Network security protection method, system and device, security switch and storage medium

Abstract

The invention relates to a network security protection method, system and device, a security switch and a storage medium, and the method comprises the steps: obtaining a first identity label of an access terminal from management platform equipment according to the MAC address of the access terminal when the access of the terminal is monitored, and carrying out the identity authentication of the access terminal, and under the condition that authentication of the access terminal succeeds, a security policy request is sent to the management platform equipment, and the security policy request carries the IP address and the first identity identifier of the access terminal, so that the management platform equipment sends the security policy to the access terminal when determining that a security policy issued for the access terminal exists according to the first identity identifier. And replacing a preset placeholder in the security policy with the IP address to obtain a target security policy, and issuing the target security policy to the security switch accessed by the access terminal, so that the security switch executes the target security policy after receiving the target security policy. According to the invention, unified formulation of security policies can be realized, and the efficiency and effect of security protection are improved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a network security protection method, system, device, security switch and storage medium, which can be applied to network security access control in the field of network security. Background technique [0002] Communication between information points and communication between internal and external networks is an essential business requirement in an enterprise network. In the existing enterprise network security protection work, there are various security protection requirements. These security protection requirements need to be implemented through security policies. to fulfill. [0003] However, most of the current enterprise security policies remain on paper, or are discretely distributed in different network security devices. Paper-based security policies and discrete security policies cannot play the role of security protection in essence. When encountering...

AI Technical Summary

Problems solved by technology

[0003] However, most of the current enterprise security policies remain on paper, or are discretely distributed in different network security devices

Paper-based security policies and discrete security policies cannot play the role of security protection in essence. When encountering security threats or attacks, security policies cannot find a unified starting point for unified and rapid formulation and execution, resulting in Poor efficiency and effectiveness of security emergency response

Images