Intelligent quarantine on switch fabric for physical and virtualized infrastructure
AssigneeCisco Technology, Inc.
InventorsBalaji Sundararajan, Gaurang Rajeev Mokashi, Preety Mordani, Vivek Agarwal
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer-readable media for performing threat remediation through a switch fabric of a virtualized network environment. Data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric is monitored. A network threat introduced through at a least a portion of the data traffic is identified at the switch fabric. One or more remedial measures are performed in the network environment based on the identification of the network threat in the virtualized network environment.
Claims19
A method comprising:
- monitoring data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric;
- identifying, at a first node in the switch fabric, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment, the first node in the switch fabric receives the at least a portion of the data traffic introducing the network threat as an ingress point for the switch fabric, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- performing one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment.
A system comprising:
- one or more processors;
- and
- at least one non-transitory computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- monitoring data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric that is virtualized in the virtualized network environment;
- identifying, at a first node in the switch fabric, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment, the first node in the switch fabric receives the at least a portion of the data traffic introducing the network threat as an ingress point for the switch fabric, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- performing one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment.
A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising:
- monitoring data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric;
- identifying, at a first node in the switch fabric, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment;
- intercepting the at least a portion of the data traffic introducing the network threat into the virtualized network environment at the switch fabric, the first node in the switch fabric receives the at least a portion of the data traffic introducing the network threat as an ingress point for the switch fabric, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- performing one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment while the at least a portion of the data traffic remains in the switch fabric.
Dependencies are inferred from the claim text.