Stonesoft stonegate 5.2, Руководство по установке

Страница: 106 / 109

106
Appendix C Example Network Scenario
Example Branch Office Network
Illustration C.5 Example Branch Office Network
Branch Office Sensor-Analyzer
In the example scenario, the Branch Office Sensor-Analyzer is an inline combined Sensor-
Analyzer.
Branch Office Firewall
The Branch Office Firewall provides NAT for the Branch Office network. The Branch Office Firewall
has the following IP addresses:
• Internal: 172.16.2.1
• External: 212.20.2.254
Branch Office Log Server
In the example scenario, the Branch Office Log Server is located in the Branch Office Intranet
with the IP address 172.16.2.201. This Log Server receives alerts and log data from the Branch
Office Sensor-Analyzer.
Table C.5 Combined Sensor-Analyzer in the Example Scenario
Network
Interface
Description
Inline Interfaces
The Branch Office Sensor-Analyzer s deployed in the path of traffic between the
firewall and the Branch Office Intranet switch. All the traffic flows through the
sensor’s inline interface pair.
Normal Interfaces
The Branch Office Sensor-Analyzer has one normal interface that is connected to
the Branch Office Intranet using the IP address 172.16.2.41. This normal
interface is used for control connections from the Management Server, sending
log data and alerts to the Branch Office Log Server, and for TCP connection
termination (by the Sensor).
Branch Office
Log Server
172.16.2.201
172.16.2.41
Branch Office
Firewall
172.16.2.1 212.20.2.254
Internet
Branch Office
Intranet