Stonesoft stonegate 5.2, Руководство по установке

Страница: 105 / 109

105
Example Headquarters DMZ Network
Example Headquarters DMZ Network
Illustration C.4 Example Headquarters DMZ Network
DMZ Sensor
In the example scenario, the DMZ Sensor in the Headquarters DMZ network is a single inline
Sensor.
HQ Log Server
This server is located in the Headquarters’ Management Network with the IP
address 192.168.10.201. This Log Server receives alerts and log data from the
HQ Analyzer.
Table C.3 SMC Servers in the Example Scenario (Continued)
SMC Server Description
Table C.4 Single Sensor in the Example Scenario
Network
Interface
Description
Inline Interfaces
The DMZ Sensor is deployed in the path of traffic between the firewall and the
DMZ network switch. All the traffic flows through the sensor’s inline interface pair.
Normal Interfaces
The normal interface is connected to the DMZ network using the IP address
192.168.1.41. This normal interface is used for control connections from the
Management Server, sending event information to the HQ Analyzer, and for TCP
connection termination.
DMZ Servers
HQ Firewall
192.168.1.1
192.168.1.41