H3C+SecPath+U200-C统一威胁管理产品+客户使用手册-5PW101

可以快速地浏览各种互联网上的信息，可进行网上交谈、收发电 子邮件、获得所需要的信息等。 z 组建多个内部局域网功能，实现各局域网间安全隔离。通过 VLAN 功能用户能方便地在网络中快捷地组建宽带网络，而无需改变任 何硬件和通信线路。 z 无线内部组网功能，为您提供灵活方便的接入方式，您可以使用 支持无线网卡的电脑通过无线网络接入局域网，省去了连接电脑 与网络的网线，在您布线受限的条件下更能显出其优越性。您还 可针对不同部门设置不同的无线网络名称，设置不同的访问权限 和安全机制，例如为来访人员设置专用的无线网络名称。为避免 各无线网络之间的相互干扰，提供自动信道选择和手工配置两种 方式，默认采用自动信道选择方式。 z 完善的防火墙功能，基于 URL 的内容过滤、基于 IP 地址、IP 地 址段或基于用户的访问控制，保证内网安全。例如，您可以设置 URL 地址，过滤指定网站；设置 URL 关键字，过滤相关网站。您 还可以禁止部分电脑在工作日的 9：00－17：00 访问某些游戏娱 乐网站。 z 强大的入侵检测功能，本产品的入侵检测功能能够检测拒绝服务 （DoS）、扫描窥探、畸形报文等多种类型的攻击，并对攻击采 取合理的防范措施。包括黑名单过滤、报文攻击特征识别、流量 异常检测、入侵检测统计等。它分析经过本设备的报文的·············································································· 5-12 5.8 IPSec VPN ················································································· 5-14 5.9 入侵检测 ····················································································· 5-26 5.10 Web过滤··················································································· 5-30
目录
1 前言········································································································· 1-1 2 安全注意事项 ·························································································· 2-1 3 产品介绍·································································································· 3-1
3.3.1 前面板 ················································································ 3-3 3.3.2 后面板 ················································································ 3-5 4 基本连接配置 ·························································································· 4-1 4.1 建立有线连接················································································ 4-1 4.2 开启电源 ······················································································· 4-2 4.3 建立无线连接················································································ 4-2 5 业务功能介绍 ·························································································· 5-1 5.1 配置前的准备················································································ 5-1 5.1.1 登录Web配置界面······························································ 5-1 5.1.2 登录命令行配置界面 ·························································· 5-3 5.2 用户密码修改················································································ 5-4 5.3 配置接口IP地址 ············································································ 5-5 5.4 配置接口安全域 ············································································ 5-5 5.5 宽带上网 ······················································································· 5-6 5.6 无线组网 ······················································································· 5-7 5.6.1 使用出厂预配置的无线网络 ··············································· 5-7 5.6.2 添加新的无线网络······························································ 5-7
如果长时间使用设备，外壳会有一定程度的发热。请不必担心，这属 于正常现象，设备依旧能正常工作。
2-1
3 产品介绍
3.1 主要功能
本产品已经为您做了全面的预配置工作，您不再需要进行任何配置， 正确连接后即可使用。 本产品还为您提供了灵活的功能选项，您可以根据自己的需求进行功 能选择，您可以使用的功能包括： z 高速宽带上网功能，支持现行各种接入认证方式。通过此功能您
ii
1 前言
SecPath U200-C 统一威胁管理产品是 H3C 公司专门为品牌客户定制 的一款功能强大、性能卓越的终端产品，向您提供了一个灵活、安全 和完备的企业网络解决方案。它的配置简单、操作方便、使用灵活、 安全可靠。为了您更有效的了解和使用本产品，我们向您提供本产品 的用户使用手册，请您仔细阅读。 本手册包含： z 安全注意事项 z 产品介绍 z 基本连接配置 z 业务功能介绍 z 快速故障定位 z 附录A Windows XP配置动态获取IP地址 z 附录B IPSec VPN客户端配置
燥，以免引起触电或其它危险；请不要使用已破损或老化的电源 线。 z 请勿在无人监管的情况下让儿童使用设备；请勿让儿童玩耍设备 及小配件，避免因吞咽等行为产生危险。 z 如有不正常现象出现，如：冒烟、声音异常、有异味等，请立刻 停止使用，并断开电源，拔出电源插头。 z 安放设备时请在四周和顶部留出 10cm 以上的散热空间，并远离 热源或裸露的火源，例如电暖器、蜡烛等。 z 请勿在设备以及电源线或电源插头上放置任何物体。请不要拿物 体覆盖机箱的通风口。 z 清洁前，请先停止使用设备并切断电源。清洁时，请使用柔软的 干布擦拭设备外壳。 z 请勿自行拆卸设备，设备发生故障时请联系指定的维修点。
3.1 主要功能 ······················································································· 3-1 3.2 规格 ······························································································ 3-2 3.3 外观 ······························································································ 3-3
1-1
2 安全注意事项
在设备的安装和使用中，请注意下列安全事项： z 遇到雷雨天气时请停止使用设备，并断开电源，拔出电源线和电
话线，以免设备遭雷击损坏 z 请将设备放置于平稳工作台上，并安放在通风、无强光直射的环
境中。 z 在存储、运输和使用设备的过程中，必须严格保持干燥。若有液
体意外流入机箱，请立即断开电源，并与指定的维修点联系。 z 请使用设备配套的电源适配器等配件。请保持电源插头清洁、干
5.10.1 网站地址过滤 ································································· 5-31 5.10.2 URL参数过滤 ································································· 5-33 5.10.3 Java阻断 ········································································ 5-34 5.10.4 ActiveX阻断 ··································································· 5-35 5.11 防病毒······················································································· 5-36 5.12 高级网络功能············································································ 5-37 5.13 恢复到出厂配置 ········································································ 5-37 6 快速故障定位 ·························································································· 6-1 附录A Windows XP配置动态获取IP地址······················································· 1 附录B IPSec VPN客户端配置 ······································································· 1