DATA FLOW FORWARDING METHOD AND DEVICE

摘要

This disclosure makes public a data flow forwarding method and device, and in this method, a second health state is acquired based on the first health state of one or more pieces of identifying information of the received data flow, wherein the first health state and second health state are associated with the access rights of the user and/or user device that sent the data flow; it employs firewall policy property sets to determine whether or not to forward the data flow, wherein the firewall policy property sets comprise: the second health state. The technical schemes based on this disclosure improve the ability of a firewall to identify network attacks or abnormal activities and reduce administration costs.

主权项

1. A data flow forwarding method, comprising:
based on first health state(s) of one or more pieces of identifying information of a received data flow, determining a second health state of the data flow using a processing unit, wherein the first health state(s) and second health state are associated with the an access right of a user and/or an access right of a device that sent the data flow; and employing a set of firewall policy parameters to determine whether or not to forward the data flow, wherein at least one of the firewall policy parameters has a value that represents the second health state.