摘要 |
PROBLEM TO BE SOLVED: To provide a firewall device capable of easily performing description in which a plurality of security policies are related to each other and capable of reducing also the processing load of packet filtering. SOLUTION: A plurality of security policies are input and set from a GUI picture. An input area of each security policy is displayed in an input area of another policy so as to display inclusion relation. The firewall device filters packets by regarding an outside security policy as an upper (general) policy and an inside security policy as a (lower) exceptional policy out of a plurality of security policies displayed in a nest and applying security policies successively from the upper policy. COPYRIGHT: (C)2008,JPO&INPIT
|