The Design And Implementation Of A NETCONF-based Firewall Management System

In recent years, with the rapid development of network, people on the network management, especially the safety of the increasing degree of importance attached to management.Recent years, the management of network security is increasingly attached importance along with the rapid development of Internet. Firewalls are making a great contribution to network security and playing an important role on protecting web users' private information. However, Firewalls couldn't produce the best possible results without an integral management system, even if equipped the most development device. Therefore, an integral firewall management system is fairly valuable to be produced for configured and manage firewall devices.The system is mainly used to control the online firewalls devices, so as to ensure network security. It provides intelligently, safely, easily implementing solutions for information security and event management. The system concentrate process the huge amount of NAT logs and attacking event among whole network, and support the aggregation, storage, normalization of mass data via being compatible with devices from different manufacturers. It also supplies to centrally manage multi fire wall devices, uniformly deploy internal domain rules, collect and analyze the attacking event information, audit the NAT logs, as a robust and high-performance fire wall devices management system.On basis of good knowledge of characteristics of firewall devices, it presented the designing scheme of firewall management system, and analyzed the information of IP address, service and security strategy in Firewalls. The detailed designs and implementing of IP address management module, service management module and internal domain rules management module is also shown using NETCONF.