Product Service

Special Topics in Security

Security Research

About Us

About Topsec

China's leading cyber security, big data and cloud service provider

Learn about Topsec

Company Profile

Contact Us

Zero Trust

Build a dual system security framework of zero trust inference and trusted inference.

Security Policy Management System

Build a security product that integrates deep defense system, security, ease of use, visualization, and centralized management.

Security Policy Management System Introduction

As organizations and service providers deploy more and more security devices in the network, the configuration process of each device may result in a rapid increase in IT staff and related costs. In addition, the independent configuration of various devices may also cause inconsistent policies in the network, creating potential security vulnerabilities. Topsec security policy management system is designed for customers using Topsec security appliances and third-party devices. It allows security administrators to easily and efficiently manage up to thousands of devices from a centralized console, and can quickly complete device deployment through easy-to-use and intuitive management features.

Activity & Announcement

Hot products Next Generation Firewall
Typical cases CNCC security construction project

Product Advantages

Whole network security visualization

The equipment monitoring data is graphically displayed in real time, the monitoring target equipment and monitoring items can be dynamically assigned, and it supports large screen, topology and other functions to provide professional visualization applications to meet the needs of conference and exhibition, business monitoring, risk warning, geographic information analysis and other display needs, helping customers to comprehensively understand the status of network security equipment information.

Efficient unified management of security policies

It supports firewall, intrusion prevention, anti-virus and other security policy types, and can synchronize the policies of security devices at regular intervals and in batches. Policy templates can be dynamically associated with devices and domains, which minimizes the need for human-induced policy issuance and makes policy issuance safer, more efficient, and richer in terms of usage scenarios.

Simplify security policy sorting

It supports analyzing the access control policies and objects of security asset configurations, counting policy conflicts, redundancy, expired unused, and automatically analyzing mergeable policy items to improve the efficiency of customer's overall network policy deployment and solve the problem of policy stacking of security assets.

Network-wide security compliance detection

Based on the pre-set knowledge of security configuration, the system can detect compliance of the whole network security asset configuration, and give the detection results and repair suggestions. By optimizing the device configuration to achieve the best state, the security capability of the whole network assets is also changed from passive defense to active defense.

Dynamic defense against security threats

Combining multiple types of security devices, it can control the entire network security status globally, form a closed loop of security, enhance the security level of the whole network and protect the security investment of the enterprise.

Fine-grained authority management

It can be divided into multiple security domains according to the business situation, and the devices are assigned to different security domains, achieving data isolation of different security domains through the virtual system mode; functional rights are refined to the specific operation items of the module, which ensures the safety and reliability of equipment management operations.

Application

Scene Description

Faced with national project scenarios, the increase in the number of security assets poses significant challenges to the operation and maintenance management of network security strategies. Due to the lack of relevant management tools or systems, the global network security policies of various branches at the same level are subject to change. The operational basis of operation and maintenance management personnel is relatively vague, and there is a lack of relevant data analysis reports or scientific basis, which may lead to operation and maintenance security incidents. Additionally, the security assets of each branch cannot be uniformly configured and monitored.

Solve the Problem

To ensure the security isolation, management isolation, and data isolation of each branch's security assets, a hardware security policy management system can be deployed at the headquarters. The branch adopts virtualization resource management, which is similar to a system that can virtualize multiple operating systems of the system, solving the security asset data isolation of each branch.
At various branches of the same level, administrators can effectively analyze the deployment of policies based on the policy analysis overview of the security policy management system, flexibly and uniformly configure security policies, solve the ambiguity of administrator configuration policies, and achieve traceability and basis of configuration policies.
The security policy management system uniformly manages the security assets of each branch, solving the problem of administrators in each branch being unable to monitor devices globally and configure them uniformly.

Value to Customers

Integration of existing security resources

The new scalable architecture design, high-performance communication engine and storage engine enables centralized management of up to thousands of security devices, maximizing the integration of enterprises' existing security resources.

Improve safety operation and maintenance efficiency

Improve the efficiency of safety operation and maintenance through procedural event handling, save manpower investment, help users efficiently complete centralized equipment configuration management, reduce operation and maintenance costs, and improve operation and maintenance efficiency.

Flexible security policy protection

Security protection strategies can be flexibly configured on a regular basis and in batches, combined with security and compliance configuration, to sort and optimize policies, dynamically optimize enterprise security protection strategies, and maintain the most efficient security protection capabilities in real-time.

Dynamic defense against network wide threats

By combining various types of security devices, we can globally control the entire network security status, form a security loop, build an integrated security system, improve the security level of the entire network, and ensure the security investment of enterprises.

Relevant Recommendations

Product Recommendation

Special Recommendation

News Recommendation