Heterogeneous firewall policy centralized management method, device and system

Abstract

The invention relates to the technical field of communication security, in particular to a method, a device and a system for centralized management of heterogeneous firewall policies. Comprising the following steps: introducing an NSPM special tool; mapping the whole network equipment, the security policy and the access control rule thereof into a virtual network topology; acquiring strategy configuration data and performing centralized management; eliminating and optimizing the problem and the risk strategy through a preset rule; and newly adding or changing the management strategy. According to the design, rapid optimization and cleaning of massive policy rules can be realized, the network risk is reduced, and meanwhile, the performance load of network access control equipment is reduced; a network security topology is generated based on network security infrastructure modeling analysis, so that the setting and dynamic monitoring of a policy security baseline can be realized, and the visual analysis of network exposure risks can be realized; it can be ensured that the newly added strategy meets the compliance management requirement and the security control requirement, continuous compliance operation and maintenance of the access control strategy are achieved, and the efficiency of strategy change work is greatly improved.

Description

technical field [0001] The invention relates to the technical field of communication security, in particular to a method, device and system for centralized management of heterogeneous firewall policies. Background technique [0002] Firewall is the most common network security protection device, and it is widely deployed in the networks of various financial institutions. The basic function of the firewall is to prevent unauthorized access, prevent and reduce network risks by setting network access control policies, converging network access rights, and implementing the principle of least authorization. Access control policy is the soul of the firewall and the foundation of the network security defense system. Its setting effect directly affects the application effect of the firewall and the overall level of network security defense. If a network's access control policy is not well deployed, even with the most advanced network security equipment, attackers may achieve illega...

AI Technical Summary

Problems solved by technology

At present, based on the requirements of network security, the requirements for refined and centralized management of firewall policies have been put forward. However, in complex network scenarios, the analysis of massive firewall policies is beyond the reach of manpower. At the same time, Due to the inherent characteristics of heterogeneity, complexity and dynamics in a large number of firewalls, it is difficult to implement refined management and evaluation of firewall policies

Images