XXXXXXXXXXXXXXX毕 业 论 文企业网络安全解决方案姓 名： 学 号： 指导老师： 系 名： 专 业： 班 级： XXXXXXXXXX 计算机专业毕业设计摘 要随着社会的飞速发展，网络技术的也在飞速的发展之中，现如今网络已经无所不在的影响着社会的政治、经济、文化、军事、意识形态和社会生活等各个方面。同时在全球范围内，针对重要信息资源和网络基础设施的入侵行为和企图入侵行为的数量仍然不断增加，网络攻击与入侵行为对国家安全、经济和社会生活造成了极大的威胁。计算机病毒的不断的通过网络产生和传播，计算机网络被不断地非法入侵，重要情报、资料被窃取，甚至造成网络系统的瘫痪等等，诸如此类的事件已经给政府以及企业造成了巨大的损失，甚至危害到国家的安全。网络安全已经成为世界各国当今共同关注的焦点，网络安全的重要性是不言而喻的。本文是构思了一个虚拟的企业网络的设计，重点研究了公司不同分部之间通过 VPN 技术来实现在广域网中的加密连接。以及详细的设计了总公司的网络安全策略，保证了内部服务器等的信息安全，按照需求对企业网络安全进行了系统的规划，对计算机网络安全进行了全面的分析。在满足了各个子网连通的前提下，提出了包括 AAA 认证、SSH 登陆、Easy VPN、访问控制限制、NAT 技术、入侵检测部署、病毒防护、扫描系统管理措施和安全技术在内的整套方案。目的是建设一个完整的、安全的网络体系，是网络安全系统真正获得较好的效果。关键词： 网络，安全，VPN，防火墙 ，防病毒XXXXXXXXXX 计算机专业毕业设计IAbstractWith the rapid development of society and also the rapid development of network technology, is now the network has been the ubiquitous influence of society in all aspects of political, economic, cultural, military, ideological and social life. Worldwide for the intrusion and the number of attempted intrusions of the important information resources and network infrastructure is still growing, network attacks and intrusions caused a grave threat to national security, economic and social life. Computer virus continues through the network and dissemination, computer networks are the illegal invasion, important information, data theft, and even cause paralysis of the network system, such events have caused huge losses to the government and enterprises, and even harm to national security. Network security has become the focus of attention today in the world, the importance of network security is self-evident.This article is the idea of a virtual enterprise network design, focusing on the encrypted connection between the different segments of the company through VPN technology to achieve WAN. And detailed design of the network security policy of the Corporation to ensure the internal server, such as information security, in accordance with the needs of enterprise network security planning of the system, conducted a comprehensive analysis of computer network security. Satisfy the premise that each subnet connectivity, including the AAA authentication, SSH login to the Easy VPN, access control restrictions, the NAT technology, intrusion detection deployment, virus protection, scanning system management measures and security technologies, including the package. The purpose is to build a complete, secure network architecture, network security systems really get better results.Keywords: network, security, VPN, firewall, anti-virus XXXXXXXXXX 计算机专业毕业设计II目录摘 要 .I第一章 绪 论 .11.1 网络的起源 .11.2 网络安全的重要性 .1第二章 企业网络安全概述 .32.1 企业网络的主要安全隐患 .32.2 企业网络的安全误区 .3第三章 企业网络总体设计方案 .53.1 公司背景 .53.2 企业网络安全需求 .53.3 需求分析 .53.4 企业网络结构 .63.5 企业 IP 地址的划分 .9第四章 企业网络安全技术介绍 .94.1 Easy VPN .94.1.1 什么是 VPN .94.1.2 VPN 的分类 .