网络入侵检测系统 (NIDS)

简介

 

 

网络入侵检测系统 (NIDS)

FortiGate 网络入侵侦测系统 (NIDS) 是一种实时网络入侵探测器,它能对外界各 种可疑的网络活动进行识别及采取行动。NIDS 通过攻击特征来识别超过 1000 种的攻 击。您可以启用或禁止 NIDS 对某一类型的攻击进行检测。还可以自行编写攻击特征从 而生成用户自定义的攻击类型检测。

NIDS 可以防止探测、大部分常见的拒绝服务攻击和基于数据包的攻击。您可以启 用或禁用预防攻击的特征,和定制攻击检测的灵敏度和其他参数。

为通知系统管理员有攻击,NIDS 将此攻击及一切可疑流通记录到攻击日志中,并 根据设置发送报警 EMAIL。

Fortinet 可定期更新攻击数据库。您可下载并手动安装攻击数据库。也可设置 FortiGate 自动查询和下载更新的 IDS 数据库。

虚拟专用网络 (VPN)

使用 FortiGate 虚拟专用网 (VPN), 可为您在办公网络和分散的办公室网络、从 远程安全通讯系统登陆到公司网的用户或旅行者 之间提供一个安全的网络连接。服务 供应商还可以使用 FortiGate 设备为他们的客户提供 VPN 服务。

FortiGate VPN 包括以下特性 :

·执行行业标准及 ICSA 认证的 IPSec VPN 包括 :

·在通道模式下的 IPSec, ESP 安全,

·DES 和 3DES (triple-DES) 加密的硬件加速,

·HMAC MD5 和 HMAC SHA1 认证和数据整体化,

·基于预置密钥隧道的自动密钥交换,

·使用本地验证或 CA 验证的 IPSec VPN ,

·手工密钥通道,

·Diffie-Hellman 组 1、2、和 5,

·积极模式和主模式,

·重放检测,

·向前保密,

·XAuth 认证 ,

·失效对等检测,

·易于连接的 PPTP,支持为大多数常用的操作系统所支持的 VPN 标准。

·易于连接的 L2TP,支持为大多数常用的操作系统所支持的更加安全的 VPN 标准。 ·基于 IPSec VPN 流通控制的防火墙策略。

·IPSec NAT 跨越技术使得位于 NAT 后边的远程 IPSec VPN 网关或客户端可以连接到 IPSec VPN 通道。

·用 VPN 集中器的 VPN 星形连接,可以使 VPN 流通从一个通道经 FortiGate 连接到另一 个通道。

·IPSec 冗余可以创建到远程网络的自动密钥交换 IPSec VPN 连接。

4

美国飞塔有限公司

Page 16
Image 16
Fortinet 500 manual 网络入侵检测系统 (Nids), 虚拟专用网络 (Vpn)

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.