?? Firewall ????

1
?? Firewall ?? ???

• SecureShield
• SecureWorks
• InterGuard
• Hwarang

Made by secadm70_at_tigris.postech.ac.kr
2
1. ?? ??
? ?
SecureShield -???
SecureWorks
InterGuard
Hwarang
? ? ?
? ??? ???
? ??? ????
?? ????
?? ???
????
Hybrid Type Application Gateway Packet Filtering
Hybrid Type Application Gateway Packet Filtering
Hybrid Type Application Gateway Packet Filtering
Hybrid Type Application Gateway Packet Filtering
????
Dual-Homed Gateway HA(High Availability)
type Screened Subnet Host Screened Hosts
Dual-Homed Gateway Screened Subnet Host Screened
Hosts
Dual-Homed Gateway Screened Subnet Host Screened
Hosts
Dual-Homed Gateway Screened Subnet Host Screened
Hosts
O.S
Solaris 2.5.1 ??
Solaris 2.5.1 ??
Solaris 2.5.1 ??
Windows NT 4.0
H/W
SUN Sparc Ultra/Enterprise PC Server
SUN Sparc Ultra/Enterprise PC Server
SUN Sparc Ultra/Enterprise PC Server
Intel ? Alpha CPU??
Network Interface
Ethernet / Fast Ethernet FDDI / ATM
Ethernet / Fast Ethernet FDDI / ATM
Ethernet / Fast Ethernet
Ethernet / Fast Ethernet FDDI
NIC?
????
????
????
????
3
2. ??? ??? ??
? ?
SecureShield -???
SecureWorks
InterGuard
Hwarang
Interface
GUI(Web) ??? ??? ??
GUI(Web) ??? ??? ??
GUI(Web) ??? ??? ??
GUI(Web) ??? ??? ??
????
Install Script? ?? ??
Install Script? ?? ??
Install Script? ?? ??
Install Script? ?? ??
????

• ????, ???,
• ????, ?????
• ? ???? ??
• ?? ??? ??
• ???? ??? ??
• ??

• Dynamic ?? ?? ??
• - ????, protoco?, ??
• ????, ???, ???,
• ????, App? ? ?
• ???? ??? ??

• Dynamic ?? ?? ??

• ????, ????
• ??
• ???? ?? ??

??? ? ?
????? NAT ??? ???(Wizard) ??? ???? ??? ??? ???
NMS ??

• ???? ???? ??
• ? ????
• ?? ???? ????
• ??

4
3. ??? ?? ??
? ?
SecureShield
SecureWorks
InterGuard
Hwarang
?????

• Password / G/W Password
• One time Password
• RADIUS

• Password
• One time Password
• RADIUS

• Password
• One time Password

• Password
• One time Password

????

• ???? ???
• ????(5??)?
• ?? ????

??? ? ???, ????? ?? ??(10??)? ?? ??? ??
??? ? ???, ????? ?? ??(10??)? ?? ??? ??
??? ? ???, ????? ?? ??(10??)? ?? ??? ??
?? Site ??

• ?? ???? URL
• ?? Filtering ??

• ?? 50,000? ??? ??
• ? ?? Site ????
• ??? ???? ?? Site
• ?? Update ??

?? ???? URL ?? Filtering ??
? ? ???
Telnet, FTP, HTTP, POP3, SMTP, Streamworks,
RealAudio, Rlogin, IMAP SqlNet
Telnet, FTP, HTTP, POP3, SMTP, RealAudio, Rlogin
Telnet, FTP, HTTP, POP3, SMTP, Rlogin
Telnet, FTP, HTTP, POP3, SMTP, Streamworks, RealA
udio
5
3. ??? ?? ?? ( ?? )
? ?
SecureShield
SecureWorks
InterGuard
Hwarang
???? ??(NAT)

• 11, N1 mode NAT
• NN Expand mode NAT
• MN Expand mode NAT

• 11, N1 mode NAT
• NN Expand mode NAT
• MN Expand mode NAT

• 11, N1 mode NAT
• NN Expand mode NAT
• MN Expand mode NAT

• 11, N1 mode NAT
• NN Expand mode NAT
• MN Expand mode NAT

VPN

• ?? ???? ??
• KEEP2 ??
• ???? ??

• DES, 3-DES, RC2, RC4
• IDEA, RSA ? ???
• ?? ???? ??
• ?? ???? ?? HASP
• ??? ???? ??

• DES, 3-DES
• ?? ??????
• PACA ??

• DES, 3-DES, IDEA

???? ? ?

• Anti-Sniffing, Anti-Spoofing
• IP, DNS Spoofing
• Anti-Denial of Service
• SYN Flooding
• Mail/UDP/ICMP Bomb
• LAND Attack, ICMP Attack

• Anti-Sniffing, Anti-Spoofing
• IP, DNS Spoofing
• Anti-Denial of Service
• SYN Flooding
• ICMP Attack

• Anti-Sniffing, Anti-Spoofing
• IP, DNS Spoofing
• Anti-Denial of Service
• SYN Flooding
• ICMP Attack

• Anti-Sniffing,
• Anti-Spoofing
• IP, DNS Spoofing
• Anti-Denial of Service
• SYN Flooding
• LAND Attack

6
3. ??? ?? ?? ( ?? )
? ?
SecureShield
SecureWorks
InterGuard
Hwarang
??? ????

• ??? ????
• - ??, ?? ? ???
• ??? G/W, ???,
• ???, ??? ??
• ?? ? ???? ??
• ??
• ??? ???? ??
• - ?? ????? ??
• ??? Mail, PCS,
• beeper, Consol Msg ?
• ?? ???? ??
• ?? ??

??? ???? - Event, Log, Status ????

• ??? ????
• - ?? ???? ???
• ?????? ??
• ??? ???? ??
• - ?? ????? ??
• ??? Mail, PCS,
• beeper, Consol Msg ?
• ?? ???? ??
• ?? ??

• ??? ????
• - ?? ???? ???
• ?????? ??
• ??? ???? ??
• - ?? ????? ??
• ??? Mail, PCS,
• beeper, Consol Msg ?
• ?? ???? ??
• ?? ??

7
4. KISA ?? ??
? ?
SecureShield
SecureWorks
InterGuard
Hwarang
???? ???? ???? ? ?
K4 (98.11.24 ????)
K4 (99.2.8 ????)
K4 ?? ???
K4E ?? ???
Y2K

?? - DATE Field ??? 4??
?? - DATE Field ??? 4??
???

• ????, ???? ???,
• CA Server ? ????
• ??? ??? ?? ???
• ??? ? ?? ?? ??
• ??
• ??? ??? ??? ??
• ?? ????
• ?? ???? ? ????
• ?? ??? ??? ???
• ?? ??

• ????, ???? ???
• ? ?? ??

• ????, ???? ???
• ? ?? ??

• ????,
• ???? ??? ?
• ?? ??

8
5. Reference Site
? ?
SecureShield
SecureWorks
InterGuard
Hwarang
Reference Site

• ???/ ???/ ???/ ?????
• ?????(??,?????)/
• ?????/?????/?????/
• ??/?????/??????/
• ???????/???????
• ???????/?????????
• ?????/?????/??????
• ????/??????/KOTRA
• ??????/???/?????
• ????.??????.??????
• ???????/????????/
• ?? ?.?.?????/?????
• ??/???/???/?????
• ???????/ ?????
• ??/??/????, ????
• ??/??/??/??/??/????
• ? ?? ????
• ??? ??
• ?? ???

• N/A

• ?? ???/ ????
• ????
• ????
• ????
• ?? ????? ???

• ????
• ????? ???? ??
• ?? ??????
• ?? ?????
• ??? ?? 10? ???