NETWORK FLOW CONTROL DEVICE, AND SECURITY STRATEGY CONFIGURATION METHOD AND DEVICE THEREOF

The present application relates to a network traffic control device, and a security policy configuration method and apparatus thereof. The method includes: identifying a source, a destination, and an application type of an input data stream; executing, based a predetermined enterprise organizational structure, first upward tracing processing to obtain a first source upward tracing point and a first destination upward tracing point; and generating a first security policy, where a source in a match condition of the first security policy is configured to the first source upward tracing point, a destination in the match condition of the first security policy is configured to the first destination upward tracing point, and an application in the match condition of the first security policy is configured to the application type of the data stream. The first upward tracing processing is executed based on the predetermined enterprise organizational structure to obtain the first source upward tracing point and the first destination upward tracing point, and the first security policy is generated. According to the security policy configuration method and apparatus implemented by a network traffic control device in embodiments of the present invention, a security policy can be automatically generated, which reduces difficulty in configuring the security policy and increases a configuration success rate.