Bastion machine - Kylin open source fortress machine banking industry design scheme

1 Document Description
1.1 Program Overview
With the continuous expansion of the bank's scope and business outlets, various characteristic business systems and basic network equipment have been put into operation, effectively ensuring the stability, security and flexibility of the branch's business. But at the same time, with the wider application of business systems and more and more data, the systems and equipment required for daily maintenance are also increasing, and the pressure on the security and stable operation of the network and system faced by the technology operation and maintenance department is also increasing. increased accordingly.
The main problem existing in the current operation and maintenance management is that the daily management and maintenance of technicians and maintenance personnel is to directly log in to the business system and equipment to operate, and there is no system for unified management, unified audit and unified analysis of operation and maintenance operations, resulting in There is no way to monitor and analyze the operation and maintenance operations, which will lead to a series of major security risks such as internal data leakage, illegal operations, malicious operations, and password leakage.
With the regulatory requirements for the audit records of daily operation and maintenance work and the demand for standardized management of the bank's own operation and maintenance, the audit requirements for realizing the operation and maintenance of the branch's backbone equipment are imminent.
1.2 Current Situation of Operation and Maintenance in the Banking Industry
Generally , AAA equipment is deployed in the banking industry, which realizes the functions of unified management of network accounts, authority control, and command recording. However, due to the lack of a professional operation and maintenance management system, there are still certain blind spots in the monitoring of operation and maintenance operations, mainly as follows:
The operation and maintenance operation methods are diverse and scattered, and lack effective centralized management;
The operation and maintenance operation lacks technical means to restrain ;
The auditing method of operation and maintenance operation behavior is not intuitive;
The situation of shared accounts is common, which brings difficulties to the positioning of visitors.

Due to too much content, it is impossible to submit all of them. For more content, please visit the "Open Source Fortress Blog"
my.oschina.net/baoleiji/blog/666336?fromerr=VOfrMr1q

or add group
452104868
for discussion