LNZC2016-0771

LNZC2016-0771 76

LNZC2016-0771

1.

2.

3.

4.

:

12345 2016 1209 09:30 18211138981793031236785,1,9,1,10111238.2344778813: : 182: : 1389818683314 100AXXX 2344770123447752024-23447726 024-23447707024-23447776/23447775

1321000030000

1213:003.4 0338260102000005309512

1

1-1

2

1-2

3

1-3

1)122143143145()1

1153216317418

114

1.

2

,

1

2

LNZC2016-0771

3

1.1

1.2

1.3

1.4

2.1

2.2

2.3

( )

4-1

4-2

____________ _____________

4-3

3

3(www.creditchina.gov.cn/)www.ccgp.gov.cn

()

5

)

90

51013

1

2

3

4

5

6

2

( )

6

/

1

2

3

4

5

6

( )

61

1

2.

62

7

1/ 20 /18295%5[2015]717 1 1 7*240.5131

52

LNZC2016-077118

1-15 51U1010/100/1000BASE-T4Gbps200PBRRIPv1/2OSPFBGPISL802.1QtrunkVLAN-VPN802.1DPVSTDNS*10*WEBIP/MAC254IPv4/IPv6IPv4/IPv6/IPv4/IPv61-2UTM1 UTM 1:1U,164SFP2USB5Gbps2204:*NATNATSNATDNATIPMACIPSecSSLGREPPTPL2TPVPNISPWebISP1.UTMRIPBGPISISOSPFURL2. UTM3WEB1-3112U2622HA810/100/1000BASE-TBypass8SFP4Gbps200*IPv6IPv6 over IPv4IPv6IPv4NetflowbpsppsTCPUDPIGMPIP Fragment FloodICMP FLOODUDP FLOODTCP SYN FLOODTCP ACK FLOODTCP RST FLOODTCP FIN FLOODhttps floodHTTP GET FLOODHTTP POST FLOODSIP floodDNS QUERY FLOODDNS NXDomain FLOODDNSHGODXOICLOICThc-sslDNS senderBGPGREWebSNMP v1 v2 v2c v3IPv6/IPv4HTTPSDDOSSSL DOShttps client hello flood4jscookie1-4112U111HA4BYPASS,4SFP2USB10Gbps300HTTP54:4000100HTTPFTPSMTPPOP3IMAPWebHTTPURLhttpftpofficeAPTAPTAPT1-5112U26 2210/100/1000BASE-THA4SFP410/100/1000BASE-TBYPASS1+5Gbps400W1.5Gbps SMTPPOP3IMAPHTTPFTP* java Commons FileUploadOACRMWEBWEBMAILURLActiveXJava AppletsScript IPSNMP98%()VB10010001-6WAF1WAF 1:2U11HA1RJ-45 Console110/100/1000 Base-T44SFP42USB:5G2GHTTP280HTTP2:URLHTTPWebXSSSQLCSRF/URLWebHTTPWAFXSSSQLWAFWAF1-7112U34 2210/100/1000BASE-T44bypass>4G>600*https.*SSHbypassbypasswatchdogbypass*416+BTSkypeedonkeyQvodPPFilmP2P35HTTPIE99%700web25P2PMSSQLOracleMySQLPostgreSQL24 IP2401-8VPN1VPN 1:SSL400MbpsSSL26001.5Gbps160W2U,6105SSL5IPSEC:VPNSSLTLS IPSec VPNSSLVPNVPNSSL VPNUTMCookiesIPWindowsC/SWebC/SVPNSSL VPNInternetVPNVPNVPNSSL VPNInternetCookiesVPNSM1SM2SM3SM4VPNSSL VPNVPNSSL VPN1-91 1:1U11T64700200100:SSHv1SSHv2TELNETRLOGINRDPVNCFTPSFTPOracleORACLE RACMS SQL ServerIBM DB2SybaseIBM Informix Dynamic ServerMySQLPostgreSQLRDPRDPwindowsSSLFIPSTELNETSSHSecureCRT1-101 1:1U62USB500G300IP40IP:B/S 10000CVECNCVECNNVDCVSS1-1111Keylicence100lic20000/10000/20000/MM2000010:110000/*SyslogSNMP TrapNetflowJDBCAgent*SANNASSnmp TrapIP200050020201-1211:2U210/100/1000BASE-TX4SFP41000BASE1T 300M,6000/10000:SyslogSNMP trap\IP\MAC\WordPDFExcelHTMLTelnetFTPOracleSQL-ServerDB2InformixSybaseMySQLPostgreSQLTeradataCacheWebWAFWAFAPTOracleCPU1-1322:X861UCPU4CPU 816GB32GB1500GSSD610/100/1000M RJ454SFP4RJ454SFP2SFP+220GbpsTCP1500280045cps90rps:*4:Fast TCP , UDP , FTP , SSL Bridge, RDP Bridge4IPv6IPv4NATDRPingPing-GWTcpHttp/HttpsHttp/Https-EVCFtpDNSpop3smtpIMAPMySQLRadiusLDAP/*7URLURL\ IPHTTPHTTPIPURLSSLIDHttpHeaderCookie-insertCookie-passiveURLQueryString ;Smart_Rules Smart_Builder LUA/HTTP/TCP TCP TCP SSLSSL SM1,SM2,SM3,SM4 SSLHTTPGZIP / Deflate 51HTTPHTTP+20/+/GSLB\Auto Lasthop:DNS:DNS:20/:PingPing-GWTcpHttp/HttpsHttp/Https-EVCFtpDNSpop3smtpIMAPMySQLRadiusLDAPAgent :LOCAL DNS IP DNS:DNS SOANSMXAAAAACNAMETXTPTRSRVIP Anycast:OSPFMetrixIP Anycast:DDOS:SYN FloodHTTPHTTPSDDOS Web:OWASP WebSSL :SSL SSLSmart_Rules :WEB :RFC2616HTTP::CLI /Web GUI/Console , :SNMP v1/v2/v3 SNMP trapHP Open View , IBM Net View API:Restful API , Plug-inOpen Stack Neutron 1.0/2.0 LBAAS 2-3:IP v4/v6 VLAN 802.1Q; 802.3ad ; STPRSTP; : RIP v1/v2/ng ; OSPF v1/v2/v3 ; SNAT/DNAT:SNAT/DNAT1-1411:444RJ454SFP2SFP+1000Mbps100,000SQL::IMPVHASTP2IMPVHABy-passIPIPOSOSSQLSchemaSchemaSchema:OracleDB2InformixSybaseMS SQL ServerTeraDataMySQLOracleIBM, SybaseMicroSoftIPSWebIPSSnortCVE:URLSQL:Web Web Web ID URL 1-1566:*:://*:*::::::::::exedllcomsys:CPU:::USB KEY+USB KEYUSB KEY:/:7::::::WindowsWindws2000/2003/200832bit64bitwindows 2012 64bitLinuxSolarisAIX:::Windows:FLASHIPCPU:::syslog:WHQLCertified for Windows Server 2008 R2(windows)1-1622:*ipip*ip:WEBCPUCUPBIOSWINDOWSOFFICEIPMACIPIPWordExcelpdfHtml:1WindowsIEWindows2WindowsWindowsWin2000WinXPWin2003WinVistaWin7Win2008Win2008R2Win8Win8.1Win2012Win2012R2WindowsWindowsService Pack3IEIEIE6.0IE11.04WindowsSQL.net framework5Windows6789101112131415:123 4567891011IP:1234567IP:IP-MACIPIPDHCPipIPIP-MACIPMACIPipipipipDNSTCP/IPIPIPIPipipIPIPDNSDNSDNSDNSDNSip:IPMACexclepdfexcleTXT.IP :1:IP:CPUCPUipmac:CPU:IPMACnatipip:USBUSB/Model1394PCMCIA:WIFI3GVPNModemCOMUSBUSBUSBUSBPPoEWindows VPNIE:1excel234:1excel234:360killWindows:ARP:MACARPMACMACMACarp:IPIP802.1xICMPGuest VLanIPIP, DHCP,VLanDHCPIP:IPIPIPIP:MACARPARPIPIP : kerberoskerberos CD-ROMMicrosoftNTLM SSPie6WindowsWindowsicmpUPNP I/O (LLTD) / (I/O) Microsoft DNS Internet Internet Internet Internet Internet (ICS) ICS Internet InternetWindows UDP 137 138 TCP 139 445 Windows Internet (ICMP) ICMP Windows Windows Windows : Windows () Windows Windows Windows Windows Internet (ICMP)Windows Windows Windows 6to4 IPv4 Internet IPv6 IPv6 IP-HTTPS HTTPS IP (ISATAP) IPv4 Intranet IPv6 IPv6 Teredo IPv4 Internet IPv6 Windows (WCN) Windows Connect Now (WCN) Windows Windows Windows Windows Internet Windows HTTP Tablet PC Internet Microsoft Internet (ISP) Windows Web ()WindowsWindows Windows Windows : Guest////Guest//WindowsWindowsWindowsWindows//regeditHomeIPMACieACTIVEXinternetjavaDNS:123456:12USDCF34567uu89uu10u:123456AESSMS47891011IP12IP131415:12USB KEY34:12IP345::http ftphttpsURL:123456:officewps:12345678910FTP:1FTP2FTP3FTP4FTP5FTPIPMAC:IPMACIPMAC IPMAC:windows:1(USBKeyIC)(Client)Windows2keykey3key4Key5Key6Key PIN+windows7windows8keykeyC/S/C:B/S/C:,WEBWEBWindows:WindowsHTTPHTTPS:KEYEmailKEY:1(USBKeyIC)(Client)Windows2keykeykey3Key4Key5Key PIN+windows6windows7keykey:1:WINDOWS3264NATNAT:Windows 2003/2008/2012 3264SQL Server 2000/2005/2005 Express/2008/2008 Express:WINDOWS2000/Windows2003/Windows2008/Windows2012 3264SQLSQLServer2000/SQLServer2005/SQLServer2008/SQLServer2012.Windows 2000/XP/2003/Vista/Windows 7/2008/Win 8/Win1032Windows XP/2003/Windows 7/2008/Win8/Win1064:CPU