Firewall strategy-generating method, device and system

The invention provides firewall strategy-generating method, device and system. The firewall strategy-generating method comprises the following steps: receiving strategy demand information containing a demand source address, a demand destination address and a demand service type; acquiring the regions of a source server and a destination server from a prestored address region relation table according to the demand source address and the demand destination address; acquiring region strategy information from a prestored region and strategy relation table according to the regions of the source server and the destination server, wherein the region strategy information corresponds to the regions of the source server and the destination server and contains a strategy source address, a strategy destination address and a strategy service type; logically calculating the demand source address and the strategy source address to generate a source address logic result; logically calculating the demand destination address a