基于SOAP的分布式防火墙策略发布研究

Research in Policy Issue of Distributed Firewalls Based SOAP

文章提出了一种基于SOAP的分布式防火墙策略发布方法。介绍了集中式管理中分布式防火墙的体系结构,使用XML描述策略,通过SOAP将策略发布到防火墙上,用SOAP数字签名和加密保证信息传输的安全性。具有平台无关性、语言无关性、易扩展性、能穿越防火墙等优点。这种方法也可用于分布式防火墙管理信息的传输。

This paper introduces a issue method of distributed firewalls policy based SOAP. It adopts the centralized management, uses XML to describe policies, issues policies on firewalls through SOAP and adopts SOAP signature and encrygraph to protect the data flowing on network. It also gives the centralized architecture of distributed fire- walls. The advantages of the method are the independence of platform, the independence of language,the extensibili- ty, the ability of passing through firewall and so on. This method is apt to transmit management data of distributed firewalls.