Segmentation management including translation
AssigneeForescout Technologies, Inc.
InventorIlya Fainberg
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for segmentation management are described. The segmentation management may include visualization, configuration including translation, simulation, or a combination thereof of one or more segmentation policies. In certain aspects, a segmentation policy is accessed and a segmentation rule is determined based on the segmentation policy. An enforcement point associated with the segmentation rule may be determined, where the enforcement point is communicatively coupled to a network. The segmentation rule may be translated into a configuration associated with the enforcement point and the configuration communicated to the enforcement point.
Claims20
A method comprising:
- accessing a segmentation policy;
- determining a segmentation rule based on the segmentation policy;
- determining an enforcement point associated with the segmentation rule, wherein the enforcement point is communicatively coupled to a network;
- translating the segmentation rule into a configuration associated with the enforcement point;
- and
- communicating the configuration to the enforcement point.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- access a segmentation policy;
- determine a segmentation rule based on the segmentation policy;
- determine an enforcement point associated with the segmentation rule, wherein the enforcement point is communicatively coupled to a network;
- translate the segmentation rule into a configuration associated with the enforcement point;
- and
- communicate the configuration to the enforcement point.
The system of claim 15, wherein the configuration associated with the enforcement point comprises at least one of an access control list (ACL), a firewall command, or rule or a cloud packet filtering ACL.
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- access a segmentation policy;
- determine, using the processing device, a segmentation rule based on the segmentation policy;
- determine an enforcement point associated with the segmentation rule, wherein the enforcement point is communicatively coupled to a network;
- translate the segmentation rule into a configuration associated with the enforcement point;
- and
- communicate the configuration to the enforcement point.
Dependencies are inferred from the claim text.