基于区域分割的防火墙部署与配置

Region-based Segmentation of Firewall Deployment and Configuration

防火墙技术作为内部网络与外部网络之间的第一道安全屏障,是受到人们重视的网络安全技术之一。本文为提高网络安全的健壮性,从实施网络安全策略的角度,提出了一种以区域分割的三角方式部署防火墙系统的方案,说明了基于Cisco FIX 525防火墙配置方法,以及访问控制列表与防火墙包过滤规则的联合应用方法。实用检验说明,这种方案能够较好地实现网络安全访问控制,有效地提高网络安全性。

The firewall technology as the internal network and external network security barrier between the first,is subject to people＇s attention to network security technologies. To improve the robustness of network security, network security policy from the implementation point of view,presents a triangular region segmentation method to deploy a firewall system,program.describes the firewall configuration based on Cisco FIX 525 methods,and access control lists and firewall packet filtering The joint rules should be applied.Practical tests show that such programs can achieve better network security access control,effectively improve the network security.