公开(公告)号：US20240305640A1

公开(公告)日：2024-09-12

申请号：US18127990

申请日：2023-03-29

申请人： Cisco Technology, Inc.

发明人： Jay Kemper Johnston ,  Michael Chomicz ,  David Alexander Pryor ,  Radoslaw Konrad Ruchala ,  Jan Stanislaw Krupa

IPC分类号： H04L9/40 ,  H04L41/22

CPC分类号： H04L63/101 ,  H04L41/22 ,  H04L63/20

摘要： Techniques and architecture are described for abstracting a real physical twin network wherein security policies are mapped as an overlay on a graphical representation of the network topology. The techniques include receiving, at a computing device, a first security policy) for a first network device. The computing device processes the first security policy to generate a plurality of first access control entries. The computing device creates first graph nodes corresponding to the first access control entries. Based at least in part on a processing order of the first security policy on the first network device, the computing device links the first graph nodes into a graph. The computing device displays the graph on a display, wherein the graph is displayed as an overlay on a network topology graph that includes the first network device.