公开(公告)号：US11588854B2

公开(公告)日：2023-02-21

申请号：US16799871

申请日：2020-02-25

申请人： VMWARE, INC.

发明人： Shrinivas Sharad Parashar ,  Sarat Chandra Annadata ,  Arun Yeshwantrao Nagargoje ,  Shivaraj Vasantrao Patil

IPC分类号： H04L9/40 ,  G06F9/451 ,  G06F9/455 ,  H04L43/08 ,  G06F3/04847 ,  H04L61/5007

摘要： Some embodiments provide a method for defining security groups in a network. In a user interface, the method displays (i) a set of existing security groups and (ii) a set of recommend security groups based on monitored network flows in the network. Each existing security group and recommended security group includes at least one data compute node (DCN). The method provides a user interface tool for (i) accepting recommended security groups to be part of the set of existing security groups and (ii) adding DCNs from the recommended security groups to the existing security groups. Security rules are defined and implemented in the network for DCNs belonging to existing security groups.