IPsec安全策略应用

IPSec是由IETF组织定义的标准框架,包括有数据格式协议、密钥交换和加密算法等,为IP网络通信提供透明的安全服务。IPSec不仅能为企业局域网与拨号用户、域、网站、远程站点等之间的通信提供强有力且灵活的保护,而且还能用来筛选特定数据流。通过应用IPSec安全策略来筛选特定的IP或端口,并给出配置过程,提供了安全、高效和透明的网络保护,提高了安全保障性能,从而限制常见病毒、木马、黑客的攻击。

Application of IPsec Security Strategy

IPSec is a standard framework organized and defined by IETF, including data format protocol, key exchange and encryption algorithm, and provides IP network communication with transparent security service. 1PSec can not only provide communications among between the enterprise＇s LAN dial-up user, website, domain and remote with strong and flexible protection, but also the screening of specific data stream. With the application of IPSec security, strategy to screening the specific IP or port and to giving the configuration process, a safe, efficient and transparent network protection is achieved, and the security assurance performance enhanced, thus limiting the threats of common virus, Trojan horse, hacker attack.