# US 12,224,980 B2 · Systems and methods for dynamic firewall policy configuration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,224,980 B2 - Document ID: US12224980B2 - Status: Granted - Kind: B2 - Application number: 18/756,295 - Filed: 2024-06-27 - Published: 2024-10-24 - Granted: 2025-02-11 - Earliest claimed: 2016-02-29 - Assignees: Level 3 Communications, LLC - Applicants: Level 3 Communications, LLC - Inventors: Jin-Gen Wang; Travis D. Ewert - Web page: https://patentgrep.com/patent/US12224980B2 ## CPC - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 41/0869: Validating the configuration within one network element - H04L 41/0886: {Fully automatic configuration} - H04L 41/0894: Policy-based network configuration management - H04L 63/0272: {Virtual private networks} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for receiving information on network firewall policy configurations are disclosed. Based on the received firewall configuration information, a configuration of a firewall and/or subnet of network devices is automatically provisioned and/or configured to control network traffic to and from the subnet. ## Claims ### Claim 1 A method for firewall configuration comprising: receiving, at a processing device, input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components; executing, using the processing device and a virtual network component, first instructions associated with the firewall configuration; executing, using the processing device and the virtual network component, second instructions associated with the network component configuration; determining, based on the execution of the first instructions, that the firewall configuration is valid; determining, based on the execution of the second instructions, that the network component configuration is valid; automatically configuring, using the processing device, the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are valid; and activating, using the processing device, the firewall within the communications network to manage traffic to and from the subnet. ### Claim 2 (depends on 1) The method of claim 1, wherein the virtual network component is a replica of the network component. ### Claim 3 (depends on 1) The method of claim 1, wherein the firewall policy is implemented at the firewall and the network component for a finite period of time associated with a user request. ### Claim 4 (depends on 1) The method of claim 1, wherein the firewall policy is implemented at the firewall and the network component at a time associated with a user request. ### Claim 5 A system for firewall configuration comprising: a subnet of network components deployed within a communications network, the subnet accessible through a firewall; at least one processor; and non-transient computer-readable media communicably coupled to the at least one processor having instructions stored thereon that, when executed by the at least one processor, cause the at least one processor to: receive input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components; execute, using a virtual network component, first instructions associated with the firewall configuration; execute, using the virtual network component, second instructions associated with the network component configuration; determine, based on the execution of the first instructions, that the firewall configuration is valid; determine, based on the execution of the second instructions, that the network component configuration is valid; automatically configure the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are logically valid; and activate the firewall within the communications network to manage traffic to and from the subnet. ### Claim 6 (depends on 5) The system of claim 5, wherein the virtual network component is a replica of the network component. ### Claim 7 (depends on 5) The system of claim 5, wherein the firewall policy is implemented at the firewall and the network component for a finite period of time associated with a user request. ### Claim 8 (depends on 5) The system of claim 5, wherein the firewall policy is implemented at the firewall and the network component at a time associated with a user request. ### Claim 9 A non-transitory computer-readable medium for firewall configuration including instructions, executable by a processor, the instructions comprising: receiving input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components; executing, using a virtual network component, first instructions associated with the firewall configuration; executing, using the virtual network component, second instructions associated with the network component configuration; determining, based on the execution of the first instructions, that the firewall configuration is valid; determining, based on the execution of the second instructions, that the network component configuration is valid; automatically configuring the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are logically valid; and activating the firewall within the communications network to manage traffic to and from the subnet. ### Claim 10 (depends on 9) The non-transitory computer-readable medium of claim 9, wherein the virtual network component is a replica of the network component. ### Claim 11 (depends on 9) The non-transitory computer-readable medium of claim 9, wherein the firewall policy is implemented at the firewall and the network component for a finite period of time associated with a user request.