Configuration management for network activity detectors
AssigneeEvengx, LLC
InventorJOHN S. FLOWERS
Life of this patent
Estimating the term…
Abstract
Network activity detectors, such as firewalls, communicate with one another to form a Unified Threat Management System. A first network activity detector sends a request for configuration settings to a second network activity detector. The second network activity detector sends a set of configuration settings in response to the request. The configuration settings include information for detecting digital security threats and/or for responding to detected digital security threats. In this way, configuration settings are propagated from one network activity detector to another so that network activity detectors within a UTMS system are configured consistently, e.g., have up-to-date information for detecting and/or responding to digital security threats.
Claims20
A method of promoting security of a computer network, the method comprising:
- identifying, by a first network activity detector coupled with the network, a second network activity detector as a source of configuration information, wherein the second network activity detector is coupled with the network, and wherein the configuration information includes a set of information for detecting digital security threats;
- sending, by the first network activity detector, a request for the configuration information to the second network activity detector;
- receiving, by the first network activity detector, the configuration information from the second network activity detector;
- and
- sending, by the first network activity detector, the configuration information to a third network activity detector.
A non-transitory computer-readable storage medium having computer-executable instructions, wherein the computer-executable instructions, when executed by one or more computer processors, cause the one or more computer processors to promote security of a computer network, the computer-executable instructions comprising instructions for:
- identifying, by a first network activity detector coupled with the network, a second network activity detector as a source of configuration information, wherein the second network activity detector is coupled with the network, and wherein the configuration information includes a set of information for detecting digital security threats;
- sending to the second network activity detector, by the first network activity detector, a request for the configuration information;
- receiving from the second network activity detector, by the first network activity detector, the configuration information;
- and
- sending to a third network activity detector, by the first network activity detector, the configuration information.
A network activity detector, comprising:
- a network interface configured to couple with a network;
- and
- a processor configured to:
- identify a second network activity detector as a source of configuration information, wherein the second network activity detector is coupled with the network, and wherein the configuration information includes a set of information for detecting digital security threats,
- send, to the second network activity detector, a request for the configuration information;
- receive, from the second network activity detector, the configuration information;
- and
- send, to a third network activity detector, the configuration information.
Dependencies are inferred from the claim text.