System and method for realizing network access authentication, transmission encryption and UTM

Abstract

The invention discloses a system for realizing network access authentication, transmission encryption and UTM, which comprises a network access authentication subsystem for performing access authentication on a user accessing a network, a network transmission encryption and decryption subsystem for encrypting / decrypting a network data packet needing encrypting / decrypting in a network transmission link, a unified threat management subsystem for performing the unified threat management on the network data packet and a network transfer control subsystem, wherein the subsystems are connected to judge the type and validity of the network data packet and transfer the network data packet to the network access authentication subsystem, or the network transmission encryption subsystem and the unified threat management subsystem to execute the corresponding access authentication, or encryption / decryption and the unified threat management. The invention also discloses a corresponding method for realizing the network access authentication, the transmission encryption and the UTM. Through the system and the method, the seamless integration of the network access authentication, the transmission encryption and the UTM is realized and simultaneously different combinations among the network access authentication, the transmission encryption and the UTM functions can be configured and selected according to needs.

Description

technical field [0001] The invention relates to the field of network communication security, in particular to a system and method for realizing network access authentication, transmission encryption and UTM. Background technique [0002] At present, the network access authentication system and equipment, network transmission encryption system and equipment, and UTM system and equipment are basically deployed in the form of a single product application and superimposed deployment. At present, most security switches on the market only have the functions of authentication and VLAN division; although there are also a few switches that realize the combination of anti-virus, linkage with IDS, and IDP, but these products are only in the stacking of products stage, the seamless integration of the above functions cannot be realized. [0003] Therefore, the above-mentioned deployment method will inevitably have the following disadvantages: poor linkage and compatibility between diffe...

AI Technical Summary

Problems solved by technology

At present, most security switches on the market only have the functions of authentication and VLAN division; although there are also a few switches that realize the combination of anti-virus, linkage with IDS, and IDP, but these products are only in the stacking of products stage, and the seamless integration of the above functions cannot be realized

[0003] Therefore, the above deployment method will inevitably have the following disadvantages: poor linkage and compatibility between different products; poor overall network performance; high deployment cost

Images