Isolation card, which is better? What does the physical isolation card do? Can you tell us about it?

I've been doing quarantine cards for a few years now :

I've basically used the more well-known cards.,Generally speaking, it's pretty much the same.,It's a matter of reputation when it's stable and compatible.。

1.Weiss cards are relatively okay in comparison, and the materials should be high-end, but compatibility and stability cannot be guaranteed.

2.In addition, Yisco is also sloppy, compatibility and stability cannot be guaranteed.

3.I don't feel very used to using Lipu, and I can't say whether it's good or bad.

4.What do you say about Zhongfu's card, it feels like the operation is okay, and the others are not worthy of fame, and the compatibility and stability are not good.

5.Zhihua's card bar is famous, but I think the cost performance is reasonable, but the compatibility and stability are the same.

6.The stepper card should be considered the cheapest, but to be honest, I haven't done it, so I don't evaluate it.

7.**,Jinli spectrum,I haven't been in contact with these with Shengda.,But I believe there are common problems (compatibility and stability are not good).

So if you had to choose, I think the quality is pretty much the same (to be honest), but with a higher step, I suspect that the material should be cautious. As for the rest, it's up to you whether you want to choose the expensive or the cheap.

Esco (Shenyu) big brand Stable, good compatibility, low failure rate, simple installation, easy maintenance.

Specific parameters:

Add one or more hard disks to split a computer into two relatively independent computers, connect two or more hard disks to the internal and external networks respectively, and achieve physical isolation through internal and external network switching, so as to ensure the security of intranet information and connect to the public network. It adopts the startup interface that appears at the time of booting, and selects the switching mode of internal and external networks, which is easy to use.

By the corresponding JK series isolation card and JK series selector are used together, a single network cable can be used to safely transmit two sets of networks, and the isolation card control selector is connected to the internal network or external network to realize the physical isolation of two or more networks, saving the manpower and material investment of laying the second network cable.

The isolation from stand-alone to the network is realized, and on the basis of ensuring security, users can connect two or more sets of networks with different security requirements in a time-sharing manner.

Product features: Comply with the physical isolation requirements and the latest technical standards of the State Secrets Bureau.

The physical isolation system provides a highly reliable physical isolation solution.

The internal and external network hard disks and network cables are controlled at the same time to avoid cross-use use.

Unique circuit design, support P4 and above models and 40G or more hard disks.

High-speed electronic switches and a compact wiring design ensure minimal signal transmission losses in the network.

Support single and double cabling, single cabling needs to be used with a selector.

When the system starts, it takes over the startup control process to isolate and switch between the internal and external networks.

Driver-free installation, plug and play, boot directly into the color selection interface.

It adopts standard PCI protocol, has good compatibility, supports various motherboards, and is suitable for various PCs and systems.

The principle of the isolation card is like a single-pole two-way switch, and only one network can be connected at the same time, so that security can be guaranteed.

Isolation cards can be divided into single hard disk and dual hard disks, and now the common dual hard disk isolation cards are used more.

The isolation card can also be a dual-network isolation card and a three-network isolation card, the three-network isolation card still exists around 05 years, and now most of them are dual-network.

The hardware device you said is connected to the ** head, which I have seen on the Weiss isolation card. It has a kind of line that is serial (rs232) to four-core ** head, this line is used to judge whether it is an internal network or an external network signal.

The network cable socket of the integrated network card, the other section is connected to the ** head: this is the case, the network cable originally had 8 cores, and only 4 cores are available in the 100 Gigabit network, and the other four cores are retained. First, the three cores are sending, the first.

Second, the six cores are receiving. The isolation card may be used as a header because the manufacturer wants to save costs (the cost of the interface is lower than the network interface), or to save space: the connector is smaller than the network connector.

Because they design cards that are sometimes used in small cases, space is still more expensive than keeping them, and designing them with a small head helps the cards to be used flexibly.

1 Now I want to know the principle of isolation cards in our company.

Your company's isolation card is a dual-drive isolation card. The principle is that the control of the isolation card inserted in the PCI slot makes it possible for only one hard disk to work each time it is used. There are currently two ways to control the use of hard drives, control the data cable and control the power cable.

To put it simply, when you are on the external network, the hard disk of the internal network is physically disconnected (both the relay and the chip can disconnect the hard disk).

When you disconnect the drive, you also disconnect the network that is paired with the drive, which means that only one network cable works every time you use it. In the design of the isolation card, the external network cable is always connected to the external network hard disk, and the internal network cable is always connected to the internal network hard disk. Which hard drive you use will connect to the same network at the same time.

2 The computer in the friend's company only needs software to realize the way of internal and external switching.

Your friend's company should not be a physical isolation card, but a virtual system, or a method that only modifies the IP address, but it is not physically isolated, which does not conform to the top of the national policy.

At present, most of the isolation cards on the market use software to switch between internal and external networks. The principle of the software is to first inform the hardware to switch to which network, and at the same time shut down the current operating system and hard disk through the software, when the shutdown is completed, it will be restarted, at this time the isolation card hardware has switched the hard disk to another one, and the system is started according to the normal boot operation, which is equivalent to entering another system.

3 Is there any other way to switch between them?

There are also some ways to use hardware switches in the isolation card market, but they also need to be rebooted. Batch processing is also a method, and in principle, it is also to shut down and then switch over.

At present, the isolation card that does not use the system restart is only the founder fast switching dual network machine (about 5 seconds), and some isolation cards can realize the switching of sleep mode (about 30 seconds) under the condition of modifying part of the principle, and the general restart of the isolation card takes about 40 seconds to 1 minute.

If you don't want to use an isolation card to achieve switching, you can consider using a virtual operating system, which is not physically isolated, which also has security risks.

Install a dual hard disk physical isolation card on the computer

1. The physical isolation card generally has two network ports, which are connected to the intranet and the Internet respectively. When using, you need to connect the network cable of the internal network to the designated network port (usually the internal network), and at the same time connect the network cable of the Internet to another network port (usually the external network). When using, use the software or boot interface to choose which system to enter:

Note that you can't go to the intranet when using the Internet, and you can't go to the Internet when you use the intranet, which is the meaning of physical isolation.

Personally, the better one is the "stepper high BIG1000 full series network security physical isolation card".

The function of the network security separated card is to virtualize a Suiwang PC into two computers in a physical way, so as to realize the dual state of the workstation, which can be in both the security state and the public state, and the two states are completely isolated, so that a workstation can be connected to the internal and external networks in a completely secure state. The card is actually set on the lowest physical layer in the PC, and the IDE bus on one side of the card is connected to the motherboard, and the other side is connected to the IDE hard disk, and the connection between the internal and external networks must pass through the card. The PC hard drive is physically separated into two zones, on the IDE bus physical layer, and in the firmware the disk channel is controlled, and at any one time, the data can only go to one partition.

We can understand it in terms of the idea of a network hierarchy, which is built on top of the physical layer and provides interface services on top of it, and these services include security features. Because it is built on such a bottom layer, it needs to restart the operating system in use, which is its disadvantage; Without restarting the operating system, there is no guarantee that data will not be stolen through memory. Network security isolation cards are now used a lot in the security use of government private networks and public networks.

With the development of isolation technology, the isolation card has also produced two main ways: cutting the power line isolation and cutting the data line. Both of these approaches coexist in the market. The method of cutting the power cord isolation is the earliest type of isolation card, which uses a relay switch to switch the power cord.

Due to the immature handling of power on/off in the early hard disks, the power isolation card will cause damage to the hard disk. With the development of hard disk technology, this phenomenon has been improved. The way to cut the data cable is the mainstream direction, and there are also isolation cards that switch between the IDE data line and the SATA data line.

Because the system needs to be rebooted when the ordinary isolation card is in use, it causes the problem of too long time. In recent years, isolation card technology has advanced by leaps and bounds, and isolation cards that do not need to be restarted have appeared, and the time has been greatly shortened. At the same time, the new isolation card technology improved based on the principle of isolation card has achieved the switching speed within a few seconds, which is technically ready for the isolation card to enter the personal field.