Research On The Application Of Firewall Technology In Information Network Of Civilian Engineering Of Division Level Of The Armed Water-and-Electricity Police Force

Now the pace of constructing information society is becoming more and more quickly and processing official businesses over Internet is more and more popular, a great many daily tasks are delivered over the Internet in our army. Obviously, it will provide hackers and some people with evil thoughts a great many chances to intrude our network, and many important files will be thieved by them as well. So it is absolutely necessary to place a secure screen between Internet and the army's Intranet. Firewall is one of the best instruments among all the secure assuring ones, because as the first protection screen in the network security system, it can not only monitor all activities undergoing inner the Intranet and inspect all data transportation links between Intranet and Internet, but also can keep a great deal of evil attacks out of the Intranet directly and make it impossible to transfer confidential files over the Internet.Based on the state of the art of network situation of the divisions of the armed police force, this paper outlines the situation of network security system and all kinds of firewall technologies at first, then the application situation of the network security in the division force level is analyzed according to the real state of the divisions of the armed Water-and-Electricity police force. Immediately we discuss the risk and requirement of our distributed network based on the pitfalls and traps in the division lever network. Associated with the deployment state of the firewalls inner the network of all levels, we also bring forward some important rules which should be obeyed in making a choice of firewall and should conform to in the late maintaining period. We also introduce some kinds of firewalls in the market now and particularly describe their characters and performances, all of those can satisfy the requirement of the divisions of the armed police force network deployment. After that, a new design plan is put forward, and the important role of the firewall in the security system is analyzed at the application level as well. We compared two major VPN technologies now: IP Sec VPN and SSL VPN. And we discussed the advantages and shortcomings of them carefully. The research result is very useful for later deploying the VPN networks. The idea is that we can make use of Juniper ns-204 firewall to construct VPN tunnels connecting the division and its portion securely and reliably on the Internet. At last, the state of the art of firewall technology and the future possible trends of it are painted.As a whole, this paper made a preliminary discussion on how to use firewalls to construct scientific and high effective network security assuring system in the divisions of the armed Water-and-Electricity police force level according to theory analysis and application research about the firewall technology. And it also specifies the procedure of making a choice of firewall products in the divisions of the armed police force network construction. As a result, it may be positive direction in improving the security and robustness performance of the division level network.