Embedded Firewall Study And Implementation

Along with the development of Internet technology, the network security becomes more and more important. The traditional boundary firewall has the important means to grant the network security, but it can just provide protection against outside, not inside, and it is easily been cheated, and also there is network bottle neck.Distributed firewall is a new type of firewall in order to solve problem that traditional firewall failed to do, and provide a better network security solution for enterprise use. But distributed firewall which is designed on software also relies on host operating system to work. The security of a distributed firewall is based on the underlying operating system. The better solution is to employ embedded technology in distributed firewall design. Thus we bring out the concept of distributed embedded firewall.This thesis improves on the design of software & hardware as well as the detailed implement of the EFW network card based on the ARM7TDMI processor。On the part of hardware design, choosing the hardware developing board FS9200, which has the style of micro-processor AT91RM9200; And on the other part, EFW software design mainly includes programming of BootLoader, embedded Linux operating system., EFW card drive, EFW package filtering, and using IPSec protocol to keep the security on policy transmission. The implement of EFW has been tested in LAN environment, and it is able to filter the data in and out of EFW network card according to the security strategy defined by the program.