Applying policies to subnets
Assigneeiboss, Inc.
InventorPaul Michael Martini
Life of this patent
Estimating the term…
Abstract
Associations are maintained among a plurality of subnets, policies, and client types. Each subnet has an associated client type and policy. For a particular client device, (i) a client type of the particular client device, and (ii) a client type associated with the subnet on which the particular client device is hosted is determined. For the particular client device, (i) the determined client type of the particular client device with (ii) the determined client type associated with the subnet on which the particular client device is hosted is compared. Responsive to a determination that the client type of the particular client device matches the client type associated with the subnet that hosts the particular client device, a policy is applied to the particular client device.
Claims18
A method performed by data processing apparatus, the method comprising:
- maintaining associations among a plurality of subnets of a network, a plurality of policies, and a plurality of client types, wherein each subnet has an associated client type and an associated policy;
- determining, for a particular client device that is not hosted on the network, a client type of the particular client device;
- identifying a subnet having an associated client type that matches the determined client type of the particular client device;
- hosting the particular client device on the identified subnet;
- determining, for the particular client device after the particular client device has been hosted on the subnet, (i) a client type of the particular client device, and (ii) a client type associated with the subnet on which the particular client device is hosted;
- ensuring the particular client device is on the correct subnet by comparing, for the particular client device after the particular client device has been hosted on the subnet, (i) the determined client type of the particular client device with (ii) the determined client type associated with the subnet on which the particular client device is hosted;
- and
- responsive to a determination that the client type of the particular client device matches the client type associated with the subnet that hosts the particular client device, applying, to the particular client device, the policy associated with the subnet that hosts the particular client device.
A non-transitory computer storage media encoded with computer program instructions that, when executed by one or more processors, cause a computer device to perform operation comprising:
- maintaining associations among a plurality of subnets of a network, a plurality of policies, and a plurality of client types, wherein each subnet has an associated client type and an associated policy;
- determining, for a particular client device that is not hosted on the network, a client type of the particular client device;
- identifying a subnet having an associated client type that matches the determined client type of the particular client device;
- hosting the particular client device on the identified subnet;
- determining, for the particular client device after the particular client device has been hosted on the subnet, (i) a client type of the particular client device, and (ii) a client type associated with the subnet on which the particular client device is hosted;
- ensuring the particular client device is on the correct subnet by comparing, for the particular client device after the particular client device has been hosted on the subnet, (i) the determined client type of the particular client device with (ii) the determined client type associated with the subnet on which the particular client device is hosted;
- and
- responsive to a determination that the client type of the particular client device matches the client type associated with the subnet that hosts the particular client device, applying, to the particular client device, the policy associated with the subnet that hosts the particular client device.
A system comprising:
- one or more processors configured to execute computer program instructions;
- and
- computer storage media encoded with computer program instructions that, when executed by one or more processors, cause a computer device to perform operation comprising:
- maintaining associations among a plurality of subnets of a network, a plurality of policies, and a plurality of client types, wherein each subnet has an associated client type and an associated policy;
- determining, for a particular client device that is not hosted on the network, a client type of the particular client device;
- identifying a subnet having an associated client type that matches the determined client type of the particular client device;
- hosting the particular client device on the identified subnet;
- determining, for the particular client device after the particular client device has been hosted on the subnet, (i) a client type of the particular client device, and (ii) a client type associated with the subnet on which the particular client device is hosted;
- ensuring the particular client device is on the correct subnet by comparing, for the particular client device after the particular client device has been hosted on the subnet, (i) the determined client type of the particular client device with (ii) the determined client type associated with the subnet on which the particular client device is hosted;
- and
- responsive to a determination that the client type of the particular client device matches the client type associated with the subnet that hosts the particular client device, applying, to the particular client device, the policy associated with the subnet that hosts the particular client device.
Dependencies are inferred from the claim text.