An IPS equipment flexible arrangement method and relevant equipment

Abstract

The disclosed configuration method for ISP device comprises: connecting two interfaces of network node device to the inlet and outlet of IPS device; configuring node device to make the data flow return to node device after passing said IPS device for normal transmission. It also provides the relative devices. This invention does not interrupt the process business during the configuration, and improves flexibility and compatibility for the configuration.

Description

technical field [0001] The present invention relates to communication networks, in particular to deployment and application of IPS equipment in communication networks; more specifically, the present invention relates to a method for flexible deployment of IPS equipment and related equipment. Background technique [0002] With the development of network technology and the diversification of various business types, in addition to completing data forwarding, the network also needs to perform some special processing on data. For example, data is filtered through a firewall, data content is checked through an IPS (Intrusion Prevention System, intrusion prevention system), and data is counted and billed through a traffic monitoring system. Among them, IPS technology has become the latest content detection and filtering technology at present. It uses IPS equipment to detect and process the content of the data on the 3rd to 7th layers, and plays the role of attack prevention. Speci...

AI Technical Summary

Problems solved by technology

[0004] 1. Deploying IPS equipment at the entrance of the network will inevitably modify the existing network architecture, and this modification will bring additional networking costs and business interruption;

[0005] 2. Due to the wide variety of interfaces in the network, and the interface of IPS equipment is generally a simple Ethernet interface, when the network entrance is another type of interface, the deployment of IPS equipment needs to consider the issue of interface adaptation;

[0006] 3. When there are multiple network entrances, multiple IPS devices may need to be configured, which will greatly increase the complexity and cost of networking;

[0007] 4. After the deployment is completed, all data must be processed by IPS equipment, resulting in excessive pressure, which increases the possibility of network bottlenecks and single point failures

[0009] 1. The insertion and removal of boards will cause additional networking costs and business interruption;

[0010] 2. Deployment lacks compatibility, and only supporting IPS boards from routing equipment manufacturers can be used;

[0011] 3. Compared with independent IPS devices, the processing performance of IPS boards is poor

Images