Policy-based network management system using dynamic policy generation

A machine-readable medium having stored thereon a plurality of executable instructions to perform a method comprising:

• evaluating a condition relating to a network resource;
• generating a module for managing access to the network resource in response to the evaluation;
• and
• transmitting the module for installation on a network device providing access to the network resource.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• and
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy for installation on the policy decision point.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• and
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy to the policy decision point,
• the established policy comprising a set of instructions installed on the policy decision point.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• and
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy to the policy decision point,
• the established policy being removed from the policy decision point upon occurrence of a predetermined event.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy to the policy decision point;
• and
• a plurality of policy decision points coupled to the policy server, each of the plurality of policy decision points to authorize access to a different network resource.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy to the policy decision point;
• and
• a plurality of policy enforcement points coupled to the policy decision point, each of the plurality of policy enforcement points to selectively enable access to the network resource.

A policy-based network management system comprising:

• a policy enforcement point to selectively enable access to a network resource;
• a policy decision point in communication with the policy enforcement point, the policy decision point to authorize access to the network resource through the policy enforcement point in accordance with an established policy;
• and
• a policy server in communication with the policy decision point, the policy server to maintain a template for dynamically establishing a policy concerning access to the network resource and communicating the established policy to the policy decision point, and the policy server to maintain a plurality of templates for dynamically establishing a policy concerning access to each of a plurality of network resources.