HP X Unified Security Platform Series Bedienungsanleitung PDF herunterladen (Seite 147)

Deployment Modes

X Family LSM User’s Guide V 2.5.1 131

For additional information, see the following topics:

• “Deployment Modes” on page 131

• “Network Port Configuration” on page 132

• “Security Zone Configuration” on page 135

• “IP Interfaces” on page 140

• “IP Address Groups” on page 153

• “DNS” on page 155

• “Default Gateway” on page 156

• “Routing” on page 157

• “DHCP Server” on page 167

• “Network Tools” on page 176

Deployment Modes

The deployment mode you select determines how to configure the IP interfaces and routing on the

device. You have the following ways to implement security zones, depending on your current network

deployment:

• Tr ans pa re nt — In this mode, the device behaves like a layer 2 switch, except that you can still

enforce security policy (firewall rules, web content filtering, IPS filtering, etc.) between security

zones. All devices share the same IP address which means that you only have one IP interface for all

security zones in the same transparent group. All security zones are in the same broadcast domain.

• Transparent DMZ - NAT/Routed LAN — In this mode, the network is divided into multiple IP

subnets. Each security zone has a unique IP interface so that the devices within each zone have a

unique IP address space. For example, hosts in the LAN zone use a private (RFC 1918) IP address

range, while hosts in the WAN and DMZ zones use another IP address range. Private IP addresses

originating in the LAN zone and going to the WAN zone are mapped to one or more public IP

addresses using NAT. The internal and external IP interfaces are configured with private and public

Figure 6–1: X Family Transparent Deployment Mode

1 2 ... 142 143 144 145 146 147 148 149 150 151 152 ... 332 333

Keine Kommentare

HP X Unified Security Platform Series Bedienungsanleitung Seite 147