Tactic management based firewall system and dispatching method

Abstract

The invention discloses a firewall system and scheduling method based on strategy management. The system comprises a firewall function set module that is provided with one or a plurality of firewall modules used for running or stopping a security firewall according to schedule; and a strategy module that contains a central processing unit used for performing schedule on the firewall module according to preset system strategies. The system strategy consists of a user configuration strategy, a strategy based on resources, a strategy based on the firewall, a strategy based on priority, and one of the intelligent response strategies which consist of a time strategy, an interface strategy, a port strategy, and at least one of intelligent strategies. The strategy security firewall system provided by the invention can effectively manage system resources and dynamically allocate the system resources to different function modules according to priority, so that maximum utilization of the system resources is realized. By making use of the system structure of the strategy firewall, complex security firewall functions can be accomplished and intelligent firewall can be realized.

Description

technical field [0001] The invention relates to network security technology, in particular to a firewall technology. Background technique [0002] At present, in the field of security and firewall, a series of functions have been developed in the prior art, such as IP filtering, MAC filtering, DMZ (divided zone), port forwarding, etc. Under the joint action of these functions, the entire security firewall system has been completed. However, when these functions are running, the normal operation of the functions is often limited due to the conflict of resources used (such as using the same port, resource conflicts affect the function can not work normally), at the same time, because the functional modules are independent of each other, there is a lack of effective Resource sharing cannot cooperate well with each other, and complex firewall work cannot be completed (such as IP filtering function and MAC filtering function cooperate with each other to complete the anti-attack f...

AI Technical Summary

Problems solved by technology

[0004] The main purpose of the present invention is to provide a firewall system and scheduling method based on policy management, which is used to overcome the limitations and defects of the prior art that the functions of the security firewall system are independent of each other and cannot coordinate the use of system resources, so that when running It may conflict with each other, and it is difficult for functions to cooperate with each other, and it is impossible to provide system-level firewall functions through combination.

Images