Firewall policy processing method and device

Abstract

The invention discloses a firewall policy processing method and device. The method comprises the following steps: acquiring firewall policies, and standardizing the firewall policies to generate a firewall policy access control list; acquiring network flow of an internal network as well as between internal and external networks of a firewall to obtain network flow proportion statistics; quantifying the firewall policy access control list according to the network flow proportion statistics; and performing policy optimization processing on the quantified firewall policy access control list according to a preset policy optimizing rule. With the firewall policy processing method and device, the defect of waste of time and labor in manual auditing of firewall policies can be overcome, the management of firewall change policies is reinforced, the establishment of policies with safety risks is avoided, and the security of the firewall is enhanced.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for firewall policy processing. Background technique [0002] As a protective barrier between the internal network and the external network, between the private network and the public network, the firewall plays an important role in preventing external intrusion. Firewall policy refers to the provisions, rules, requirements and filtering terms that the firewall must refer to. The firewall allows or blocks the data flow passing through the firewall according to the firewall policy, and the firewall policy plays a key role in the access control of the internal and external network. With the growth of network scale and continuous adjustment of services, a large number of security policies are configured on the firewall. These policies may contain policies that are no longer used, redundant, conflicting, or even violate security rules, which not only in...

AI Technical Summary

Problems solved by technology

[0005] The main problems of using manual auditing of firewall policies are as follows: First, the number of firewall policies is huge, and manual auditing is very labor-intensive

Analyzing and auditing firewall policies manually will consume a lot of manpower

Second, the timeliness of manual audit is poor, and abnormalities and wrong strategies cannot be found in time

Due to the large and cumbersome firewall rules, it is difficult to timely and effectively review the newly added firewall policies

Images