Shulou(Shulou.com)06/01 Report--

Physical isolation gates are usually used in governments and groups to isolate office networks and business networks with different degrees of information sensitivity, such as local tax, IRS office network and tax business network. Usually, the business network is connected to the Internet, and the computer dealing with internal sensitive information runs in an independent private network, which is physically isolated from the business network. This special network operation mode not only ensures the security and confidentiality of information to the maximum extent, but also brings a series of problems and inconvenience.

For example, employees on business trips can only access the Internet, there is no way to obtain internal network files, in addition, the internal network business system needs to extract and collect data from the external network, due to service isolation, data acquisition is also very difficult.

The convenient solution to this problem is to use "network gate + cloud box private cloud disk". Through the combination of the two products, it can not only realize the physical isolation of the two types of networks, but also realize the exchange and sharing of data between the two types of networks.

Network gate: physical isolation between internal and external networks, blocking all connections.

Physical isolation gate is an information security device that uses solid-state switch read-write medium with a variety of control functions to connect two independent host systems. Because between the two independent host systems connected by the physical isolation gate, there is no physical connection, logical connection, information transmission command and information transmission protocol for communication, and there is no packet forwarding according to the protocol. There is only a protocol-free "ferry" of data files, and there are only "read" and "write" commands for solid-state storage media.

Therefore, the physical isolation network gate physically isolates and blocks all connections with the possibility of potential attack, so that the "hacker" can not invade, attack or destroy.

Cloud box private cloud disk: centralized storage management of electronic documents, permission sharing.

Cloud box private cloud disk centrally stores business documents fragmented on employees' personal computers in the cloud. Based on the principle of online collaboration, cloud box private cloud disk provides cross-platform authorized access to PC computers and Android / iOS phones, supports more than 10 document collaboration functions such as editing locking, change awareness, operation audit, file workflow, and integrates QQ-like internal instant messaging tools. Provide a highly transparent, secure and mobile document collaboration platform for the team.

The combination of physical isolation network gate and cloud box private cloud disk not only ensures physical isolation, but also realizes file security management, sharing and automatic two-way transmission across the network.

The scheme of "network gate + cloud box private cloud disk" is composed of one set of network gates and two sets of cloud box private cloud disks. The deployment method is a set of cloud box private cloud servers in the internal network and public network respectively, and the network gate is deployed between the two cloud box private cloud servers. The cloud box server handles data storage and sharing, and the network gate is responsible for isolation and data synchronization.

The advantages of "gateway + cloud box private cloud disk" to synchronize internal and external network files are as follows:

The main results are as follows: 1) the network gate avoids the direct connection of the network Socket between the internal and external systems, and can effectively prevent attacks at the network and application protocol level, while the SOA firewall technology solves the security problems of the internal application system of data sharing, and some other network gate products can pass the data depth inspection technology to prevent the introduction of malicious code during data exchange between the internal and external networks.

2) Cloud Box Enterprise Cloud disk realizes the separation and unified management of private network sensitive data and business external network data, and realizes data cloud backup and cloud sharing. Level 11 document permissions control the access and editing of documents by all members, prohibit downloading of secret-level files, and add dynamic watermarks to previews. It also provides online editing, reminding, logging, attention, version and other collaborative functions, which can not only ensure safe access to files, but also improve the document office efficiency of all members.

Under the condition of physical isolation between private network and Internet, Internet access to private network non-secret files is a basic rigid requirement, the combination of network gate and cloud box private cloud disk, and solve the isolation problem, but also can easily achieve internal and external network file exchange and access.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.