Systems and methods for categorizing policy rules for enforcement

A system for generating a network policy, the system comprising:

• an interface for receiving a plurality of ranked goal-based rules to be enforced on at least one enforcement point of a network;
• and
• one or more processors executing instructions stored on memory to provide a policy engine configured to:
• determine at least one of an access component or a control component of each of the plurality of ranked goal-based rules, wherein:
• the access component indicates whether to allow or prevent network traffic,
• the control component indicates a control option regarding network traffic for the enforcement point;
• determine whether a match criteria associated with each of the plurality of goal-based rules is satisfied by a policy input object;
• generate an output policy object that includes at least one of an access component of a highest ranked goal-based rule with satisfied match criteria or a control component of a highest ranked goal-based rule with satisfied match criteria;
• and
• provide the output policy object to the enforcement point for enforcement.

A computer program product for generating a network policy, the computer program product comprising computer executable code embodied in one or more non-transitory computer readable media that, when executing on one or more processors, performs the steps of:

• receiving at an interface a plurality of ranked goal-based rules to be enforced on at least one enforcement point of a network;
• determining, using a policy engine, at least one of an access component or a control component of each of the plurality of ranked goal-based rules, wherein:
• the access component indicates whether to allow or prevent network traffic, and
• the control component indicates a control option regarding network traffic for the enforcement point;
• determining whether a match criteria associated with each of the plurality of goal-based rules is satisfied by a policy input object;
• generating, using the policy engine, an output policy object that includes at least one of an access component of a highest ranked goal-based rule with satisfied match criteria or a control component of a highest ranked goal-based rule with satisfied match criteria;
• and
• providing the output policy object to the enforcement point for enforcement.