公开(公告)号：US11005814B2

公开(公告)日：2021-05-11

申请号：US15316688

申请日：2014-06-10

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Joseph A. Curcio ,  Jechun Chiu ,  Bruce E. Lavigne ,  Wei Lu ,  Shaun Wakumoto ,  Mauricio Sanchez ,  Matthew Laswell

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/64 ,  H04L12/26

Abstract: An example of a computing system is described herein. The computing system includes a plurality of network security devices. The computing system also includes a network switch configured to direct network traffic. The computing system further includes a controller coupled to the network switch. The controller is to instruct the network switch in directing network traffic to the plurality of network security devices.

公开(公告)号：US20160308905A1

公开(公告)日：2016-10-20

申请号：US15100710

申请日：2013-12-04

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Bryan Stiekes ,  Sebastien Tandel ,  Jechun Chiu

IPC: H04L29/06 ,  H04L12/741 ,  H04L12/24 ,  H04L12/813 ,  H04L12/26

CPC classification number: H04L63/20 ,  H04L41/20 ,  H04L43/028 ,  H04L45/74 ,  H04L47/20 ,  H04L63/08 ,  H04L63/166

Abstract: In one implementation, an example system may include a policy engine. The policy engine may receive a context of an application to request a set of network traffic and provide a policy rule to a network device of a network path. In another implementation, an example system may identify a party and a requested behavior of the service and maintain a context to determine a policy rule to regulate a set of network traffic associated with the service based on the party and the requested behavior. In another implementation, an example method may comprise receiving a service request and an authentication, identifying a party, identifying a behavior, and deploying a policy to a network device of a network based on the party and the behavior.

Abstract translation: 在一个实现中，示例系统可以包括策略引擎。 策略引擎可以接收应用的上下文以请求一组网络流量并且向网络路径的网络设备提供策略规则。 在另一实现中，示例系统可以识别服务的一方和所请求的行为，并维护上下文以确定策略规则，以基于该方和所请求的行为来规范与该服务相关联的一组网络流量。 在另一实现中，示例性方法可以包括基于该方和该行为来接收服务请求和认证，标识一方，识别行为以及将策略部署到网络的网络设备。

公开(公告)号：US10341389B2

公开(公告)日：2019-07-02

申请号：US16042340

申请日：2018-07-23

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Bryan Stiekes ,  Sebastien Tandel ,  Jechun Chiu

IPC: H04L29/06 ,  H04L12/813 ,  H04L12/24 ,  H04L12/26 ,  H04L12/741

Abstract: In some examples, a system receives a context of an application to request a set of network traffic, the context including a requested behavior of a service enabled by the application, and provides a policy to a network device of a network, the policy to regulate the set of network traffic based on the context, the policy provided to the network device to cause the network device to route the set of network traffic based on applying the policy, the routing comprising forwarding the set of network traffic to a destination or denying transmission of the set of network traffic to the destination.

公开(公告)号：US20180332081A1

公开(公告)日：2018-11-15

申请号：US16042340

申请日：2018-07-23

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Bryan Stiekes ,  Sebastien Tandel ,  Jechun Chiu

IPC: H04L29/06 ,  H04L12/741 ,  H04L12/26 ,  H04L12/24 ,  H04L12/813

CPC classification number: H04L63/20 ,  H04L41/20 ,  H04L43/028 ,  H04L45/74 ,  H04L47/20 ,  H04L63/08 ,  H04L63/166

Abstract: In some examples, a system receives a context of an application to request a set of network traffic, the context including a requested behavior of a service enabled by the application, and provides a policy to a network device of a network, the policy to regulate the set of network traffic based on the context, the policy provided to the network device to cause the network device to route the set of network traffic based on applying the policy, the routing comprising forwarding the set of network traffic to a destination or denying transmission of the set of network traffic to the destination.

公开(公告)号：US10348684B2

公开(公告)日：2019-07-09

申请号：US15255095

申请日：2016-09-01

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Shaun Wakumoto ,  Freeman Yufei Huang ,  Tomas Navarro ,  Nam Soo Kim ,  Bruce E Lavigne ,  Jechun Chiu ,  Sebastien Tandel

IPC: H04L29/06 ,  H04L29/12

Abstract: Examples include a network device to filter a packet for a packet type. The network device includes a filter to receive the packet and to determine whether the packet is a defined packet type. The network device also includes a Bloom filter to receive the packet from the filter based on the determination that the packet is a defined packet type and to determine whether the packet is a matched packet or an unmatched packet. A processing resource of the network device may receive the packet from the Bloom filter based on the determination that the packet is a matched packet and to determine whether the packet is an exact match.

公开(公告)号：US10044760B2

公开(公告)日：2018-08-07

申请号：US15100710

申请日：2013-12-04

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Bryan Stiekes ,  Sebastien Tandel ,  Jechun Chiu

IPC: H04L29/06 ,  H04L12/813 ,  H04L12/24 ,  H04L12/26 ,  H04L12/741

Abstract: In one implementation, an example system may include a policy engine. The policy engine may receive a context of an application to request a set of network traffic and provide a policy rule to a network device of a network path. In another implementation, an example system may identify a party and a requested behavior of the service and maintain a context to determine a policy rule to regulate a set of network traffic associated with the service based on the party and the requested behavior. In another implementation, an example method may comprise receiving a service request and an authentication, identifying a party, identifying a behavior, and deploying a policy to a network device of a network based on the party and the behavior.