“"Security protection of technology and management established and adopted for data processing system, and protection of computer hardware, software and data from accidental and malicious damage, alteration and leakage".

                                                                                                                                                                                          ----International Organization for Standardization (ISO)

From "information superhighway" to "Digital Earth", the wave of information swept the world. The rapid development of Internet not only drives the rapid growth of information industry and national economy, but also brings vitality to the development of enterprises.

The development of information technology represented by Internet not only directly affects the technological innovation and productivity improvement of enterprises, but also gradually becomes an important force to improve the competitiveness of enterprises.

Enterprises can share the resources all over the world through the Internet, but because of its openness, the information transmitted on the Internet will inevitably face many risks in terms of security. When more and more enterprises put their business activities on the network, all kinds of illegal intrusion, virus and other activities against the network system also increase.

The solution of these information security problems we are faced with mainly depends on modern information theory and technical means, on security architecture and network security communication protocol and other technologies, and on all kinds of hardware or software security products. In this way, these security products will become a realistic choice for us to solve security problems.

Analysis on the demand of network security in China

Analysis of network status

China's domestic enterprises and government agencies want to be competitive and improve production efficiency, which must respond to the market demand in a timely and effective manner, thus triggering the trend of relying on the Internet to obtain and share information, so as to further improve production efficiency and promote future growth.

However, where there are networks, there are security problems. In the past, the network was mostly closed, so it was easier to ensure its security. Simple security equipment was enough to undertake its task. However, today's network has changed, ensuring network security and availability has become a more complex and necessary task. Every time users connect to the network, the original security situation will change. Many enterprises have become victims of cyber crime frequently. Because of the complexity of today's network business, relying on the early simple security equipment has been unable to solve these security problems.

Main network security problems and their harms

----Network attacks are increasing rapidly.

　　Network attacks usually take advantage of some inherent characteristics of the network, such as unauthorized access, password theft, denial of service and so on.

Considering the loss of business and the decline of production efficiency, as well as the additional expenses caused by troubleshooting and repairing damaged equipment, the damage to network security can be devastating. In addition, serious network security problems may also lead to the destruction of the public image of enterprises, legal responsibility and even the loss of customer confidence, and the resulting cost loss will be incalculable.

----The impact of virus mail attack is increasingly fierce

　　Viruses, worms and a large number of unnecessary e-mail use Internet communication resources to spread, causing transmission interruption in the network environment. According to the survey, more than 87% of the virus entered the enterprise through e-mail! The loss of confidential data and trade secrets and the improper use of e-mail system by employees have made many companies bear legal liability and damaged their reputation.

Today, more and more companies are looking for an active solution to reduce the interruption time of information service and avoid business loss during virus invasion.

----Unreasonable use of network resources

Open access also allows unlimited access to a large number of malicious, offensive and controversial content, as well as non work related materials. According to IDC statistics, 30% ~ 40% of Internet visits are unrelated to work, and some even visit pornographic sites. The average person spends two to three hours a day working to send and receive personal e-mails, browse entertainment websites and spend time in chat rooms.

Therefore, many organizations must determine how to allow employees unimpeded access to a large amount of useful information on the Internet while limiting access to inappropriate content.

Customer analysis of small and medium enterprises in China

Due to the limitation of manpower and capital, small and medium-sized enterprises in China need not only simple installation of network security products, but also integrated solutions for complex network applications, such as network security, virus detection, website filtering, etc. Its focus lies in: products of leading manufacturers at home and abroad; the ability to deal with emergencies; real-time monitoring and easy management; customized security policy configuration; users can easily improve their own security system.

Cisco Security blueprint (SAFE)

Safe is the blueprint of Cisco's security solution, which is mainly aimed at the functions of enterprise network, and can provide end-to-end security strategy for the design, implementation and maintenance of customer's security network.

The blueprint can modularize the design and deployment of network security solutions, and provide users with integrated and comprehensive solutions combined with Cisco partner products. In this way, market leading security products, mature and reliable security policies and single platform management can be combined with customers' existing network infrastructure to provide comprehensive network protection

Provide efficient investment protection without discarding existing network devices

Modular deployment can gradually realize deep layered defense

Good interoperability with partners

24x7 global technical support

Security market leader

Easy to manage
Cisco network security solutions for small and medium sized enterprises

In view of the actual situation of Chinese small and medium-sized enterprise customers, combined with Cisco's advanced safe blueprint design concept, Cisco has specially launched the "network health application health mental health" network security solution for small and medium-sized enterprises

Compact version:CiscoSecurePIX501

Standard Version:CiscoSecurePIX501+TrendMicro25用户+Websense25用户

Luxury version:CiscoSecurePIX506E+TrendMicro50用户+Websense50用户
The above three solutions are integrated and effective solutions proposed by Cisco for the most common network security, virus detection, website filtering and other security problems. Through the close combination with partners, they provide customers with a set of modular bundled products to effectively solve the actual needs of existing small and medium-sized enterprise users.

Cisco securepix500 series firewall is a special hardware product that implements internal network infrastructure to strengthen user security policy and limit access to network resources. Its function is to check the packet and session process, and analyze and control the incoming or outgoing packets according to the specific parameters set for different applications, addresses or user types. Through the deployment of pix, users' public Internet servers can be protected, the data flow from external network to internal network can be limited, and various functions such as network address translation (NAT) can be provided for internal users, so as to provide users with network-based attack protection, and prevent and eliminate the distributed denial of service attack (DDoS) which causes bandwidth congestion.

The product developed by trendmicro is a policy based high-performance anti-virus and content security solution for SMTP gateway. It integrates virus protected content filtering function, which means that with this product, you can manage e-mail content filtering and provide control, and prevent viruses and other malicious code in e-mail from affecting. Protect the enterprise information processing system from the damage of e-mail virus from the Internet, and prevent replication or non business content transmission.

Websense enterprise developed by Websense company is an employee Internet management system, which can provide integrated Internet filtering for Cisco PIX Firewall and help network administrators effectively monitor, manage and report the network traffic from intranet to Internet. Network administrators can specify policies that restrict Internet use within an organization. Websense enterprise then filters network activity, monitors and reports information about the activity based on predefined policies. When Websense main URL database is shared with Cisco PIX Firewall, flexible and high-performance content filtering strategy can be created. The Internet request is sent to the Cisco PIX Firewall, followed by a query from the firewall's Websense to determine whether the request should be allowed or blocked. At the same time, Cisco PIX Firewall sends the original request to the Internet. Because the request is sent to the Internet before receiving the confirmation from Websense, the Cisco PIX Firewall will not slow down the access of authorized enterprises. Websense confirmation is required before returning the site to the requesting user, which can prevent unauthorized access