Intranet penetration security management and control method, management and control system and intranet penetration system

Abstract

The invention discloses an intranet penetration security control method, a control system and an intranet penetration system, and the control method comprises the following steps: S1, identifying an external service port number of a to-be-connected internal node, and determining an external port bound with a to-be-connected intranet penetration client; S2, logging in an intranet penetration server; s3, opening an external port; s4, establishing communication with an intranet penetrating client through an external port; s5, after the preset time of successfully establishing the communication, closing the external port and keeping the current communication connection. The control system comprises a port number identification module, a login access module, an action module and a communication module. The intranet penetration system comprises an intranet, an external network and a security policy implementation system. The external port is opened and other ports are closed in a targeted manner by setting a firewall, and the defects that the intranet is exposed to the external network for a long time, and consequently the intranet is likely to be sniffed and cracked violently to log in are overcome.

Description

Technical field [0001] The present invention relates to the field of communication security, and more particularly to an intranetary safety control method, a control system and an intranet penetration system. Background technique [0002] Currently, in large data centers or corporate production environments, the internal network is often encountered. In order to solve the problem of remote operation and maintenance problems in these cases, the intranet penetration (NAT) technology is often used, that is, the internal network penetration client (Client) is installed in the public network, installing the intranetary server (Server). Client / Server architecture, user or engineer establishes communication with the client through the port mapping relationship, through the port mapping relationship, to perform the required operations. However, since the intake server end is exposed to a public network environment for a long time, it is easier to sniff. Secondly, he is subject to its s...

AI Technical Summary

Problems solved by technology

Once the server is brute force cracked and logged in, it will cause systemic security issues of the intranet to penetrate the entire intranet to penetrate the client, resulting in data loss, information leakage, machine damage and other vicious events, seriously endangering user information security

Images