Firewall configuration method based on service access data

Abstract

The invention discloses a firewall policy configuration method based on service access data, and belongs to the technical field of data analysis application. The method includes steps: acquiring, extracting and classifying service access data including source IPs, source ports, target IPS, target ports, applications and protocols in multiple network paths through a network monitoring bypass mode;locking the normal service access data in the service access data obtained by first acquisition in the acquisition step as access rule data, comparing the service access data obtained by each subsequent acquisition in the acquisition step with the previously acquired and locked normal service access data, and locking the subsequently acquired data as access rule data; and when an access rule is issued to a firewall, firstly inquiring the access rule data locked in the access rule locking step, generating a forbidding rule of a firewall, and then issuing the forbidding rule of the firewall to the firewall.

Description

technical field [0001] The invention belongs to the field of data quantitative analysis application technology, and in particular relates to a firewall configuration method based on service access data. Background technique [0002] With the increasing development of network technology, the public network environment has become more and more complex, and the security situation has become increasingly severe. Various ransomware viruses have spread, and data security protection has become more and more important. The role of firewalls in the network is becoming more and more important. Important, but the rules of the firewall have become extremely complex and difficult to maintain, and the accuracy and real-time maintenance of the rules are also difficult to guarantee. Especially in a network environment with frequent application changes and complex application rules, it is necessary to configure correct firewall access rules It takes a lot of time and manpower. [0003] For ...

AI Technical Summary

Problems solved by technology

[0002] With the increasing development of network technology, the public network environment has become more and more complex, and the security situation has become increasingly severe. Various ransomware viruses have spread, and data security protection has become more and more important. The role of firewalls in the network is becoming more and more important. Important, but the rules of the firewall have become extremely complex and difficult to maintain, and the accuracy and real-time maintenance of the rules are also difficult to guarantee. Especially in a network environment with frequent application changes and complex application rules, it is necessary to configure correct firewall access rules Requires a lot of time and manpower

Images