计算机IP安全策略的全面管控  

Overall Control of the Computer IPsec Policy

作　　者：杨雅[1] 徐麦 杨厚祥[1] Yang Ya;Xu Mai;Yang Houxiang(State Grid HuangShi Power Supply Company,Huangshi Hubei 435000,China)

机构地区：[1]国网黄石供电公司信息通信分公司,湖北黄石435000

出　　处：《信息与电脑》2018年第17期215-216,共2页Information & Computer

摘　　要：计算机IP安全策略是一个十分实用的电脑安全防护措施。在企业局域网中,因为安装各类简版操作系统,造成电脑系统环境千差万别,导致某些终端无法成功执行"IP安全策略"。实际应用中,无法有效监测IP安全策略是否生效,难以全方位管理"IP安全策略",造成局域网计算机在安全管理上存在缺口,给企业终端安全带来了极大的隐患。笔者针对局域网内"IP安全策略"是否执行生效的问题,通过技术手段对策略进行监控,以达到对"IP安全策略"全面管控的目的。Computer IPsec policy is a very practical and common computer security protection measure.In the enterprise LAN,due to the existence of various types of simplified operating system,the computer system environment varies greatly,and finally,some computers cannot successfully implement the IPsec policy.In the practical application,we cannot effectively monitor whether the IPsec policy is effective or not,and it is difficult to comprehensively manage the IPsec policy.As a result,there is a gap in the security management of LAN computers,which brings great risks to enterprise terminal security.This paper aims at the question of whether the implementation of the IPsec policy in LAN is effective,and monitors the policy through technical method,so as to achieve the overall control of the IPsec policy.

关 键 词：IP安全策略 全面管控 企业终端 

分 类 号：G712.3[文化科学—职业技术教育学] TP393-4[文化科学—教育学]