Firewall verification method and device, computer equipment and storage medium

Abstract

The invention discloses a firewall verification method which comprises the following steps: logging in a target host by utilizing a remote connection component according to account information and a login password of the target host; obtaining source addresses corresponding to hosts in a host cluster where the target host is located and service cluster information corresponding to the host clusterin batches by using a parameter analysis module; generating a first list according to the plurality of source addresses, and generating a second list according to the plurality of pieces of service cluster information; determining a Cartesian product between the first list and the second list, and determining a firewall verification path corresponding to each host according to the Cartesian product; and testing whether the firewall on each firewall verification path is opened or not. The invention further discloses a firewall verification device, computer equipment and a computer readable storage medium. According to the application, under the condition of ensuring the security of the host cluster, the efficiency of verifying the firewall between the internal host cluster and the externalservice cluster is improved.

Description

technical field [0001] The present application relates to the field of network security, and in particular to a firewall verification method, a firewall verification device, computer equipment, and a computer-readable storage medium. Background technique [0002] With the rapid development and wide application of network technology, network security issues have become increasingly serious. In order to improve the security of network data exchange, a firewall is usually installed between the internal network and the external network. While the multiple hosts of the internal system are in the process of calling the data of the external system, it is necessary to verify whether the firewall between the above-mentioned internal system and each external system to be called is opened. [0003] At present, the commonly used method of verifying whether the firewall is enabled first needs to manually log in to the host one by one, and query the destination IP address and destination...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of this application is to provide a firewall verification method, a firewall verification device, computer equipment, and a computer-readable storage medium, aiming at improving the security between the internal host cluster and the external service cluster while solving the problem of how to ensure the security of the host cluster. The problem of firewall verification efficiency

Images