Method and system for allowing the use of domain names in enforcing network policy
AssigneePismo Labs Technology Limited
InventorHo Ming CHAN
Life of this patent
Estimating the term…
Abstract
A method and a system for creating Internet Protocol address based network policy by using domain name based network policies is disclosed. The domain name based network policies are stored. When a network device receives an record Domain Name System look-up reply, the network device identifies one or more Interact Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply, then determine whether the one or more host names contain a domain name used in one or more domain name based network policies and create one or more Internet Protocol address based network policies.
Claims19
A method for creating Internet Protocol address based network policy comprising the steps of:
- storing one or more domain name based network policies;
- receiving an address record Domain Name System look-up reply;
- identifying one or more Internet Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply;
- determining whether the one or more host names contain a domain name used in one or more domain name based network policies;
- and
- creating one or more Internet Protocol address based network policies.
A system for creating Internet Protocol address based network policy by using domain name comprising:
- one or more storage units for storing one or more domain name based network policies and for storing one or more Internet Protocol address based network policies;
- one or more network interfaces for receiving a Domain Name System look-up reply, wherein the resource record type of the Domain Name System look-up reply is an address record;
- and
- one or more processing units for identifying one or more Internet Protocol addresses of one or more host names specified in the Domain Name System look-up reply, for determining whether the one or more host names containing a domain name used in one or more domain name based network policies, and for creating one or more Internet Protocol address based network policies.
The system of claim, 18 wherein the one or more processing units are further operable to:
- deliver an address record type Domain Name System look-up request for the non-address record type Domain Name System look-up reply received;
- receive an address record type Domain Name System look-up reply for the non-address record type Domain Name System look-up reply received.
Dependencies are inferred from the claim text.