| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide a method for displaying policy information while preventing a network administrator from wrongly determining an unnecessary policy element, and a management device and program. <P>SOLUTION: When rule information for a firewall device is generated, policy information is displayed on a display which can be browsed by the network administrator. The policy information is stored in which a plurality of policy elements P(i) including a policy identifier, a transmission source/destination address range, and a port number range and action are arranged in an evaluation order. Next, a first policy element and a second policy element in conflict having common parts for the transmission source/destination address range and the port number range are detected. Then, a conflict type to the second policy element and a policy identifier of the second policy element are displayed in the first policy element, and a conflict type to the first policy element and a policy identifier of the first policy element are displayed in the second policy element. <P>COPYRIGHT: (C)2011,JPO&INPIT |
