Firewall policy recommendation method and device

The embodiment of the invention provides a firewall policy recommendation method and device. The method comprises the following steps: acquiring an application state of equipment; generating an equipment portrait according to the application state of the equipment, and issuing a corresponding firewall strategy to the equipment according to threat intelligence and the equipment portrait; and changing the firewall policy according to an operation instruction issued by an equipment administrator. In this way, the recommendation model based on the user portrait and the knowledge graph can be constructed, the user equipment can customize the firewall strategy in a personalized mode, firewall recommendation rules are distributed to the equipment in different scenes according to equipment functions, user requirements and security levels, and the method has high flexibility, adaptability and real-time performance. 本公开的实施例提供了防火墙策略推荐方法及装置。所述方法包括获取设备的应用状态；根据所述设备的应用状态生成设备画像，根据威胁情报及所述设备画像，为所述设备下发相应的防火墙策略；根据设备管理员下发的操作指令，对所