Back to results
US 11,689,573 B2Granted
Multi-layered policy management
AssigneePalo Alto Networks, Inc.
InventorJun Du
Life of this patent
Estimating the term…
Abstract
Techniques for enforcing policy on multiple levels, including context-based and/or packet-based, as well as one or more of event-based, activity-based, and behavior-based. Higher-level abstraction of policy enables IP endpoint discovery and classification for which predefined multi-level policy can be applied. Management of policy can abstract lower-level parameters in favor of a higher-level of abstraction, which enables integration with an asset management platform.
Claims20
A method comprising:
- dynamically generating, in response to detecting a threshold number of anomalies, a multi-level policy for a set of Internet of Things (IoT) devices, the multi-level policy comprising a first policy at a low level of abstraction and a second policy at a high level of abstraction, wherein the first policy at the low level of abstraction is generated at least in part in response to a specification of the second policy at the high level of abstraction, and wherein the second policy references an action to take if a particular activity is attempted by a device included in the set of IoT devices;
- discovering an Internet Protocol (IP) endpoint, the IP endpoint corresponding to an IoT device;
- classifying the IP endpoint;
- and
- applying the generated multi-level policy to the IP endpoint based on the classification of the IP endpoint.
2 more elements
A system comprising:
- a multi-level policy management engine configured to dynamically generate, in response to detecting a threshold number of anomalies, a multi-level policy for a set of Internet of Things (IoT) devices, the multi-level policy comprising a first policy at a low level of abstraction and a second policy at a high level of abstraction, wherein the first policy at the low level of abstraction is generated at least in part in response to a specification of the second policy at the high level of abstraction, and wherein the second policy references an action to take if a particular activity is attempted by a device included in the set of IoT devices;
- an Internet Protocol (IP) endpoint discovery and classification engine configured to discover an IP endpoint, the IP endpoint corresponding to an IoT device;
- classify the IP endpoint;
- and
- a multi-level policy compliance detection engine configured to apply the generated multi-level policy to the IP endpoint based on the classification of the IP endpoint.
2 more elements
Dependencies are inferred from the claim text.