Patent ID: 8341705

Claim:
A computer-readable, non-transitory medium that stores therein a computer program causing a computer that controls an access to a system including a plurality of server devices, a first firewall device and a second firewall device to execute: generating information indicating a resource domain that is a set of resources including a set of server devices placed at a communication path between the first firewall device and the second firewall device and information indicating a service group that is a set of services related to server devices performing a service processing in cooperation; storing information, in a storage unit, in which the information indicating the resource domain or the service group is associated with information indicating whether an access is permitted or not; and determining, upon receiving an access request to a server device included in the resource domain or the service group, whether an access is permitted or not based on the information indicating whether an access is permitted or not stored in the storage unit, the information being associated with any one of the resource domain and the service group.