Affiliations: Department of Science, Gansu University of Chinese Medicine, Lanzhou, Gansu 743000, China | E-mail: 362327630@qq.com
Correspondence:
[*]
Corresponding author: Department of Science, Gansu University of Chinese Medicine, Lanzhou, Gansu 743000, China. E-mail: 362327630@qq.com.
Abstract: With the rapid development of medical informatization as well as the larger quantities of information and higher integration level, it has become a severe challenge to keep the core data confidential. In this thesis, the role of next-generation firewall in the medical network has been first introduced. Then, a medical network has been designed and an overall network building scheme aimed at the medical network has been planned based on the actual demand of a hospital. Then, VLAN has been divided and IP address has been planned to each floor. Moreover, relevant protocols and important equipment to be used have been introduced in detail, including DHCP protocol, SNMP protocol, next-generation firewall safety devices. In addition, the IP address of each area has been planned, the connectivity of LAN has been tested and the simulated attack and defense test has been taken based on the deployment principle of next-generation firewall. Furthermore, a detailed introduction of deployment of security policy as well as some common security vulnerabilities on firewall has been made. At last, the attack and defense test of firewall has been taken to prove the efficient protection function of firewall in the medical network and meanwhile prove that next-generation firewall technique could help the hospital solve the network security issues to some extent.
Keywords: Network information security, next-generation firewall, security vulnerabilities, attack and defense test
