Implementation method of north-south micro-isolation architecture

Abstract

The invention discloses an implementation method of a north-south micro-isolation architecture, which comprises the following steps: in the whole north-south network architecture, carrying out comprehensive reconstruction by using a zero-trust micro-isolation architecture, and grouping network elements according to different attributes; in the security processing process of the terminal, the next-generation firewall, the application / service security, the gatekeeper / data exchange and the data center, performing targeted processing by adopting different processing strategies according to the classification; when security risks are detected at a terminal, a next-generation firewall, application / service security, a gatekeeper / data exchange and a data center, performing linkage processing through a linkage module, processing being automatically carried out according to grouping, and different management strategies being issued to corresponding micro-isolation groups. A systematized micro-isolation architecture is formed, and the security of the network is improved through a linkage mechanism of each network element.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a method for realizing a north-south micro-isolation architecture. Background technique [0002] In recent years, with the rapid development of cloud computing, the structure of the data center has also changed to meet the emerging needs. At the same time, the scale of the original security problems is expanding, and new security problems and challenges are emerging. The traffic in the virtual network is invisible, the security level of multiple tenants is different, and the security policies are diversified. Traditional network firewalls are somewhat powerless. [0003] At present, there have been a series of improvements in network security architecture in the past few years. Among them, more and more people in the industry believe that network security cannot rely solely on network firewalls at the perimeter to stop network attackers. Therefore, by dividi...

AI Technical Summary

Problems solved by technology

However, in terms of current north-south traffic and access, from terminals to firewalls, IDS / IPS, WAF, etc., all accesses are integrated to form a huge and complex network architecture. For example, for a company, its terminals may be several Hundreds or thousands, even tens of thousands

Such a huge number of terminals are mixed together. When encountering network attacks, it is difficult to achieve efficient processing, and at the same time cannot form effective isolation, which brings huge hidden dangers to network security.

Images