Enterprise-class Network Solutions, Built With Security As A Whole

This thesis to a subsidiary of China Petroleum and security reinforcement network upgrade projects, for instance, the introduction of a large-scale enterprise development process and architecture of the network at its security needs on the subject, discussed the advanced technology and new security concepts in the network construction and The role of network security, put forward a suitable large-scale enterprise development needs of the whole network construction and security solutions to address the enterprise development process of network and security needs.This thesis from the China National Petroleum Corporation to improve the wide area network projects, thesis belong to the project design, from the choice of appropriate levels of advanced technology on the enterprise network to upgrade the entire network redundancy design and network security solution on the three aspects . The main contents as follows:Being described that in detail to the oil industry, represented by a large network of business needs and characteristics to the network logic diagram form the analysis and description, conducting a needs analysis and equipment selection based on suitable selection of the advanced technology enterprise-to-business backbone network upgrading.In the application of advanced technologies for enterprise backbone network to carry out the transformation at the same time, from both physical and logical aspects of the network has made the necessary redundancy configured to link bundle, such as Hot Standby Routing Protocol for representatives of exposition.An upgrade of the network deployed at the same time, combined with new security concepts, take full account of business-to-safety demand, from network infrastructure security design, application of basic safety design of two levels, from hardware-level engineering safety equipment deployment, to software level the security of the deployment of joint applications, the system described by the oil industry, represented by large-scale network security solution. Include: a variety of security planning concepts and strategies, such as the division of the security domain, etc.; network security equipment (such as firewalls, vulnerability scanning system) deployment, and security applications (such as SMS) to deploy an integrated program.At the network through the upgrading process of the use of advanced technology and network security reinforcement works at the new security concept in the implementation of enterprise network transformation projects to be successfully implemented to achieve the desired transformation of objectives for the follow-up the implementation of the project laid the foundation.