Đồ án chuyên ngành ---- ASA FW

download Đồ án chuyên ngành ---- ASA FW

of 85

Transcript of Đồ án chuyên ngành ---- ASA FW

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    1/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Li cm n

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng1

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    2/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Mc cLi cm n..............................................................................................................................1Mc lc...................................................................................................................................2

    Danh mc hnh.......................................................................................................................3A.Tng quan v ti............................................................................................................!. "#u t$%c c&a ti.............................................................................................................'(.Tng quan v an ninh m)ng*................................................................................................+

    1.Mc ti,u an ninh m)ng....................................................................................................+2."-c h/ng th0c t#n cng...............................................................................................+3. "-c chnh -ch an ninh m)ng.......................................................................................12

    ((. 4a5iu..............................................................................................................................211. Tng quan v 4a5iu*...................................................................................................212. 6i7n t$%c 4AD(89*......................................................................................................23. :;)t "*............................................................................................................................='(((. A9A................................................................................................................................21. L?ch @ $a i. ..............................................................................................................22. "-c n hm t/ng l@a c&a "ic;*.............................................................................23. Biu Chin t$uE cF m)ng GHA"I................................................................................3=. Jia; th0c AAA v 5?ch v hK t$ c&a "ic; A9A........................................................ 6im t$a 0ng 5ng........................................................................................................'N'. 6h nOng ch?u lKi v 5P hQng GRail;vS$ an5 $S5un5ancEI..........................................'N. h-t hiUn VWm nhF G(D9I............................................................................................+3

    (X. M hYng.......................................................................................................................++1. Mc ti,u c&a m hYng................................................................................................++

    2. "-c cng c cZn thi7t thPc hiUn m hYng..............................................................++3. "-c [/\c gi lF A9A t$,n JH93................................................................................+=. 67t qu )t /c..........................................................................................................3

    X.6]T L8^H ":8HJ.......................................................................................................3X(.:_`HJ :T T4(bH "A Bd Te(..........................................................................=Ti liUu tham Ch;*...............................................................................................................=

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    3/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Danh mc h!nhDanh mc [ng.......................................................................................................................=:nh 1f1* "-c l\ [; mFt t/ng l@a...................................................................................13

    :nh 2f1*Mi quan hU tin t/ng

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    4/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Danh mc [ng

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng=

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    5/85

    TM HIU V TRIN KHAI ASA FIREWALL

    ".T#ng $uan %& '& ()iMc ti,u c&a viUc nghi,n c0u v >i$Sall A9A

    r XiUc nghi,n c0u gi% ch; Ch nOng tP hc tm hiu v nghi,n c0u

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    6/85

    TM HIU V TRIN KHAI ASA FIREWALL

    *. C+u (,-c ca '& ()i.B ti /c chia lm ' hZn.

    (. Tng quan v an ninh m)ng

    "h/ng nE m t v c-c nguE c an ninh m)ng v c-c chnh -ch an ninh

    nhxm Sm l)i hiUu qua ch; viUc [; mFt 5k liUu lm gim nguE c h;oc h-t hiUn $a

    P t#n cng.

    ((. 4a5iu"h/ng nE m t v C thuFt @ 5ng V-c thPc&E quEnthanh t;-n

    nhxm Sm l)i hiu qu ca; ch; an ninh m)ng t;n vn v t$-nh th#t th;-t 5k liUu.

    (((. A9A

    "h/ng nE gi\i thiUu v t/ng l&a cic; aa c-c C thuFt /c - 5ng ch;

    t/ng l@u .

    (X. M hYng.

    "h/ng nE m t qu- t$nh hiUn thPc cic; aa v\i m hnh m)ng c th ch;

    th#E tnh thPc t7 v Cim nghiUm %ng ls thuE7t c&a ti nE."h $~ chi ti7t qu-

    t$nh thPc nghiUm.

    X. 67t luFn chung.

    "h/ng nE n,u $a nhkng C7t qu c&a ti lm /c nhkng g v nhkng

    moc h)n ch7 Chj ChOn ch/a thPc hiUn /c c&a ti.

    X(. :/\ng h-t t$in c&a ti.

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng'

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    7/85

    TM HIU V TRIN KHAI ASA FIREWALL

    /.T#ng $uan %& an ninh m0ng:

    1.Mc (i2u an ninh m0ng

    XiUc h-t t$in ngE cng tOng c&a m)ng intS$nSt 5; P thuFn tiUn m nj Sm l)ich; c;n ng/i tuE nhi,n cng C; thS; nhiu mi nguE him $nh $F c&a nhkng

    hacCS$ m)ng. Bm [; ch; ng/i 5zng /c an t;n Chi lm viUc t$,n m)ng l mc

    ti,u hng Zu c&a an ninh m)ng*

    !; m m)ng n

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    8/85

    TM HIU V TRIN KHAI ASA FIREWALL

    3.1 Vi,u8

    M

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    9/85

    TM HIU V TRIN KHAI ASA FIREWALL

    M

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    10/85

    TM HIU V TRIN KHAI ASA FIREWALL

    cng D;9 tn t)i [a; gm c-c cu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    11/85

    TM HIU V TRIN KHAI ASA FIREWALL

    3.. Di8(,iu(=A D=niaEFES=,%ic=

    DD;9 t/ng tP nh/ t$;ng s ?nh c&a cu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    12/85

    TM HIU V TRIN KHAI ASA FIREWALL

    thPc P. "-c cu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    13/85

    TM HIU V TRIN KHAI ASA FIREWALL

    th c&a m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    14/85

    TM HIU V TRIN KHAI ASA FIREWALL

    V-c ?nh c-c h)n ch7 /c E,u cZu h)n ch7 t$uE cF qun t$? [a; gm c [n

    cF nhFt hZn mm thPc hiUn v c#u hnh t/ng l@a.

    L\ th0 [a l c#u hnh t/ng l@a

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    15/85

    TM HIU V TRIN KHAI ASA FIREWALL

    MKi t ch0c cj E,u cZu an ninh $i,ng [iUt v 5; j cj chnh -ch [; mFt $i,ng

    T >T 9imlS

    HSt;$C ManagSmSnt $;t;c;l G9HMI v [#t Cy gia; th0c Ch-c cj th /c @

    5ng qun ls v 5uE t$ thi7t [?.

    ;.;. Chnh 84ch c:

    ThaE v ?nh ngh}a [< quE t{c thPc t7 t/ng l@a @ 5ng c-c chnh -ch lc

    cZn hi ch v V-c ?nh chnh V-c c-c l;)i lc m hi /c @ 5ng v ni lc

    /c - 5ng. "hnh -ch nE cj Vu h/\ng gii quE7t c#u hnh t/ng l@a t}nh v

    chi ti7t t$;ng l\ l/u l/ng m)ng qua t/ng l@a. X 5 m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    16/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "-c chnh -ch lc cng cZn V-c ?nh c-c E,u cZu chung t$;ng viUc C7t ni m)ng

    c# < [; mFt v ngun Ch-c nhau. X 5 v\i m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    17/85

    TM HIU V TRIN KHAI ASA FIREWALL

    ;.>. Chnh 84ch 'Bnh (uyn:

    "-c chnh -ch ?nh tuE7n th/ng Chng hi l m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    18/85

    TM HIU V TRIN KHAI ASA FIREWALL

    $Sha$S5 CSE ch0ng thPc m $

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    19/85

    TM HIU V TRIN KHAI ASA FIREWALL

    thi7t thPc v hiUu qu in hnh l [a ti,u chun cZn /c V-c ?nh $

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    20/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Jik mi l/u l/ng qun ls Ri$Sall /c [; mFt.

    Sm l)i c-c quE t{c t/ng l@a ?nh Cy.

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    21/85

    TM HIU V TRIN KHAI ASA FIREWALL

    //. RaAiu8

    1. T#ng $uan %& RaAiu8:

    1.1. """:

    1.1.1. X4c (hc Y"u(h=n(ica(inZ

    -c thPc l qu- t$nh V-c minh 5anh tnh c&a m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    22/85

    TM HIU V TRIN KHAI ASA FIREWALL

    m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    23/85

    TM HIU V TRIN KHAI ASA FIREWALL

    mi t$/ng cj E,u cZu ng/i @ 5ng Ch-c nhau v u thaE i thi7t C7 m)ng. "j

    m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    24/85

    TM HIU V TRIN KHAI ASA FIREWALL

    P hiUn 5iUn v nhkng m-E au j gia; ti7 v\i c-c thi7t [? HA9 thch h t)i c-c

    (9 nhY hn.

    M-E Ch-ch E,u cZu 5?ch v v ngun ti nguE,n t m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    25/85

    TM HIU V TRIN KHAI ASA FIREWALL

    :nh 2f1*Mi quan hU tin t/ng

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    26/85

    TM HIU V TRIN KHAI ASA FIREWALL

    4AD(89 w chnh th0c /c gia; cng 8D 112 ch; 4AD(89 AuthSnticati;n

    v 113 ch; 4AD(89 Acc;unting [i (ntS$nSt AignS5 Hum[S$ Auth;$itE

    G(AHAI. TuE nhi,n t$/\c Chi (AHA hWn [ c-c cng 112 v 113 cng 1'= v

    1'=' GV-c thPc v C7 t;-n t/ng 0ngI w /c @ 5ng Chng chnh th0c v t$thnh c-c cng moc ?nh 5; nhiu m-E ch& v m-E Ch-ch 4AD(89 t$in Chai t$;ng

    thi gian nE. T$uEn thng c&a viUc @ 5ng 1'= v 1'=' ti7 tc t/ng thch

    ng/c t$ l)i ch; 7n ngE naE. X ls 5; nE nhiu m-E ch& 4AD(89 t$in Chai

    gi-m -t c hai [< cng 8D ch; c-c E,u cZu 4AD(89. "-c m-E ch& 4AD(89

    Mic$;;Rt moc ?nh 112 v 113 nh/ng moc ?nh c-c thi7t [? "ic; l cng t$uEn

    thng1'= v 1'='. "-c m-E ch& 4AD(89 uniS$ HSt;$C l{ng nghS t$,n c hai

    cng chnh th0c v Chng chnh th0c 1'= 112 1'=' v 113 moc ?nh nh/ng cj

    th /c c#u hnh v\i c-c cng [#t Cy.

    Bi v\i E,u cZu h;)t " 4AD(89 m t l tt nh#t* T)i m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    27/85

    TM HIU V TRIN KHAI ASA FIREWALL

    v#n hjc [%a nE v nj ch; h m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    28/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    29/85

    TM HIU V TRIN KHAI ASA FIREWALL

    3.3.1. M

    T$/ng mw 5i m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    30/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "-c oc im C thuFt 4>" Qi hYi nhkng h;)t

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    31/85

    TM HIU V TRIN KHAI ASA FIREWALL

    AccSf4SSct

    AccSf"hallSngS

    Acc;untingf4SquSt

    Acc;untingf4S;nS

    3.;.1. "cc=88ER=$u=8(:

    "-c gji tin AccSf4SquSt /c @ 5ng [i ng/i ti,u 5zng 5?ch v Chi /c

    ngh? m" ch; th#E c-c gji t$ li hi /c g@i 7n t#t c

    c-c gji E,u cZu h lU t$ li l V-c thPc haE t chi.

    "-c ti t$ng c&a gji tin AccSf4SquSt n,n [a; gm c-c thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    32/85

    TM HIU V TRIN KHAI ASA FIREWALL

    3.;.3. "cc=88E"cc=5(:

    "-c gji tin AccSfAccSt /c g@i [i m-E ch& 4AD(89 t\i m-E Ch-ch

    V-c nhFn $xng E,u cZu c&a m-E Ch-ch /c ch# nhFn. H7u t#t c c-c E,u cZu t$;ngc-c ti t$ng AccSf4SquSt /c ch# nhFn au j c-c m-E ch& 4AD(89 hi

    thi7t lF t$/ng mFt mw gji tin t$ li l 2. "-c m-E Ch-ch Chi nhFn /c gji ch#

    nhFn hz h nj v\i c-c gji tin t$ li [xng c-ch @ 5ng t$/ng nhFn 5)ng. "-c

    gji Chng thS; ti,u chun nE /c [Y i.

    T#t nhi,n m [; $xng c-c gji tin E,u cZu v ch# nhFn hz h nh/ w

    nji m [; c-c - t$ ch# nhFn /c g@i t$;ng c-c gji tin t$ li E,u cZu

    t/ng 0ng t$/ng ?nh 5anh t$;ng ti,u gji AccSfAccSt hi cj m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    33/85

    TM HIU V TRIN KHAI ASA FIREWALL

    c-c thPc hiUn c- nhWn. Jji AccSf4SSct cj th /c g@i t)i [#t Cy thi gian t$;ng

    m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    34/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    35/85

    TM HIU V TRIN KHAI ASA FIREWALL

    n,n ch0a m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    36/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Jji tin Acc;untingf4S;nS /c g@i [i m-E ch& C7 t;-n 4AD(89 ch; m-E

    Ch-ch V-c nhFn $xng c-c Acc;untingf4SquSt w /c nhFn v ghi nhFn thnh

    cng. H7u Acc;untingf4SquSt w /c ghi l)i thnh cng au j m-E ch& C7 t;-n

    4AD(89 hi chuEn m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    37/85

    TM HIU V TRIN KHAI ASA FIREWALL

    chS gi#u. Ji\i h)n C thuFt 5uE nh#t l nhkng [ mFt chia hi cj chiu 5i l\n

    hn nh/ng 4>" ChuE7n c-; $xng c-c [ mFt t nh#t l 1' ;ctSt. M

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    38/85

    TM HIU V TRIN KHAI ASA FIREWALL

    cj th t$;ng Ch;ng 1f2 v\i m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    39/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "huKi Cs tP G9T4(HJI* "huKi Cs tP th/ng /c V-c ?nh l chuKi in 8T>f cj

    th /c c thS; gi- t$?. Dk liUu /c t$uEn 5/\i 5)ng mI

    B< 5iX

    Ji- t$?k XA9 [,n t$;ng

    ti t$ng

    Ti t$ng gji4AD(89

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    40/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "-c /c g-n. " th hn c-c nh cung c# c- nhWn /c mw h;- v\i c;n

    5uE nh#t /c gi l mw 5;anh nghiU t/ nhWn qun ls m)ng h;oc HM".

    Th0 tP c&a c-c n

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    41/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Chi&u A)i

    T$/ng nE l m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    42/85

    TM HIU V TRIN KHAI ASA FIREWALL

    g;;glS.c;m

    B?a ch (

    G(ADD4I

    = 32 [it

    V>>>>>

    V"A12

    V1N=>>VA

    HgE th-ng

    GDATI

    = 32 [it

    6hng 5#u

    V"A12

    V>>>>>

    VA

    V1N=>>Hh? hWn

    G!(HA4I

    1 1 [it

    1

    !ng 2.1 MKi thu" 4AD(89.

    ;. H0( 'bng:

    ;.1. u4 (,nh (,uy cQ5:

    6hi m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    43/85

    TM HIU V TRIN KHAI ASA FIREWALL

    mFt /c chia hi /c Wm thZm [Y i. H7u m-E Ch-ch l h lU m-E ch&

    4AD(89 t$a c0u m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    44/85

    '

    1 2

    3

    TM HIU V TRIN KHAI ASA FIREWALL

    v Gv 5* 9L( ng/i 5zng Ong nhFI v t#t c c-c gi- t$? cZn thi7t cung

    c# c-c 5?ch v m;ng mun. Bi v\i 9L( v iu nE cj th [a; gm gi- t$?

    nh/ ?a ch ( u[nSt maC MT8 nn m;ng mun v nhFn 5)ng lc gji m;ng

    mun. Bi v\i nhkng ng/i 5zng ch7 < Cs tP iu nE cj th [a; gm gi- t$? nh/gia; th0c v m-E ch& m;ng mun.

    T$;ng V-c thPc th-ch th0c hn hi ng/i @ 5ng /c ch; m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    45/85

    TM HIU V TRIN KHAI ASA FIREWALL

    4AD(89 m-E ch& 4AD(89 g@i gji AccSfAccSt v ch; "ic; A9A n7u

    thng ng/i 5zng nhF Chng cj th m-E ch& 4AD(89 g@i gji AccSf4SSct

    v ch; cic; A9A.

    'I "ic; A9A hn hi v ch; m-E Ch-ch [i7t /c h haE Chng /ch t$uE cF v; 1 5?ch v c th.

    3.2. Qu trnh k ton:

    6hi m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    46/85

    TM HIU V TRIN KHAI ASA FIREWALL

    >. RoC8:

    4.1. Ngun gc:

    4AD(89 [an Zu /c quE ?nh t$;ng m( [i MS$it HSt;$C v; nOm1NN1 Cim ;-t t$uE cF quaE t\i H9>HT. Livingt;n ntS$$iS t$ li ch;

    4>( v\i m t c&a m" 2 v 4>" 2N Ghi,n [n hiUn t)i l 4>" 2' v 4>" 2''I.

    !WE gi tn t)i m.3. *ng RoC8:

    RoC Ti2u '& Ng)y4>"

    2=

    Mic$;;Rt XSn5;$fSciRic 4AD(89 Att$i[utS 31NNN

    4>"

    2'

    4Sm;tS AuthSnticati;n Dial (n 8S$ 9S$vicS G4AD(89I '2

    4>"

    2''

    4AD(89 Acc;unting '2

    4>"

    2'+

    4AD(89 Acc;unting M;5iRicati;n R;$ TunnSl $;t;c;l

    9u;$t

    '2

    4>" 4AD(89 Att$i[utS R;$ TunnSl $;t;c;l 9u;$t '2

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng='

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    47/85

    TM HIU V TRIN KHAI ASA FIREWALL

    2'4>"

    2'N

    4AD(89 VtSni;n '2

    4>"

    31'2

    4AD(89 an5 (v' 21

    4>"

    3+N

    4AD(89 9u;$t R;$ A N23

    4>"

    ";mm;n 4AD(89 (mlSmSntati;n (uS an5 9uggStS5

    >iVS

    122+

    4>"

    NN+

    8S ;R 9tatuf9S$vS$ acCSt in thS 4AD(89 $;t;c;l 21

    4.3. ! "#$c %& '()*+ ',Cs:

    >.;.1. RoC 3K:

    4>" 2' 4Sm;tS AuthSnticati;n Dial (n 8S$ 9S$vicS* ch& E7u m t v c

    ch7 V-c thPc v &E quEn Chi ng/i 5zng mun t$uE cF.

    T$;ng 4>" cj gi\i thiUu c#u t$%c c-c gji tin cZn 5zng thPc hiUn V-c thPc v&E quEn ch; ng/i 5zng t$uE cF v c-c thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    48/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Ji- t$? thSm v; ch; 9S$vicSfTES L;ginf9S$vicS >$amS5f$;t;c;l

    >$amS5f";m$Si;n v HA9f;$tfTES.

    HA9f;$t cj th @ 5ng t#t c 32 [it.

    "-c v 5 hiUn naE [a; gm hin th? hU thF lc hWn c&a c-c gji 5k liUu. "ng 8D ngun hi /c @ 5ng C7t h v\i [< nhFn 5)ng E,u cZu Chi

    V-c ?nh c-c [n a;.

    Hhiu thu" 2'.

    "ng nh/ 4>" 2' 4>" 2'' cng gi\i thiUu v c-c gji tin /c 5zng t$;ng

    qu- t$nh C7 t;-n v c-c thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    49/85

    TM HIU V TRIN KHAI ASA FIREWALL

    M" 213N*

    ThaE th7 89fA9"(( [xng 8T>f.

    Th,m ghi ch% t$;ng $;VE.

    >$amS5f(fA55$S n,n ch0a ?a ch ( thPc t7 c&a ng/i @ 5ng.

    H7u Acctf9Si;nf(D w /c g@i t$;ng m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    50/85

    TM HIU V TRIN KHAI ASA FIREWALL

    thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    51/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    52/85

    TM HIU V TRIN KHAI ASA FIREWALL

    T#t c c-c thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    53/85

    TM HIU V TRIN KHAI ASA FIREWALL

    r "ic; >9MG>i$Sall 9S$vicS M;5ulSI

    r "ic; (9 >i$Sall.

    ;. i&u ^hiWn (,uy cQ5 m0ng YN"CZ"ic; A5ativS 9Scu$itE AliancS GA9AI cj th gi% [; vU m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    54/85

    TM HIU V TRIN KHAI ASA FIREWALL

    t$uEn i. H7u m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    55/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "j nOm l;)i A"L Ch-c nhau w cung c# m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    56/85

    TM HIU V TRIN KHAI ASA FIREWALL

    S[XH A"L* MiltS$ing

    84L >iltS$ing

    ;.3.1. Cn(=n( oi(=,ing

    XiUc Cch h;)t ava h;oc ActivS t$;ng mi t$/ng lm viUc cj th Chi7n ng/i5zng ngWE th ti v tF tin thPc thi

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    57/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Chng tin cFE. "ic; A9A cj th hWn [iUt gika c-c alSt tin cFE v alSt Chng

    tin cFE. H7u m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    58/85

    TM HIU V TRIN KHAI ASA FIREWALL

    >i$Sall nj gi% 5#u t#t c ( [,n t$;ng LAH v\i th7 gi\i [,n ng;i t$-nh

    P 5Qm ngj c&a hacCS$.

    Tnh linh h;)t v P 5| 5ng t$;ng viUc qun ls

    HAT gi% ch; c-c h;mS uS$ v c-c 5;anh nghiU nhY cj th t); C7t ni v\i

    intS$nSt m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    59/85

    TM HIU V TRIN KHAI ASA FIREWALL

    Auth;$iati;n GE quEnI* L h/ng h- m m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    60/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    61/85

    TM HIU V TRIN KHAI ASA FIREWALL

    4.1. R=m(= "u(h=n(ica(in DiaE/n _8=, S=,%ic= Y'-ius.

    4AD(89 l munC 9tSSl !SltS5.

    Mic$;;Rt (ntS$nSt AuthSnticati;n 9S$vS$.

    Bi v\i m)ng V-c thPc m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    62/85

    TM HIU V TRIN KHAI ASA FIREWALL

    li,n quan 7n m-E ch& n ng h-t l)i v h7t gi /c V@ ls t$,n thi7t [? ch0

    Chng hi l gia; th0c t$uEn ti. "h0c nOng nE Ch-c v\i TA"A"9 r < tin cFE

    t$;ng gia; th0c h thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    63/85

    TM HIU V TRIN KHAI ASA FIREWALL

    "-c m-E ch& 4AD(89 nhFn /c E,u cZu V-c thPc ng/i 5zng v au j t$ v

    thng tin c#u hnh cZn thi7t ch; Ch-ch hng hK t$ c-c 5?ch v c th ch; ng/i

    5zng. "-c m-E ch& 4AD(89 thPc hiUn iu nE [xng c-ch g@i (ntS$nSt nginSS$ing

    TaC >;$cS G(T>I h;oc c-c thu

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    64/85

    TM HIU V TRIN KHAI ASA FIREWALL

    >.3. Bnh A0ng T"C"CS %) c4c gi4 (,B (i2u '&

    "-c (D TA"A"9 ?nh ngh}a mlag

    9Si;ni5LSngth

    :nh 3f=* B?nh 5)ng gji tin

    Ma;$vS$i;n BWE l hi,n [n chnh c&a TA"A"9. gi- t$? Vu#t hiUn t$;ng

    ti,u nh/ TA"L89MA4X4 Vc.

    Min;$vS$i;n*cung c# S$ial ch; gia; th0c TA"A"9. Hj cng cung c#

    ch; Ch nOng t/ng thch c&a gia; th0c. M

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    65/85

    TM HIU V TRIN KHAI ASA FIREWALL

    rTA"L899(HJL"HH"T>LAJ*-c ?nh gh h;oc Chng gh

    c-c hi,n tacac t$,n m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    66/85

    TM HIU V TRIN KHAI ASA FIREWALL

    $a Chi ng/i 5zng nhF v; in v /c ng [< hja v\i m-E ch& cung c#

    c ch7 V-c thPc. M-E ch& 9D( cj th /c c#u hnh E,u cZu ng/i 5zng nhF

    v; [in m\i Chi ang V-c thPc.

    " ch7 V-c thPc j /c th hiUn hnh 3f*

    :nh 3f* " ch7 V-c thPc

    1.Hg/i 5zng thPc hiUn C7t ni v\i thi7t [? [; mFt "ic; A9A.

    2."ic; A9A [{t Zu thPc hiUn c ch7 V-c thPc.

    3.Hg/i @ 5ng cung c# thng tin 8S$namS an5 a;$5.

    =."ic; A9A chuEn ti7 c-c E,u cZu V-c thPc 7n m-E ch& 9D(.

    .H7u nh/ mw [in m\i /c ch# thuFnm-E ch& 9D( V-c thPc ng/i 5ung v

    E,u cZu m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    67/85

    TM HIU V TRIN KHAI ASA FIREWALL

    iu hnh 8niV h;oc LinuV ch)E m-E ch& V-c thPc 6S$[S$;.B/c hK t$ V-c

    thPc c-c m-E Ch-ch XH."ic; A9A gia; ti7 v\i th/ mc tch cPc vh;oc m-E

    ch& 6S$[S$; @ 5ng 8D cng .

    >.. Ligh(=igh( Di,=c(,y "cc=88 J,(c YLD"JZ

    "ic; A9A hK t$ gia; th0c LDA &E quEn C7t ni t$uE cF t Va XH.Jia;

    th0c V-c thPc LDA /c $~ t$;ng 4>" 33++ v 4>" 3++1.LDA cung c# c-c

    5?ch v &E quEn Chi t$uE cF 7n c 5k liUu c&a ng/i 5zng v\i thng tin cWE

    th/ mc."ic; A9A gia; ti7 v\i m-E ch& LDA thng qua T" cng 3N. LDA

    ch cung c# c-c 5?ch v &E quEn.X vFE m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    68/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    69/85

    TM HIU V TRIN KHAI ASA FIREWALL

    +. "liSnt h-t $a E,u cZu un[in5 v\i E,u cZu nE S$vS$ [i7t $xng cliSnt mun hu [Y

    C7t ni.

    . 9S$vS$ jng C7t ni

    . ]iWm (,a 6ng Ang

    " ch7 Cim t$a 0ng 5ng c&a "ic; @ 5ng Cim t$a < an ninh c&a c-c

    0ng 5ng v 5?ch v t$;ng hU thng. "-c cng c Cim t$a t$)ng th-i thng tin v

    mKi C7t ni i qua c-c intS$RacS c&a thi7t [? an ninh v m [; ch%ng l h lU.

    T$)ng th-i 0ng 5ng Cim t$a VSm Vt Chng ch c-c ti,u gji tin m cQn lc n

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    70/85

    TM HIU V TRIN KHAI ASA FIREWALL

    :nh 3f+*minh ha li,n C7t ch?u lKi

    .3. i&u ^ivn ^ch h0( ^h nOng chBu fi

    6h nOng ch?u lKi VE $a

    6hi ng/i qun t$? thi7t lF chuEn i t ch7 < ch&

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    71/85

    TM HIU V TRIN KHAI ASA FIREWALL

    6im t$a P h;)t

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    72/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    73/85

    TM HIU V TRIN KHAI ASA FIREWALL

    $a th c-c gji tin t$;ng hng i /c chuEn Vung hng i /u ti,n th# ch; t\i

    Chi gji tin hng i /u ti,n ca; t$ngn7u hng i /u ti,n ca; cj l/u l/ng t$uE

    cF th /c hc v t$/\c.Thng qua viUc gi\i h)n l/u l/ng thi7t [? an ninh

    thPc hiUn m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    74/85

    TM HIU V TRIN KHAI ASA FIREWALL

    gim chi h thiUt h)i v P gi-n ;)n c&a hU thng thi7t [? t/ng l@a aa c&a cic;

    hK t$ hai l;)i Ch-c nhau c&a hU thng h-t hiUn VWm nhF*

    HSt;$Cf[aS5 int$ui;n 5StScti;n EtSm GH(D9I.

    :;tf[aS5 int$ui;n 5StScti;n EtSmG:(D9I.

    K.1. N=(,^Ea8=A in(,u8in A=(=c(in 8y8(=m8 YN/DSZ

    Bi hU thng m)ng c-c hU thng h-t hiUn VWm nhF /c thi7t C7 V-c ?nh

    chnh V-c hWn l;)i v [; vU chng l)i mi S 5a w v ch/a [i7t nh{m mc ti,u

    m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    75/85

    TM HIU V TRIN KHAI ASA FIREWALL

    K.1.1. Lsi (h ca N=(,^E*a8=A /DS8

    pun ls /c c m

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    76/85

    TM HIU V TRIN KHAI ASA FIREWALL

    hacCS$ c g{ng ngOn chon h-t hiUn [xng c-ch gi nhiu gji 5k liUu hWn mnh

    chng ch;. M

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    77/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    78/85

    TM HIU V TRIN KHAI ASA FIREWALL

    hZn mm gi lF JH93.>i55S$

    T;;l A9DMXH cliSnt c&a cic;.

    M-E " hi ci gji ava h< t$ ch; A9DM.

    ;. C4c c gi Q5 "S" (,2n GNS;

    M JH93 v; 5it$SRS$SncS v chn pSmu

    Ta ch;n Ta[ A9A [,n hi mn hnh

    Ta c#u hnh ta[ nE nh/ au

    f"h;n (nit$i5 * 0ng v\i RilS Aa.g

    f6S$nSl*vmlinu

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng+

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    79/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    80/85

    TM HIU V TRIN KHAI ASA FIREWALL

    f Ta nhF c-c lUnh au v; c@a c;n;lS

    m;5$;[S S1

    iRc;nRig Sth u

    iRc;nRig Sth1 uiRc;nRig Sth2 u

    iRc;nRig Sth3 u iRc;nRig

    Sth= u iRc;nRig

    Sth u c

    aa[inlina mnt5iClina c

    aa[inlinam;nit;$

    mnt5iClinam;nit;$ c5 mnt5iC mnt5iClinam;nit;$

    f B7n WE th ta w lm V;ng v ang t$;ng gia; 5iUn c;n;lS c&a Ri$Sall A9A.

    Ta cj th 5zng lUnh Sna[lS a;$5 Chng cj ta SntS$ ti7 tc

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    81/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    82/85

    TM HIU V TRIN KHAI ASA FIREWALL

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    83/85

  • 8/12/2019 n chuyn ngnh ---- ASA FW

    84/85

    TM HIU V TRIN KHAI ASA FIREWALL

    T)i ivu (ham ^h:

    Ting Viv( 1

    3 ;Ting "nh

    > DavS :uca[E Ci8c "S" anA J/X oi,=a HanA^ u[lihS$* "ic;$S +12 ai[ >$ahim ma$ 9ant; Ci8c "S": "EinEn= oi,=a /JS anA VJN"Aa5(i%= S=cu,i(y u[lihS$* "ic; $S 2112 ai[ >$ahim ma$ 9ant; Ci8c "S": "EinEn= oi,=a /JS "n(iEXanA VJN "Aa5(i%= S=cu,i(y "55ianc= YS=cnA Ai(inZ u[lihS$* "ic;$S 2112

    9=8iA=I htt*R;$um.athSna.S5u.vncic;fccnafccnfcciS1'3fgiaflafRi$Sallfaaft$Snfgn3.htmlK htt*nhatnghS.c;mR;$umh;th$Sa5.ht332+

    SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng=

    http://forum.athena.edu.vn/cisco-ccna-ccnp-ccie/1653-gia-lap-firewall-asa-tren-gns3.htmlhttp://forum.athena.edu.vn/cisco-ccna-ccnp-ccie/1653-gia-lap-firewall-asa-tren-gns3.htmlhttp://nhatnghe.com/forum/showthread.php?t=83327
  • 8/12/2019 n chuyn ngnh ---- ASA FW

    85/85