Firewall policy auditing method and device, equipment and storage medium

Abstract

The invention discloses a firewall policy auditing method and device, equipment and a storage medium, and the method comprises the steps: obtaining a firewall policy rule required by a service and a plurality of actually configured firewall policy rules, taking one actually configured policy rule as a first target rule, and carrying out the auditing of a firewall policy according to the firewall policy rule required by the service; matching the first target rule with the firewall policy rule required by the service according to a preset matching policy to obtain a first matching result, and judging whether the first matching result is a null set or not; and if yes, matching the firewall policy rule required by the service with each actually configured firewall policy rule according to the matching policy for the actually configured firewall policy rule to obtain a second matching result, and determining whether the first rule set accords with the firewall policy rule required by the service based on the second matching result. According to the scheme, whether the first rule set accords with the firewall policy rule required by the service can be more accurately judged, so that the accuracy of the audit result is improved.

Description

technical field [0001] The present application relates to the technical field of network information security, in particular to a firewall policy audit method, device, equipment and storage medium. Background technique [0002] With the rapid development of network technology, in the field of network information security technology, firewalls, as the first checkpoint of the network, need to set which accesses are allowed to pass and which ones need to be blocked through firewall policies. Among them, the original business in the network requires a set of firewall policy rules, but the actual configured firewall policy rules may not meet the business requirements. Compare the firewall policy rules of the firewall to check whether the actually configured policy rules meet the firewall policy rules originally required by the business. [0003] In fact, there are often multiple firewall policy rules actually configured, and the combination of these multiple policy rules may mee...

AI Technical Summary

Problems solved by technology

[0003] In fact, there are often multiple firewall policy rules actually configured, and the combination of these multiple policy rules may meet the firewall policy rules required by the business, but the existing technology only combines the firewall policy rules actually configured with the firewall policy rules required by the business For comparison, if each of the actually configured firewall policy rules does not meet the firewall policy rules required by the business, the combination of these multiple policy rules will be directly judged as inconsistent, which will increase the error rate of the audit results.

Images