Firewall strategy control method and device, electronic equipment and storage medium

Abstract

The invention relates to the technical field of network security management. The invention discloses a firewall policy control method and device, electronic equipment and a storage medium, which are used for controlling a firewall policy in a network, improving firewall policy issuing efficiency, reducing an error rate of firewall policy configuration, preventing the network from being attacked and improving protection capability. The method comprises the steps of obtaining a to-be-configured module calling relationship which comprises a calling relationship between a first service module anda second service module; based on the network structure description data of the network, screening out a target firewall which needs to be passed during communication between a first server where thefirst service module is located and a second server where the second service module is located, wherein the network structure description data is used for describing a communication connection relationship between each firewall in the network and at least two servers; and generating a corresponding firewall policy configuration script based on the policy configuration grammar of the target firewall and the module call relationship, and issuing the firewall policy configuration script to the target firewall.

Description

technical field [0001] The present application relates to the technical field of network security management, in particular to a firewall policy control method, device, electronic equipment and storage medium. Background technique [0002] Usually, in the internal network of a large enterprise, the network architecture and the deployment of firewalls are also relatively complex. The network is divided into different security domains through firewalls. At the same time, in order to increase security, firewalls of different brands are deployed in different security domains. When the function implementation of system A depends on system B, if there is a firewall deployed on the network channel between the server of system A and the server of system B, the user needs to submit an application for enabling the firewall policy, and then the network management personnel based on the application Content assessment needs to be performed on which firewalls to configure firewall policie...

AI Technical Summary

Problems solved by technology

However, the existing methods of manually locating firewalls and manually writing firewall configuration scripts are inefficient and error-prone

Images