Yunke China Available and Secure Architecture - Solution

Business Challenges

Multi-cloud and multi-center infrastructure brings security policy challenges

In the multi-cloud and multi-center architecture with edge computing, security products have different standards and interfaces, making it difficult to integrate directly into the existing security architecture, increasing deployment costs and complexity; correlating security events from cloud, network, and endpoints and unifying security policies is very challenging.
Cloud-native architecture brings technical route selection challenges

In cloud-native architecture, security issues with APIs used by internal components and microservices are increasing, requiring strengthened protection in identity authentication, permission control, and communication security; at the same time, dynamic and distributed characteristics bring challenges to security management and operations, requiring effective methods for monitoring, detecting, and responding to security events.
Dual-active data centers bring application continuity challenges

During the transformation and upgrading process of financial information technology innovation, it is necessary to build a highly available network architecture and use load balancing to distribute user requests, ensuring that in the event of a data center failure, it can quickly switch to another center.

Solution

The available and secure architecture takes the Internet interface area as a vital passage, integrating full traffic data analysis, computing power scheduling load balancing, DNS firewall, Web application firewall, NDR, DDI, and other security technologies and products to build a unified management, monitoring, and operation and maintenance security policy for customers, and provides one-stop deployment implementation and continuous services. With the support of cloud, data, and AIOps technology, an intelligent command center of network operations + security operations + computing power scheduling is built to help customers deal with multiple challenges from multi-cloud architecture, multi-core in one cloud, protection nets, application attacks, etc.

Possessing a broad technology and product ecosystem, a rich domestic product matrix, and customer-centric service capabilities.

New technologies such as data stitching, machine learning, root cause analysis, etc., achieve intelligent operations and maintenance.

Focus on the availability and security of the Internet interface, even in dealing with first-level incidents, there are verified escape strategies to respond calmly.

User Value

Rapid docking of heterogeneous security devices and configurations to achieve unified analysis and disposal of security data, creating a customer-exclusive command and comprehensive operation and analysis platform.

Enhancing the ability of automated operations and maintenance to improve quality and efficiency for customers.

Aligning with financial industry security standards such as the Cybersecurity Law, Cybersecurity Classified Protection 2.0 and Financial Industry Cybersecurity Level Protection Implementation Guidelines to ensure business continuity.