利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

32 条记录 (耗时 0.019 秒)

    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS
    21.
    发明申请
    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS 有权

    公开(公告)号：US20210119971A1

    公开(公告)日：2021-04-22

    申请号：US16985664

    申请日：2020-08-05

    申请人： Cisco Technology, Inc.

    发明人： Saravanan Radhakrishnan ,  Anand Oswal ,  Ashwin Kumar ,  Paul Wayne Bigbee ,  Darrin Joseph Miller

    IPC分类号： H04L29/06

    摘要： Systems and methods are provided for receiving, at a network device, a first set of rules from a security controller of an enterprise network, the first set of rules being different from a second set of rules provided to a firewall by the security controller, implementing, at the network device, the first set of rules received from the security controller, generating, at the network device, a first log including metadata based on the first set of rules, the first log being generated on a per flow basis, notifying, at the network device, a NetFlow of the first log including the metadata of the first set of rules, and providing, from the network device, the first log to a cloud-log store by the NetFlow of the network device, the cloud-log store receiving the first log from the network device and a second log from the firewall.

    DYNAMIC INTENT-BASED FIREWALL
    24.
    发明申请
    DYNAMIC INTENT-BASED FIREWALL 审中-公开

    公开(公告)号：US20200177550A1

    公开(公告)日：2020-06-04

    申请号：US16434115

    申请日：2019-06-06

    申请人： Cisco Technology, Inc.

    发明人： Vamsidhar Valluri ,  Saravanan Radhakrishnan ,  Anand Oswal ,  Vinay Prabhu ,  Sarah Adelaide Evans ,  Suraj Rangaswamy

    IPC分类号： H04L29/06 ,  H04L12/46 ,  H04L12/741 ,  H04L12/751

    摘要： Systems and methods provide for provisioning a dynamic intent-based firewall. A network controller can generate a master route table for network segments reachable from edge network devices managed by the controller. The controller can receive zone definition information mapping the network segments into zones and Zone-based Firewall (ZFW) policies to apply to traffic between a source and destination zone specified by each ZFW policy. The controller can evaluate a ZFW policy to determine first edge network devices that can reach first network segments mapped to the source zone specified by the ZFW policy, second edge network devices that can reach second network segments mapped to the destination zone specified by the ZFW policy, and routing information (from the route table) between the first network segments, the first and second edge network devices, and the second network segments. The controller can transmit the routing information to the edge network devices.

    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS
    26.
    发明申请
    DISTRIBUTION OF STATELESS SECURITY FUNCTIONS 有权

    公开(公告)号：US20230014351A1

    公开(公告)日：2023-01-19

    申请号：US17932092

    申请日：2022-09-14

    申请人： Cisco Technology, Inc.

    发明人： Saravanan Radhakrishnan ,  Anand Oswal ,  Ashwin Kumar ,  Paul Wayne Bigbee ,  Darrin Joseph Miller

    IPC分类号： H04L9/40

    摘要： Systems and methods are provided for receiving, at a network device, a first set of rules from a security controller of an enterprise network, the first set of rules being different from a second set of rules provided to a firewall by the security controller, implementing, at the network device, the first set of rules received from the security controller, generating, at the network device, a first log including metadata based on the first set of rules, the first log being generated on a per flow basis, notifying, at the network device, a NetFlow of the first log including the metadata of the first set of rules, and providing, from the network device, the first log to a cloud-log store by the NetFlow of the network device, the cloud-log store receiving the first log from the network device and a second log from the firewall.

    Dynamic intent-based firewall
    28.
    发明授权
    Dynamic intent-based firewall 有权

    公开(公告)号：US11201854B2

    公开(公告)日：2021-12-14

    申请号：US16434115

    申请日：2019-06-06

    申请人： Cisco Technology, Inc.

    发明人： Vamsidhar Valluri ,  Saravanan Radhakrishnan ,  Anand Oswal ,  Vinay Prabhu ,  Sarah Adelaide Evans ,  Suraj Rangaswamy

    IPC分类号： H04L12/46 ,  H04L29/06 ,  H04L12/751 ,  H04L12/741

    摘要： Systems and methods provide for provisioning a dynamic intent-based firewall. A network controller can generate a master route table for network segments reachable from edge network devices managed by the controller. The controller can receive zone definition information mapping the network segments into zones and Zone-based Firewall (ZFW) policies to apply to traffic between a source and destination zone specified by each ZFW policy. The controller can evaluate a ZFW policy to determine first edge network devices that can reach first network segments mapped to the source zone specified by the ZFW policy, second edge network devices that can reach second network segments mapped to the destination zone specified by the ZFW policy, and routing information (from the route table) between the first network segments, the first and second edge network devices, and the second network segments. The controller can transmit the routing information to the edge network devices.