Application Research On SAN Security Mechanism Of Firewall

The information technology changes with each passing day to make thebusiness enterprise to demand that datum store with increasing intensity daily,meanwhile, the datum store bring the value for the enterprise increases day byday too. The Storage Area Network—SAN provides the solid foundation forthe datum store that increases increasingly. Many business enterprises havealready chosen SAN as a solution for their datum store at present.The main advantage of SAN is: 1. the data share;2.? the ability ofexpansion during running;3. the long-distance backup and instauration. But theSAN also has its weakness, among them, the most is its network security. Thenetwork security problem is a main obstacle that SAN extensively carry outcurrently. The firewall is an important part of the technique system structure ofcomputer network security, playing a key role in maintaining network securityprocess. The need of the firewall in actual application getting more and more,currently only firewall can generally resolve the secure problem aftercustomers connect into the INTERNET,? withstand a majority of the hackers'attacks and invasion.?The main function of the firewall is:1. establish a jam point;2.insulate thedifferent network, keep internal information from leak;3.enhance the safestrategy;4.audit and record availably inside, the activity of the exteriornetwork.The basic type of the firewall is:1.Packet Filter;2.Proxy Service;3.compounded firewall; 4.other firewalls ;5. Distributed firewalls.Traditional Perimeter Firewall at the beginning of the developing of thenetwork can carry out its function nicely, because the network scale is smallerat that time, the attack method category limited the hackers. But along with thedevelopment of the network, quick extension of the network scale,increasingly abundant of the applied type, the circumstance is more and morecomplicated which make the traditional firewall starts seem to be lack of theability to do. The distributed firewalls adapt to new condition of the networkdevelopment, match the current of the network technique development. Thearticle's author, through comparing some kinds of firewalls'merits andshortcomings, adopt distributed firewalls according to the topology structureof SAN. The advantage of distributed firewalls is as follows: First , it breaksthrough the restriction of the topology structure, strengthens ability of thenetwork to open, makes intranet be compatible with Internet further; Second,the implement of the security strategy pushed toward the network edge isadvantageous to establish characteristic and purpose-designed security strategy;the more firewall is to close to the edge host, the more comprehension of thedata flow, ?particularity of filter and the ability of protection it can; The third,the distributed technique matches the current technical development; Thefourth ,it is easy to construct stereoscopic and all-directions security camp.