基于DCFW18005多核防火墙的校园网络安全架构  

Campus Network Security Architecture Based on Multi-core Firewall DCFW18005

作　　者：王炜[1] 

机构地区：[1]武汉交通职业学院,湖北武汉430062

出　　处：《无线互联科技》2015年第15期24-25,共2页Wireless Internet Technology

摘　　要：在校园网设计中,防火墙直接连接外部网络,是整个校园网络的出口。此时,防火墙实际上是一个屏蔽主机防火墙,即一般而言,Internet上的主机能连接到内部网络上的系统的桥梁。即使这样,也仅有某些确定类型的连接被允许。任何外部的系统试图访问内部的系统或者服务将必须连接到这台堡垒主机上。文章分析了堡垒主机需要拥有高等级的安全架构。The design of the campus network, the firewall directly connected to the Internet,is exporting the entire campus network. In this case,the ifrewall is actually a screened host ifrewall, that in general,a host on the Internet can connect to the bridge system on the internal network. Even so,only certain types of connections are allowed to determine. Any external system trying to access internal system or service must be connected to this bastion host.Therefore,bastion hosts need to have a high level of safety.

关 键 词：防火墙 校园网安全 关键配置 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]