Network access control method, device and system

Abstract

The embodiment of the invention provides a network access control system which comprises a client, a network control device, a proxy server and a service server, wherein the client sends a network access request to the network control device, the network control device judges whether the target address information belongs to a first white list or not, and if the target address information belongsto the first white list, the network control device sends a network access request to the proxy server corresponding to the target address information. The proxy server judges whether the address information of the service server to be accessed belongs to a second white list, if yes, the proxy server sends the network access request to the service server to be accessed. Therefore, the network access method provided by the invention only needs to set the address information and the port of the proxy server used at the network control device, and set the address information and the port of the service server which is allowed to be accessed at the proxy server. The configuration of the enterprise network management personnel on a network control device is simplified.

Description

technical field [0001] The invention relates to the technical field of data processing, in particular to a network access control method, device and system. Background technique [0002] With the continuous development of science and technology, users' demand for accessing the network is becoming more and more common. However, for some purposes, enterprises need to control access to the corporate network. [0003] For example, employees are prohibited from watching news, online shopping, and playing games online during working hours, thereby improving the work efficiency of employees; External malicious users invade the company's internal network and steal company secrets. [0004] Therefore, if figure 1 As shown, enterprise network administrator A usually controls access to the enterprise network by setting a black and white list on the network control device 1 (such as a switch, router, firewall, etc.) at the exit of the enterprise network. [0005] The inventor found ...

AI Technical Summary

Problems solved by technology

[0005] The inventor found that the control of enterprise external network access is concentrated at the egress device of the enterprise network. However, the black and white list usually includes various information such as user IP, domain name, and website address. Server upgrades or maintenance often change. Once the enterprise network management personnel are not notified in time to reset the parameters of the network control equipment at the exit of the enterprise network, or set the parameters incorrectly, the enterprise network will not be able to access normally.

It can be seen that the existing enterprise network control methods are relatively cumbersome and require high skills for enterprise network managers

Images