NetSPoC 3.2 发布，网络安全策略工具

文章转载开源中国

Network Security Policy Compiler (NetSPoC) 是一个用来管理大型计算机网络的安全策略的工具，可用来生成包过滤控制的配置文件以及安全域的边界配置。

新功能：

• Support for Cisco ASA devices as packet filter, as VPN gateway and for LAN-to-LAN IPSec tunnels.
• Support "easy VPN" at Cisco VPN clients.
• Generated chains for Linux iptables are highly optimized now. Deeply nested chains are generated to minimize the number of tests for each checked packet.
• Support port address translation (PAT) to an interface for PIX and ASA.

更详细内容请看 http://netspoc.berlios.de/