Intelligent quarantine on switch fabric for physical and virtualized infrastructure
AssigneeCisco Technology, Inc.
InventorsBalaji Sundararajan, Gaurang Rajeev Mokashi, Preety Mordani, Vivek Agarwal
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer-readable media for performing threat remediation through a switch fabric of a virtualized network environment. Data traffic passing into a virtualized network environment including a plurality of virtual machines running on a switch fabric is monitored. A network threat introduced through at a least a portion of the data traffic is identified at the switch fabric. One or more remedial measures are performed in the network environment based on the identification of the network threat in the virtualized network environment.
Claims20
A method comprising:
- monitoring data traffic passing into a virtualized network environment including a plurality of virtual machines;
- identifying, at a first node, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment, the first node receiving the at least a portion of the data traffic introducing the network threat, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- performing one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment.
A system comprising:
- one or more processors;
- and
- at least one non-transitory computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- monitor data traffic passing into a virtualized network environment including a plurality of virtual machines;
- identify, at a first node, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment, the first node receiving the at least a portion of the data traffic introducing the network threat, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- perform one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment.
A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising:
- monitor data traffic passing into a virtualized network environment including a plurality of virtual machines;
- identify, at a first node, a network threat introduced into the virtualized network environment through at least a portion of the data traffic passing into the virtualized network environment, the first node receiving the at least a portion of the data traffic introducing the network threat, the first node locally identifying the network threat introduced through the at least a portion of the data traffic received at the first node;
- and
- perform one or more remedial measures in the virtualized network environment based on the identification of the network threat in the virtualized network environment.
Dependencies are inferred from the claim text.