Security打铸电力信息系统安全架构9课件1.ppt

1、2003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.pur esecuri tysecuri tyCheck Point pur Security打铸打铸电力信电力信息系统安全架构息系统安全架构王建龙王建龙13910263156J22003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysec

2、uri tyn 电力企业信息安全建设需求分析n Check Point公司的安全解决方案 统一网络安全架构 产品线介绍n Check Point公司介绍n Q&A议程议程32003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty电电力力信信息息系系统统生产控制系统生产控制系统电力企业信息系统介绍电力企业信息系统介绍生产管理系统生产管理系统管理信息系统管理信息系统网站系统网站系统信息网络信息网络42003-2007

3、Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty电力企业信息系统安全需求分析电力企业信息系统安全需求分析电力业务电力业务连接、灵活连接、灵活可用性、性能可用性、性能成本、管理成本、管理安全措施安全措施控制、调整、策略、规则、控制、调整、策略、规则、限制限制2003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and con

4、fidential.puresecuri tysecuri ty42003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.安全管理需要安全管理需要一个真正专业和一个真正专业和平衡的全专家平衡的全专家52003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty业务安全保护要求系统复杂

5、系统复杂厂商太多厂商太多管理困难管理困难TCOTCO效果不佳效果不佳等级 化 保护 要 求电力企业信息系统安全需求分析电力企业信息系统安全需求分析62003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty网络安全网络安全主机安全主机安全OPSECOPSEC数据安全数据安全访问控制访问控制安全审计安全审计结构安全结构安全边界安全边界安全入侵防范入侵防范恶意代码防范恶意代码防范网络设备网络设备身份鉴别身份鉴别剩余信息保

6、护剩余信息保护恶意代码防范恶意代码防范身份鉴别身份鉴别安全审计安全审计入侵防范入侵防范资源控制资源控制应用安全应用安全身份鉴别身份鉴别访问控制访问控制安全审计安全审计剩余信息保护剩余信息保护通信完整性通信完整性通信保密性通信保密性抗抵赖抗抵赖软件容错软件容错资源控制资源控制管理安全管理安全数据完整性数据完整性数据保密性数据保密性数据备份和恢复数据备份和恢复集中集中远程远程分权分权可视可视智能智能 电力企业信息系统安全需求分析电力企业信息系统安全需求分析72003-2007 Check Point Software Technologies Ltd.All rights reserved.Pro

7、prietary and confidential.puresecuri tysecuri ty Protected（保护）保护电力行业基础设施及数据不受任何威胁、入侵及损失 Unified（统一）.一个统一的体系结构，提供高度可管理性及扩展性 Reliable（可靠）.保证生产力及业务持续性 Extensible（可扩展）能有效抗击今天及未来的威胁PURE 安全安全降低复杂性及提高可扩展性为网络各层提供保护高度灵活，对新涌现的威胁迅速作出反应Check Point 的承诺的承诺:PURE 安全安全82003-2007 Check Point Software Technologies Ltd

8、.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty网络网络&网关网关数据数据&端点端点安全管理安全管理Check Point的整体安全的整体安全Totalsecurity from Check Point92003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty单一单一 VPN 解决方案解决方案IPSCheck Point

9、整体安全方案整体安全方案统一网关单一管理单一端点FW+应用智能应用智能 综合综合 UTM解决方案解决方案程序控制程序控制+NACAV/反间谍软件反间谍软件数据安全，磁盘加密数据安全，磁盘加密VPN 客户端客户端方针定义的单一控制台方针定义的单一控制台单一事件响应单一事件响应审计和遵从审计和遵从网络安全网络安全主机安全主机安全应用安全应用安全数据安全数据安全管理安全管理安全102003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tys

10、ecuri tyCheck Point PURE Security112003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Point PURE Security122003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty

11、Check Point PURE Security132003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Point PURE Security142003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Po

12、int PURE Security152003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Point PURE Security162003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Point PURE

13、 Security172003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyPower-1 高性能安全网关高性能安全网关吞吐量：FW 14 Gbps/VPN3.7GCheck Point Power-1高端防火墙Cluster XLCore XLQoSIPS/6.1G应用安全182003-2007 Check Point Software Technologies Ltd.All rights reserved.

14、Proprietary and confidential.puresecuri tysecuri tyUTM-1统一威胁管理网关统一威胁管理网关入侵防御入侵防御subscription防间谍软件防间谍软件subscriptionWeb内容过滤内容过滤subscriptionVPN(site-to-site,remote access)standard网关防病毒网关防病毒subscription 市场最好的防火墙产品市场最好的防火墙产品HTTPFTPInstant MsgE-mailP2PVoIPSQLstandard*End of Q1 2007邮件安全防护邮件安全防护subscription

15、SSL VPNsubscription192003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyEndpoint 终端安全防护终端安全防护抑制终端风险的传播范围唯一一款集六大终端安全基本要素与一体的统一解决方案唯一一款包括数据安全和VPN访问的解决方案数据安全数据安全访问控制访问控制VPN统一管理统一管理最终用户透明最终用户透明防火墙防火墙防病毒防病毒防间谍软件防间谍软件唯一！唯一！唯一！唯一！202003-20

16、07 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty终端安全的六个基本要素终端安全的六个基本要素需求需求基本功能模块基本功能模块防病毒，防间谍软件，防火墙，防病毒，防间谍软件，防火墙，程序控制程序控制保护数据保护数据强制策略遵从强制策略遵从安全的远程访问安全的远程访问简化的管理简化的管理无缝，透明的用户体验无缝，透明的用户体验抑制恶意软件抑制恶意软件整盘加密整盘加密,，移动介质加密，端口，移动介质加密，端口/设备控制设备控制

17、VPN客户端，灵活的连接和认证选客户端，灵活的连接和认证选择择统一管理系统，单一的控制台统一管理系统，单一的控制台单一客户端，精简的安装包单一客户端，精简的安装包,对对最终用户透明不可见最终用户透明不可见NAC,策略检查，自动修复等策略检查，自动修复等212003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tySmartCenter/P-1安全控管中心安全控管中心LDAP-enabled用户管理用户管理VPN-1/

18、FireWall-1策略策略FloodGate-1QoS 策略策略VPN-1 SecureClient 策略策略第三方产品集成第三方产品集成NAT 策略策略SmartMapSmartStatus222003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty全球安全领域的领导者全球安全领域的领导者2006 Check Point Software Technologies Ltd.Proprietary&Confide

19、ntial 财务实力财务实力 20072007年的营业额达到年的营业额达到7.317.31亿美元，增长亿美元，增长27%27%总市值为总市值为5454亿美元亿美元 (NASDAQ)(NASDAQ)现金储备多达现金储备多达1212亿美元亿美元市场地位市场地位 全球防火墙全球防火墙/VPN/VPN 领先厂商领先厂商,31%,31%市场份额市场份额 *全部财富全部财富100100强企业都采用强企业都采用Check PointCheck Point产品产品 财富财富500500强企业中，有强企业中，有98%98%是我们的客户是我们的客户*Frost&Sullivan业务分布业务分布 1,8001,80

20、0多名员工多名员工 (约一半为约一半为R&DR&D员工员工)在在2828个国家及地区设有个国家及地区设有6969个办事处个办事处 在在8888个国家及地区拥有个国家及地区拥有2,2002,200个伙伴个伙伴 总部分别设于以色列及美国加州总部分别设于以色列及美国加州232003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyFirewall/VPN 市场份额市场份额Check Point2007 Market Sha

21、reMarket size approximately$2.5B/yearSource data:IDC,public company data242003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyStatefulInspection I专利5,606,668TrueVectorEngine I专利5,987,611TrueVectorEngine II专利6,850,943CooperativeEnforc

22、ement专利6,873,988SecureXL专利6,496,935StatefulInspection II专利5,835,726 每年投入每年投入7千多万美元用于安全研发千多万美元用于安全研发 拥有拥有1000多名安全专家多名安全专家 另有另有18项专利正在申请中。项专利正在申请中。252003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty最佳企业防火墙2006最佳VPN IPSec 远程访问解决方案200

23、6最佳 SOHO 安全解决方案2006端点安全产品领导奖2007领导者 企业网络防火墙获得Magic Quadrant 称号2007领导者 个人防火墙获得Magic Quadrant 称号2006端点安全全球市场领导奖2005全球防火墙/VPN 市场领导者2005领导者-移动数据保护产品获得Magic Quadrant称号2007MIDMARKET年度最佳产品2005262003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysec

24、uri tyCheck Point 开放平台选择开放平台选择Check Point 硬件平台硬件平台Single vendor for hardware,softwareIncludes Integrated Appliance Solutions custom integration of software and IBM hardwareLeverage existing hardware vendor relationshipCertified by Check Point for interoperability Standardize on a server vendorLevera

25、ge existing infrastructure investment Secured by Check Point AppliancesCheck Point Software on Open Servers272003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri tyCheck Point期待与您共享安全的未来期待与您共享安全的未来安全领域安全领域最值得信赖的名最值得信赖的名字字行业、技术领导者行业、技术领导

26、者统一全面的安全架构统一全面的安全架构100%100%专注于安全专注于安全深入的业务知识和技能深入的业务知识和技能长期的安全创新和服务的承诺长期的安全创新和服务的承诺PURE PURE 安全战略安全战略 保障电力企业信息系保障电力企业信息系统拥有安全的未来统拥有安全的未来282003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.puresecuri tysecuri ty2003-2007 Check Point Software Technologies

27、 Ltd.All rights reserved.Proprietary and confidential.pur esecuri tysecuri ty谢谢！谢谢！2003-2007 Check Point Software Technologies Ltd.All rights reserved.Proprietary and confidential.pur esecuri tysecuri tyqZnVkSgPdMaI7F4C0z)v&s!pXmUjRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G4D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s#pXmUiRf

28、OcK9H5E2B+x(u%rZoWkThQeMbJ8G4D1z-w*t!qYnVjSgOdLaI6F3C0y)v%s#pXlUiRfNcK9H5E2A+x(u$rZoWkThPeMbJ7G4D1z-w&t!qYmVjSgOdL9I6F3B0y)v%s#oXlUiQfNcK8H5D2A+x*u$rZnWkShPeMaJ7G4C1z)w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlTiQfNbK8H5D2A-x*u$qZnWkShPdMaJ7F4C1z)w&s!pYmUjRgOcL9H6E3B+y(v%r#oWlTiQeNbK8G5D2A-x*t$qZnVkShPdMaI7F4C0z

29、)w&s!pXmUjRfOcL9H6E2B+y(u%r#oWlThQeNbJ8G5D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s!pXmUiRfOcK9H6E2B+x(u%rZoWlThQeMbJ8G4D1A-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXlUiRfNcK9H5E2A+x(u$rZoWkThPeMbJ7G4D1z-w*t!qYmVjSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlUiQfNbK8H5D2A+x*u$qZnWkS

30、hPeMaJ7F4C1z)w&t!pYmUjRgOcL9I6E3B+y(v%r#oXlTiQeNbK8G5D2A-x*t$qZnVkShPdMaI7F4C0z%s#oXlUiQfNbK8H5D2A+x*u$qZnWkShPeMaJ7F4C1z)w&t!pYmUjRgOcL9I6E3B+y(v%r#oXlTiQeNbK8G5D2A-x*u$qZnVkShPdMaJ7F4C0z)w&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$qYnVkSgPdMaI7F3C0z)v&s!pXmUjRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G4D1A-

31、w*t$qYnVjSgPdLaI7F3C0y)v&s#pXmUiRfNcK9H5E2B+x(u$rZoWkThQeMbJ7G4D1z-w*t!qYnVjSgOdLaI6F3C0y)v%s#pXlUiRfNcK8H5E2A+x(u$rZnWkThPeMbJ7G4C1z-w&t!qYmVjRgOdL9I6F3B0y(v%s#oXlUiQfNcK8H5D2A+x*u$rZnWkShPeMaJ7G4C1z)w&t!pYmVjRgOcL9I6E3B0y(v%r#oXlTiQfNbK8G5D2A-x*u$qZnVkShPdMaJ7F4C0z)w&s!pYmUjRgOcL9H6E3B+y(v%r#oWlTi

32、QeNbK8G5D1A-x*t$qZnVkSgPdMaI7F4C0z)v&s!pXmUjRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G5D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s#pXmUiRfOcK9H5E2B+x(u%rZoWkThQeMbJ8G4D1z-w*t!qYnVjSgOdLaIB+y(u%r#oWlThQeNbJ8G5D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s#pXmUiRfOcK9H5E2B+x(u%rZoWkThQeMbJ8G4D1z-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXlUiRfNcK9H5E2A+x(

33、u$rZoWkThPeMbJ7G4D1z-w&t!qYmVjSgOdL9I6F3B0y)v%s#oXlUiQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlTiQfNbK8H5D2A-x*u$qZnWkShPdMaJ7F4C1z)w&s!pYmUjRgOcL9I6E3B+y(v%r#oXlTiQeNbK8G5D2A-x*t$qZnVkShPdMaI7F4C0z)w&s!pXmUjRfOcL9H6E2B+y(u%r#oWlThQeNbJ8G5D1A-x*t$qYnVkSgPdMaI7F3C0z)v&s!pXmUiRf

34、OcK9H6E2B+x(u%rZoWlThQeMbJ8G4D1A-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXmUiRfNcK9H5E2B+x(u$rZoWkThQeMbJ7G4D1z-w*t!qYmVjSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!qYmVjRgOdL9I6F3B0y(v%s#oXlUiQfNbK8H5D2A+x*u$qZnSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x(u$rZnWkThPeMbJ7G4C1z-w&t!qYmVjRgOdL9I6F3B0y(v

35、%s#oXlUiQfNbK8H5D2A+x*u$qZnWkShPeMaJ7F4C1z)w&t!pYmUjRgOcL9I6E3B0y(v%r#oXlTiQfNbK8G5D2A-x*u$qZnVkShPdMaJ7F4C0z)w&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$qZnVkSgPdMaI7F4C0z)v&s!pXmUjRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G4D1A-w*t$qYnVjSgPdLaI7F3C0y)v&s#pXmUiRfOcK9H5E2B+x(u%rZoWkThQeMbJ8G4D1z-w*t!qYnVjSgO

36、dLaI6F3C0y)v%s#pXlUiRfNcK8H5E2A+x(u$rZnWkThPeMbJ7G4C1z-w&t!qYmVjSgOdL9I6F3B0y)v%s#oXlUiQfNcK8H5D2A+x*u$rZnWkShPeMaJ7G4C1z)w&t!pYmVjRgOcL9I6E3B0y(v%r#oXlTiQfNbK8H5D2A-x*u$qZnWkShPdMaJ7F4C1z)w&s!pYmUjRgOcL9H6E3B+y(v%rkShPeMaJ7G4C1z)w&t!pYmVjRgOcL9I6E3B0y(v%s#oXlTiQfNbK8H5D2A-x*u$qZnWkShPdMaJ7F4C1z)w&s

37、!pYmUjRgOcL9H6E3B+y(v%r#oWlTiQeNbK8G5D1A-x*t$qZnVkShPdMaI7F4C0z)w&s!pXmUjRfOcL9H6E2B+y(u%r#oWlThQeNbJ8G5D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s#pXmUiRfOcK9H6E2B+x(u%rZoWlThQeMbJ8G4D1A-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXlUiRfNcK9H5E2A+x(u$rZoWkThPeMbJ7G4D1z-w&t!qYmVjSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x*u$rZnWkThPeM

38、aJ7G4C1z-w&t!pYmVjRgOdH5E2A+x(u$rZoWkThQeMbJ7G4D1z-w*t!qYmVjSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlUiQfNbK8H5D2A+x*u$qZnWkShPeMaJ7F4C1z)w&t!pYmUjRgOcL9I6E3B+y(v%r#oXlTiQeNbK8G5D2A-x*t$qZnVkShPdMaJ7F4C0z)w&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$

39、qYnVkSgPdMaI7F3C0z)v&s!pXQeNbK8G5D2A-x*u$qZnVkShPdMaJ7F4C0z)w&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$qYnVkSgPdMaI7F3C0z)v&s!pXmUjRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G4D1A-w*t$qYnVjSgPdLaI7F3C0y)v&s#pXmUiRfNcK9H5E2B+x(u$rZoWkThQeMbJ8G4D1z-w*t!qYnVjSgOdLaI6F3C0y)v%s#pXlUiRfNcK8H5E2A+x(u$rZnWkThPeMbJ7G

40、4C1z-w&t!qYmVjRgOdL9I6F3B0y(v%s#oXlUiQfNcK8H5D2A+x*u$rZnWkShPeMaJ7G4C1z)w&t!pYmVjRgO8H5E2A+x(u$rZnWkThPeMbJ7G4C1z-w&t!qYmVjSgOdL9I6F3B0y)v%s#oXlUiQfNcK8H5D2A+x*u$rZnWkShPeMaJ7G4C1z)w&t!pYmVjRgOcL9I6E3B0y(v%r#oXlTiQfNbK8G5D2A-x*u$qZnWkShPdMaJ7F4C1z)w&s!pYmUjRgOcL9H6E3B+y(v%r#oWlTiQeNbK8G5D1A-x*t$qZnV

41、kSgPdMaI7F4C0z)v&s!pXmUjRfOcL9H6E2B+y(u%r#oWlThQeNbJ8G5D1A-w*t$qYnVkSgPdLaI7F3C0z)v&s#pXmUiRfOcK9H5E2B+x(u%rZoWkThQeMbJ8G4D1A-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXlUiRfNcK9H5E2A+x(u$rZoWkThPeMbJ7G4D1z-w&t!qYmVjSgOdL9I6B+x(u%rZoWlThQeMbJ8G4D1A-w*t!qYnVjSgPdLaI6F3C0y)v&s#pXlUiRfNcK9H5E2A+x(u$rZoWkThPeMbJ7G4D1

42、z-w&t!qYmVjSgOdLaI6F3B0y)v%s#pXlUiQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlTiQfNbK8H5D2A-x*u$qZnWkShPeMaJ7F4C1z)w&t!piQfNcK8H5E2A+x*u$rZnWkThPeMaJ7G4C1z-w&t!pYmVjRgOdL9I6E3B0y(v%s#oXlUiQfNbK8H5D2A+x*u$qZnWkShPeMaJ7F4C1z)w&t!pYmUjRgOcL9I6E3B+y(v%r#oXlTiQeNbK8G5D2A-x*t$qZnVkShP

43、dMaI7F4C0z)w&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$qYnVkSgPdMaI7F3C0z)v&s!pXmUiRfOcK9H6E2B+x(u%rZoWlThQeNbJ8G4D1A&s!pYmUjRfOcL9H6E3B+y(u%r#oWlTiQeNbJ8G5D1A-x*t$qYnVkSgPdMaI7F3C0z)v&s!pXmUiRfOcK9H6E2B+y(u%rZoWlThQeNbJ8G4D1A-w*t$qYnVjSgPdLaI7F3C0y)v&s#pXmUiRfNcK9H5E2B+x(u$rZoWkThQeMbJ7G4D1z-w*t!qYnVjSgOdLaI6F3C0y)v%s#pXlUiRfNcK8H5E2A+x(u$rZnWkThPeMbJ7G4C1z-w&t!qYmVjRgOdL9I6F3B0y(v%s#oXlUiQfNcK8