Security policy configuration method and device, electronic equipment and storage medium

Abstract

The invention provides a security policy configuration method and device, electronic equipment and a storage medium, and relates to the technical field of network security. The method comprises the steps of determining a flow communication topology corresponding to a virtual firewall based on flow information in the virtual firewall; based on the traffic communication topology, a circulation information table between the virtual firewall and the virtual machine is obtained, and the circulation information table comprises circulation information of the multiple pieces of traffic information when the multiple pieces of traffic information circulate between the virtual firewall and the virtual machine; and configuring the plurality of security policies based on the circulation information table so as to send each security policy to the corresponding virtual firewall. According to the method and the device, the flow communication topology of the virtual firewall is drawn, and the circulation information table between the virtual firewall and the virtual machine is obtained on the basis of the flow communication topology, so that a plurality of security policies can be configured according to the circulation information table, and each security policy can be sent to the corresponding virtual firewall; and the configuration efficiency and execution efficiency of the security policy are effectively improved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular, to a security policy configuration method, device, electronic equipment and storage medium. Background technique [0002] In virtualized security products, there are two mainstream implementation methods: one is to deploy an agent (a software or hardware entity that can act autonomously) in a virtual machine, and the agent communicates with the security management platform to obtain security policies and configurations. And upload the information related to the virtual machine network; the other is to guide all the traffic on the current host (physical server) to the VFW (virtualized security firewall) by installing the drainage driver in the hardware server where the protected virtual machine is located , the VFW communicates with the security management platform to obtain security policies, configure and upload virtual machine network-related information. [0...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the purpose of the embodiments of the present application is to provide a security policy configuration method, device, electronic equipment and storage medium, so as to improve the problem of low security policy configuration existing in the prior art

Images