Method, system and method for controlling access of host computer

Abstract

The invention discloses a method, system and device for controlling access of a host computer, which relate to the field of network security and are used for solving the problem that the access of the host computer cannot be effectively controlled in the prior art. The method comprises the following steps of: receiving a connection request from the host computer and requesting for verification information from an external authentication system of the host computer by a firewall; authenticating the obtained verification information through an access strategy by the firewall; if the authentication passes, allowing access of destination connection; and if the authentication fails, blocking the connection request. The system comprises the host computer, the external authentication system and the firewall, wherein the external authentication system is connected with the host computer; and the firewall is arranged between the host computer and the Internet and comprises a verification managing module, a connection tracking module and a blocking module. In a technology disclosed by the invention, the verification information is acquired according to the external authentication system of the host computer independent of an access request, an Internet protocol (IP) address, a media access control (MAC) address and the like, so that access of the host computer can be effectively controlled.

Description

Technical field [0001] The present invention relates to the field of network security, in particular to a method, system and device for controlling host access. Background technique [0002] The firewall can not only control the Internet's access to the corporate intranet, but also the intranet host's access to the Internet. The outlet bandwidth of the enterprise intranet connected to the Internet is generally controlled by bandwidth, which is a limited resource. In order to manage and reasonably use the limited export bandwidth, a certain access policy needs to be set on the firewall to control the access of the internal network host to the Internet. [0003] See figure 1 As shown, the typical deployment location of the firewall is between the Internet and the internal network. In traditional firewalls, there can be many access control strategies, such as the IP address and MAC address of the network card of the internal network user, and some also implement the authentication m...

AI Technical Summary

Problems solved by technology

[0007] The present invention provides a method, system and device for controlling host access to solve the problem that the prior art cannot effectively control host access

Images