某些企业出于安全目的建设了信息内、外网两套物理隔离网络系统,如何通过技术手段阻止内网终端违规外联是一个比较棘手的问题。本文提供了一种通过配置IPSec安全策略,在根源上阻断违规流量的方法,无需借助于任何第三方软件或硬件,即可有效阻止内网终端非法外联。同时结合批处理方式,可以简化策略部署流程。 Some enterprises have set up two physically isolated network systems for information security and external networks for security purposes. How to prevent out-of-network terminal violations through technical means is a relatively tricky issue. This document provides a method of blocking illegal traffic at the root by configuring an IPSec security policy. This method can effectively prevent an intranet terminal from being illegitimately connected without resorting to any third-party software or hardware. Combined with batch mode, you can simplify the policy deployment process.