Cross-GAP communication method and communication system using same

Abstract

The invention discloses a cross-GAP communication method and a communication system using same, which are applied to a network with a first communication device and a second communication device. The first communication device is positioned in a first network. The second communication device is positioned in a second network. The first network is isolated from the external network via a first GAP device. The second network is isolated from the external network via a second GAP device. By establishing the address-port dynamic transition relationship of traffic stream between the two GAP devices, the linked communication between the two communication devices crossing two GAPs is implemented. The cross-GAP communication works without needing the manual static configuration of the transition tables on the two GAP devices, thereby facilitating the configuration and providing conveniences for configuring and maintaining the GAP equipment.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a communication method and a communication system across network gatekeepers. Background technique [0002] The security isolation gatekeeper is a network security device with dedicated hardware with multiple control functions, which is used to cut off the link layer connection between networks and enable safe and moderate application data exchange between networks. As an isolation device for data exchange, the security isolation gatekeeper is embedded with a virus-killing functional module, which can check the exchanged data for viruses. [0003] Traditional security products can meet the needs of data protection and network security in different ways, but it is impossible to completely solve the problem of secure exchange of information between networks, because various security technologies have their limitations. While the gatekeeper protects the security of the intranet, i...

AI Technical Summary

Problems solved by technology

However, the Socket2 port that Gatekeeper C acts as a proxy for Host A is not fixed, and the translation entry configured on Gatekeeper D may not match Socket2, so Gatekeeper C must also statically configure the translation entry

Therefore, in the prior art, for communication that needs to span two gatekeepers, corresponding conversion entries need to be configured on the two gatekeepers, which is inconvenient for device configuration and maintenance

Images