Policy consistency audit method, device and equipment

Abstract

The invention discloses a method, a device and equipment of strategy consistency auditing, and belongs to the technical field of terminal equipment. The method comprises the steps that characteristic values of strategy data of a webmaster server and the equipment are respectively calculated, the characteristic values of each strategy datum comprises a first cyclic redundancy check value and a second cyclic redundancy check value, the first cyclic redundancy check values are the cyclic redundancy check values of the strategy data, the second cyclic redundancy check values are cyclic redundancy check values of a common target referenced by the strategy data, and the characteristic values of the strategy data of the webmaster server and the equipment are contrasted to obtain an auditing result. The characteristic value of the strategy data of the webmaster server and the equipment are contrasted, so an auditing result error due to the fact that strategies which are different in sequence number and identical in business content are erroneously judged to be inconsistent can be avoided, contrast speed is accelerated, and auditing efficiency is improved.

Description

Technical field [0001] The invention relates to the field of terminal equipment, in particular to a strategy consistency audit method, device and equipment. Background technique [0002] With the increasing number of Internet applications, viruses, Trojan horses, and other issues that endanger the information security of enterprises and individual users have become more prominent, and network security has received great attention. As the security protection of the external network and the access control strategy of the internal network are increasing, the configuration and operation and maintenance requirements of the security strategy are becoming stronger and the management of the strategy has become more and more complicated. The policy refers to the policy configuration of the firewall network, which can filter the data packets passing through the firewall and check the content security according to the five-tuple (source address, source port, destination address, destination...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problems of low efficiency of consistency audit and inaccurate audit results, the embodiment of the present invention provides a policy consistency audit method, device and equipment

Images