安全与速度完美结合.ppt

安全与速度的完美结合 Agenda 产品概述 布署场景 防火墙 缓存 管理 可扩展性 新的机遇, 新的挑战 The Connected Business New Concerns 保护你的内部网络免受黑客与其它非法入侵者的侵害 管理与控制网络访问 在加快网络访问速度的同时保护宝贵的带宽资源 微软公司对于安全的认识 安全缺陷和病毒攻击是严重、代价沉重、全行业业范围的问题 Internet 安全是全世界范围内实现数字化商务运作的最基本的考虑因素 作为业界的领导者，微软公司具有保护Internet和客户数据的特殊责任 Microsoft ISA Server 2000安全与速度的完美结合 什么是 ISA Server 2000 防火墙与缓存 ISA Server 的版本 ISA Server 标准版 ISA Server 企业版 What Is ISA Server 2000 ISA 系统需求 防火墙 缓存 两者都应存在于网络的边缘或者说结合点 模块化安装 统一的管理 MMC Logging and Reporting Monitoring and Alerting 一致的访问策略 低廉的培训维护费用 与 Windows 2000 紧密集成 Security 包过滤 网络地址转换 (NAT SecureNAT) Authentication System Hardening 虚拟专用网 (VPN) 管理 MMC Terminal Services Event log Active Directory? Array configuration and policy data NOT required! 带宽控制 透明地支持在其它平台上的客户机与服务器 Much More Than “Proxy Server 3.0” Transparency for all clients and servers Enterprise policy Group policy Schedules Active Directory integration Extensible application filters SMTP filter Streaming media splitting H.323 filter Gatekeeper MMC-based UI Task Pads, wizards Remote administration Configuring Exchange server behind firewall IIS separation RAM caching New cache store Scheduled content download VPN integration Intrusion detection System hardening NTLM Kerberos authentication Dual-hop SSL Customizable alerts Logging: W3C format, selectable fields Integrated reporting Bandwidth control New APIs Modular installation Deployment Scenarios Small Organization Large Enterprise DMZ Secure Publishing Chaining Firewall 用可伸缩,多层次防火墙保护网络环境 ISA Server Firewall Packet, circuit, and application-level traffic screening Stateful inspection examines traffic in its context Reduce risk of unauthorized access Analyze or modify content with “Smart” application filters Integrated intrusion detection Based on technology licensed from Internet Security Systems (ISS) Secure publishing Protect servers accessible to the outside world System hardening “Lock down” the operating system, further strengthening security Integrated with Windows 2000 VPN Wiz