作为网络和信息安全的基础设施,防火墙采用将内部网和公众网分开的方法,作为不同网络之间信息的出入口,根据企业的安全策略控制出入网络的信息流。防火墙具有较强的抗攻击能力,能有效地监控内部网和Internet之间的活动,从而为内部网的安全提供了保证。但是,防火墙在为内部网带来安全的同时,也产生了一定的反作用,它降低了网络运行效率。作为防火墙应用的主要安全技术,包过滤只是与规则表进行匹配,对符合规则的数据包进行处理,不符合规 As the infrastructure of network and information security, the firewall adopts the method of separating the internal network and the public network as the entrance and exit of information between different networks, and controls the information flow of access network according to the enterprise security policy. Firewall has a strong anti-attack capability, can effectively monitor the activities between the intranet and the Internet, thus providing security for the intranet. However, the firewall brings some security to the internal network, but also has some adverse effects, which reduces the network operating efficiency. As the main security technology firewall applications, packet filtering is only matched with the rules of the table, in line with the rules of the data packet processing, non-compliant