Method and device for deploying security access control policy

Abstract

The invention relates to the field of network security, especially relates to a method and device for deploying a security access control policy, and is to solve the problems that, in the prior art, since the security access control policy needs to be configured manually, the configuration work is strenuous and time consuming, and possibility of man-made configuration errors exists. The method is characterized in that a cloud management platform determines an application template adopted by an application needing to be established according to an application establishing instruction, and a security template corresponding to the application template; the cloud management platform notifies a virtualization platform to establish a corresponding virtual machine for each application assembly in the application according to the application template, and obtains the IP address of each virtual machine established by the virtualization platform; the cloud management platform adopts the security template to generate a group of security access control policy corresponding to the application according to the IP address of each virtual machine; and the cloud management platform releases the group of security access control policy to the corresponding firewall. Therefore, automatic deployment of the security access control policy is realized.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and device for deploying a security access control strategy. Background technique [0002] A firewall is a network security system used to strengthen access control between networks and prevent external network users from illegally entering the internal network and accessing internal network resources. It checks the data packets transmitted between two or more networks according to certain security access policies to determine whether the communication between the networks is allowed. [0003] In practical applications, data center networks usually use firewalls to divide several security domains. Among them, a security domain is a logical area, which has the same or similar security protection requirements, and the security risk of data flow within the same security domain is small. However, due to different security levels, access between security domains is usually pr...

AI Technical Summary

Problems solved by technology

[0006] The embodiment of the present invention provides a method and device for deploying a security access control policy, which is used to solve the problem in the prior art that the configuration of the security access control policy needs to be manually completed, resulting in heavy configuration work, time-consuming, and the possibility of human configuration errors sexual problems

Images