Shulou(Shulou.com)06/01 Report--

Firewalls, you know, won't mention much, but what I want to mention today is that firewalls are under a lot of pressure, how long can you hold on? In some of the enterprises I have been to, there are many enterprises that have such a concept, firewalls and security products, so security products should not only play the role of defense, but also have multiple tasks (to prevent external defense). Online behavior management, application release, × × connection) but also to be a good administrator, below to share with you.

In order to save the budget, some enterprises simply mix the firewall and the online behavior management together. They should know that the online behavior and the firewall are two different hardware. The firewall should not only do what should be done well, but also assume the role of online behavior.

Case Topology

Although there are some functions attached to the internal integration of the firewall, the firewall is still a firewall after all. As shown in the current network topology, the firewall, which assumes the role of × ×, the role of online behavior, is widely used in the public network and network forwarding role. to the branch interconnection role, less than 5 companies interconnected, more than 10, in this case, there are all kinds of applications (voice, phone, surveillance, video) Attendance data), under such circumstances, under the pressure of the firewall, it does work normally. If this firewall breaks down and all the functions above are completely invalid, then the problem will come, such as the branch, many of which are RODC, the domain of the branch can not be connected, and the situation is quite bad. As we all know, "the firewall is going to strike". (it's not so tragic), a lot of people will say, how is this possible?

What is mentioned here is a large enterprise, if there is a situation like this, it is best to separate the roles and let the firewall do what you should do. In addition, the existing firewall needs to be redundant in HA, not only for the current firewall, but also for network interconnection.

Sometimes, if the planning is not good, there may be problems of one kind or another. For managers, the future problems will follow. Of course, here, I only mention the pressure on the one hand, let the firewall do what they are supposed to do. In fact, it is also very tired, but there is no expression.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.