Network Security Policy Processing System and Processing Method

Abstract

The invention provides a processing system and processing method of network security policies. The processing system comprises an IP address sending module, a traffic learning module, an extraction module, a first merging module, a second merging module and a processing module; the IP address sending module sends an IP address when a server goes online or a network changes; the flow learning module receives the IP address, sets a corresponding network security policy to an all-pass policy and receives all traffic information of the IP address; the extraction module extracts a source IP address, a destination IP address, a destination port and a protocol according to each piece of collected traffic information so as to generate basic security policies; the first merging module carries out source IP address merging on the basic security policies so as to generate initial security policies; the second merging module carries out destination IP address merging on the initial security policies so as to generate a final security policy; and the processing module sends the final security policy to a network security device and deletes the all-pass policy. According to the processing system and processing method of the network security policies, the network security policies can be automatically generated through a traffic learning module mode, and full-automatic configuration can be realized.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a system and method for processing network security policies. Background technique [0002] With the development of the Internet, the network security protection of data centers is becoming more and more complex, the configuration of network security policies is becoming more and more complicated, and manual configuration is becoming more and more difficult. The existing network security policy management methods cannot meet the actual needs of the server to go online quickly, and the cost of manual maintenance is too high. Contents of the invention [0003] The technical problem to be solved by the present invention is to provide a network security policy processing system and processing method in order to overcome the defect that the network security policy management method in the prior art cannot meet the actual needs of fast online server and the manual maintenanc...

AI Technical Summary

Problems solved by technology

[0003] The technical problem to be solved by the present invention is to provide a network security policy processing system and processing method in order to overcome the defect that the network security policy management method in the prior art cannot meet the actual needs of the server to go online quickly and the manual maintenance cost is too high

Images