Firewall policy optimization method and device

Abstract

The invention discloses a firewall policy optimization method and device. The optimization method comprises the following steps: establishing a firewall policy information database and an application information database, wherein the firewall policy information database comprises at least one firewall policy information, and the application information database comprises at least one application information; and searching application information corresponding to the firewall policy information from the application information database, and adding the firewall policy information and the application information corresponding to the firewall policy information to an application policy information database. The method and device can overcome the defects that, in the prior art, firewall policy maintenance workload is heavy, policy repetition is easy to appear, firewall load increases and even firewall performance is reduced; and the firewall policy is subjected to centralized and unified management, and multiple policies are combined based on application, thereby reducing policy items, preventing policy repetition and reducing the possibility of reducing the firewall performance, and improving readability of the firewall policy.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a method and device for optimizing a firewall policy. Background technique [0002] With the continuous development of Internet technology, the scale of online websites is getting larger and larger, and firewalls are widely used as a security barrier for websites. With the increase in the number of firewalls and security policy entries in the firewalls, the workload of security engineers increases exponentially. Since a large number of policies are manually added based on the needs at that time, the readability of firewall policies is getting worse and worse. The same application may involve multiple policies, and the same policy may involve multiple applications. Due to the chaos of firewall policies, the workload of firewall policy maintenance is doubled, and duplicate policies will inevitably appear, which increases the load of the firewall and even reduces the per...

AI Technical Summary

Problems solved by technology

[0003] The technical problem to be solved by the present invention is how to overcome the defects in the prior art that the workload of firewall policy maintenance is heavy, repeated policies are easy to appear, the load of the firewall is increased and even the performance of the firewall is reduced, and a method and device for optimizing the firewall policy are provided.

Images