Design Of Distributed Firewall Based On Cooperation Of Ipsec And Firewall

With the popularization of computer network , network security is getting more and more important, network security is the most important problem since network is appeared . To our network , it need the mechanism that security data can entry but insecurity data forbidden .We make use of firewall for the aim . But the firewall isn't omnipotence , because the technology about firewall grown up completeness. In order to eliminate the shortcomings of the conventional firewall, the concept of distributed firewalls is proposed. In the distributed firewalls, security policy is centrally defined ,but enforcement is left up to the individual endpoints. The distributed firewalls solves many problems of the conventional firewalls and meets the need of network development.The article recount the technology of network security and the tradition firewall firstly and points out problems the tradition firewall faced . following , it research deeply on the framework,, key technologies and advantage of the distributed firewalls and designs a distributed firewalls system based on the cooperation of IPSec and firewalls.This system is made up of three parts: policy executor ,policy control center and IPSec communicating . The policy executor is run on the protected host and executes the security policy that received from policy control center. The policy control center registers the protected host , edits the security policy and distributes it to the protected host .The IPSec communicating part is up to prevening the inner attack . This thesis introduces the inner and outer frame design of the system and tests . It gains preferable effect of running .