Application and design of FWSM on the security of campus networks

Du Xiujuan,Jin Zhigang,Huang Kejun
DOI: https://doi.org/10.3969/j.issn.1002-7300.2008.04.007
2008-01-01
Abstract:With the development and application of campus networks,the security has much greater effect on the operation of networks.Based on Cisco FWSM module,the paper analyzes the powerful NAT characteristics of FWSM and provides the multi-level design and configuration policy aiming at the campus networks.It realizes the target of protecting distinguishingly different sub-networks combined with bypass NAT of static,dynamic identify NAT and NAT exempt.Furthermore,the paper provides TCP interference to limit the embryo connection number and avoid the Dos,and combines with other technology of preventing network attacks such as UPF and application context filter etc to safeguard the security of campus networks.
What problem does this paper attempt to address?