Policy engine for modular generation of policy for a flat, per-device database

A method for generating network management policies for a network, comprising:

• storing a hierarchical policy in a directory database;
• using a policy generator to transform said hierarchical policy into a flat file format with device schema for devices comprising said network by
• dividing a policy into a plurality of policy types, and
• providing each of said policy types to a COM server for one of said policy types, said COM server generating a flat file for each device corresponding to said policy, wherein said policy types include a virtual private network (VPM), a network address translation (NAT), a firewall and application management services (AMS);
• providing a flat file template to said COM servers for populating with data corresponding to said policy;
• and
• providing to said COM servers a server address for a server containing said directory;
• concatenating together device implementations of a plurality of policies for said devices;
• adding device attributes from said directory to said flat file;
• and
• storing said flat file format device schema in a configuration database.

A method for creating a directory of a network, comprising:

• providing a directory of device objects describing a plurality of devices in a network;
• organizing said directory in hierarchical form;
• and
• providing at least one policy object for application of a policy to a plurality of said devices.

A method for generating policy descriptions with a policy service agent responsive to a policy generator comprising:

• receiving an XML template, a policy rule description and a directory address from said policy generator;
• accessing a directory at said directory address for hierarchical data describing said policy rule;
• populating said XML template with data pertaining to said policy rule for a device identified in said XML template;
• returning a populated XML template to said policy generator.