The invention provides an information security gateway based on a data white list. The device comprises a data collection module, a data cache module, a data extraction module, a data transmission module and a data issuing module. Through adoption of a data ferry mode based on the white list, a network boundary protection function is realized, namely, only appointed label point data is allowed to pass; while network connection of any mode is blocked; the network isolation capability is clearly higher than a filter mode based on a protocol, and the risk of using an illegal communication protocol to transmit illegal data is greatly reduced.