摘要
传统南北向网络安全防御已经无法满足新形势下网络安全需求,强化东西向网络安全是目前需要着力解决的一大问题。面对省级气象部门这种复杂网络环境,四川省气象部门采用安全资源池这一面向中小企业的安全服务系统,在省级气象业务网络上线部署方案,上线部署中遇到的交换机物理资源IFP ACL耗尽导致策略路由下发失败问题解决方法。系统部署上线后,有效提升了气象业务内网横向防护能力,完成了省级关键业务区域边界防护。为省级气象部门强化东西向网络安全提供了一种较廉价解决方案。
Traditional north-south-traffic network security defense has been unable to can’t meet the requirement for network security in the new era.Enhancing the east-west-traffic network security defense ability is an urgent issue for us to settle down at the moment.Facing a complex network environment,Sichuan Meteorological Administration used the security resources pool,a security service system oriented to the small and middle-sized enterprise,to enhance provincial key business area network border security defense capability.This article introduces deployment of the security resources pool in the Sichuan Meteorological Network System.After the failure of the first arrangement,we analyzed the reason and solved the fatal problem that the exhaustion of the physical switch IFP ACL resources caused the failure of policy distribution.After the operationalization of the system,the network border security defense capability of Sichuan Meteorological Bureau has raised effectively.Also the resolution is an economical plan for most provincial meteorological departments to improve the east-west-traffic network security defense ability.
作者
方国强
刘一谦
张常亮
FANG Guoqiang;LIU Yiqian;ZHANG Changliang(Heavy Rain and Drought-Flood Disasters in Plateau and Basin Key Laboratory of Sichuan Province,Chengdu 610072,China;Sichuan Meteorological Observation and Data Center,Chengdu 610072,China)
出处
《成都信息工程大学学报》
2022年第6期651-655,共5页
Journal of Chengdu University of Information Technology
