Systems and methods for centrally managed host and network firewall services

A cloud-managed system for protecting a network of an enterprise, the system comprising:

• a processing resource;
• and
• a non-transitory computer-readable medium, coupled to the processing resource, having stored therein instructions that when executed by the processing resource cause the processing resource to:
• abstract an architecture of a plurality of security enforcement systems associated with the cloud-managed system by providing a portal through which modifications to a unified security policy are expressed as business requirements of the enterprise and without requiring explicit associations to be defined among a plurality of locations of the enterprise and security policies of the unified security policy;
• and
• automatically enforce the unified security policy on behalf of the enterprise regardless of (i) a location of the plurality of locations involved in communications with the network or (ii) an endpoint of a plurality of endpoints associated with the network from which a connection attempt is initiated or to which the connection attempt is directed by:
• retrieving a policy digest generated and locally queued by the portal, wherein the policy digest includes information regarding the modifications and is formatted according to a predefined format;
• configuring the plurality of security enforcement systems to control communications to and from the network according to the security policies by generating one or more application programming interface (API) calls to the plurality of security enforcement systems based on the policy digest;
• and
• configuring agents running on the plurality of endpoints to control endpoint-to-endpoint connections among the plurality of endpoints according to the security policies based on the policy digest.