Methods and system for managing heterogeneous firewalls

Abstract

The invention provides methods and system for managing heterogeneous firewalls. A method comprises the steps that a collection end collects a security policy configuration file of each firewall in theheterogeneous firewalls; the collection end determines brands of the firewalls through utilization of identification information contained in the security policy configuration files, and then calls analyzers corresponding to the brands of the firewalls; the analyzers analyze security policy combinations contained in the security policy configuration files and obtain analysis results; and terminalequipment obtains the analysis result of each analyzer and carries out classified display on the analysis results according to the brands and/or IP addresses of the firewalls. According to the methodand the system provided by the embodiments of the invention, the problem that in the prior art, when the security policy of each firewall in the heterogeneous firewalls is checked, cost is relativelyhigh due to a demand for a plurality of pieces of terminal equipment, and time and manpower are wasted due to the fact that the plurality of pieces of terminal equipment need to be checked in sequence is solved.

Description

technical field [0001] This application relates to the technical field of computer network security applications, in particular to a method and system for managing heterogeneous firewalls. Background technique [0002] Firewall is a network security system, which is set between the internal network and the external network. Using the security policy contained in the firewall, it is possible to control the network mutual access across the firewall, and at the same time control the access of the firewall itself, so as to protect the internal network from the intrusion of illegal users in the external network. Because different brands of firewalls have different protection targets and security policies, different organizations on the same intranet usually need to set up different brands of firewalls, and different brands of firewalls are combined to form heterogeneous firewalls. [0003] Firewalls play an important role in network security, so sometimes it is necessary to chec...

AI Technical Summary

Problems solved by technology

[0005] This application provides a method and system for managing heterogeneous firewalls to solve the problem in the prior art that when viewing the security policies of each firewall in a heterogeneous terminal equipment, time-consuming and labor-intensive problems

Images