NetOp Desktop Firewall
——世界顶级的以驱动器为中心的PC防火墙,可以集中控制企业电脑,增强网络安全。
专为满足企业需求而设计,含有大量特性,帮助IT专业人士充分发挥防火墙技术优势,即可以独立使用,也可以作为分布式防火墙的集中管理系统。
多数企业网络中,IT部门在允许手提电脑连接到网络之前无法检测该设备的完整性。对于允许雇员或访问者使用无线接入的网络,将会危及防火墙的安全。如果手提电脑是不可信设备,那么该设备将有可能已被蠕虫或特洛尹所感染,因此有可能传染给其他网络上的其他设备。因此,为企业电脑安装本地防火墙,是对已有企业安全防火墙的补充。
NetOp Desktop Firewall是个人防火墙,可以安装在手提电脑或本地桌面电脑上。该防火墙是一个功能丰富的安全管理软件,大大增强了计算机防火墙的安全性。
产品优势
该产品包括两个模块:客户端模块,是个人防火墙,安装在网络内每一台手提电脑上;规则服务器(可选),管理企业和个人防火墙的安全等级。
NetOp Desktop Firewall Client
程序控件:高度强大的安全管理工具,允许您管理系统运行的所有程序。使用该控件,您可以为每个程序定义规则。通过该防火墙安全特性,您甚至可以完全禁止某程序运行,只允许在某个可信赖网络内进行通信,或完全禁止通信。
信息包过滤:该防火墙拥有动态信息包过滤结构体系,工作在网络层上,能够控制IP地址、端口和协议。动态信息包过滤可以监控连接状态,并将该信息编辑为一个状态表格。这意味着过滤决策是基于两个方面来制定的,包括静态信息包过滤规则和先前通过PC防火墙的信息包内容。作为一个附加的依靠端口扫描的Internet安全策略,NetOp Desktop Firewall软件可以关闭所有端口,直至某个端口被请求为止。
NetOp规则服务器(NetOp Policy Server)
NetOp Desktop Firewall控件:NetOp Policy Server为登录的NetOp Desktop Firewall分配安全规则,以实时说明程序、端口、协议、可信网络、禁止的网络防火墙规则、Profile、Profile规则等的设置,并记录来自独立的NetOp Desktop Firewall的信息。
NetOp Desktop Firewall管理:NetOp Policy Server完全支持Microsoft活动目录,并可以对活动目录安全组中的计算机成员分配安全规则。这样,就可以利用管理员通用工具来实现结构体系安全管理。关于容错和负载分配,可以使用一个主服务器和多个复制服务器来执行NetOp Policy Server,以确保系统最大可用性。
系统需求:
NetOp Desktop Firewall Client
计算机:Intel Pentium处理器 233MHz或更高,或完全兼容设备
内存:32MB RAM
显示:支持Windows的100% VGA兼容显卡
硬盘:10MB
平台:Windows XP Professional,Windows XP Home Edition,Windows 2000 Professional
通信:
网卡或modem
TCP/IP:Winsock 2或兼容
Internet连接(以完成产品注册)
NetOp Policy Server
计算机:Intel Pentium处理器 233MHz或更高,或完全兼容设备
内存:32MB RAM(推荐64MB )
显示:支持Windows的100% VGA兼容显卡
硬盘:10MB
平台:Windows Server 2003 Standard, Web Edition, Enterprise Edition
Windows XP Professional
Windows 2000 Server, Advanced Server
Windows 2000 Professional
通信:
网卡
TCP/IP:Winsock 2或兼容
Internet连接(以完成产品注册)
NetOp Desktop Firewall
NetOp Desktop Firewall is the World’s first driver-centric PC firewall with central control for corporate laptops, enhancing network security.
The NetOp Desktop Firewall is designed specifically to meet the needs of corporate business. It is packed with numerous features to help IT professionals get the most out of firewall technology with its strong and unique features as a stand-alone or as a centrally managed system for distributed firewalls.
In most enterprise networks the IT Department has no way to check the integrity of their laptop devices before allowing them onto the network. The use of wireless access points for employees and visitors, allows computers inside the corporate firewall and thereby compromising firewall security. If the laptop is not a trusted device, then it is a rogue device that could be infected with a worm or Trojan, which could spread to other devices on the network. Therefore personal firewalls installed locally on enterprise computers, functions as an aid to the existing corporate security firewall.
The NetOp Desktop Firewall is a personal firewall that is installed on laptops and local desktops. The Desktop Firewall is an extremely versatile piece of security management software and offers a range of powerful functions, greatly enhancing computer firewall security.
Key benefits of NetOp Desktop Firewall
The NetOp Desktop Firewall System consists of two modules: the Client, which is a personal firewall installed on each laptop in the network, and the optional Policy Server, which administers corporate and individual firewall security levels.
NetOp Desktop Firewall Client
Process control: The NetOp Desktop Firewall process control is an extremely powerful security management tool that lets you manage all the processes running on your system. Using process control, you define rules that apply for any given application. The firewall security features gives you the ability to prevent an application from running at all, allow communication, only allow communication with a trusted network, or prevent any communication at all.
Packet filtering: The NetOp Desktop Firewall dynamic packet-filtering architecture works at the network layer, controlling IP addresses, ports and protocols. Dynamic packet filtering monitors the states of the connections and compiles this information in a state table. This means filtering decisions are based on static packet filtering rules as well as on context that has been established by prior packets that have passed through the PC firewall. As an added internet security measure against port scanning, the NetOp Desktop Firewall software closes off ports until connection to the specific port is requested.
NetOp Policy Server
NetOp Desktop Firewall control: The NetOp Policy Server assigns a security policy to a logged-on NetOp Desktop Firewall specifying configuration for Programs, Ports, Protocols, Trusted Nets and Banned Nets Firewall Rules, Profiles and Profile Rules in real-time and also records information received from the individual NetOp Desktop Firewall.
NetOp Desktop Firewall manageability: The NetOp Policy Server fully supports Microsoft Active Directory and can apply security policies to computers that are members of Active Directory security groups. This allows management of the infrastructure security to be performed from the administrator’s usual tool; Active Directory users and computers. For fault tolerance and load distribution, the NetOp Policy Server has been implemented with a Master Server and multiple Replica Servers to ensure maximum system availability.
Technical requirements
NetOp Desktop Firewall Client
Computer
Intel Pentium processor 233 MHz or higher or 100% compatible
Memory
Operating System requirement plus additional 32 MB RAM
Video
Any 100% VGA compatible graphics adapter supported by Windows
Disk sp