Back to results
US 9,060,025 B2Granted
Cloud-based security policy configuration
AssigneeFortinet, Inc.
InventorQing Xu
Life of this patent
Estimating the term…
Abstract
Systems and methods for configuring security policies based on cloud are provided. According to one embodiment, security parameters are shared on cloud by security devices. A first network appliance may fetch one or more security parameters shared by a second network appliance from a cloud account. Then the first network appliance automatically creates a security policy that controlling a connection between the first network appliance and the second network appliance based at least in part on the one or more security parameters.
Claims30
A method comprising:
- logging into a cloud account by a first network appliance;
- fetching from the cloud account, by the first network appliance, one or more security parameters shared by a second network appliance to the cloud account;
- automatically creating, by the first network appliance, a security policy that controls a connection between the first network appliance and the second network appliance based at least in part on the one or more security parameters;
- further comprising:
- fetching from the cloud account, by the first network appliance, a modification of the one or more security parameters shared by the second network appliance to the cloud account;
- updating, by the first network appliance, the security policy based at least in part on the modification of the one or more security parameters.
3 more elements
A method comprising:
- logging into a cloud account by a first network appliance;
- sharing, by the first network appliance, one or more security parameters with a second network appliance by storing the one or more security parameters within the cloud account;
- automatically creating, by the first network appliance, a security policy that controls a connection between the first network appliance and the second network appliance based at least in part on the one or more security parameters;
- further comprising:
- fetching from the cloud account, by the first network appliance, a modification of the one or more security parameters shared by the second network appliance to the cloud account;
- updating, by the first network appliance, the security policy based at least in part on the modification of the one or more security parameters.
3 more elements
A network appliance comprising:
- non-transitory storage device having tangibly embodied therein instructions representing a security application;
- and
- one or more processors coupled to the non-transitory storage device and operable to execute the security application to perform a method comprising:
- logging into a cloud account;
- fetching one or more security parameters shared by a second network appliance to the cloud account;
- automatically creating, a security policy that controls a connection between the network appliance and the second network appliance based at least in part on the one or more security parameters;
- further comprises:
- fetching from the cloud account a modification of the one or more security parameters shared by the second network appliance to the cloud account;
- updating the security policy based at least in part on the modification of the one or more security parameters.
6 more elements
A computer system comprising:
- non-transitory storage device having tangibly embodied therein instructions representing a security application;
- and
- one or more processors coupled to the non-transitory storage device and operable to execute the security application to perform a method comprising:
- logging into a cloud account;
- sharing one or more security parameters with a second network appliance by storing the one or more security parameters within the cloud account;
- automatically creating a security policy that controls a connection between the network appliance and the second network appliance based at least in part on the one or more security parameters;
- further comprises:
- fetching from the cloud account a modification of the one or more security parameters shared by the second network appliance to the cloud account;
- updating the security policy based at least in part on the modification of the one or more security parameters.
6 more elements
Dependencies are inferred from the claim text.