Backgroud

The new problem of information security arises along with the rapid development of the Internet , which has threatened the security, stability , economy and quality of power system operation , and has affected the progress in “Digital Power System”. The main content of current informatization is researching information security problems on power system ; developing relevant application system ; setting information security strategy to deal with outside attacks and system recovery. Information security of power system has already been an important issue in operation and management of power enterprises.

Solution

In connection with the characteristics of power network , Neusoft has developed a series of network security products with independent property rights ：

• Comparing with NetEye firewall 3.0 , NetEye firewall 3.1 , latest version of NetEye firewall series , is greatly improved on performance reliability and management, and has reached the carrier-grade level . In order to cater for different customer needs , our firewall products cover a variety from low grade to high grade with high cost performance ratio. NetEye firewall 3.1 has integrated VPN function ensuring safety data transmission via network efficiently.
• NetEye IDS 2.0 , latest product on intrusion detection with independent property rights , could monitor network constantly using unique data packets capturing technology ,ensuring network defense-in-depth. The second safety door is sophisticated analysis technique based on netflow which could determine inside or outside intrusions , alarm system to guard against.

Features of Firewall

The main application of NetEye firewall in LANS is shown in figure 1.

We set up firewalls at key points on the network for the security of internal sources of network

• By setting filtering policy , we could control the opening degree of internal resources of network conveniently ; especially for State Power Corporation , local government and Internet , it can guard against hacker efficiently by only opening certain IP ports；
• According to filter rules, client auth, IP and MAC address , the system has established different authorities for different internal users to access inside or outside resources. In this way it can prevent internal users from transferring information to outside efficiently；
• With hot-standby solution supported by NetEye at key points where shutdown is not allowed, the system reliability is guaranteed；
• Variety work patterns are supported: In Intranet NAT is not necessary and what we need is to divide network into two different fields ,bridging can deal with that well. But for exit to Internet, in order to support inside or outside network, the function of routing and supporting DMZ is must as well as NAT. Actually,two modes live together in the application of firewall in this network. Comparing with other brands of firewall which only support “routing” mode, NetEye ,which could support variety work patterns, works well and has no such trouble in system efficiency and implementation.
• NetEye could truly support data packets of the 2nd,3rd,4th layers of network ,especially for TRUNK.
• User-friendly interface : users can configure rules, manage the system and statistic as soon as possible after simply training.Concentrated training and on site training of installation and commissioning has been offered after the province power chose NetEye.