Flow filtering fine wall

Abstract

This invention relates to computer network anti-fire wall with the following basic control method realizing the protection to the application layer in the state of filtration of the state packet a transparent applied information filtration system is realized based on the filtration of the state detection packet by TCP protocol stack two ends can be accessed directly when it works at the link layer or IP layer permitted by rule, and data flows from one session stream to another stream in the way of stream. Since the application layer strategy of the anti-fire wall is at the middle of the stream, its standard design has the ability of complete identity discrimination, access control and audit, at the same time, the system provides managing and monitor tools of rich GOI mode to do the operation of safety strategy configuration user management, real-time monitor, audit inquiry, flow management.

Description

technical field [0001] The invention relates to a flow filtering firewall for computer network, which belongs to the technical field of firewall (Firewal) in the field of computer network security. Background technique [0002] There are various network security tools in the market at present, and the most mature technology and the earliest productization are firewalls. Due to the strong pertinence of firewall technology, it has become one of the most important guarantees for Internet network security. On the basis of state packet filtering, the flow filtering firewall adopts a specially designed TCP protocol stack to filter the application protocol information flow, and can realize the control of the application layer protocol in a transparent manner. The overall structure of the system is strictly in accordance with the national application level The latest standard design of the firewall has perfect identity authentication, access control and audit capabilities. After tes...

AI Technical Summary

Problems solved by technology

Moreover, proxy services can provide strict user authentication, which packet filtering firewalls cannot do. Therefore, application-level gateways are stronger than packet filtering firewalls in terms of security. However, each proxy service requires a specific application process or daemon process , which makes it a troublesome problem to upgrade the original application proxy service and support the new application proxy service, and the performance of the application-level gateway is inferior to the packet filter, and the transparency is also poor

Images