网络准入控制系统在医院的部署与应用

Deployment and Application of Hospital Network Admission Control System

利用网络准入控制(NAC)系统,提高医院接入层网络安全系数和网络维护排障效率。基于现有的网络架构,部署准入设备,管控所有接入层交换机及其物理接口。利用准入技术最新的多厂商虚拟网关(MVG)模式,部署优势功能加固终端设备安全防护策略。内网在用的116台接入层交换机设备及接口得到有效管控,阻断非法终端接入并隔离风险终端,公共环境中的网络物理接口得到有效监管。准入系统上线以来月均阻断非法接入26次,隐患设备数量长期控制在个位数。并以静默检测的方式实现对接入层交换机端口扫描、管控及终端设备的安全检查,对用户做到无感安检;实现端口管控,静默检测并修复重要配置,加固终端电脑的安全防护,辅助一线工程师维护排查故障,提高工作效率。

This paper uses network admission control system to improve hospital access layer network safety coefficient and the efficiency of network maintenance.Based on the existing network architecture,we deploy network admission control system to control all access layer switches and their physical interfaces.The scheme uses the latest MVG mode of the network admission control,deploys advantageous functions to strengthen terminal equipment security policies and improve the security level of the local area network.In the innernet 116 switches and interfaces are effectively controlled,unauthorized terminals are blocked from accessing and isolating risky terminals.Physical network interfaces in the public environment are effectively supervised.Since the launch of the access system,illegal access has been blocked 26 times per month,and the number of hidden devices has been controlled in single digits for a long time.The scheme realizes port control,silence detection and repair important configurations,strengthens the safety protection of terminal computers,assists front-line engineers to maintain and troubleshoot faults,and improves work efficiency.