FIREWALL CONTROLLER, FIREWALL DEVICE, AND FIREWALL CONTROL METHOD

摘要

PROBLEM TO BE SOLVED: To prevent unnecessary data from flowing to a network that is interposed between firewall devices.SOLUTION: Each of a plurality of firewall devices 5 discarding data flowing between networks 2 and 3 in accordance with a flow entry transmits to a firewall controller 7 discarded data information including information about the amount of data discarded per unit time and transmission source information of the discarded data. Based on the discarded data information, the firewall controller 7 detects a data flow in which a discarded data amount of the same transmission source information exceeds a threshold value, and sets a discard flow entry for discarding data of the data flow to a transmission source firewall device 5 (e.g., FW#1) connected to the transmission source network 3.SELECTED DRAWING: Figure 1