(Today's network security (firewall) is not only limited to external protection against hacker attacks, but more corporate internal networks often have problems such as slow Internet access, intermittent timing, and abnormal email sending and receiving. We analyze the main factor, which is the use of intranet users. Many users use BT to download and read some non-standard websites during work hours. . . . . . This will lead to many problems in the intranet, such as viruses, and many virus transmissions are formed by the bad behavior of users. Therefore, the control and management of intranet users is very necessary.)