3Com 3CRFW102, Руководство пользователя

Страница: 15 / 38

2
I
NSTALLING THE
F
IREWALL
C
LIENT
The 3Com Firewall PC Card with 10/100 LAN provides secure, trusted connections
inside and outside your network. The 3Com Firewall PC Card with 10/100 LAN is
part of a unique solution that provides distributed hardware level protection. This
solution consists of the 3Com Embedded Firewall Policy Server and Management
Console, and a Firewall Card. Together they complement and enhance enterprise
perimeter firewalls, antivirus programs and host-based applications. The 3Com
Firewall PC Card with 10/100 LAN is hardware-based and is installed at individual
computers. The firewall security rules are executed independent of the host
operating system, protecting each individual computer. Performing these security
processes in the hardware makes this solution extremely tamper resistant.
To protect today’s business network, your security system should incorporate the
following:
• Comprehensive protection that extends to the end system regardless of how
the LAN topology changes.
• Tamper-resistant security that operates independent of the host OS and other
security programs.
• Manageable enforcement that allows you to define security through user
policies.
Software-based security, such as personal firewalls, interact with and protect a
PC’s operating system. This dependency on the host makes them inherently
susceptible to malicious code and “security holes” found in many well-known
operating systems. Once the OS has been compromised, it is easy to disable the
host-based security. This compromised host can then be used as a covert
launching pad for attacks on other systems across your network.
In contrast, with the 3Com Embedded Firewall Solution, enforcement is handled
by the Firewall Client Device, keeping it separate from the host and making it very
tamper resistant. Even if a hacker manages to invade a secured host, the Firewall
Client Device continues to block attempts to further infiltrate your network.
For more information on the 3Com Embedded Firewall solution, go to
www.3com.com/security.
Architecture of
Embedded Firewalls
The 3Com Embedded Firewall is a centrally managed solution. Being centrally
managed prohibits end users or malicious code from modifying security policies.
There are two components required to achieve this level of security and capability:
a Policy Server and a Firewall Client Device located in the computer being
protected.