Firewall protection improvement method and device, equipment and readable storage medium

Abstract

The invention belongs to the technical field of firewall protection improvement, and particularly relates to a firewall protection improvement method and device, equipment and a readable storage medium. The firewall protection improvement method comprises the steps of reconstructing a firewall strategy through data acquisition, classifying firewall strategy methods, comparing and processing permissions of the firewall strategy, constructing a firewall strategy life cycle, and screening and processing idle and repeated strategies. The firewall protection improvement device comprises a reconstruction module for reconstructing a firewall strategy through data acquisition; a classification module for classifying firewall strategy methods; a comparison module for comparing and processing the permissions of the firewall strategy; a construction module for constructing a firewall strategy life cycle; and a screening module for screening and processing idle and repeated strategies. The computer equipment comprises a computer program which can run on the processor and is used for realizing the firewall protection improvement method. According to the method, the problems of firewall policy errors and policy table bloating are solved, and the firewall protection capability is improved.

Description

technical field [0001] The invention belongs to the technical field of firewall protection improvement, and in particular relates to a firewall protection improvement method, device, equipment and readable storage medium. Background technique [0002] In daily work, the maintenance work of the firewall mainly includes the addition, modification and deletion of policies. After receiving the operation ticket, the operation and maintenance personnel will make corresponding changes through the Web firewall management tool according to the content of the ticket. During the operation and maintenance process, the keywords involved The segment includes source address, destination address, source port, destination port, policy status, policy action, policy effective time period, etc., which are modified by operation and maintenance personnel according to the content of the ticket, and there is a certain probability of error. With the use of the firewall system, The policy table will ...

AI Technical Summary

Problems solved by technology

[0002] In daily work, firewall maintenance mainly includes the addition, modification, and deletion of policies. After receiving the operation ticket, the operation and maintenance personnel will make corresponding changes through the web firewall management tool according to the content of the ticket. During the operation and maintenance process, the keywords involved The section includes source address, destination address, source port, destination port, policy status, policy action, policy effective time period, etc., which are all modified by the operation and maintenance personnel according to the content of the ticket, and there is a certain probability of error. With the use of the firewall system, The policy table will also become more and more bloated, and the operating efficiency will decrease accordingly. It is necessary for the operation and maintenance personnel to optimize the firewall policy table on a regular basis; however, the screening process is challenging for the operation and maintenance personnel. Facing the following difficulties: 1) There are many policies, and there is a lot of pressure on regular maintenance; 2) There are many ways to represent IP addresses in the policy table, and it is difficult to intuitively judge the inclusion relationship between the two policy IP addresses; 3) Analysis tools provided by various firewall vendors Different, and most of them provide a simple search function, and the comprehensive analysis function is weak; therefore, it is necessary to provide a firewall protection improvement method that can replace manual periodic optimization of firewall policies, analyze firewall security policies, and actively provide policy optimization measures

Images