Method for quickly and conveniently detecting firewall configuration

Abstract

The invention discloses a method for quickly and conveniently detecting firewall configuration. The method is characterized by comprising the following steps: accessing a target network or target firewall equipment through a portable terminal for detection, performing activity detection on the existing firewall equipment, and automatically reading a corresponding configuration acquisition commandfrom a command library and acquiring corresponding configuration information of a firewall by the portable terminal according to the detected equipment model; and finally, based on the obtained information, determining whether the configuration of the target firewall equipment is correct or not by comparing the information obtained from the correct rule base with the configuration information readby the command, if the configuration of the target firewall equipment is correct, ending the detection, otherwise, enabling the terminal equipment to automatically modify the firewall configuration according to the rule set by the user, and meanwhile, supporting the user to manually modify the firewall configuration. According to the method, the configuration of the specified firewall in the target network can be accurately, comprehensively, quickly and flexibly detected and verified, and the configuration which does not meet the requirement is modified.

Description

technical field [0001] The invention relates to the field of network communication management, in particular to a technology for detecting and configuring firewall equipment in a network system, in particular to a method for quickly and conveniently detecting the configuration of a firewall. Background technique [0002] Many years ago, the network structure of most enterprises was relatively simple, and the number of network devices in a local area network was also very limited. The number is increasing day by day, and there are more and more potential loopholes in the network. In order to prevent malicious people from exploiting these loopholes, firewalls play a key role. When the number of firewalls is small, manual detection and maintenance configuration work The pressure is not great. At present, there are more and more network devices, and the number of supporting firewalls is also increasing. Coupled with the increasing number and types of network vulnerabilities, the...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to invent a method for detecting and modifying the firewall configuration through a portable terminal in view of the problems that the detection and maintenance of the firewall equipment in the existing network system mainly rely on manual maintenance and there is a large workload and a high error rate

Images