Managing network connections based on their endpoints

A system comprising:

• a hardware memory;
• and
• a processor, operatively coupled to the hardware memory, the processor to:
• store a master connection file comprising a list of desired connections for a plurality of networked resources, wherein each desired connection in the master connection file defines a first networked resource and a second networked resource between which the desired connection exists, and an expected rule that exists at the first networked resource and the second networked resource;
• obtain, for each of one or more of the plurality of networked resources, a connection indication file indicating one or more actual connections maintained by the networked resource, wherein each of the one or more actual connections indicates an actual rule that exists at the networked resource;
• and
• compare the master connection file with the connection indication files obtained from the one or more of the plurality of networked resources to detect one or more differences between the master connection file and actual connections maintained among the one or more of the plurality of networked resources, wherein each detected difference indicates an inaccuracy of the master connection file by indicating that a respective desired connection of the list of desired connections in the master connection file is incorrectly configured.

A non-transitory computer-readable medium having instructions stored thereon which, when executed by a processor, cause the processor to:

• store a master connection file comprising a list of desired connections for a plurality of networked resources, wherein each desired connection in the master connection file defines a first networked resource and a second networked resource between which the desired connection exists, and an expected rule that exists at the first networked resource and the second networked resource;
• obtain, for each of one or more of the plurality of networked resources, a connection indication file indicating one or more actual connections maintained by the networked resource, wherein each of the one or more actual connections indicates an actual rule that exists at the networked resource;
• and
• compare, by the processor, the master connection file with the connection indication files obtained from the one or more of the plurality of networked resources to detect one or more differences between the master connection file and actual connections maintained among the one or more of the plurality of networked resources, wherein each detected difference indicates an inaccuracy of the master connection file by indicating that a respective desired connection of the list of desired connections in the master connection file is incorrectly configured.