公开(公告)号：US11765046B1

公开(公告)日：2023-09-19

申请号：US16188979

申请日：2018-11-13

申请人： Cisco Technology, Inc.

发明人： Weifei Zeng ,  Omid Madani ,  Varun Malhotra ,  Paul Mach ,  Yash Vipul Doshi ,  Sayeed Mohammed Tasnim ,  Thanh Nhan Thi Nguyen ,  Navindra Yadav ,  Shashi Gandham

IPC分类号： H04L41/16 ,  H04L41/0893 ,  G06N20/00 ,  G06F16/9532

CPC分类号： H04L41/16 ,  G06F16/9532 ,  G06N20/00 ,  H04L41/0893

摘要： This disclosure provides solutions for automatically grouping network devices (e.g., endpoints) into clusters based on device characteristics. In some aspects, the disclosed technology also provides solutions for generating user selectable queries based on cluster characteristics. A process of the disclosed technology can include steps for identifying one or more device characteristics associated with a first network device, identifying one or more cluster characteristics for each of a first cluster and a second cluster, and comparing the device characteristics associated with the first network device with the one or more cluster characteristics for the first cluster and the second cluster. The process can further include steps for adding the first network device to the first cluster based on the cluster characteristics for the first cluster and the device characteristics for the first network device. Systems and machine-readable media are also provided.

公开(公告)号：US11627166B2

公开(公告)日：2023-04-11

申请号：US17063864

申请日：2020-10-06

申请人： Cisco Technology, Inc.

发明人： Weifei Zeng ,  Sai Ankith Averineni ,  Omid Madani ,  Paul Mach ,  Yash Vipul Doshi ,  Sasidhar Evuru ,  Sayeed Mohammed Tasnim ,  Sameer Salim Mahomed Ali Ladiwala ,  Chakradhar Reddy Vangeti ,  Thanh Nhan Nguyen ,  Varun Malhotra ,  Shashidhar Gandham ,  Navindra Yadav ,  Thanh Trung Ngo ,  Maxwell Aaron Mechanic

IPC分类号： H04L9/40 ,  H04L41/0893 ,  H04L41/14 ,  H04L47/2483

摘要： The present disclosure relates to methods, systems, and non-transitory computer readable media for discovering policy scopes within an enterprise network and managing network policies for discovered policy scopes. In one aspect, a method includes identifying one or more communities of devices in an enterprise network; defining, from the one or more communities of devices, policy scopes in the enterprise network; generating a hierarchical representation of the policy scopes; identifying, based on the hierarchical representation of the policy scopes, one or more policies governing traffic flow between devices associated with each of the policy scopes; and managing application of the one or more policies at the devices.

公开(公告)号：US20220109701A1

公开(公告)日：2022-04-07

申请号：US17063864

申请日：2020-10-06

申请人： Cisco Technology, Inc.

发明人： Weifei Zeng ,  Sai Ankith Averineni ,  Omid Madani ,  Paul Mach ,  Yash Vipul Doshi ,  Sasidhar Evuru ,  Sayeed Mohammed Tasnim ,  Sameer Salim Mahomed Ali Ladiwala ,  Chakradhar Reddy Vangeti ,  Thanh Nhan Nguyen ,  Varun Malhotra ,  Shashidhar Gandham ,  Navindra Yadav ,  Thanh Trung Ngo ,  Maxwell Aaron Mechanic

IPC分类号： H04L29/06 ,  H04L12/851 ,  H04L12/24

摘要： The present disclosure relates to methods, systems, and non-transitory computer readable media for discovering policy scopes within an enterprise network and managing network policies for discovered policy scopes. In one aspect, a method includes identifying one or more communities of devices in an enterprise network; defining, from the one or more communities of devices, policy scopes in the enterprise network; generating a hierarchical representation of the policy scopes; identifying, based on the hierarchical representation of the policy scopes, one or more policies governing traffic flow between devices associated with each of the policy scopes; and managing application of the one or more policies at the devices.