-
公开(公告)号:US11665202B2
公开(公告)日:2023-05-30
申请号:US17394196
申请日:2021-08-04
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: David Anthony Hughes , Manoj Kumar Dutta , Manoj Gopal Kulkarni , Pawan Kumar Singh , Damon John Ennis , Theodore Ernest Tedijanto , Patrick Lee Mahan , Bowen Yan , Zhigang Yin , Kennedy Tjong Ki Ngo , Ganesh Lakshmanan , Ravikumar Govindarao , Srivathsa Sarangapani
IPC: H04L9/40 , H04L61/256
CPC classification number: H04L63/20 , H04L61/256 , H04L63/0209 , H04L63/0236 , H04L63/0245
Abstract: Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.
-
公开(公告)号:US11528299B2
公开(公告)日:2022-12-13
申请号:US16868452
申请日:2020-05-06
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: David Anthony Hughes , Manoj Kumar Dutta , Manoj Gopal Kulkarni , Pawan Kumar Singh , Damon John Ennis , Theodore Ernest Tedijanto , Patrick Lee Mahan , Bowen Yan , Zhigang Yin , Kennedy Tjong Ki Ngo , Ganesh Lakshmanan , Ravikumar Govindarao , Srivathsa Sarangapani
IPC: H04L9/20 , H04L9/40 , H04L61/256
Abstract: Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.
-