Securing peer zoning

A non-transitory computer readable medium that stores instructions that once executed by a storage system causes the storage system to execute the stages of:

• receiving storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports;
• sending in response to the storage system configuration information and to at least a first switch of a group of switches that is coupled to the storage system and, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports;
• determining to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern;
• and
• sending to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port.

A storage system that comprises a controller and an interface;

• wherein the storage system is configured to receive storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports;
• wherein the controller is configured to generate, in response to the storage system configuration information, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports;
• wherein the interface is configured to send the access permission requests to at least a first switch of a group of switches that is coupled to the storage system;
• wherein the controller is configured to determine to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern;
• and
• wherein the interface is configured to send to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port.