Dynamically managing firewall ports of an enterprise network
AssigneeInternational Business Machines Corporation
InventorsJoseph Reyes, Hamza Yaswi, Venkidupathy Ramasamy
Life of this patent
Estimating the term…
Abstract
An AI firewall engine dynamically manages firewall ports of an enterprise network to increase security. The AI firewall engine may begin with a baseline port profile configuration and then add firewall rules derived from natural language processing and machine learning from vendor recommended port requirements for an application. The AI firewall engine builds a dynamic port profile with rules that are applied to the firewalls. The AI firewall engine may then monitor system changes and dynamically updates the port profile and configurations on the firewalls.
Claims20
An apparatus comprising:
- at least one processor;
- a memory coupled to the at least one processor;
- a firewall engine residing in the memory and executed by the at least one processor that dynamically manages a plurality of firewalls in an enterprise network system, wherein the firewall engine modifies baseline port profile configurations to build a dynamic port profile and applies the dynamic port profile to the plurality of firewalls in the enterprise network.
The apparatus of claim 5 wherein the fire wall engine uses a network monitoring technology to inspect system data flows chosen from the following:
- terminal access point monitoring;
- syslog and simple network monitoring protocol, switch point analyzer;
- and network monitoring software.
The apparatus of claim 6 wherein the firewall engine continues to monitor for system changes and dynamically updates the dynamic port profile including denying traffic.
A computer-implemented method executed by at least one processor for dynamically managing a plurality of firewalls in an enterprise network system comprising:
- providing a baseline port profile configuration;
- using machine learning and natural language processing to determine configuration needs;
- inspecting system data flows;
- building a dynamic port profile;
- and
- applying the dynamic port profile to the plurality of firewalls in the enterprise network.
A computer-implemented method executed by at least one processor for dynamically managing a plurality of firewalls in an enterprise network system comprising:
- providing a baseline port profile configuration;
- using machine learning and natural language processing to determine configuration needs, including using availability scans, using change management, using change management database and using vendor documents;
- inspecting system data flows using a network monitoring technology to inspect system data flows chosen from the following:
- terminal access point monitoring;
- syslog and simple network monitoring protocol, switch point analyzer;
- and network monitoring software;
- building a dynamic port profile;
- applying the dynamic port profile to the plurality of firewalls in the enterprise network;
- and
- continuing to monitor for system changes using pattern analysis and dynamically updating the dynamic port profile using pattern and trend analysis.
Dependencies are inferred from the claim text.