Cloud-delivered firewall rules for controlling commands sent to devices based on operational tolerance limits

A system comprising:

• one or more processors;
• and
• one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, at a first device, a firewall rule configured to allow or deny a command based at least in part on an operational tolerance associated with a second device;
• receiving communication data to be sent to the second device, the communication data including the command;
• determining a predicted operational state of the second device based at least in part on the command included in the communication data and an indication of a current operational state of the second device;
• and
• allowing the communication data to be sent to the second device based at least in part on determining that the predicted operational state of the second device is permitted by the operational tolerance associated with the second device.

A method comprising:

• receiving, at a manufacturer usage description (MUD) controller associated with a firewall service, a MUD uniform resource identifier (URI) indicating a type of an Internet-of-Things (IoT) device;
• sending the MUD URI to a server associated with a manufacturer of the IoT device;
• receiving a MUD file from the server, wherein the MUD file includes an operational tolerance associated with the IoT device;
• determining, by the MUD controller, a network policy allowing or denying a transmission of a command to the IoT device based at least in part on the operational tolerance associated with the IoT device;
• and
• sending the network policy from the MUD controller to the firewall service.