According to the idea of collecting management and detract execution ,center manager and field manager answer for network management and establishing security policy,and hand out them to host firewalls and network firewall to execute.

• 按照分布式防火墙集中管理、分散执行的思想,设计了中央管理器和域管理器来负责管理网络和制定安全策略,并将安全策略分发到整个网络上的主机防火墙和网络防火墙执行,解决了传统防火墙的效率瓶颈、内部攻击和不能抵御分布式攻击等问题。