Shulou(Shulou.com)06/01 Report--

WSG-500E online behavior management equipment is a very powerful device in WFilter series Internet behavior management. The system uses WFilter NGF enterprise online behavior management system. In terms of hardware, it adopts the motherboard architecture of Intel B75, core 4 CPU of I5-3450, and the main frequency is as high as 3.1GHz. Many users lack a visual concept of this performance, so let me make a brief comparison:

For ordinary router chips, such as the typical MTK7620 chip, the main frequency is 580MHz.

D525 industrial control computer, CPU is 4-core 1.8GHz. The performance is at least 3-4 times that of MTK.

WSG-500E 's I5-3450, with a new design, has almost 3-4 times the performance of the D525.

With 4G DDR3 memory and 6 gigabit ports, a powerful WSG-500E is built. This device, although officially recommended as a 500Mbps bandwidth, can reach 900-920m, and the network access is smooth and does not stutter at all.

1. Device appearance

The standard 1U iron shell chassis weighs about 3 or 4 kilograms, and it is very difficult to carry on one hand.

The back of the machine is cooled by double fans, and the VGA interface can be debugged with the monitor.

Out of the box, the chassis is full, the big motherboard of B75 is full of materials, and the power supply and other accessories are all brand. We can see that the manufacturer is very attentive to the selection of hardware.

Let's take a look at the special features of WSG-500E, an enterprise-class hardware gateway for Internet behavior management. I will not introduce some basic functions such as interconnection, firewall, and × ×. I will only introduce the contents that leaders focus on.

two。 Protect the security of network information

As leaders attach great importance to network information security, I have specially sorted out the functions related to information security in WSG-500E, which mainly include the following aspects:

2.1 block malicious websites, * * viruses and other harmful sites.

People often go to some malicious websites in the local area network, resulting in viruses in the intranet. So I enabled WSG's "web filtering" feature and made a strategy for users all over the network.

2.2 enable IP-mac binding to prohibit illegal access.

To prevent unauthorized external access from stealing company resources, we have enabled IP-mac binding on all devices. Unauthorized devices cannot get an IP address even if they know the wireless password. Of course, if you are still worried, you can enable "web authentication". All users must authenticate users before they can surf the Internet.

2.3 Audit of outgoing documents and online content is prohibited.

For some sensitive departments, the company requires that the sending of documents is prohibited and the whole process of online content, post content and e-mail content are recorded. So I enabled "Application filtering", "Internet logging", "SSL Monitoring", "SSL email Monitoring" and other modules.

2.3.1) File transfer applications are prohibited.

2.3.2) websites such as network disk and file transfer are prohibited.

2.3.3) relevant departments should record the content of the Internet.

3. Establish an order for work and the Internet

Previously, some unconscious employees would take up working hours to watch videos, news, entertainment, play games, stock speculation, etc., the company's new regulations require that video and news sites are banned during working hours, games are prohibited, and stock speculation is prohibited. These regulations are mainly realized through the two modules of "web filtering" and "application filtering". Mainly standardize the order of the Internet during the working period, only speed limit during the off-work period, no content restrictions.

4. Guarantee and rational allocation of bandwidth resources

Due to the limited bandwidth resources of the company, so that everyone can access the Internet normally. It is necessary to restrict the bandwidth of server segment, office network segment and guest network segment respectively.

Give the whole department a speed limit of 20m and everyone in the department a speed limit of 2Mbit.

5. Special function

There are also some features, such as "domain integration" (can be integrated with AD domain to directly display the domain account of IP), "mac address collector" (obtaining mac addresses across network segments and managing based on mac addresses), "plug-in system", etc., are also very practical.

There are other behavior management strategies, user authentication (web authentication, Wechat authentication, PPPoE authentication), and × × functions (Ipsec, open***, etc.), which I will not introduce in view of the limited space.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.