Compliance monitoring
AssigneeForescout Technologies, Inc.
InventorsAnderson Lam, Kevin Benjamin Mayer, Yuri Mikhel, Gilad Walden
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for device compliance monitoring are described. In certain aspects, one or more compliance rules associated with a device classification are used to determine a compliance level of a device. The one or more compliance rules may be based on a standard. An action can be initiated based on the compliance level.
Claims18
A method comprising:
- detecting, by a compliance monitoring device, a device coupled to a network in response to the device being coupled to the network;
- determining a classification of the device based on traffic information associated with the device;
- accessing a compliance rule based on the classification of the device, wherein the compliance rule is a standard based compliance rule;
- performing, by a processing device of the compliance monitoring device, a compliance scan on the device based on the compliance rule;
- determining a compliance level of the device based on a result of the compliance scan of the device;
- and
- performing an action based on the compliance level.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- determine a classification of a plurality of devices based on at least one of a MAC address of the device or traffic information associated with each of the plurality of devices;
- access compliance data associated with the classification of the plurality of devices, wherein the compliance data comprises a plurality of compliance rules and a respective weight associated with each compliance rule and wherein the plurality of compliance rules are based on a standard;
- modify, by the processing device, one of the respective weights associated with one of the compliance rules;
- perform a respective compliance scan of each of the plurality of devices based on the plurality of compliance rules;
- determine a respective compliance level for each of the plurality of devices, wherein the respective compliance level is determined based on the plurality of compliance rules and the modified respective weight associated with each compliance rule;
- and
- initiate an action based on the compliance level for each device of the plurality of devices.
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device of a compliance monitoring device, cause the processing device to:
- detect, by the processing device of the compliance monitoring device, a device being coupled to a network;
- determine a classification of the device based on traffic information associated with the device;
- access a plurality of compliance rules associated with the classification of the device, wherein the plurality of compliance rules are associated with a standard;
- determine a compliance level of the device based on the plurality of compliance rules, wherein the compliance level is based on a respective weight associated with each of the plurality of compliance rules;
- compare, by the processing device of the compliance monitoring device, the compliance level to a threshold;
- initiate a first action based on the compliance level being above the threshold;
- and
- initiate a second action based on the compliance level being below the threshold.
Dependencies are inferred from the claim text.