Practice operation and maintenance knowledge accumulation

Springboard machine

It belongs to the category of internal control fortress machine , It is a host application system for single sign on . The springboard machine is a server , Maintenance personnel in the process of maintenance , First, log in to this server uniformly , Then log in to the target device from this server for maintenance .

but The springboard machine does not realize the control and audit of the operation behavior of the operation and maintenance personnel , Besides , There is a serious security risk for the springboard , Once the springboard system is attacked , The risk of back-end resources will be fully exposed . There is no control and audit on the operation behavior of operation and maintenance personnel , In the process of using the springboard machine, there will still be misoperation 、 Accidents caused by illegal operation , Once an operation accident occurs, it is difficult to quickly locate the cause and responsible person .

For individual resources （ Such as telnet） Can complete certain internal control through the springboard machine , But for more specific resources （ftp、rdp etc. ） Speaking of , It seems that I can't do it .

Fortress machine （ Improve some defects of the springboard machine ）

Fortress machine in a specific network environment , In order to protect the network and data from invasion and damage from external and internal users , And use various technical means to collect and monitor the system status of each component in the network environment in real time 、 Security incidents 、 Internet activities , In order to call the police 、 Handle and audit in time . There are more fortress machines than springboard machines for real-time collection 、 Monitoring the network environment 、 Centralized alarm and other functions .

Fortress machines began to be widely deployed as independent products , Effectively reduce the operation and maintenance risk , Make operation and maintenance management easier 、 More secure . It can meet role management and authorization approval 、 Information resource access control 、 Operating records and auditing 、 System change and maintenance control requirements , And generate some statistical reports to cooperate with management specifications , To keep improving IT Internal control compliance products .

Fortress machine platform ： Core functions of cloud housekeeper

1. IT assets ： Support for host 、 Networked storage devices 、 Hybrid management of public cloud and private cloud ;
2. Management Protocol ： Support RDP、SSH、VNC、Telnet、FTP/SFTP And other management protocols ;
3. Operation and maintenance audit ： All operations can be recorded in the cloud , Full audit ;
4. Mobile operation and maintenance ： Support for mobile phones 、 Tablet and other intelligent terminals ;
5. Operation and maintenance strategy ： Formulate different operation and maintenance strategies for different roles ;
6. Password policy : Batch encryption and key distribution of the host ;
7. Database operation and maintenance ： Hold right MySQL、Oracle、SQLServer And other mainstream database operation and maintenance audit
8. Automatic operation and maintenance ： Batch operation of multiple hosts .