公开(公告)号：US20230179571A1

公开(公告)日：2023-06-08

申请号：US17543254

申请日：2021-12-06

Applicant: VMware, Inc.

Inventor： Kavya Kambi Ravi ,  Radha Popuri ,  Sunitha Krishna ,  Margaret Petrus ,  Yiwei Zhang

IPC: G06F21/62

CPC classification number: H04L63/0263 ,  H04L63/20

Abstract: Some embodiments provide a method for modifying a firewall rule of a security policy implemented in a network. The method identifies a set of compute machines to be added to a match condition for the firewall rule. The match condition is expressed using one or more groups of compute machines. The method selects a set of groups for the identified set of compute machines from a plurality of existing groups of compute machines based on a user-specified threshold indicating tolerance for inclusion of compute machines that are not in the identified set of compute machines in the selected groups. The method uses the selected set of groups for the match condition of the firewall rule.