Download User Manual - GENESYS SOFTWARE
Transcript
Introduction to the Technology 2. Introduction to the Technology Before exploring the Astaro Security Linux Security Solution in detail, it may be helpful to take an overview of network and security technology in general. In particular, it is important to understand the serious risks that unprotected systems face as well as where and how to deploy this security system to mitigate these risks. Networks The Internet is already well established as a vital communications medium and a key marketplace for both traditional and new services. Since its inception, its size has multiplied, with domain name growth between 1995 and 2002 reaching almost exponential proportions. Computers on this worldwide network communicate using the Internet Protocol (IP), as well as various higher-level protocols such as TCP, UDP, and ICMP. IP addresses uniquely identify each of the computers reachable on the network. The Internet itself is a collection of smaller networks of various kinds. When two or more networks are connected, a number of issues arise which are dealt with by devices such as routers, bridges, and gateways. A firewall is another such device, designed with security in mind. As a rule, three kinds of network meet at the firewall: • An external or Wide Area Network (WAN) • An internal or Local Area Network (LAN) • A De-Militarized Zone (DMZ) An example configuration is shown on the next page. 10