1. Enterprise network security needs
Enterprise network security needs are roughly divided into three parts. However, when designing corresponding network security technical solutions, the network is usually divided according to the enterprise structure and plans are formulated from five aspects.
The current enterprise network topology of a gaming company is shown in the figure on the right. Considering that the business run by the company may face many security threats, network implementation engineers need to design and transform it for security aspects:
- Security requirement 1: Redundant devices and links need to be deployed on key nodes of enterprise A's network, and links with good quality carry more traffic;
- Security requirement 2: Enterprise B is a subsidiary of enterprise A, and there is business communication between enterprise A and enterprise B, and communication security needs to be guaranteed;
- Security requirement 3: Identity authentication for employees on business trips to ensure the security of external access to the intranet;
- Security requirement 4: In order to ensure the work efficiency of employees, both companies need to limit the traffic and bandwidth usage of employees during work, while ensuring the bandwidth of services such as email and file transfer;
- Security requirement 5: Enterprise B specializes in product research and development, and also has an external business department. It needs to strictly isolate the R&D department to ensure the data security of the core business;
- Security requirement 6: As an enterprise in an emerging industry, it may face threats such as DDoS attacks, hacker intrusions, and virus attacks. It needs to make security deployments in advance and consider subsequent operation and maintenance work, such as the feasibility and convenience of emergency response;
- Security requirement 7: Internal employee access