神州泰岳

Adaptive policy computing

Sensing of node changes within the business system for calculation and allocation of policy adaptation. After node migration and scheduling, such as virtual machines, the policy automatically follows. When an asset goes online, the policy is automatically added. When an asset node goes offline, it is automatically deleted from the policy.

Risk threat disposal

A variety of threat disposal methods are available, such as emergency disposal interface, topology-based policy rule removal, policy-based isolation group, etc., so that users can flexibly and quickly deal with risk threats.

Heterogeneous system unified operation and maintenance management

It supports cloud platforms built with common infrastructure technologies, including OpenStack, VMware, KVM, etc., and achieves unified monitoring of internal traffic and unified management of security policies for different loads in a mixed environment.

Business-oriented policy management model

Policy configuration is based on readable business labels, which are easy to understand and significantly reduce the number of policies to maintain.

Comprehensive visibility of business traffic

By collecting and identifying the communication traffic between business hosts, making asset and port ledgers, and visually displaying the current status of the whole network business through visual topology, it realizes the visibility of asset nodes, business communication, and protection policies. This helps managers discover hidden threats and optimize protection strategies.

Host agent

Host agent is the system execution module, responsible for collecting and uploading business host information and obtaining and executing server-side protection policies. It supports offline installation, remote batch installation, image installation and other installation access methods. It supports two-way authentication, remote upgrade, process protection, fault Bypass, etc. to ensure stable and safe operation of business.

Policy management

The system provides centralized management and maintenance of micro-isolation policies for business hosts. The micro-isolation policy is formulated by the administrator based on the analysis of the host business inter-access relationship and business network topology. It supports multi-dimensional policy configuration based on service labels, IP addresses, IP objects, asset groups, and so on.

Object management

It provides management functions of label objects and IP objects. Label, i.e., business attribute label contains dimensions such as application, role, location environment, etc., and supports customized label dimension settings. IP object is a single or multiple assets with known IP but no agent installed, and centralized policy configuration and disposal capability can be realized through IP object settings.

Asset management

It provides centralized management and maintenance of controlled resources, and defines the business attributes of assets through tagging. The scope of managed resources includes physical hosts, virtual machines, containers and other assets equipped with agent plug-ins.

Logical isolation of heterogeneous environments

If the network environment involves multiple business systems, multi-tier architectures, multi-cloud deployments and multiple organizational departments, business isolation and adaptive adjustment can be performed through business labels and asset grouping.

Service traffic baseline construction

The access relationship between business systems and assets in traditional network environments is completely invisible, making it difficult to determine whether access behaviors between assets are compliant with the law, or even being unaware of frequent interactions between external vendor networks with internal classified production systems. SmartGrid helps users grasp the current status of business access and build a baseline of business relationships through traffic visualization.

East-west risk control

SmartGrid isolates assets, services, and ports between different business applications and environments. When the network encounters a threat invasion, it enables the threat to spread and move only within a limited scope of authority, minimizing the affected area.

Software & IT Service

Cloud Value-added Services

RoamWiFi

Game

War and Order

Age of Origins

Infinite Galaxy

Software & IT Service

Cloud Value-added Services

RoamWiFi

Software & IT Service

Game

Software & IT Service

Product Description

Advantages & Features

Product & Function

Host agent

Policy management

Object management

Asset management

Applicable Scenarios

Logical isolation of heterogeneous environments

Service traffic baseline construction

East-west risk control

Home

Solutions

Products

Company

Adaptive policy computing

Risk threat disposal

Heterogeneous system unified operation and maintenance management

Business-oriented policy management model

Comprehensive visibility of business traffic

Host agent

Policy management

Object management

Asset management

Logical isolation of heterogeneous environments

Service traffic baseline construction

East-west risk control