Network access control method and firewall device

Abstract

The invention discloses a method for realizing network access control and a firewall device thereof. The firewall device is arranged between a first network and a second network and the device comprises a plurality of virtual firewalls divided in logic. Each virtual firewall is provided with a safety strategy. The control method comprises the following steps: the first network send a network packet which accesses the second network; the firewall device, according to the contained information in the network packet, respectively sends the network packet to the corresponding virtual firewalls; the virtual firewall carries out a safety detection to the network packet; if the network conforms to the safety strategy of the virtual firewall, the network packet is allowed to pass through the firewall device; if the network fails to conform to the safety strategy of the virtual firewall, the network packet is prohibited from passing through the firewall device. As the network flow enters the firewall device, the network is divided and then is sent to the corresponding virtual firewall. Therefore, only the safety strategy in the corresponding virtual firewall is needed to look for, thus increasing working efficiency.

Description

technical field [0001] The invention relates to a network control method and its device, in particular to a method for realizing network access control and its firewall device. Background technique [0002] As a network security device, a firewall is usually set between networks to ensure the security of network communication. For example, a firewall is set between a wide area network and a local area network requiring high security performance. The firewall determines whether a network packet sent from the LAN to the WAN or a network packet sent from the WAN to the LAN is allowed to pass through the firewall according to its preset security policy. The firewall executes the filtering program on the network packet. If the network packet conforms to the security policy configured by the firewall, the network packet is allowed to pass through the firewall. If it does not conform to the security policy, the network packet is discarded and is not allowed to pass through the fire...

AI Technical Summary

Problems solved by technology

Therefore, when the WAN accesses the LAN or the LAN accesses the WAN, the firewall needs to query more security policies, and the search efficiency is low. Therefore, the network packets passing through the firewall per unit time are correspondingly reduced, and the work efficiency is low.

In addition, when the network fails, more and more security policies in the firewall make management more and more difficult, and the operating expenses gradually increase

In order to solve this problem, it is a better solution to manage each department of the enterprise independently, but independent management requires each department to set up an independent firewall, which will require the purchase of more firewall devices, resulting in a substantial increase in the cost of the enterprise Increase

Images