医院网络安全实行终端准入管理的探析

目的:加强医院网络终端的准入管理,对终端进行统一管理和持续安全监控,同时提升IT工作人员的运维效率。方法:采用旁路链接的方式接入终端准入控制系统,通过在核心交换机上布置策略路由,将数据包引入到准入控制设备,实施对医院全网终端的管理与监控。结果:使非法的终端设备被有效地屏蔽在内网边界之外,网内终端的不合理上网行为也得到有效控制。结论:通过终端准入系统,医院变被动防护为主动防护,单点防护为全面防护,变分散管理为统一策略管理,提升了医院网络安全的防御能力,也为IT工程师的维护工作提供了极大的便利。

Analysis on the Implementation of Terminal Access Management for Hospital Network Security

Objective:To strengthen the access management of hospital network terminals,to carry out unified management and continuous security monitoring of terminals,and to improve the operation and maintenance efficiency of IT staff.Methods:Access the terminal control system through side channel link,forward the data packets to the access control equipment with the help of routing policy deployed on the root switch.In this way,all of the hospital network terminals under control of the management and monitoring system.Results:The illegal terminal equipment was effectively shielded outside the internal network boundary,and the unreasonable Internet behavior of the network terminal was effectively controlled.Conclusion:Through the terminal access system,the hospital changes passive protection to active protection,single point protection to comprehensive protection,and decentralized management to unified strategy management,which improves the defense ability of hospital network security and provides great convenience for the maintenance of IT engineers.