Enforcing universal security policies across data centers
AssigneeVMware, Inc.
InventorsHamza Aharchaou, Farzad Ghannadian, Amarnath Palavalli, Rajiv Krishnamurthy
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure relate to enforcing universal security policies across data centers. Embodiments include receiving, from a user, a first universal security policy (USP) related to a first universal policy group. Embodiments include identifying a first data center as an enforcement point for the first USP. Embodiments include automatically generating, at the first data center, a first local security policy based on the first USP. Embodiments include deploying a workload associated with the first universal policy group to the first data center. The first USP is enforced for the workload via the first local security policy.
Claims20
A method for enforcing universal security policies across data centers, comprising:
- receiving, from a user, a first universal security policy (USP) related to a first universal policy group;
- identifying a first data center and a second data center as enforcement points for the first USP;
- automatically generating, at the first data center, a first local security policy based on the first USP;
- automatically generating, at the second data center, a second local security policy based on the first USP, wherein the second local security policy is defined in a different form than the first local security policy;
- deploying a workload associated with the first universal policy group to the first data center, wherein the first USP is enforced for the workload via the first local security policy;
- and
- deploying the workload or a second workload associated with the first universal policy group to the second data center, wherein the first USP is enforced for the workload or the second workload via the second local security policy.
A non-transitory computer readable medium comprising instructions to be executed in a computer system, wherein the instructions when executed in the computer system perform a method for enforcing universal security policies across data centers, the method comprising:
- receiving, from a user, a first universal security policy (USP) related to a first universal policy group;
- identifying a first data center and a second data center as enforcement points for the first USP;
- automatically generating, at the first data center, a first local security policy based on the first USP;
- automatically generating, at the second data center, a second local security policy based on the first USP, wherein the second local security policy is defined in a different form than the first local security policy;
- deploying a workload associated with the first universal policy group to the first data center, wherein the first USP is enforced for the workload via the first local security policy;
- and
- deploying the workload or a second workload associated with the first universal policy group to the second data center, wherein the first USP is enforced for the workload or the second workload via the second local security policy.
A computer system comprising:
- a memory;
- and
- at least one hardware processor configured to execute system software for the computer system to cause the at least one processor to execute a method for enforcing universal security policies across data centers, the method comprising:
- receiving, from a user, a first universal security policy (USP) related to a first universal policy group;
- identifying a first data center as an enforcement point for the first USP;
- automatically generating, at the first data center, a first local security policy based on the first USP;
- and
- deploying a workload associated with the first universal policy group to the first data center, wherein the first USP is enforced for the workload via the first local security policy.
Dependencies are inferred from the claim text.