Unified management method and device thereof

Abstract

The invention discloses a unified management method, which is applied to a system comprising a low-level device and a high-level device. The method comprises the following steps: the low-level device receives a business strategy of the high-level device; the low-level device modifies the business strategy according to a preset strategy, takes statistics of safety information of an access terminal according to the modified business strategy and collects statistical data; and the low-level device sends the statistical data to the high-level device which conducts unified management on the access terminal according to the statistical data. In the invention, the business strategy is obtained from the high-level device and the high-level device sends the business strategy to the low-level device, thus realizing unified management in the access and control system of a distributed deployment network and greatly relieving maintenance work. The invention also provides a device applying the method.

Description

technical field [0001] The invention relates to the field of security technology, in particular to a unified management method and device. Background technique [0002] With the continuous acceleration of the pace of social informatization and the continuous popularization and deepening of network applications, network security has surpassed the requirements for network reliability, switching capabilities and service quality, and has become the most concerned issue of enterprise users. The top priority of construction. [0003] In enterprises, new security threats continue to emerge (for example, viruses and worms are rampant day by day), and the degree and scope of damage to the enterprise network continue to expand, often causing problems such as system crashes and network paralysis, causing enterprises to suffer serious losses. In the enterprise network, the security status of any terminal (for example, the anti-virus capability, patch level and system security settings ...

AI Technical Summary

Problems solved by technology

[0007] Based on the above analysis, when the existing network access control system of enterprises and institutions controls access terminals (identity authentication control and security inspection control), it is difficult to manage and audit in a unified manner; large enterprises and institutions (for example, multinational enterprises) A large number of branches are distributed all over the world, and each branch has a large number of employees. The network access control system of each branch has its own business policy, and each branch can only control its own business Data management and audit; however, large enterprises and institutions need to use a unified business strategy to manage and audit the business data of each branch. At this time, it is necessary to repeatedly formulate the same business strategy in all branches, and the maintenance workload is huge and numerous. Due to duplication of work, the ease of use is poor; and it is necessary to manage and audit the business data of each branch in all branches one by one. Since the data of each branch is independent, the headquarters organization wants to carry out the data of each branch. Unified management and auditing can only be managed and audited by logging into the configuration console of each branch, and only the data of each branch can be audited, and the function of auditing the summary information of each branch cannot be realized, resulting in comparison of the use of audit functions complex

Images