Abstract: A network traffic control device, and a security policy configuration method. The network traffic control device identifies a source, a destination, and an application type of an input data stream; executes, based a predetermined enterprise organizational structure, first upward tracing processing to obtain a first source upward tracing point and a first destination upward tracing point; and generating a first security policy, where a source in a match condition of the first security policy is configured to the first source upward tracing point, a destination in the match condition of the first security policy is configured to the first destination upward tracing point. According to the security policy configuration method implemented by the network traffic control device, a security policy can be automatically generated, which reduces difficulty in configuring the security policy and increases a configuration success rate.

Abstract: A network traffic control device, and a security policy configuration method. The network traffic control device identifies a source, a destination, and an application type of an input data stream; executes, based a predetermined enterprise organizational structure, first upward tracing processing to obtain a first source upward tracing point and a first destination upward tracing point; and generating a first security policy, where a source in a match condition of the first security policy is configured to the first source upward tracing point, a destination in the match condition of the first security policy is configured to the first destination upward tracing point. According to the security policy configuration method implemented by the network traffic control device, a security policy can be automatically generated, which reduces difficulty in configuring the security policy and increases a configuration success rate.