A method for processing a policy implemented by a computer program, wherein the computer program instructs relevant hardware to perform the method, comprising: obtaining (101, 201, 301) at least one user policy, wherein each user policy includes at least one policy and is used to instruct a service processing unit corresponding to the each user policy to perform service processing; reading (102, 202, 302) information of an application knowledge base corresponding to the each user policy and performing rule conversion on the read information, so that the description language of the information is consistent with the rule description language of the user policy; combining (103, 205, 306) a condition element and an action element of the each user policy with information corresponding to the condition element and the action element, and compiling each result obtained through combination, wherein the information corresponding to the condition element and the action element is information required by the condition element and the action element in the information obtained through rule conversion; and sending (104, 206, 307) each compilation result to the service processing unit corresponding to the each user policy and further corresponding to the each compilation result; characterized in that there are a plurality of service processing units and application knowledge bases, the each service processing unit corresponds to one application knowledge base of one application service, and the application service includes any one of application services including an application delivery controller, a wide area network optimization controller, deep packet inspection, an intrusion prevention system, and a uniform/universal resource locator filter, and wherein the each user policy comprises a classified user policy which refers to a user policy that is configured in advance to be sent to the service processing unit corresponding to the each user policy, and the classified user policy corresponds to a specific user policy classification. obtaining (101, 201, 301) at least one user policy, wherein each user policy includes at least one policy and is used to instruct a service processing unit corresponding to the each user policy to perform service processing; reading (102, 202, 302) information of an application knowledge base corresponding to the each user policy and performing rule conversion on the read information, so that the description language of the information is consistent with the rule description language of the user policy; combining (103, 205, 306) a condition element and an action element of the each user policy with information corresponding to the condition element and the action element, and compiling each result obtained through combination, wherein the information corresponding to the condition element and the action element is information required by the condition element and the action element in the information obtained through rule conversion; and sending (104, 206, 307) each compilation result to the service processing unit corresponding to the each user policy and further corresponding to the each compilation result; characterized in that there are a plurality of service processing units and application knowledge bases, the each service processing unit corresponds to one application knowledge base of one application service, and the application service includes any one of application services including an application delivery controller, a wide area network optimization controller, deep packet inspection, an intrusion prevention system, and a uniform/universal resource locator filter, and wherein the each user policy comprises a classified user policy which refers to a user policy that is configured in advance to be sent to the service processing unit corresponding to the each user policy, and the classified user policy corresponds to a specific user policy classification.