基于Web应用防火墙的校园网设计方案  

Design Scheme of Campus Network Based on Web Application Firewall

作　　者：相景丽 

机构地区：[1]山西职业技术学院计算机工程系,山西太原030006

出　　处：《山西电子技术》2016年第1期68-69,79,共3页Shanxi Electronic Technology

摘　　要：针对日益突出的Web网页安全问题和校园网对高网络带宽的升级需求,设计了一种基于Web应用防火墙的校园网组网方案,该方案既能有效防御针对网络应用层的攻击,还可以防护大量的未知攻击,最大程度的保护Web应用系统的安全,同时通过核心交换机的端口聚合和vlan划分,不但提高了网络带宽,而且对校园的财务系统进行了有效隔离。实践表明,这种方案针对中小规模的校园网应用非常高效、经济。In order to improving the network bandwidth of campus network and prntecting the increasing issues on web page securi- ty, the article designs a scheme of campus network based on Web applieatinn firewall. The scheme can not only effectively prevent attacks from the network application layer, but also protect a large number of unknown attacks. So it provides a greatest protection for the security of web application system. By mean of port trunking and vlan dividing on the core switch, it can improves the nelwork bandwidth and isolates the financial system from campus network effectively. The practice shows that this scheme is very efficient and economical for small and medium scale campus network application.

关 键 词：网络安全 校园网规划 WEB应用防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]