Method and apparatus for centralized policy programming and distributive policy enforcement
AssigneeSonicwall US Holdings Inc.
InventorsBoris Yanovsky, Roman Yanovsky
Life of this patent
Estimating the term…
Abstract
A method and apparatus for centralized policy programming and distributive policy enforcement is described. A method comprises centrally maintaining a plurality of policy definitions for one or more subscribers, generating policy configurations using the plurality of policy definitions, each of the policy configurations being specific to one of the plurality of policy definitions, and disseminating the policy configurations to the appropriate ones of the subscribers' networks.
Claims20
(canceled)
A method for controlling computers in a computer network, the method comprising:
- receiving a first set of policy parameters related to a first set of compliance rules that control a software configuration at a first set of computers;
- receiving a second set of policy parameters related to a second set of compliance rules that control a compliance function associated with a second set of computers;
- verifying that each of the first set of computers comply with the first set of compliance rules before allowing access to the Internet, the verification based on evaluating information received from each of the first set of computers;
- identifying that at least one of the second set of computers does not comply with the second set of compliance rules, the identification based on evaluation of information received from each of the second set of computers;
- and
- blocking at least one computer from accessing the Internet based on the identification that at least one of the second set of computers does not comply with the second set of compliance rules.
A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor that performs a method for controlling computers in a computer network, the method comprising:
- receiving a first set of policy parameters related to a first set of compliance rules that control a software configuration at a first set of computers;
- receiving a second set of policy parameters related to a second set of compliance rules that control a compliance function associated with a second set of computers;
- verifying that each of the first set of computers comply with the first set of compliance rules before allowing access to the Internet, the verification based on evaluating information received from each of the first set of computers;
- identifying that at least one of the second set of computers does not comply with the second set of compliance rules, the identification based on evaluation of information received from each of the second set of computers;
- and
- blocking at least one computer from accessing the Internet based on the identification that at least one of the second set of computers does not comply with the second set of compliance rules.
A method for controlling computers in a computer network, the method comprising:
- receiving a first set of policy parameters related to a first set of compliance rules that control a software configuration at a first set of computers;
- receiving a second set of policy parameters related to a second set of compliance rules that control a compliance function associated with a second set of computers;
- and
- transmitting the first and the second set of policy parameters to a first subscriber computer of a plurality of subscriber computers, wherein the first subscriber computer:
- verifies that each of the first set of computers comply with the first set of compliance rules before allowing access to the Internet, the verification based on evaluating information received from each of the first set of computers,
- identifies that at least one of the second set of computers does not comply with the second set of compliance rules, the identification based on evaluation of information received from each of the second set of computers, and
- blocks at least one computer from accessing the Internet based on the identification that at least one of the second set of computers does not comply with the second set of compliance rules.
Dependencies are inferred from the claim text.