Internet website security architecture system

Abstract

The present invention discloses an Internet website security architecture system, which comprises an external firewall, an internal firewall and at least one server in a DMZ. Wherein, the external firewall and the internal firewall are connected with the server in the DMZ in series. The external firewall divides an external zone and the DMZ to execute control over access of Internet to the DMZ. In addition, the internal firewall separates the DMZ and an internal zone to control access of the DMZ to the internal zone. The server provides Internet service. Based on configurations as above, the present invention a direct physical link between the Internet and an internal network, thus avoiding influencing Internet service supply, ensuring security of the internal network and having no impact on the internal network to maintain the server and update data.

Description

technical field [0001] The invention relates to an Internet technology, in particular to an Internet website security framework system. Background technique [0002] With the development of Internet technology, more and more enterprises have established website systems to realize the connection between the enterprise's internal network and the Internet. On the one hand, it provides Internet services through the website system, and on the other hand, it realizes the maintenance and data update of the website system from the enterprise's internal network. . [0003] In this case, network security, especially internal network security becomes very important. [0004] At present, the general website system platform structure equipment schemes are as follows: [0005] Build a DMZ zone with a single firewall (as shown in Figure 1), that is, use a firewall node device to build a DMZ zone and provide Internet services; [0006] Dual firewalls, and the outer firewall builds a DMZ ...

AI Technical Summary

Problems solved by technology

[0007] However, none of these architectural designs really solve the problem of security isolation between the internal network and the Internet.

Although the connection between the internal network and the Internet can be blocked through firewall nodes, since there is still a direct physical connection between the internal network and the Internet, there must be uncertainty in its logical blocking. Therefore, there are still certain hidden dangers in the security protection of the internal network

Images