Nortel 5100 Series Release 2.3.3, Руководство пользователя и справочник команд, Страница: 26 / 430

Nortel Switched Firewall 2.3.3 User’s Guide and Command Reference
26
„
Introduction
213455-L, October 2005
The networks
„ Trusted networks
These represent internal network resources that must be protected from unauthorized
access. Trusted networks usually provide internal services such as a company’s intranet,
as well as valued applications made available to external clients, such as public e-
commerce web sites.
„ Semi-trusted networks
To increase security, services intended primarily for external clients are often placed on a
separate network so that a hostile intrusion would not affect the company’s internal
networks. A network isolated in this way is also known as a De-Militarized Zone (DMZ).
For more information, see your Check Point documentation.
„ Untrusted networks
These are the external networks that are presumed to be potentially hostile, such as the
Internet.
The Firewall
„ Nortel Switched Firewall
The Nortel Switched Firewall is placed in the path between your various trusted, semi-
trusted, and untrusted networks. It examines all traffic moving between the connected
networks and either allows or blocks that traffic, depending on the security policies
defined by the administrator.
The management interfaces
„ NSF local console
A local console is used for entering basic network information during initial configuration.
Once the system is configured, the local console can be used to access the text-based
Command Line Interface (CLI) for collecting system information and performing
additional configuration. The NSF console is not used to manage or install firewall
policies.
„ NSF remote console/Check Point SMART Clients
†
For a list of trusted users, the administrator can separately allow or deny Telnet or
Secure Shell (SSH) access to the NSF CLI, and HTTP or SSL access to the NSF
Browser-Based Interface. Remote access features can be used for collecting system
information and performing additional configuration, but not to manage or install
firewall policies.