針對單一的網絡安全技術已經無法很好的解決日益復雜的網絡安全問題，提出了一種新型的安全系統。該系統基于分布式防火墻環境，結合分布式入侵檢測技術，并利用專家系統使兩者協同工作，實時檢測并響應動態的網絡安全事件，彌補了單一網絡安全系統的不足，可以很好的滿足網絡安全的要求。Traditional single security technology is becoming obsolete with the complexity of network security problems increased. To address this problem , a new security system architecture is proposed. This new system is based on the distributed firewall environment, and distributed network intrusion detection technology is integrated. Furthermore, Expert System is utilized to make them work coordinated and intelligently respond the real-time dynamic network security situations. This scheme can make up for the shortcomings of single security system and fulfill the requirement of network security. Description of this system architecture and some important system details are presented in this paper.