Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 35)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 35

LocalPolicyE nforcement

PoliciesatRouter_Ei concard

1. Performroutingonthethreetrafficstreams:B2B,B2C,INET

2. Packetscominginfromtheinternetareinspectedagainstspoofing.

PoliciesatFW1_B2C

1. Ecommercewebservice– TCPport80(HTTP)and443(SSL)allowedIN

2. Emailservicefortheexternalworld– TCPport25(SMTP)allowedIN

3. DNSservicefortheexternalworld–UDPport53(DNSrequest)allowedIN

4. Dropandlogeverythingelse

PoliciesatFW2_B2C

1,Ecommercewebservice:

n AnytrafficallowedfromInternal_Admin.

n HTTP/HTTPStrafficallowedfromInternal_Dev(DevelopersuseHTTP/HTTPS

basedupdatemethodsuchasFrontpageServerextension).

n HTTP/HTTPStrafficallowedfromInternal_Clients.

n HTTP/HTTPStrafficallowedfromRAS_Net.

2,Externalemailservice:

n AnytrafficallowedfromInternal_Admin.

n SMTPtrafficallowedfromtheinternalemailserverforretrievingandsending

emailstoandfromtheoutsideworld.

3,ExternalDNSservice:

n AnytrafficallowedfromInternal_Admin.

n DNSquerytrafficallowedfromInternal_Dev.

n DNSquerytrafficallowedfromInternal_Clients.

n DNSquerytrafficallowedfromRAS_Net.

1 2 ... 30 31 32 33 34 35 36 37 38 39 40 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 35