Method and system for installing firewall function combination package, electronic equipment and medium

Abstract

The invention relates to a firewall function combination package installation method and system, electronic equipment and a medium, belongs to the technical field of information security, is applied to a firewall, and comprises the following steps: obtaining function combination package information of the firewall pushed by a cloud server; uploading target function combination packet information to a cloud server, wherein the target function combination packet information is selected and determined by a user in the function combination packet information; and receiving a target function combination packet pushed by the cloud server, wherein the target function combination packet is obtained by the cloud server based on the target function combination packet information. According to the invention, the function combination packet required by the firewall is pushed through the cloud server, so that the load of the firewall is improved, and the purchase cost of firewall equipment is further reduced.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method, system, electronic equipment and medium for installing a firewall function combination package. Background Art

[0002] A firewall is a network security system that monitors and controls the data traffic in and out of a network, allowing or denying data packet transmission based on predefined security rules, thereby protecting the internal network from external threats and unauthorized access.

[0003] As firewalls have more and more functions, the hardware requirements are getting higher and higher, and the procurement cost is also increasing. Different customers have different functional requirements for firewalls. For example, customer A only needs a firewall to do network forwarding and application control, while customer B needs a firewall to do network forwarding and security detection, etc. Since the functions are pre-loaded into the device, customer A has to increase the procurement cost for unnecessary functions.

[0004] In summary, the prior art lacks a method for reducing the purchase cost of firewall equipment. Summary of the invention

[0005] In view of this, it is necessary to provide a method, system, electronic device and medium for installing a firewall function combination package to solve the problem of high procurement cost caused by the functions on the firewall not being preloaded in the prior art.

[0006] In order to solve the above problems, in a first aspect, the present invention provides a method for installing a firewall function combination package, which is applied to a firewall, comprising: Get the firewall function package information pushed by the cloud server; Uploading target function package information to a cloud server, wherein the target function package information is selected and determined by the user in the function package information; Receive and install the target function combination package pushed by the cloud server, where the target function combination package is obtained by the cloud server based on the target function combination package information.

[0007] In a possible implementation, the method further includes: The firewall installs the target function combination package and sends the installation information of the target function combination package to the cloud server.

[0008] In a possible implementation, the initial functions of the firewall include basic network functions, and the basic network functions include one or more of interface, routing, NAT, static routing, and application identification.

[0009] In a possible implementation, the target function package includes: one or more of an audit package, an authentication package, a basic security package, a deep security package, an advanced firewall package, and an advanced access package; The audit package includes one or more of behavior audit, traffic audit, SSL decryption strategy, shared access management and mobile terminal management; The authentication package includes: one or more of user authentication and third-party authentication; The basic security package includes: one or more of abnormal message protection and three-layer security attack protection; The deep security package includes: one or more of intrusion prevention, virus protection, and web protection; The advanced firewall package includes: one or more of dynamic routing, link load balancing, server load balancing, flow control strategy, and user restriction strategy; The advanced access package includes one or more of terminal injection management and antivirus software detection management.

[0010] In a second aspect, the present invention further provides a device for installing a firewall function combination package, comprising: A function package information acquisition module is used to acquire the function package information of the firewall pushed by the cloud server; A function package information uploading module, used to upload target function package information to a cloud server, wherein the target function package information is selected and determined by a user in the function package information; The function combination package installation module is used to receive and install a target function combination package pushed by a cloud server, wherein the target function combination package is obtained by the cloud server based on the target function combination package information.

[0011] In a third aspect, the present invention further provides a method for installing a firewall function combination package, which is applied to a cloud server and includes: Push function package information to the firewall; Receiving target function package information uploaded by the firewall, wherein the target function package information is selected and determined by the user in the function package information; The target function combination package is pushed to the firewall, where the target function combination package is obtained based on the target function combination package information.

[0012] In a possible implementation manner, installation information of the target function combination package sent by the firewall is received.

[0013] In a fourth aspect, the present invention further provides a system for installing a firewall function combination package, including a firewall for implementing any one of the above-mentioned implementation methods, and / or a cloud server for implementing any one of the above-mentioned implementation methods.

[0014] In a fifth aspect, the present invention further provides an electronic device, comprising a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory and is used to execute the program stored in the memory to implement the steps in the method for installing a firewall function combination package described in any one of the above implementations.

[0015] In a sixth aspect, the present invention further provides a computer-readable storage medium for storing computer-readable programs or instructions, which, when executed by a processor, can implement the steps in a method for installing a firewall function combination package described in any of the above-mentioned implementation methods.

[0016] The beneficial effects of the present invention are as follows: a method for installing a firewall function combination package provided by the present invention is applied to a firewall, obtains the function combination package information of the firewall pushed by a cloud server, uploads the target function combination package information to the cloud server, the target function combination package information is selected and determined by the user in the function combination package information, so that the firewall selects the required function package according to the usage scenario, receives the target function combination package pushed by the cloud server, and the target function combination package is obtained by the cloud server based on the target function combination package information. The present invention is used to select the required combination function package, and then the cloud server pushes the combination function package required by the firewall to the firewall, and the firewall installs the combination function package, that is, different function packages are selected according to different scenario conditions, and there is no need to install useless function packages, which reduces the load of the firewall, improves the efficiency of the firewall in processing data, and reduces the procurement cost of the firewall equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A flowchart of an embodiment of a method for installing a firewall function combination package provided by the present invention; Figure 2 This is a schematic diagram of the interaction between the firewall and the cloud server of the present invention; Figure 3 A schematic flow chart of an embodiment of a device for installing a firewall function combination package provided by the present invention; Figure 4 A schematic structural diagram of an embodiment of an electronic device provided by the present invention. DETAILED DESCRIPTION

[0018] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0019] The present invention provides a method, system, electronic device and medium for installing a firewall function combination package, which are described below respectively.

[0020] First, Figure 1 A flowchart of an embodiment of the method for installing the firewall function combination package provided by the present invention is shown as follows: Figure 1 As shown, the method for installing the firewall function package is applied to the firewall, including: S101, obtaining firewall function package information pushed by the cloud server; S102, uploading target function package information to a cloud server, wherein the target function package information is selected and confirmed by the user in the function package information; S103: Receive and install the target function combination package pushed by the cloud server, where the target function combination package is obtained by the cloud server based on the target function combination package information.

[0021] Compared with the prior art, the method for installing a firewall function package provided in this embodiment is applied to a firewall to obtain firewall function package information pushed by a cloud server; The target function combination package information is uploaded to the cloud server, and the target function combination package information is selected and determined by the user in the function combination package information, so that the firewall selects the required function package according to the usage scenario, and receives the target function combination package pushed by the cloud server, and the target function combination package is obtained by the cloud server based on the target function combination package information. The present invention is used to select the required combination function package, and then the cloud server pushes the combination function package required by the firewall to the firewall, and the firewall installs the combination function package, that is, different function packages are selected according to different scenario conditions, and there is no need to install useless function packages, which reduces the load of the firewall, improves the efficiency of the firewall in processing data, and reduces the procurement cost of the firewall equipment.

[0022] In a specific embodiment of the present invention, Figure 2 The figure below is a schematic diagram of the interaction between the firewall and the cloud server. The interaction process is as follows: The firewall only has basic network functions by default. After configuring the firewall to connect to the Internet, it can automatically connect to the cloud server; The cloud server pushes the firewall's optional function package information; After the customer purchases a feature package on the firewall, the firewall will upload the information to the cloud server; The cloud server pushes the installation package containing this function package to the firewall; The firewall upgrade installation package will send the status of the installed function package to the cloud server synchronously to facilitate the subsequent push of function defect version upgrades.

[0023] In some embodiments of the present invention, the firewall installs the target function combination package and sends the installation information of the target function combination package to the cloud server. When the target function combination package is updated, the cloud server pushes the updated target function combination package to the firewall.

[0024] It should be noted that the basic network functions of the firewall include interfaces, routing, NAT, static routing and application identification.

[0025] interface Firewalls usually have multiple network interfaces, each of which connects to a different network segment. For example, a firewall may have one interface connected to an internal network (such as a LAN) and another interface connected to an external network (such as the Internet). These interfaces are used for packet ingress and egress and routing.

[0026] routing In routing mode, the firewall can be configured with static routing and default routing, and sometimes also supports dynamic routing protocols such as RIP, OSPF, or EIGRP. Static routing allows administrators to manually define routing rules, while dynamic routing protocols allow routers to automatically discover and update routing information.

[0027] NAT NAT (Network Address Translation) is an important function of the firewall, which can map the private IP address of the internal network to the public IP address of the external network. There are three main types of NAT: static NAT, dynamic NAT, and port address translation (PAT). Static NAT is a one-to-one mapping, dynamic NAT is a many-to-many mapping, and PAT maps multiple internal addresses to different ports of a public IP address. The main advantages of NAT include saving IP addresses and hiding the internal network structure, improving security.

[0028] Static Routing Static routing is a manually configured routing table where the administrator needs to define a direct path from the source network to the destination network. Compared with dynamic routing, static routing is simple to configure, but requires manual updates when the network structure changes. It is suitable for small networks or simple network environments.

[0029] Application Identification Firewalls can identify and apply control to various network applications. For example, Sangfor NGAF next-generation firewalls use application visualization technology to identify and control applications based on their behavior and characteristics, rather than relying solely on ports or protocols. This technology breaks away from the limitation that traditional devices can only be controlled by IP addresses and can identify and control a wide range of intranet applications.

[0030] In some embodiments of the present invention, the initial functions of the firewall include basic network functions, and the basic network functions include one or more of interface, routing, NAT, static routing and application identification.

[0031] In some embodiments of the present invention, the target function package includes: one or more of an audit package, an authentication package, a basic security package, a deep security package, an advanced firewall package, and an advanced access package; The audit package includes one or more of behavior audit, traffic audit, SSL decryption strategy, shared access management and mobile terminal management; The authentication package includes: one or more of user authentication and third-party authentication; The basic security package includes: one or more of abnormal message protection and three-layer security attack protection; The deep security package includes: one or more of intrusion prevention, virus protection, and web protection; The advanced firewall package includes: one or more of dynamic routing, link load balancing, server load balancing, flow control strategy, and user restriction strategy; The advanced access package includes one or more of terminal injection management and antivirus software detection management.

[0032] The present invention is used to select the required combined function package, and then the cloud server pushes the combined function package required by the firewall to the firewall, and the firewall installs the combined function package, that is, different function packages are selected according to different scenario conditions, and there is no need to install useless function packages, which reduces the load of the firewall and improves the efficiency of the firewall in processing data.

[0033] In the second aspect, in order to better implement a method for installing a firewall function combination package in an embodiment of the present invention, based on a method for installing a firewall function combination package, correspondingly, Figure 3 As shown, an embodiment of the present invention further provides a device for installing a firewall function combination package. The device 300 for installing a firewall function combination package includes: Function package information acquisition module 301, used to acquire the function package information of the firewall pushed by the cloud server; A function package information uploading module 302 is used to upload target function package information to a cloud server, wherein the target function package information is selected and determined by a user in the function package information; The function combination package installation module 303 is used to receive and install the target function combination package pushed by the cloud server, where the target function combination package is obtained by the cloud server based on the target function combination package information.

[0034] The device 300 for installing a firewall function combination package provided in the above embodiment can implement the technical solution described in the above embodiment of a method for installing a firewall function combination package. The specific implementation principles of the above modules or units can refer to the corresponding contents in the above embodiment of a method for installing a firewall function combination package, which will not be repeated here.

[0035] In a third aspect, the present invention further provides a method for installing a firewall function combination package, which is applied to a cloud server and includes: Push function package information to the firewall; Receiving target function package information uploaded by the firewall, wherein the target function package information is selected and determined by the user in the function package information; The target function combination package is pushed to the firewall, where the target function combination package is obtained based on the target function combination package information.

[0036] In some embodiments of the present invention, it further comprises: Receive the installation information of the target function combination package sent by the firewall.

[0037] In a fourth aspect, the present invention also provides a system for installing a firewall function combination package, comprising: a firewall in a method for installing a firewall function combination package provided in the above-mentioned method embodiments, and / or a cloud server in a method for installing a firewall function combination package provided in the above-mentioned method embodiments.

[0038] like Figure 4 As shown, the present invention also provides an electronic device 400. The electronic device 400 includes a processor 401, a memory 402 and a display 403. Figure 4 Only some components of the electronic device 400 are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0039] In some embodiments, the processor 401 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run program codes or process data stored in the memory 402, such as a method for installing a firewall function combination package in the present invention.

[0040] In some embodiments, processor 401 may be a single server or a server group. The server group may be centralized or distributed. In some embodiments, processor 401 may be local or remote. In some embodiments, processor 401 may be implemented in a cloud platform. In some embodiments, the cloud platform may include a private cloud, a public cloud, a hybrid cloud, a community cloud, a distributed cloud, an internal cloud, a multi-cloud, etc., or any combination thereof.

[0041] In some embodiments, the memory 402 may be an internal storage unit of the electronic device 400, such as a hard disk or memory of the electronic device 400. In other embodiments, the memory 402 may also be an external storage device of the electronic device 400, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc., equipped on the electronic device 400.

[0042] Furthermore, the memory 402 may include both an internal storage unit of the electronic device 400 and an external storage device. The memory 402 is used to store application software installed in the electronic device 400 and various data.

[0043] In some embodiments, the display 403 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 403 is used to display information on the electronic device 400 and to display a visual user interface. The components 401-403 of the electronic device 400 communicate with each other via a system bus.

[0044] In one embodiment, when the processor 401 executes a program installed by a firewall function combination package in the memory 402, the following steps may be implemented: Get the firewall function package information pushed by the cloud server; Uploading target function package information to a cloud server, wherein the target function package information is selected and determined by the user in the function package information; Receive and install the target function combination package pushed by the cloud server, where the target function combination package is obtained by the cloud server based on the target function combination package information.

[0045] It should be understood that: when the processor 401 executes a program installed by a firewall function combination package in the memory 402, in addition to the above functions, other functions can also be implemented. For details, please refer to the description of the corresponding method embodiment above.

[0046] Furthermore, the embodiment of the present invention does not specifically limit the type of the electronic device 400 mentioned, and the electronic device 400 may be a portable electronic device such as a mobile phone, a tablet computer, a personal digital assistant (PDA), a wearable device, a laptop computer, etc. Exemplary embodiments of portable electronic devices include but are not limited to portable electronic devices equipped with IOS, Android, Microsoft or other operating systems. The above-mentioned portable electronic devices may also be other portable electronic devices, such as a laptop computer with a touch-sensitive surface (e.g., a touch panel). It should also be understood that in some other embodiments of the present invention, the electronic device 400 may not be a portable electronic device, but a desktop computer with a touch-sensitive surface (e.g., a touch panel).

[0047] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0048] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.

Claims

1. A method for installing a firewall function package, applied to a firewall, characterized in that: include: Get the firewall function package information pushed by the cloud server; Uploading target function package information to a cloud server, wherein the target function package information is selected and determined by the user in the function package information; Receive and install the target function combination package pushed by the cloud server, where the target function combination package is obtained by the cloud server based on the target function combination package information.

2. The method for installing a firewall function combination package according to claim 1, characterized in that: Also includes: The firewall installs the target function combination package and sends the installation information of the target function combination package to the cloud server.

3. The method for installing a firewall function combination package according to claim 1, characterized in that: The initial functions of the firewall include basic network functions, and the basic network functions include one or more of interface, routing, NAT, static routing and application identification.

4. The method for installing a firewall function combination package according to claim 1, characterized in that: The target function package includes: one or more of an audit package, an authentication package, a basic security package, a deep security package, an advanced firewall package, and an advanced access package; The audit package includes one or more of behavior audit, traffic audit, SSL decryption strategy, shared access management and mobile terminal management; The authentication package includes: one or more of user authentication and third-party authentication; The basic security package includes: one or more of abnormal message protection and three-layer security attack protection; The deep security package includes: one or more of intrusion prevention, virus protection, and web protection; The advanced firewall package includes: one or more of dynamic routing, link load balancing, server load balancing, flow control strategy, and user restriction strategy; The advanced access package includes one or more of terminal injection management and antivirus software detection management.

5. A device for installing a firewall function package, characterized in that: include: A function package information acquisition module is used to acquire the function package information of the firewall pushed by the cloud server; A function package information uploading module, used to upload target function package information to a cloud server, wherein the target function package information is selected and determined by a user in the function package information; The function combination package installation module is used to receive and install a target function combination package pushed by a cloud server, wherein the target function combination package is obtained by the cloud server based on the target function combination package information.

6. A method for installing a firewall function package, applied to a cloud server, characterized in that: include: Push function package information to the firewall; Receiving target function package information uploaded by the firewall, wherein the target function package information is selected and determined by the user in the function package information; The target function combination package is pushed to the firewall, where the target function combination package is obtained based on the target function combination package information.

7. The method for installing a firewall function package according to claim 6, characterized in that: Also includes: Receive the installation information of the target function combination package sent by the firewall.

8. A system for installing a firewall function package, characterized in that: Including the firewall as described in claims 1-4, and / or the cloud server as described in claims 6-7.

9. An electronic device, characterized in that: comprising a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory and is used to execute the program stored in the memory to implement the steps in the method for installing a firewall function combination package as described in any one of claims 1 to 4, or to implement the steps in the method for installing a firewall function combination package as described in any one of claims 6 to 7.

10. A computer-readable storage medium, characterized in that: Used to store computer-readable programs or instructions to implement the steps in the method for installing a firewall function combination package as described in any one of claims 1 to 4 above, or, when the program or instructions are executed by a processor, can implement the steps in the method for installing a firewall function combination package as described in any one of claims 6 to 7 above.

Images