通信网络防火墙策略优化实践  

Optimization Practice of Communication Network Firewall Policy

作　　者：颜昭治[1] YAN Zhao-zhi(Shantou Branch,China Mobile Group Guangdong Co.,Ltd.,Shantou 515043,China)

机构地区：[1]中国移动通信集团广东有限公司汕头分公司,广东汕头515043

出　　处：《电脑知识与技术》2021年第7期46-47,53,共3页Computer Knowledge and Technology

摘　　要：防火墙是确保通信网络安全的重要设施,但存在部分设备由于维护不当,导致防火墙策略臃肿,不符合策略“最小化”原则,给防火墙性能及业务安全带来隐患。该文通过总结公司通信网络防火墙策略问题及其成因,并提出相应的策略优化方法,最后阐述了优化过程中几点实践,以此来掌握防火墙策略如何优化,进而到达提升通信网络安全的目的。Firewall is an important facility to ensure the security of communication network.However,due to improper maintenance of some devices,the firewall policy is unreasonable and does not follow the principle of minimization,which brings hidden danger to firewall performance and business security.This paper summarizes the problems and causes of the company's communication net⁃work firewall policy,and puts forward the corresponding policy optimization methods.Finally,it expounds several practices in the optimization process,so as to master how to optimize the firewall policy,and then achieve the purpose of improving the communica⁃tion network security.

关 键 词：防火墙 安全策略 策略优化 网络安全 通信网络 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]