Đang chuẩn bị liên kết để tải về tài liệu:
Bảo mật hệ thống mạng part 22

Internet có tiềm năng rất lớn về mặt kinh doanh mới, giảm chi phí bán hàng, và dịch vụ khách hàng được cải thiện. Nó cũng có tiềm năng rất lớn để làm tăng nguy cơ và các hệ thống thông tin của tổ chức. Với kiến trúc bảo mật thích hợp, Internet thực sự có thể trở thành một tạo khả năng hơn là một nguy cơ bảo mật. | CHAPTER 9 Internet Architecture Copyright 2001 The McGraw-Hill Companies Inc. Click Here for Terms of Use. 133 134 Network Security A Beginner s Guide The Internet has great potential in terms of new businesses reduced costs of selling and improved customer service. It also has great potential to increase the risk to an organization s information and systems. With proper security architecture the Internet can truly become an enabler rather than a security risk. SERVICES TO OFFER The first question that must be answered with regard to Internet architecture is What services will the organization provide via the Internet The services that will be offered and who will be accessing them will greatly impact the overall architecture and even the choice of where services may be hosted. Mail If mail service is available it is generally offered to internal employees to send and receive messages. This service requires that at least one server be established to receive inbound mail. If higher availability is required at least two mail servers are required. Outbound mail can move through this same server or the organization can allow desktop systems to send mail directly to the destination system. NOTE Allowing desktop systems to send mail directly to the destination systems is not a recommended solution. However if your mail systems are hosted on the Internet each desktop will send and receive mail from your hosted system. In this case it is wise to limit outbound mail connections from desktops to just the hosted server. An organization may also choose to establish public mail relays for such things as e-mail discussion groups. Such systems are normally referred to as list servers. These systems will allow external people to send mail to the system and the system resends that message to the subscribers of the list. List servers can reside on the same servers as the organization s primary mail systems but the larger traffic requirements should be taken into account in the .