# US 2014/0156812 A1 · Customized configuration settings for a network appliance > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0156812 A1 - Document ID: US20140156812A1 - Status: Published application - Kind: A1 - Application number: 13/705,601 - Filed: 2012-12-05 - Published: 2014-06-05 - Earliest claimed: 2012-12-05 - Assignees: Fortinet, Inc. - Applicants: Fortinet, Inc. - Inventors: Xianfeng Deng; Ihab Khalil - Web page: https://patentgrep.com/patent/US20140156812A1 ## CPC - H04L 41/0803: Configuration setting - H04L 63/1433: {Vulnerability analysis} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods and systems for temporarily configuring a network appliance in accordance with externally provided customized configuration settings are provided. According to one embodiment, a network appliance may operate in one of multiple configuration modes, including an internal configuration mode and an external configuration mode. When operating in the internal configuration mode, the network appliance loads and runs configuration settings from a memory internal to the network appliance. When operating in the external configuration mode, the network appliance loads and runs configuration settings from an external storage device coupled to an interface of the network appliance. ## Claims ### Claim 1 A method comprising: providing a network appliance with a plurality of configuration modes, including an internal configuration mode and an external configuration mode; when operating in the internal configuration mode, configuring the network appliance by loading and running configuration settings from a memory internal to the network appliance; and when operating in the external configuration mode, configuring the network appliance by loading and running configuration settings from an external storage device coupled to an interface of the network appliance. ### Claim 2 (depends on 1) The method of claim 1, further comprising responsive to detecting the external storage device has been coupled to the interface, causing the network appliance to enter into the external configuration mode. ### Claim 3 (depends on 1) The method of claim 1, further comprising while in the external configuration mode performing audit processing including logging information relating to one or more of security, reliability, loopholes, quality of data, quality of service, and quality of transmission of the network appliance. ### Claim 4 (depends on 3) The method of claim 3, further comprising responsive to detecting the external storage device has been decoupled from the interface: erasing from a memory of the network appliance data collected during the audit processing; and causing the network appliance to enter into the internal configuration mode. ### Claim 5 (depends on 1) The method of claim 1, further comprising responsive to detecting the external storage device is not coupled to the interface, causing the network appliance to enter into the internal configuration mode. ### Claim 6 (depends on 3) The method of claim 3, wherein the configuration settings loaded from the external storage device are configured to facilitate auditing of one or more of security, reliability, loopholes, quality of data, quality of service, and quality of transmission of the network appliance. ### Claim 7 (depends on 6) The method of claim 6, wherein the configuration settings comprise one or more valid traffic classes, a normal burst size, Weighted Fair Queuuing (WFQ) bandwidth usage, a standby routing protocol, a router ID for Open Shortest Path First (OSPF) routing protocol, route reflector setup settings, Boader Gateway Protocol (BGP) neighbor reachability information, a BGP synchronization setting, one or more multiprotocol label switching (MPLS) parameters, a log level, a community-string and an object qualifier. ### Claim 8 A method comprising: detecting an external storage device coupled to an interface of a network appliance, wherein the network appliance is running in accordance with an original operating state as dictated by internal configuration settings stored in an internal memory of the network appliance; responsive to the detecting: loading customized configuration settings stored in the external storage device; configuring the network applicance in accordance with the customized confuguration settings; and performing a predetermined function based on the customized confuguration settings. ### Claim 9 (depends on 8) The method of claim 8, further comprising responsive to detecting decoupling of the external storage device from the interface: restoring the network appliance to the original operating state; and erasing from a memory of the network appliance data collected during the predetermined auditing function. ### Claim 10 (depends on 8) The method of claim 8, wherein the internal configuration settings comprises parameters configured to facilitate operation of the network appliance within an environment in which the network appliance is installed. ### Claim 11 (depends on 8) The method of claim 8, wherein the customized configuration settings comprise parameters configured to facilitate auditing of one or more of security, reliability, loopholes, quality of data, quality of service, and quality of transmission of the network appliance. ### Claim 12 (depends on 11) The method of claim 11, wherein the parameters comprise one or more valid traffic classes, a normal burst size, Weighted Fair Queuuing (WFQ) bandwidth usage, a standby routing protocol, a router ID for Open Shortest Path First (OSPF) routing protocol, route reflector setup settings, Boader Gateway Protocol (BGP) neighbor reachability information, a BGP synchronization setting, one or more multiprotocol label switching (MPLS) parameters, a log level, a community-string and an object qualifier. ### Claim 13 (depends on 8) The method of claim 8, wherein the network appliance comprises a network security system. ### Claim 14 (depends on 13) The method of claim 13, wherein the network appliance comprises a firewall or a unified threat management system. ### Claim 15 (depends on 8) The method of claim 8, further comprising, prior to configuring the network appliance in accordance with the customized configuration settings, decrypting the customized configuration settings. ### Claim 16 A network appliance system comprising: one or more processors; a communication interface device; one or more internal data storage devices operatively coupled to the one or more processors and storing: internal configuration settings; an external storage device detection module that, when executed by the one or more processors, indicates whether an external storage device is coupled to the communication interface device, wherein the external storage device stores customized configuration settings; a load customized configuration settings module that, when executed by the one or more processors responsive to detecting the external storage device, loads system configuration settings from the customized configuration settings; a load internal configuration settings module that, when executed by the one or more processors responsive to detecting an absence of the external storage device, loads system configuration settings from the internal configuration settings; a run configuration settings module that, when executed by the one or more processors, configures the network appliance system in accordance with the loaded system configuration settings. ### Claim 17 (depends on 16) The system of claim 16, wherein the customized configuration settings comprises parameters configured to audit one or more of security, reliability, loopholes, quality of data, quality of service, and quality of transmission of the network appliance system. ### Claim 18 (depends on 16) The system of claim 16, wherein the customized configuration settings are encrypted. ### Claim 19 (depends on 16) The system of claim 16, wherein one or more of the internal configuration settings are used after the customized configuration settings are loaded. ### Claim 20 (depends on 16) The system of claim 16, wherein the external storage device comprises one of a Universal Serial Bus (USB) flash drive, a flash card, a Secure Digital (SD) card, and an external hard drive. ### Claim 21 (depends on 16) The system of claim 16, wherein the customized configuration settings or content related thereto are deleted from the network appliance system responsive to the external storage device being removed. ### Claim 22 (depends on 16) The system of claim 16, wherein the network appliance system comprises a firewall. ### Claim 23 (depends on 16) The system of claim 16, wherein the network appliance system comprises a unified threat management system.