How to effectively prevent ARP attacks

ARP attacks are launched from the data link layer, and ARP firewall and 360 are all application-layer software, which cannot be prevented. In addition, ARP and other network attacks have always existed, and network attacks are sometimes not deliberately sabotage, because the Ethernet protocol has inherent vulnerabilities and difficult-to-manage defects, resulting in various intranet problems. In order to completely solve intranet attacks, the only way to prevent and control the network card of each terminal is to prevent ARP attacks from being issued.

Our company's previous network also had this problem, and later used the Xinxiang immune security gateway to upgrade the ordinary network to the immune network, and carried out prevention and control monitoring from the bottom layer of the network and each terminal, which can not only prevent the local machine from being attacked, but also intercept the external network attack of the local machine, strengthen the basic security of the network, and completely and effectively solve the problem of intranet attack. And there is also a monitoring interface, which computer will send out the attack will be recorded, at a glance, directly find the source of the attack.

Some students upstairs said that they can solve it with ARP firewall and 360, so let's correct it here.

ARP (Address Interpretation Protocol) is an indispensable key protocol in network communication protocols, which is responsible for translating IP addresses into corresponding MAC addresses. In this process, if there is a fake IP-MAC correspondence, ARP attacks and ARP spoofing occur.

ARP attacks are initiated from the data link layer, ARP is not a virus, but a "protocol attack", because there is no obvious signature word and the important position of ARP in network communication, OfficeScan and firewall are helpless to deal with ARP viruses. Therefore, blocking the outflow of problematic data from the source and allowing legitimate ARP data packets at the same time is the ultimate solution to completely get rid of ARP trouble. This is caused by the vulnerability of the Ethernet protocol, which is why ARP firewall, anti-virus software, IP-MAC binding and other traditional methods have appeared for so long, ARP attacks have not been able to prevent ARP attacks, ARP firewalls, antivirus software, IP-MAC binding, etc.

To sum up, if you want to completely solve ARP attacks, the only way to completely get rid of ARP troubles is to fill the Ethernet vulnerabilities and strengthen the underlying security of the network. It is recommended that you go online to find products that can protect the security of the intranet and the underlying security of the network.

At present, the only thing that can be completely solved is the immune wall technology, through which the immune network solution is deployed. Immunity network solution, you don't need to make major changes to your network, you can use the immune wall to set up a policy, do not install a driver, do not let the Internet, and intercept it when it is installed. It can directly intercept the virus attack sent by each computer from the network card, carry out unified management, there is only one network administrator, and it can also monitor the Internet access status of the entire intranet computer, and accurately locate and alarm if there is an abnormality.

Win7 system under the better effect is Kingsoft ARP firewall,You can try。 Since it's a company, it can't be so rampant, find out that this person has pulled out the thread. Let's put ARP from the hardware settings.

Color Shadow ARP Firewall I know it when I use it Absolutely strong I'm using it now What kind of immune wall downstairs Obviously The landlord is not a network manager 360's ARP firewall is a joke.

ARP deception, check and check. The nemesis of the ARP virus attack - the immune network, and the patented one, can be obtained from the top of the network card.

To ensure that the identity is unique and true, intercept the disease attack from the network card.

If the company is relatively small, you can directly say that if the company is very large, you can directly report the situation to the company.