Back to results
US 2003/0149766 A1Published application
Firewall configuration validation
AssigneeStonesoft Corporation
InventorsTuomo Syvanne, Eino Lilius
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeStonesoft Corporation
InventorsTuomo Syvanne, Eino Lilius
Estimating the term…
The invention relates to processing configuration of a network node, such as for example a firewall, and for sharing the configuration management between several administrators. The configuration comprises a processing rule base, which contains rules to be used in the network node for filtering data packets, the rules comprising one or more identification values for identifying a data packet and an action. The configuration of the network node is validated by determining, whether the processing rule base fulfils requirements defined in a validation rule base. The use of validation rule base enables verifying that processing rule bases managed by different administrators fulfil some set requirements. Additionally, the invention accounts for detecting human errors in configurations.
A method of processing configuration of a network node, the configuration comprising a processing rule base, which contains rules to be used in the network node for filtering data packets, the rules comprising one or more identification values for identifying a data packet and an action, said method comprising
A computer-readable medium, containing a computer software which, when executed in a computer device, causes the computer device to provide a routine for processing configuration of a network node, the configuration including a processing rule base, which contains rules to be used in the network node for filtering data packets, the rules including one or more identification values for identifying a data packet and an action, said routine comprising
An arrangement for processing configuration of a network node, the configuration including a processing rule base, which contains rules to be used in the network node for filtering data packets, the rules including one or more identification values for identifying a data packet and an action, the arrangement comprising
Dependencies are inferred from the claim text.