Firewall Distribution To Centrally Manage The Research And Application

In view of the enterprise and the unit individual firewall independent shortcoming, not easily by the centralized management shortcoming, to its improvement, individual firewall which disperses, manages the platform service end centralized management through the center. This article studies the content to divide into the main engine firewall and the center manages two major parts, in the research and the realization, replans and the design main engine firewall, the main engine firewall is the concrete implementation, holds the important status. The main engine firewall has the package to filter, function and so on condition examination, attack examination, and the work under the core pattern, has simultaneously used the NDIS technology; But the procedure verification work under the user pattern, has simultaneously used the SPI technology; In order to enhance the firewall the overall performance, in the design has analyzed the regular tree algorithm, the regular tree's match algorithm and the regular tree memory algorithm with emphasis, also to the condition examination, the data acquisition algorithm and so on has made the comprehensive analysis and the design. In order to does not cause the firewall to be independent, the firewall journal file transmission for the central management, took the central management data acquisition object, carries on the multianalysis by the central management to this data, then formulates the renewal strategy, and distributes in the main engine firewall the strategy which assigns; After the main engine firewall will receive the new strategy, will carry on the strategy to the local security regular storehouse to renew, achieved the strategy unification management, the renewal strategy goal, simultaneously enhanced the firewall system usability, the reliability...