|
|
|
|
|
ÃÖ»óÀÇ
ÅëÇÕ º¸¾È ¼Ö·ç¼Ç(Best-of-Breed Security Application) |
|
- Check Point VPN-1/FireWall-1 NG¿Í ÅëÇյǾî ÆÐÅ°Áö·Î
Á¦°ø - Àü¿ë OS IPSO·Î °·ÂÇÑ º¸¾È°ú ÃÖÀûÀÇ
¼º´É ±¸Çö : ¾îÇø®ÄÉÀÌ¼Ç ¼º´É Çâ»ó¿¡ ÇʼöÀûÀΠŬ·¯½ºÅ͸µ,
IP ¶ó¿ìÆÃ, ÆÐŶ Æ÷¿öµù, µð½ºÅ© ¹Ì·¯¸µ ¹× Host º¸¾È µî ´Ù¾çÇÑ ±â´ÉÀÌ Àü¿ë Harden
OSÀÎ IPSO¿¡ ÃÖÀûȵǾî Á¦°øµÇ¹Ç·Î °·ÂÇÑ
º¸¾È°ú ÇÔ²² ÃÖ»óÀÇ ¼º´ÉÀ» ±¸ÇöÇÕ´Ï´Ù. - ¸ðµç IP ÇÁ·ÎÅäÄÝÀ»
Áö¿ø : Check PointÀÇ VPN-1/FireWall-1 ÀÀ¿ë ¼Ö·ç¼ÇÀº RIP,
OSPF, DVMRP, BGP, VRRP, ±×¸®°í
IGRP µîÀ» Æ÷ÇÔÇÏ´Â ¸ðµç IP ÇÁ·ÎÅäÄÝÀ» Áö¿øÇÏ°í ÀÖ½À´Ï´Ù. |
|
ÃÖ»óÀÇ
ÅëÇÕ º¸¾È ¼Ö·ç¼Ç(Best-of-Breed Security Application) |
|
- Load Sharing°ú Active Redundancy °¡´É: ±â¾÷ÀÇ
¾îÇø®ÄÉÀ̼ǵéÀº Áö¼ÓÀûÀÎ ³×Æ®¿öÅ© °¡¿ë¼ºÀÇ º¸ÀåÀÌ
¸Å¿ì Áß¿äÇÕ´Ï´Ù. ¸ðµç Nokia IP Network Security Ç÷§Æû¿¡ Á¦°øµÇ´Â VRRP
(Virtual Router Redundancy Protocol)
±â´ÉÀº µÎ ´ë ÀÌ»óÀÇ Nokia?½Ã½ºÅÛ°£ÀÇ Load Sharing°ú Active
Redundancy¸¦ °¡´ÉÇÏ°Ô ÇÕ´Ï´Ù. |
|
Nokia
IP Clustering |
|
- ƯÇãµÈ Nokia IP ClusteringÀº Active Session
Failover ¹× Dynamic Load Balancing ±â´ÉÀ» ÅëÇÏ¿© ¾ÈÁ¤¼º°ú
´õºÒ¾î Çâ»óµÈ throughputÀ» Á¦°øÇÕ´Ï´Ù. - OS Kernel
¹× IP Clustering Code ÅëÇÕ : ±âÁ¸ÀÇ Å¸»ç Ŭ·¯½ºÅ͸µ ¼Ö·ç¼Ç°ú ´Þ¸®
Check Point VPN-1/FireWall-1ÀÇ
Àü¿ë Ŭ·¯½ºÅ͸µ ¼Ö·ç¼ÇÀ¸·Î¼ OS Kernel ¹× IP Clustering Code¸¦ ¿Ïº®ÇÏ°Ô
ÅëÇÕ½ÃÄÑ OS¿¡¼ Áö¿øÇϱ⠶§¹®¿¡ ¾î¶°ÇÑ ³×Æ®¿öÅ© ȯ°æ¿¡¼µµ ¿Ïº®ÇÑ Å¬·¯½ºÅ͸µÀ» ±¸ÇöÇÒ
¼ö ÀÖ½À´Ï´Ù. - Gateway Cluster ¼Ö·ç¼Ç :
°ÔÀÌÆ®¿þÀÌ¿¡¼ ´Ù¼öÀÇ ¾îÇöóÀ̾𽺰¡ ¸¶Ä¡ ´ÜÀÏ ÅëÇÕ ÀåºñÀÎ °Íó·³ È¿À²ÀûÀ¸·Î
¿¬°áµÇ¾î Çâ»óµÈ ¼ºñ½º¸¦ Á¦°øÇÏ´Â Gateway Cluster ¼Ö·ç¼ÇÀÔ´Ï´Ù. |
|
¿ø°Ý
³×Æ®¿öÅ© °ü¸® |
|
- Nokia Voyager : À¥ ±â¹ÝÀÇ Nokia Voyager¸¦
ÅëÇÏ¿© ¿ø°Ý °ü¸®¸¦ Áö¿øÇϱ⠶§¹®¿¡ º°µµÀÇ ¾îÇø®ÄÉÀ̼ÇÀ»
¼³Ä¡Çϰųª ¾îÇöóÀ̾𽺠ÀÚüÀÇ Å°º¸µå³ª ¸ð´ÏÅ͸¦ ÇÊ¿ä·Î ÇÏÁö ¾Ê½À´Ï´Ù.
- º¸¾È °ü¸®ÀÚ´Â ÀÚ½ÅÀÇ À¥ ºê¶ó¿ìÀú¸¦ ÅëÇÏ¿© Nokia?Voyager¿¡ Á¢¼ÓÇÔÀ¸·Î½á ÀÎÁõµÈ °ø°£À̶ó¸é
¾îµð¼µç ³×Æ®¿öÅ©¸¦ °¨½ÃÇÏ°í °ü¸®Çϸç Á¤Ã¥À» ±¸¼ºÇÒ ¼ö
ÀÖ½À´Ï´Ù. |
|
ÅëÇÕ
Áß¾Ó °ü¸® |
|
- ÃÖ´ë 2,500°³±îÁö Áß¾Ó °ü¸® :Nokia Horizon
Manager¸¦ ÅëÇÏ¿© º¸¾È °ü¸®ÀÚ´Â ÃÖ´ë 2,500°³±îÁö Check
Point VPN-1/FireWall-1ÀÌ ¼³Ä¡µÈ Nokia Security ¾îÇöóÀ̾𽺸¦ Áß¾Ó¿¡¼
°ü¸®ÇÒ ¼ö ÀÖ½À´Ï´Ù. - Horizon Manager :
»ç¿ëÀÚ ÆíÀǸ¦ À§ÇÏ¿© ±×·¡ÇÈ ÀÎÅÍÆäÀ̽º·Î Áö¿øµÇ´Â Horizon Manager¸¦ ÀÌ¿ëÇÏ¿©
´Ù¼öÀÇ Nokia Security ¾îÇöóÀ̾𽺿¡¼ ±¸ÇöµÇ´Â Check Point º¸¾È ¾îÇø®ÄÉÀ̼ǿ¡
´ëÇÑ ¿ø°Ý °ü¸®´Â ¹°·Ð, º¹±¸¿ë À̹ÌÁö ÆÄÀÏÀÇ
°ü¸® ¹× ¹é¾÷, Àå¾Ö ¹ß»ýÀ» ´ëºñÇÑ ¼³Á¤ÀÇ ¹é¾÷ ¹× º¹¿ø, ¶óÀ̼¾½º
ÀúÀå ±×¸®°í Áß¾Ó ¾÷±×·¹ÀÌµå µîÀ» ½ÇÇàÇÒ ¼ö ÀÖ½À´Ï´Ù. |
|
Firewall
Flow Technology |
|
- Firewall Flow Technology´Â Connection TableÀÇ »çº»À» KernelÀÌ
°®°í ÀÖ¾î H/W interrupt levelÀÇ ¼Óµµ·Î
connection Á¤º¸¸¦ ÀúÀåÇÏ´Â Nokia¸¸ÀÇ »õ·Î¿î ±â¼úÀÔ´Ï´Ù.
- ÀÛÀº Å©±âÀÇ Packet ThroughputÀ» ȹ±âÀûÀ¸·Î Çâ»ó½ÃÄÑ ÁÜÀ¸·Î½á ±âÁ¸ ¾îÇöóÀ̾ð½º
Àåºñ¿¡ ºñÇÏ¿© ¼º´É ¸é¿¡¼ ¿ùµîÇÑ °æÀï·ÂÀ» °¡Áö°í
ÀÖ½À´Ï´Ù. |
|
ÁøÁ¤ÇÑ
Plug & Play ±¸Çö |
|
- ÀÎÅÍ³Ý Á¢¼Ó¿¡ ÇÊ¿äÇÑ °¢Á¾ Àåºñ (¶ó¿ìÅÍ, ½ºÀ§Ä¡, NICµî)¸¦ Çϳª·Î ÅëÇÕÇÏ¿´½À´Ï´Ù.
- Çϵå¿þ¾î Ãß°¡ ¼³Ä¡°¡ ÇÊ¿ä ¾øÀ½ : º¸¾È ¼Ö·ç¼ÇÀ» ±¸ÃàÇϱâ À§ÇÑ
¸ðµç ±âº»ÀûÀÎ ÀÛ¾÷µé Áï, ³×Æ®¿öÅ© ÀÎÅÍÆäÀ̽º
Ä«µåÀÇ ÀåÂø°ú Å×½ºÆ®¿¡¼ºÎÅÍ OS¿Í º¸¾È ¾îÇø®ÄÉÀ̼ÇÀÇ ÃÖÀûÈ¿Í ÆÐÄ¡ µîÀº ¸ðµÎ
Á¦Ç°ÀÌ ÃâÇϵDZâ Àü¿¡ ÀÌ·ç¾îÁý´Ï´Ù. |
|
Àå¾Ö
¾ø´Â ¼ºñ½º¸¦ À§ÇÑ Hot-Swappable Áö¿ø |
|
- °¡¿ë ½Ã°£ÀÇ ÃÖ´ëÈ º¸Àå : Nokia IP710, IP740Àº
Àü¿øÀ» ³»¸®°Å³ª Àüü ³×Æ®¿öÅ©¸¦ Á¤Áö½ÃÅ°Áö ¾Ê°í ÀåºñÀÇ
±³Ã¼³ª Á¦°Å°¡ °¡´ÉÇϵµ·Ï Hot-Swapping ±â´ÉÀ» Á¦°øÇÕ´Ï´Ù. |
|
¶Ù¾î³
À¯Áöº¸¼ö |
|
NokiaÀÇ °¢ Á¦Ç°µéÀº ³×Æ®¿öÅ©¿¡¼ Áß¿äÇÑ ±¸¼º ¿ä¼Ò·Î ¿î¿µµÇµµ·Ï µðÀÚÀεǾú½À´Ï´Ù.
ÇÑÁ¤µÈ Àü»ê½ÇÀÇ °ø°£À» È¿À²ÀûÀ¸·Î »ç¿ëÇÒ ¼ö ÀÖµµ·Ï µðÀÚÀεǾî Ç¥ÁØ Rack¿¡ ÀåÂøÇÏ¿© »ç¿ëÇÒ ¼ö
ÀÖÀ¸¸ç,
°ü¸®ÀÇ ÆíÀǼºÀ» À§ÇÏ¿© ³×Æ®¿öÅ© ¿¬°á ºÎºÐÀº Á¦Ç°ÀÇ Àü¸é¿¡ À§Ä¡ÇÏ°í ÀÖ½À´Ï´Ù. |
|
|