Message queue-based cascading architecture firewall linkage sealing and unsealing device and method

Abstract

The invention discloses a cascading architecture firewall linkage unblocking device and method based on a message queue. The device comprises a business node which is used for executing an entity operation node of an unblocking process and is located at the center or tail end of a cascading architecture; a message queue component which is used for executing the transmission of firewall unblockingentity messages; and a firewall interface engine assembly which is used for adaptively operating the unblocking instructions of the firewalls of different manufacturer brands to realize instruction interfaces of the firewalls. According to the device, the firewall unblocking command from top to bottom is processed in time by releasing coupling between modules, transmitting the unblocking command by means of the message queue and realizing cascade transmission of messages, so real-time early warning processing is realized.

Description

technical field [0001] The invention relates to a message queue-based cascading architecture firewall linkage blocking and unlocking device and method, and belongs to the technical field of network security. Background technique [0002] For a long time, in the field of network security technology, security operators have protected information systems by operating firewalls to specific IP addresses and ports. However, there are many problems in the blocking and unblocking of firewalls in the traditional security field: First, security operators have a high requirement for product familiarity, because the strategies for blocking and unblocking firewalls of different brand manufacturers are different, so the development of policy configuration pages is complicated. higher degree. At the same time, when the unit switches firewall brands, security operations personnel need to familiarize themselves with the new brand's firewall operation strategy again, and R&D personnel also n...

AI Technical Summary

Problems solved by technology

However, there are many problems in the blocking and unblocking of firewalls in the traditional security field: First, the security operation personnel are required to be familiar with the products, because the strategies for blocking and unblocking firewalls of different brands are different, so the development of policy configuration pages is complicated. high degree

At the same time, when the unit switches the firewall brand, the security operation personnel need to be familiar with the firewall operation strategy of the new brand again, and the R&D personnel also need to re-develop the page adapted to the new strategy

Secondly, the traditional firewall blocking and unblocking operations mostly use databases for interaction, and there is no mechanism for message transmission, which brings inconvenience to the operation of security operators

Furthermore, when the company wants to use the general control method to send the ban or unban message of the headquarters (ie: the central node) to its subsidiary network provincial company (ie: the end node), it usually uses the broadcast form, while the traditional During the firewall blocking and unblocking operations, because the central node and the end nodes are too deeply coupled with each other, the central node also needs to be familiar with the operation and processing mechanism of the end nodes, especially when there are too many end nodes, each node cannot only focus on its own business logic

Images