NETWORK SECURITY ARCHITECTURE

摘要

A network security system is deployed between an internet backbone (100) and intranets (190) that belong to subscribing organizations. The system includes a scanning system (130) that scans incoming electronic mail for malicious code and an anti-virus server (150) for downloading anti-virus code to clients on the intranets. A switch (110) is provided for directing incoming electronic mail from the internet backbone to the scanning system so that the electronic mail can be scanned. In one embodiment, a decoy server (160) is also provided for masquerading as a legitimate server and logging suspicious activity from communications received from the internet backbone.