防火墙一般位于网络边界,所以又俗称边界防火墙。但是现在的网络内部安全形势也不容乐观,于是防火墙的安全防护职责也就由外向内渗透了,一些防火墙设备开发商就专门针对内网安全控制需求而开发了专用于内网的防火墙产品,使得防火墙的应用更加广泛。本文试从内部防火墙的应用规则和部署设计两方面对内部防火墙系统做初步的探讨。 Firewalls are generally located at the network border, so they are commonly called border firewalls. But now the security situation in the network is not optimistic, so the firewall’s security protection responsibilities from the outside into the infiltration, and some firewall equipment developers specifically for the internal network security control needs to develop a dedicated firewall within the network products, making Firewall is more widely used. This article tries to make an initial discussion on the internal firewall system from two aspects of the application rules and deployment design of the internal firewall.