Systems and methods for centrally managed host and network firewall services

A non-transient computer readable medium having stored therein instructions executable by the one or more processors to:

• control at least one of:
• (a) communications to and from the enterprise network according to a set of security policies, and (b) endpoint to endpoint connections within the enterprise network according to the set of security policies;
• receive a request for modifications to one or more policies of the set of security policies;
• automatically generate a policy digest formatted according to a predefined format, the policy digest comprising the modifications;
• generate, based upon the policy digest, one or more calls to one or more components within the enterprise network that control at least one of:
• (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network;
• and
• modify control, based on the one or more calls, of at least one of:
• (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network.

A method for protecting an enterprise network, the method comprising:

• at a system comprising one or more processors and memory that are remote from the enterprise network:
• controlling at least one of:
• (a) communications to and from the enterprise network according to a set of security policies, and (b) endpoint to endpoint connections within the enterprise network according to the set of security policies;
• receiving a request for modifications to one or more policies of the set of policies;
• automatically generating a policy digest formatted according to a predefined format, the policy digest comprising the modifications;
• generating, based upon the policy digest, one or more components within the enterprise network that control at least one of:
• (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network;
• and
• modifying, based on the one or more calls, of at least one of:
• (a) the communications to and from the enterprise network, and (b) the endpoint to endpoint connections within the enterprise network.