SNMP MIB-based firewall NAT policy automatic perception and port health degree closed-loop monitoring method and system

By using the SNMP protocol and asynchronous TCP connection pool technology, the system automatically detects changes in firewall NAT policies, incrementally synchronizes configuration files, and incrementally synchronizes declarative configuration files. This solves the problem of the disconnect between NAT policy configuration and monitoring, and enables real-time quantitative monitoring of port health, thereby improving operational efficiency.

CN122420151APending Publication Date: 2026-07-17SUZHOU INST OF ARTIFICIAL INTELLIGENCE SHANGHAI JIAOTONG UNIV
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610571847.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-04-28
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

In existing technologies, NAT policy configuration and monitoring are disconnected in large-scale network infrastructures. The system cannot automatically detect changes in firewall NAT policies, resulting in missed monitoring of newly added mappings and incorrect monitoring of expired mappings. It lacks closed-loop automation capabilities, creates monitoring data silos, and cannot correlate and analyze the causal relationship between NAT capacity pressure and port availability.

Method used

The firewall NAT MIB is collected periodically via the SNMP protocol, and a set of NAT entries is automatically built. An incremental synchronous declarative configuration file is used, and an asynchronous non-blocking TCP connection pool is used to detect port liveness. Combined with Prometheus and Grafana, a closed-loop monitoring system for port health visualization is achieved.

Benefits of technology

It achieves automatic NAT policy awareness and configuration synchronization closed loop, real-time quantitative monitoring of port health, improves operation and maintenance efficiency, solves configuration drift problem, and realizes lifecycle management of monitoring targets with zero manual intervention.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122420151A_ABST
    Figure CN122420151A_ABST
Patent Text Reader

Abstract

The application belongs to the technical field of network security operation and maintenance, network address translation monitoring, software defined network and intelligent operation and maintenance, and specifically discloses a firewall NAT policy automatic perception and port health degree closed-loop monitoring method and system based on SNMP MIB: the firewall NAT MIB is periodically collected through the SNMP protocol to obtain a current actual effective NAT entry set; the set is compared with a local monitoring configuration file to identify new and invalid entries, and an incremental update is performed on the configuration file according to a preset conflict arbitration strategy; the updated configuration file is read, survival detection is performed on a target port, and the result is pushed to a time sequence monitoring system. The application solves the problems of configuration drift, perception blind area and lack of closed-loop automation caused by the disconnection between monitoring configuration and NAT policy in the prior art, realizes automatic perception of NAT entries, incremental synchronization of configuration and closed-loop visual monitoring of port health degree, and improves operation and maintenance efficiency and monitoring accuracy.
Need to check novelty before this filing date? Find Prior Art