https://www.clearsec.org/wikis/ise/ises/11_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB/Recent content in 网络物理隔离 on ClearSec WikiHugozh-cnFri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/11_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB/11.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/11_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB/11.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/<h3 id="物理网络隔离概述">物理网络隔离概述</h3> <p>物理隔离的典型产品是<strong>网闸。除此之外还有</strong>内外网线路切换器等设备。</p> <p>能阻止例如木马之类的在线攻击，病毒一般离线都能发作因此作用有限。</p> <p>物理隔离仍有非法外联风险，参考涉密网非法外联的案例</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/734682e2c6ca47946ef81c9bc34ab973_MD5.png" alt=""></p> <h3 id="物理隔离机制与实现技术">物理隔离机制与实现技术</h3> <p>多PC是较为常用的解决方案。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/a87c44a530dd94d371bf336a98e8b881_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/3741ab432f16bbe0001224989577ec37_MD5.png" alt=""></p> <p>单硬盘内外分区：硬盘隔离卡</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/d6b9ba33c1adf268c3403134ba8c7f83_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/6e0589a40a1dea073280bf5a9d40b8d3_MD5.png" alt=""></p> <h3 id="信息摆渡技术和物理断开技术">信息摆渡技术和物理断开技术</h3> <p><strong>网闸使用了协议隔离、信息摆渡等技术</strong></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.1_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E6%8A%80%E6%9C%AF/3deb78a0649936453321b49cd978842e_MD5.png" alt=""></p>https://www.clearsec.org/wikis/ise/ises/11_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB/11.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/11_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB/11.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/<h3 id="终端隔离产品">终端隔离产品</h3> <p>单硬盘内外分区技术/两个硬盘-<strong>双硬盘隔离卡</strong></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/abddaf334900a29d7d5f45cd8961cafb_MD5.png" alt=""></p> <h3 id="网络隔离产品">网络隔离产品</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/2aec1253294d20cc8cab5ba1007493ae_MD5.png" alt=""></p> <h4 id="网闸-使用到摆渡物理断开单向连同技术">网闸-使用到摆渡、物理断开、单向连同技术</h4> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/c603888b942b514290864d9fd4a898b3_MD5.png" alt=""></p> <p>c点是专用协议，不是tcp/ip，作为缓冲区。</p> <h3 id="电子政务网闸应用">电子政务网闸应用</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/965db23a3653c918c47e477773bbbee6_MD5.png" alt="">、防火墙逻辑隔离，网闸物理隔离。</p> <h3 id="公检法司应用">公检法司应用</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/c113c6092083ddf51014a82534669afe_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/93b4e5af2046737433454e7aeddf4856_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A711.2_%E7%BD%91%E7%BB%9C%E7%89%A9%E7%90%86%E9%9A%94%E7%A6%BB%E4%BA%A7%E5%93%81_11.3%E5%BA%94%E7%94%A8/14a73b08ca5b9d5e1fceb09df9208410_MD5.png" alt=""></p>