Network Packet Brokerzvishandiso zvinogadzira Network traffic kuitira kuti mamwe maturusi ekutarisa, akadai seaya akatsaurirwa kuNetwork performance monitoring uye kuchengetedzwa-ane chekuita nekutarisa, inogona kushanda zvakanyanya. Zvimiro zvinosanganisira kusefa kwepaketi kuona mazinga enjodzi, mitoro yemapaketi, uye hardware-based timestamp kuisa.
Network Security Architectinoreva seti yemabasa ane chekuita nefu chengetedzo yekuvaka, Network kuchengetedza architecture, uye data kuchengetedza architecture. Zvichienderana nehukuru hwesangano, panogona kunge paine nhengo imwe inotarisira nzvimbo yega yega. Neimwe nzira, sangano rinogona kusarudza mutariri. Chero nzira, masangano anofanirwa kutsanangura kuti ndiani ane mutoro uye kuvapa simba rekuita sarudzo dzakakosha.
Network Risk Assessment izere runyorwa rwenzira idzo mukati kana kunze kwakashata kana kukanganiswa kurwiswa kunogona kushandiswa kubatanidza zviwanikwa. Kuongorora kwakadzama kunobvumira sangano kutsanangura njodzi uye kudzideredza kuburikidza nekuchengetedza kudzora. Ngozi idzi dzinogona kusanganisira:
- Kusanzwisisa kwakakwana kwehurongwa kana maitiro
- Masisitimu akaoma kuyera mwero wenjodzi
- "hybrid" masisitimu anotarisana nebhizinesi nenjodzi dzehunyanzvi
Kugadzira fungidziro inoshanda kunoda kubatana pakati peIT nevebhizinesi vanobatana kuti vanzwisise huwandu hwenjodzi. Kushanda pamwe chete uye kugadzira nzira yekunzwisisa iyo yakakura njodzi mufananidzo kwakakosha seyekupedzisira njodzi yakatarwa.
Zero Trust Architecture (ZTA)itiweki chengetedzo paradigm inofungidzira kuti vamwe vashanyi panetiweki vane njodzi uye kuti kune akawanda akawandisa ekuwana nzvimbo kuti adzivirirwe zvizere. Naizvozvo, nyatso chengetedza midziyo pane network pane network pachayo. Sezvo yakabatana nemushandisi, mumiririri anosarudza kana kubvumidza chikumbiro chega chega chekuwana zvichibva pane yengozi nhoroondo yakaverengerwa zvichienderana nekubatanidzwa kwemamiriro ezvinhu senge application, nzvimbo, mushandisi, mudziyo, nguva, data senitivity, zvichingodaro. Sezvinoreva zita, ZTA chivakwa, kwete chigadzirwa. Iwe haugone kuitenga, asi unogona kuigadzira zvichibva pane zvimwe zvehunyanzvi zvinhu zvainazvo.
Network Firewallchigadzirwa chakakura uye chinozivikanwa chekuchengetedza chine nhevedzano yezvinhu zvakagadzirirwa kudzivirira kupinda kwakananga kune yakagarwa sangano maapplication uye data server. Network firewalls inopa kuchinjika kune ese emukati network uye gore. Kune gore, kune cloud-centric zvipo, uyewo nzira dzakashandiswa neIaaS vanopa kuti vashandise humwe humwe humwe humwe hutano.
Secureweb Gatewaydzakabva pakugadzirisa Internet bandwidth kusvika pakudzivirira vashandisi kubva mukurwiswa kwakashata kubva paInternet. URL kusefa, anti-virusi, decryption uye kuongorora mawebhusaiti anowanikwa pamusoro peHTTPS, kudzivirira kutyora data (DLP), uye mashoma mafomu e Cloud access security agent (CASB) zvino zvave zvimiro.
Remote Accessinovimba zvishoma uye zvishoma paVPN, asi zvakanyanya uye zvakanyanya pa zero-trust network yekuwana (ZTNA), iyo inogonesa vashandisi kuwana maapplication ega ega vachishandisa mamiriro emukati vasingaonekwe kune midziyo.
Intrusion Prevention Systems (IPS)kudzivirira kusarongeka kwekusagadzikana kubva pakurwiswa nekubatanidza IPS zvishandiso kumaseva asina kuvharwa kuti aone uye avhare kurwiswa. IPS masimba ikozvino anowanzo kuverengerwa mune zvimwe zvigadzirwa zvekuchengetedza, asi kuchine yakamira-yega zvigadzirwa. IPS iri kutanga kusimuka zvakare sezvo makore ekuzvarwa kutonga achivaunza zvishoma nezvishoma mukuita.
Network Access Controlinopa kuoneka kune zvese zvirimo paNetwork uye kutonga kwekuwana kune iyo policy-based corporate Network infrastructure. Mitemo inogona kutsanangura kupinda zvichienderana nebasa remushandisi, huchokwadi, kana zvimwe zvinhu.
DNS Kucheneswa (Sanitized Domain Name System)ibasa rakapihwa nemutengesi rinoshanda sesangano rezita reZita System kudzivirira vashandisi vekupedzisira (kusanganisira vashandi vari kure) kuti vasasvike kunzvimbo dzine mukurumbira.
DDoSmitigation (DDoS Mitigation)inodzikamisa kukanganisa kunoparadza kwekuparadzirwa kwekuramba kwekurwiswa kwesevhisi pane network. Chigadzirwa chacho chinotora nzira dzakasiyana-siyana dzekudzivirira zviwanikwa zvetiweki mukati me firewall, izvo zvakaiswa pamberi pe network firewall, uye izvo zviri kunze kwesangano, senge network yezviwanikwa kubva kune Internet sevhisi vanopa kana zvemukati kuendesa.
Network Security Policy Management (NSPM)kunosanganisira kuongorora uye kuongorora kukwenenzvera mitemo inotonga Network Security, pamwe nekuchinja manejimendi mafambiro ebasa, kuyedza kutonga, kuongorora kutevedza, uye kuona. Iyo NSPM chishandiso inogona kushandisa inoona network mepu kuratidza ese maturusi uye firewall yekuwana mitemo inovhara akawanda network nzira.
Microsegmentationinzira inodzivirira kutoitika kurwiswa kwenetiweki kubva pakufamba yakachinjika kuti iwane zvakakosha. Microisolation zvishandiso zvekuchengetedza network zvinowira mumapoka matatu:
- Netiweki-yakavakirwa maturusi akaiswa kunetiweki layer, kazhinji yakabatana nesoftware-yakatsanangurwa network, kuchengetedza zvinhu zvakabatana kunetiweki.
- Hypervisor-yakavakirwa maturusi ndiwo ekare mafomu eakasiyana zvikamu zvekuvandudza kuoneka kwe opaque network traffic inofamba pakati pe hypervisors.
- Host agent-based maturusi anoisa maajenti pane anotambira avanoda kupatsanura kubva kune yese network; Iyo yekugamuchira mumiriri mhinduro inoshanda zvakaenzana kune gore rekushanda, hypervisor basa rekuita, uye maseva emuviri.
Chengetedza Kupinda Service Edge (SASE)ndiyo hurongwa huri kubuda hunobatanidza hutano hwakakwana hwekuchengetedzwa kwetiweki, seSWG, SD-WAN neZTNA, pamwe nekukwanisa kwakakwana kweWAN kutsigira Secure Access zvido zvemasangano. Yakawanda yepfungwa pane chimiro, SASE ine chinangwa chekupa yakabatana chengetedzo sevhisi modhi iyo inopa mashandiro kunetiweki nenzira inoparadza, inoshanduka, uye yakaderera-latency.
Network Detection uye Response (NDR)inoramba ichiongorora inopinda uye inobuda traffic uye matanda emigwagwa kurekodha zvakajairwa Network maitiro, saka anomalies anogona kuzivikanwa nekuyeverwa kumasangano. Zvishandiso izvi zvinosanganisa kudzidza muchina (ML), heuristics, ongororo, uye kuona-kwakavakirwa mutemo.
DNS Security Extensionsari ma-add-on kuDNS protocol uye akagadzirirwa kuona mhinduro dzeDNS. Mabhenefiti ekuchengetedza eDNSSEC anoda kusainwa kwedhijitari kweiyo yakavimbiswa DNS data, processor-yakanyanya maitiro.
Firewall seSevhisi (FWaaS)tekinoroji nyowani ine hukama zvakanyanya neyegore-yakavakirwa SWGS. Musiyano uri mukuvakwa, uko FWaaS inomhanya kuburikidza neVPN yekubatanidza pakati pekupedzisira uye zvishandiso pamucheto wetiweki, pamwe nekuchengetedza stack mugore. Inogona zvakare kubatanidza vashandisi vekupedzisira kune masevhisi emuno kuburikidza neVPN tunnel. FWaaS parizvino haina kunyanya kuwanda pane SWGS.
Nguva yekutumira: Mar-23-2022
