Back to results
US 11,388,143 B2Granted
Systems and methods for protecting network devices by a firewall
AssigneeCyxtera Cybersecurity, Inc.
InventorsKurt Glazemakers, Natan Abolafya, Gokhan Berberoglu, Thomas Bruno Emmanuel Cellerier, Aitor Perez Iturri, Per Leino, Jamie Bodley-Scott
Life of this patent
Estimating the term…
Abstract
In one approach, a computer-implemented method includes: implementing, by a gateway, a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network; receiving, by the gateway from the client device, a first access rule; and in response to receiving the first access rule, creating a first firewall rule of the firewall rules.
Claims20
A method, comprising:
- implementing, by a gateway, a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network;
- receiving, by the gateway from the client device, a first access rule, the first access rule including an action and a first condition when a network packet satisfies a packet-level condition associated with the first access rule, wherein when the first condition is not met, the client device is instructed to perform the action to remedy the first condition;
- in response to receiving the first access rule, creating a first firewall rule of the firewall rules;
- receiving, by the gateway, a first network packet that triggers the first firewall rule;
- determining, by the gateway and in response to triggering of the first firewall rule, that the first condition is linked to the first firewall rule;
- retrieving, by the gateway, one or more attributes for checking the first condition;
- resolving, by the gateway, the first condition based at least in part on the one or more attributes as either met or unmet;
- and
- causing, by the gateway and in response to an unmet first condition, the client device to perform the action.
6 more elements
A system, comprising:
- at least one processor;
- and
- a non-transitory computer readable storage medium storing instructions programmed to instruct the at least one processor to:
- implement a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network;
- receive, from the client device, a first access rule, the first access rule including an action and a first condition when a network packet satisfies a packet-level condition associated with the first access rule, wherein when the first condition is not met, the client device is instructed to perform the action to remedy the first condition;
- in response to receiving the first access rule, create a first firewall rule of the firewall rules;
- receive a first network packet that triggers the first firewall rule;
- determine, in response to triggering of the first firewall rule, that the first condition is linked to the first firewall rule;
- retrieve one or more attributes to resolve the first condition as either met or unmet;
- and
- cause, in response to an unmet first condition, the client device to perform the action.
8 more elements
A non-transitory computer readable storage medium storing instructions configured to instruct a computing system to:
- implement, by a gateway, a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network;
- receive, by the gateway from the client device, a first access rule, the first access rule including an action and a first condition when a network packet satisfies a packet-level condition associated with the first access rule, wherein when the first condition is not met, the client device performs the action to remedy the first condition;
- in response to receiving the first access rule, create a first firewall rule of the firewall rules;
- receive, by the gateway, a first network packet that triggers the first firewall rule;
- determine, by the gateway and in response to triggering of the first firewall rule, that the first condition is linked to the first firewall rule;
- retrieve, by the gateway, one or more attributes to resolve the first condition as either met or unmet;
- and
- cause, by the gateway and in response to an unmet first condition, the client device to perform the action.
5 more elements
Dependencies are inferred from the claim text.