Network safety access control method based on ICAP

Abstract

The invention relates to a network safety access control method based on an ICAP. The method comprises URL filter control and HTTP flow control. The URL filter control is safety control required when a user client terminal sends an HTTP request to an HTTP server, the HTTP flow control is safety control required when the HTTP server sends an HTTP answer message to the user client terminal, and when an ICAP server scans malicious flow, the ICAP server bocks network access through an ICAP client terminal. Compared with the prior art, the method has the advantages of being high in real-time performance, low in cost, strong in expandability, multiple in strategy variety and the like.

Description

technical field [0001] The invention relates to a method for controlling network access, in particular to a method for controlling network security access based on the ICAP protocol. Background technique [0002] With the continuous expansion of the network scale of operators and the increase of users, a large number of various websites have emerged, among which there are many malicious websites, such as: phishing websites, pornographic websites, gambling websites, etc. How to enable users (such as parents to control children's network access) or enterprises to customize the WEB URLs that employees can access according to their own needs is the future development direction. At the same time, unsafe content such as hacker attacks, viruses, and Trojan horses are flooding the Internet and intensifying, which has brought challenges to the throughput and security of large-scale networks such as operators and IDC network equipment. [0003] Due to the above requirements, combined...

AI Technical Summary

Problems solved by technology

The deployment mode deployed behind the optical splitter in the mode of splitting has poor real-time traffic control. Usually, the device will display the report after the user visits the destination website, and the user's HTTP session cannot be operated before the user visits the destination website. , for example: warn the user that this HTTP session is risky, allow and record the HTTP session, or block this session

The deployment mode of deploying security scanning devices to the core backbone network in series has low accuracy, and there are many cases of missed and misjudgment, and the deployment mode of series connection has extremely high requirements for the performance and stability of the equipment and other shortcomings

Images