Automatic query method and system for firewall policy

Abstract

The invention discloses an automatic query method and system for a firewall policy. The method comprises the following steps: step S1, constructing a firewall policy information base; step S2, setting query conditions, including a target source address, a target destination address and target service data; step S3, acquiring one firewall policy from the firewall policy information base; step S4, judging whether a source address array, a target address array and a service array of the acquired firewall policy respectively include the target source address, the target destination address and the target service data, if so, then executing step S5, and if not, then returning to step S3; step S5, conserving the acquired firewall policy to a query result set; step S6, judging whether the acquired firewall policy is the last one in the firewall policy information base, if so, then executing step S7, and if not, then returning to step S3; and step S7, outputting the query result set. The automatic query method and system for the firewall policy provided by the invention can realize the concentrated and unified management of the firewall policy, and improve the efficiency of firewall policy query.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an automatic query method and system for firewall policies. Background technique [0002] With the continuous development of Internet technology, the scale of online websites is getting larger and larger, and firewalls are widely used as a security barrier for websites. The increase in the number of firewalls and security policy entries in the firewalls has doubled the workload of security engineers, and it becomes very difficult to find out whether a certain security policy exists from a large number of security policies in multiple firewalls. The existing method of querying firewall policies is mainly to manually log in to the query interface of each firewall to retrieve firewall policies. Such a cumbersome query method makes the work efficiency of security engineers very low and increases the probability of errors. Contents of the invention [0003] The technical p...

AI Technical Summary

Problems solved by technology

[0003] The technical problem to be solved by the present invention is to overcome the defect that the method of querying firewall policies in the prior art is mainly performed by manually logging in to the query interface of each firewall, resulting in doubled workload and very low work efficiency, and provides a firewall Method and system for automatic query of strategies

Images