Firewall opening verification method, electronic device, computer equipment and storage medium

Abstract

The invention relates to the field of information security, and discloses a firewall opening verification method and device, computer equipment and a storage medium. The method comprises the steps of:judging whether a request end and a response end are in a network connection state or not, and if not, sending a network connection request to a management end by the request end; judging whether therequest end meets a dependency item or not, and if so, acquiring network information of the request end and the response end by the management end; and enabling the management end to generate a corresponding firewall policy according to the acquired network information of the request end and the response end, and configuring the firewall policy to a corresponding firewall. According to the invention, by setting dependency check judgment before network connection, the probability of network connection is improved, the probability of verification alleviation failure is reduced, and the processperiod of wall opening is automatically shortened through dependency check and strategy issuing verification process. In addition, the invention also relates to a blockchain technology, and the network information of the request end and the response end can be stored in the blockchain.

Description

technical field [0001] The invention relates to the field of information security, and relates to a verification method for opening a firewall, an electronic device, computer equipment and a storage medium. Background technique [0002] At present, large Internet companies, in order to ensure the security and stability of the IT network environment, the network architecture will adopt an isolated network; however, the mutual calls between different modules of a software system, or the mutual calls between different systems, require Across different network segments, there will be a lot of demand for network connectivity. The general process of opening up the network is as follows: [0003] 1. According to the company's IT operation specifications, the operation and maintenance personnel initiate the process of applying to open the network. The process content must include source ip (caller), destination ip (callee), destination port, TCP or UDP protocol. [0004] 2. The pr...

AI Technical Summary

Problems solved by technology

[0004] 2. The process needs to be approved before it can be processed

[0008] 1. Labor cost: This type of network connection operation is usually processed at night. If the network connection needs to be completed on the same day, the operation and maintenance personnel need to be on duty at night until the network administrator completes the processing, and then verifies until it passes

[0009] 2. Time cost: It may be due to the failure of the route or the failure of the destination service to start normally, resulting in verification failure, and then repeated communication, or even need to go through another process of adding routes or other processes, resulting in a longer network connection cycle

Images