Stock Abbreviation : Topsec      Stock Code : 002212
7*24 hour service: 400-777-0777

Network Equipment Procurement Project for A Provincial Branch of A Certain Bank

Targeting the core nodes of a bank's provincial headquarters and branches, it is deployed at the core network boundary to accurately identify and block various network attacks and malicious traffic. Satisfy financial grade high reliability requirements, effectively enhance network defense capabilities, and ensure the safe and stable operation of critical business systems.

Background

With the deepening of digital transformation of a provincial branch of a bank and the rapid growth of key businesses, the existing network boundaries are facing increasing risks such as APT attacks and malicious intrusions. At the same time, the Cybersecurity Law and compliance requirements in the financial industry are becoming increasingly strict, setting higher standards for the high reliability and autonomous controllability of network equipment. Difficult to meet the real-time protection needs of massive business traffic. To strengthen the network security defense line and ensure the continuous and stable operation of business, this network equipment procurement project is launched to purchase high-performance intrusion prevention products and comprehensively upgrade the core boundary security protection system of the branch.

Activity & Announcement
Requirement Analysis
01

Dual machine cluster deployment, adapted to the branch production network access area architecture.

02

Accurately identify applications, limit illegal applications and ensure Internet access.

03

Financial grade low latency and linkage capability, ensuring collaborative protection across the entire network.

Solution Architecture

This scheme is adapted to the two-level architecture of the head office branch of a bank, adopts an intrusion prevention system, and follows the principle of "full coverage and layered protection". On the head office side, the dual computer hot standby of the intrusion prevention system is connected in series to the production network, the office Internet border, the internal areas of the office network, and the external access area, giving consideration to the north-south external network attack blocking and east-west internal network horizontal penetration protection; At the branch side, intrusion prevention systems are deployed synchronously in the production network, office network and Internet access area to intercept local threats nearby.

Value to Customers
Threat attack defense, enhance security

Real time blocking of various hacker attacks on business system servers and software, ensuring the continuous and reliable operation of business systems.

Protecting customer resources and improving return on investment

Accurate application recognition and control, comprehensive monitoring of business traffic, ensuring that critical applications are unobstructed 24/7, and improving bandwidth resource utilization.

Compliance with regulations and effective compliance response

Providing comprehensive intrusion prevention solutions helps customers meet the requirements of level protection and relevant policies and regulations, enhancing compliance capabilities.