Bảo mật hệ thống mạng part 23

Mô tả Bao gồm các chương trình như PC Anywhere và VNC. Nếu các giao thức này được yêu cầu để cho phép người dùng từ xa để kiểm soát hệ thống nội bộ, họ nên được sử dụng trên một VPN. Có thể được sử dụng cho quản lý mạng của mạng nội bộ tổ chức của bạn nhưng nó không nên được sử dụng từ một trang web từ xa cho các hệ thống nội bộ của bạn. | 138 Network Security A Beginner s Guide Service Remote Control Protocols SNMP Simple Network Management Protocol port 169 Description Include programs like PC Anywhere and VNC. If these protocols are required to allow remote users to control internal systems they should be used over a VPN. May be used for network management of your organization s internal network but it should not be used from a remote site to your internal systems. COMMUNICATIONS ARCHITECTURE When developing a communications architecture for an organization s Internet connection the primary issues are throughput requirements and availability. Throughput is something that must be discussed with the organization s Internet Service Provider ISP . The ISP should be able to recommend appropriate communication lines for the services to be offered. The availability requirements of the connection should be set by the organization. For example if the Internet connection will only be used by employees for non-business critical functions the availability requirements are low and an outage is unlikely to adversely affect the organization. If the organization is planning to establish an e-commerce site and have the majority of its business moving through the Internet availability is a key to the success of the organization. In this case the design of the Internet connection should include fail-over and recovery capabilities. Single-Line Access Single-line access to the Internet is the most common Internet architecture. The ISP supplies a single communications line of appropriate bandwidth to the organization as shown in Figure 9-1. Generally the ISP will supply the router and the Channel Service Unit CSU for the link. The local loop is the actual wire or fiber that connects the organization s facility with the phone company s central office CO . The ISP will have a point of presence POP somewhere nearby. The link to the ISP will actually terminate at the nearest POP. Even though the POP is not at the closest .