基于网络防火墙的访问控制列表的异常检测和策略编辑

Anomaly Detection and Policy Editing of Access Control List Based on Network Firewall

防火墙是网络防御所必需的技术手段,也是安全网络防范攻击和数据包吞吐控制的关键。当网关完成较复杂的流量过滤时,需在访问控制列表(ACL)中设置大量规则。通过防火墙策略软件工具,不仅可以自行检测ACL中的异常,避免潜在的规则冲突,还可实现符合规则的修改、插入、删除等编辑操作。

Firewall is a necessary technical means for network defense,and also a key to security network defense attacks and packet throughput control. When the gateway complete complex filtering,needing to set a lot of rules in the Access Control List(ACL). Through the firewall policy software,we can not only detect abnormalities in the ACL,but also avoid potential rule conflicts. We also perform editing operations such as modification,insertion and deletion of rules.