Network access control method capable of customizing inspection items

The invention relates to a network access control method capable of customizing inspection items in the technical field of information security, which comprises the following steps: customization of the inspection items and generation of an inspection item script; generation of network access control rules; and implementation of network access control. The network access control method realizes the customization of the inspection items by designing a set of inspection item characteristic description language, and the customization of the inspection items is only completed by general text configuration. As for a network access control system realized by the network access control method, the redevelopment or secondary development of the system is not required when novel protocol fields are required for inspection control due to the change of security demand and the like, and the system can support the inspection control of the novel protocol fields only by corresponding configuration. The novel inspection item