| 摘要 |
The present invention relates to the field of network security, in particular to a method and apparatus for deploying a security access control strategy, which are used for solving the problems in the prior art that the configuration work is difficult and time-consuming and there is a possibility of a human configuration error due to the fact that the configuration of a security access control strategy needs to be manually completed. The method comprises: a cloud management platform determining, according to an application creation instruction, an application template adopted by an application to be created and a security template corresponding to the application template; the cloud management platform notifying a virtualization platform to create, according to the application template, a corresponding virtual machine for each application assembly in the application, and acquire an IP address of each virtual machine created by the virtualization platform; the cloud management platform using, according to the IP address of each virtual machine, the security template to generate a set of security access control strategies corresponding to the application; and the cloud management platform issuing the set of security access control strategies to a corresponding firewall. Therefore, the automatic deployment of a security access control strategy is realized. |
