| With the high-speed development of Internet, the problem of network security becomes more and more important. The firewall has come to the most important security product, being as a kind of effective network security technology, traditional perimeter firewall realizes the protection of the inside network. But with the development of Internet, it is not adaptable to the Internet application environment and is quite difficult to balance the security and network performance.In order to overcome the defect of the traditional perimeter firewall and keep its advantage, people have put forward the concept of the distributed firewall. The essential characteristic of the distributed firewall can be summarized as"Making the strategy centralized and implementing it distributed. Keeping the logs made dispersed". The safety policy must be made by the administrator and must be pushed to the hosts at the edge of the network. At the same time the logs must be collected and centralized managed in unison.First of all, this paper analyzes the effects and problems of the traditional perimeter firewall, then lucubrates the structure, key technologies and advantages of the distributed firewalls and had the representative to the distributed firewall related technology as well as the research area of several models to carry on the comparison and summary.Secondly, through to the firewall strategy definition, the implementation and the distribution mechanism research, we carried on the discussion of the distributional firewall strategy management, and made the system analysis of its strategy execution function, the characteristic and the correlation technology.And then, through to the strategy execution implementation plan comparison, as well as its structure, the processing flow and the stable analysis combined with the network state of our country, we produced the system with the packet- filtering module.Finally summarized the full text and proposed some questions which are worth studied. |
PDF Full Text Request