Firewall policy task automatic processing system and method

Abstract

The invention provides a firewall policy task automatic processing system and method, and relates to the technical field of process automation, and the system comprises a request processing module which is used for obtaining a policy task request sent by at least one requester, and when the policy task request is in an approved state, sending the policy task request to the requester, processing the strategy task request to obtain request strategy content contained in the strategy task request; a policy configuration module which is used for comparing the request policy content with the current configuration information of the firewall, and performing firewall policy configuration according to a comparison result to obtain a corresponding configuration result; and a configuration verification module which is used for verifying the configuration result according to the request strategy content to obtain a verification result, and sending the verification result to the requester and at least one corresponding network operation and maintenance person. The method has the beneficial effects that repeated policy configuration can be effectively avoided while automatic configuration of the firewall policy is realized, the configuration error rate of the firewall policy is reduced, and the time for network operation and maintenance personnel to execute repeated work is shortened.

Description

technical field [0001] The invention relates to the technical field of process automation, in particular to a system and method for automatically processing firewall policy tasks. Background technique [0002] Firewall is a security gateway product widely deployed in the network, which is quite critical to the security of user information systems. The security of the firewall is basically implemented through the configuration of security policies. Therefore, the correct configuration of the firewall security policy plays a vital role in the security protection of the firewall. [0003] As the IT structure of enterprises becomes larger and IT operation and maintenance work becomes more and more complex, the work of deploying firewalls and implementing firewall policies in business data centers is increasing. At present, the opening and changing of firewall policies are usually performed manually by network operation and maintenance personnel. In the daily operation and main...

AI Technical Summary

Problems solved by technology

At present, the opening and changing of firewall policies are usually performed manually by network operation and maintenance personnel. In the daily operation and maintenance process, network operation and maintenance personnel spend a lot of energy on opening and changing firewall policies. In complex operation and maintenance scenarios such as a large number of IP addresses and cross-use of IPv4 addresses and IPv6 addresses, manually executing firewall policy activation and changes is not only inefficient, but also prone to errors

Images