimensional protection scheme for campus intranet security by combining the practice of Yangzhou Industrial Vocational Technology College in network security protection.Through the integrated authentication of campus wired and wireless network access and exit,the deployment of core switch plug-in firewall,and the new-generation network virtualization platform called VMware NSX Data Center,fine-grained control from network access to intranet communication to the data center is realized.This solution greatly improves the security protection capability of the campus network,and can be a reference for other colleges.