Network security access device

The invention discloses network security access equipment, and belongs to the field of computer IP network security application. The network security access equipment carries out TCP connection tracking based on a dynamic Hash table, and comprises the following steps: carrying out primary classification on maintained TCP connection according to a subnet where an IP address is located, calculating a Hash value according to the subnet, and storing subnet information in a node of a root Hash table; a quintuple (a source IP, a destination IP, a source port, a destination port and a protocol number) of TCP connection is utilized to calculate a Hash value, TCP connection information is stored in a sub Hash table pointed by a node corresponding to a root Hash, a dynamic secondary Hash table can reduce Hash value conflicts, the access hit rate of the Hash table is improved, and the main purposes of improving network user request access throughput and concurrent access processing capacity are achieved. 本发明公开了一种网络安全接入设