Network-wide policy intent orchestration

A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to manage network security policies, the method comprising:

• receiving security intent-based policies defining roles across a network;
• receiving a global policy order associated with the security intent-based policies;
• receiving policy mappings defined for locations and devices across the network;
• automatically deriving role-specific policies based on the security intent-based policies, the global policy order, and the policy mappings;
• generating device-specific and location-specific policy configurations from the derived role-specific policies;
• and
• distributing the generated policy configurations to corresponding network devices for enforcement.

A computer-implemented method for managing network security policies, the computer-implemented method comprising:

• receiving, by a Global Policy Manager (GPM) server, security intent-based policies defining roles across a network;
• receiving, by the GPM server, a global policy order associated with the security intent-based policies;
• receiving, by the GPM server, policy mappings defined for locations and devices across the network;
• automatically deriving, by the GPM server, role-specific policies based on the security intent-based policies, the global policy order, and the policy mappings;
• generating, by the GPM server, device-specific and location-specific policy configurations from the derived role-specific policies;
• and
• distributing, by the GPM server, the generated policy configurations to corresponding network devices for enforcement.