This paper analyzes the demand of campus network security for firewall, considering the price and the limited function of campus network firewall, constructs a firewall system with high performance-price ratio. Practice shows that the system can effectively protect the security of campus network.