Systems and Methods for Managing Endpoints and Security Policies in a Networked Environment

One or more non-transitory computer-readable storage media storing instructions which, when executed by one or more hardware processors, cause performance of a method comprising:

• determining a set of endpoints in a network;
• determining transformed endpoints based on the determined set of endpoints;
• determining a connectivity vector for at least a first transformed endpoint and a second transformed endpoint of the transformed endpoints;
• deploying a security policy to the first transformed endpoint based on the connectivity vector of the first transformed endpoint;
• deploying the security policy to the second transformed endpoint wherein the deploying is based on a comparison of the connectivity vectors of the first and second transformed endpoints;
• and
• executing the security policy on network traffic at the first transformed endpoint and the second transformed endpoint.

An apparatus, comprising:

• one or more hardware processors;
• memory coupled to the one or more hardware processors, the memory storing instructions which, when executed by the one or more hardware processors, causes the apparatus to:
• determine a set of endpoints in a network;
• determine transformed endpoints based on the determined set of endpoints;
• determine a connectivity vector for at least a first transformed endpoint and a second transformed endpoint of the transformed endpoints;
• deploy a security policy to the first transformed endpoint based on the connectivity vector of the first transformed endpoint;
• deploy the security policy to the second transformed endpoint wherein the deploying is based on a comparison of the connectivity vectors of the first and second transformed endpoints;
• and
• execute the security policy on network traffic at the first transformed endpoint and the second transformed endpoint.