A Network Firewall Combining Software and Hardware

Abstract

The invention discloses a hardware and software combined network firewall characterized by comprising a hardware firewall and software management. The hardware firewall, based on computer management, manages access limits from clients' terminals in a concentrated manner by developing a uniform access strategy. For a few special users, the hardware is designed with management rules that may not be applied to others. The software management is realized by changing the internal communication rules of the network through the hardware firewall computer with the formulation of TCP / IP communication rules that are incompatible with the communication protocols in the Internet or a local area network, thereby shielding external visitors. The technical schemes of the network firewall provided by the invention change the communication rules inside the network through the firewall computer, which are incompatible with the communication protocols in the Internet or a local area network, so as to shield the external visitors. In addition, according to the invention, real-time monitoring and recording can be make for each communication, which facilitates the search of malicious access or illegal use.

Description

technical field [0001] The invention relates to the technical field of network security access and access protection in a cloud computing environment, in particular to a network firewall technology combining software and hardware. Background technique [0002] With the rapid development and popularization of network technology, the network environment has become increasingly complex, including high-speed network facilities, high-performance computing facilities, big data processing, efficient resource management and other related infrastructure, and in these infrastructure In the virtualized environment built on the Internet, the original network firewall technology can no longer meet the security protection requirements in today's network environment. [0003] In the prior art, the firewall is set between the server and the client, and a security gateway (Security Gateway) is established between the host and all clients through hardware devices, thereby protecting the inter...

AI Technical Summary

Problems solved by technology

However, in the prior art, the firewall is usually set between the host computer and other client computers. Using the TCP / IP protocol, external users can access the host by accessing the client computer or pretending to be a client computer, and obtain host information, which brings great risks to the network.

Images