极地内部网络控制统一安全方案北京市海淀区上地安宁庄西路9号院金泰富地大厦808100085电话：010-62659336传真：010-62570602服务热线：010-62522762http://www.jidisec.com目录1概述.......................................................................................................-1-1.1背景..............................................................................................-1-1.2需求分析......................................................................................-2-1.2.1政策需求...............................................................................-2-1.2.2管理需求...............................................................................-2-1.2.3技术需求...............................................................................-2-2解决方案概述.......................................................................................-6-3终端管理(JD-ESMS)解决方案...............................................................-6-3.1产品概述......................................................................................-6-3.2产品基础功能..............................................................................-8-3.2.1策略管理...............................................................................-8-3.2.2日志功能...............................................................................-9-3.2.3终端资产管理.......................................................................-9-3.2.4终端用户管理.....................................................................-10-3.2.5报警与响应管理.................................................................-10-3.3主要功能....................................................................................-10-3.3.1终端准入管理.....................................................................-10-3.3.2终端安全防护.....................................................................-12-3.3.3终端行为管理.....................................................................-13-3.3.4系统管理.............................................................................-14-4堡垒主机(JD-FORT)解决方案..............................................................-16-4.1系统架构....................................................................................-16-4.2执行单元功能............................................................................-16-4.2.1统一账号管理.....................................................................-16-4.2.2多种认证方式.....................................................................-17-4.2.3单点登录.............................................................................-17-4.2.4自动捕获用户命令行输入，智能识别命令和编辑输入...-17-4.2.5支持TAB补齐等Readline功能..........................................-17-4.2.6支持组合命令的动作审计..................................................-18-4.3日志服务功能............................................................................-18-4.4管理单元日志查询....................................................................-18-4.5执行单元实时监控功能.............................................................-19-5集中身份管理(JD-4A)解决方案..........................................................-19-5.1概述............................................................................................-19-5.2功能介绍...
