Method and system for transmitting and receiving data across virtual firewall

Abstract

The invention discloses a method for transmitting data by spanning a virtual fireproof wall. The virtual fireproof wall has a corresponding security tunnel which has a protected field. When the data is transmitted, in a first virtual fireproof wall a security policy between the protected fields of a safety zone where data entrance port is and the security tunnel of the first virtual fireproof wall filters the data safety, transmits the safely filtered data to the security tunnel of the first virtual fireproof wall for encryption, and transmits the encrypted data through a second virtual fireproof wall. The method for transmitting data by spanning the virtual fireproof wall of the invention simplifies field relation management between the safe fields in the multiple different virtual fireproof walls, effectively implements repeated use of the virtual fireproof port and saves resource.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and system for sending and receiving data across a virtual firewall. Background technique [0002] A firewall (FW, Firewall) refers to a combination of a series of components set between different networks, such as a trusted intranet and an untrusted public network or network security zone. Firewalls often formulate security policies based on security zones to monitor, restrict, or change data flows across the firewall, and shield the information, structure, and operating conditions of the network from the outside as much as possible, so as to achieve security protection for the internal network . [0003] In recent years, with the rise and continuous development of the VPN technology, a virtual firewall (Virtual-firewall, VFW) technology emerges as the times require. A virtual firewall is a logical sub-entity derived from the main firewall system, and acts as a...

AI Technical Summary

Problems solved by technology

[0006] In the prior art, when processing the data flow crossing the firewall, it is necessary to configure a VZONE domain for each firewall, and in addition to configuring the security policy between the original security zones of the firewall, it is also necessary to separately configure the private security zone in the firewall and the VZONE domain. As the number of VFWs increases, the number of VZONE domains to be configured also increases, and more and more security policies need to be configured. The configuration is very complicated.

Moreover, in the prior art, when data streams are forwarded across firewalls, each data stream must be securely filtered at the sending end and the receiving end to realize the forwarding of data streams. Relationships are very difficult to manage

Images