公开(公告)号：US08977746B2

公开(公告)日：2015-03-10

申请号：US13871896

申请日：2013-04-26

Applicant: Watchguard Technologies, Inc.

Inventor： Mark D. Hughes ,  Eivind Naess

IPC: G06F15/173 ,  H04L12/26 ,  G06F21/52 ,  H04L29/06

CPC classification number: H04L43/0882 ,  G06F21/52 ,  H04L43/026 ,  H04L43/028 ,  H04L43/045 ,  H04L43/0876 ,  H04L63/02 ,  H04L63/0227 ,  Y02D50/30

Abstract: A network security device may gather a large amount of metadata pertaining to the connections being managed thereby. A refinement module may filter and/or aggregate the connection metadata. The metadata may be refined on the network security device. The refined metadata may be provided for display on a terminal. The refined metadata may include a subset of the larger connection metadata, which may reduce the overhead required to display and/or transmit monitoring information to the terminal device. The refined metadata may comprise connection groups, which may be formed based on aggregation criteria, such as connection source, destination, application, security policy, protocol, port, and/or the like. The connection groups may be ranked in accordance with ranking criteria.

Abstract translation: 网络安全设备可以收集与正被管理的连接有关的大量元数据。 细化模块可以过滤和/或聚合连接元数据。 可以在网络安全设备上改进元数据。 精致的元数据可以被提供用于在终端上显示。 精细化元数据可以包括较大连接元数据的子集，这可以减少向终端设备显示和/或发送监控信息所需的开销。 精细元数据可以包括可以基于聚合标准形成的连接组，诸如连接源，目的地，应用，安全策略，协议，端口等。 可以根据排序标准对连接组进行排名。

公开(公告)号：US20140289847A1

公开(公告)日：2014-09-25

申请号：US13972752

申请日：2013-08-21

Applicant: Watchguard Technologies, Inc.

Inventor： Mark D. Hughes ,  Eivind Naess

IPC: G06F21/52

CPC classification number: H04L43/0882 ,  G06F21/52 ,  H04L43/026 ,  H04L43/028 ,  H04L43/045 ,  H04L43/0876 ,  H04L63/02 ,  H04L63/0227 ,  Y02D50/30

Abstract: A network security device may gather a large amount of metadata pertaining to the connections being managed thereby. A refinement module may filter and/or aggregate the connection metadata. The metadata may be refined on the network security device. The refined metadata may be provided for display on a terminal. The refined metadata may include a subset of the larger connection metadata, which may reduce the overhead required to display and/or transmit monitoring information to the terminal device. The refined metadata may comprise connection groups, which may be formed based on aggregation criteria, such as connection source, destination, application, security policy, protocol, port, and/or the like. The connection groups may be ranked in accordance with ranking criteria.

公开(公告)号：US20140289390A1

公开(公告)日：2014-09-25

申请号：US13871896

申请日：2013-04-26

Applicant: WATCHGUARD TECHNOLOGIES, INC.

Inventor： Mark D. Hughes ,  Eivind Naess

IPC: H04L12/26

CPC classification number: H04L43/0882 ,  G06F21/52 ,  H04L43/026 ,  H04L43/028 ,  H04L43/045 ,  H04L43/0876 ,  H04L63/02 ,  H04L63/0227 ,  Y02D50/30

Abstract: A network security device may gather a large amount of metadata pertaining to the connections being managed thereby. A refinement module may filter and/or aggregate the connection metadata. The metadata may be refined on the network security device. The refined metadata may be provided for display on a terminal. The refined metadata may include a subset of the larger connection metadata, which may reduce the overhead required to display and/or transmit monitoring information to the terminal device. The refined metadata may comprise connection groups, which may be formed based on aggregation criteria, such as connection source, destination, application, security policy, protocol, port, and/or the like. The connection groups may be ranked in accordance with ranking criteria.

Abstract translation: 网络安全设备可以收集与正被管理的连接有关的大量元数据。 细化模块可以过滤和/或聚合连接元数据。 可以在网络安全设备上改进元数据。 精致的元数据可以被提供用于在终端上显示。 精细化元数据可以包括较大连接元数据的子集，这可以减少向终端设备显示和/或发送监控信息所需的开销。 精细元数据可以包括可以基于聚合标准形成的连接组，诸如连接源，目的地，应用，安全策略，协议，端口等。 可以根据排序标准对连接组进行排名。

公开(公告)号：US08839402B1

公开(公告)日：2014-09-16

申请号：US13972752

申请日：2013-08-21

Applicant: Watchguard Technologies, Inc.

Inventor： Mark D. Hughes ,  Eivind Naess

IPC: G06F21/00 ,  G06F21/52 ,  H04L29/06 ,  H04L12/26

CPC classification number: H04L43/0882 ,  G06F21/52 ,  H04L43/026 ,  H04L43/028 ,  H04L43/045 ,  H04L43/0876 ,  H04L63/02 ,  H04L63/0227 ,  Y02D50/30

Abstract: A network security device may gather a large amount of metadata pertaining to the connections being managed thereby. A refinement module may filter and/or aggregate the connection metadata. The metadata may be refined on the network security device. The refined metadata may be provided for display on a terminal. The refined metadata may include a subset of the larger connection metadata, which may reduce the overhead required to display and/or transmit monitoring information to the terminal device. The refined metadata may comprise connection groups, which may be formed based on aggregation criteria, such as connection source, destination, application, security policy, protocol, port, and/or the like. The connection groups may be ranked in accordance with ranking criteria.

Abstract translation: 网络安全设备可以收集与正被管理的连接有关的大量元数据。 细化模块可以过滤和/或聚合连接元数据。 可以在网络安全设备上改进元数据。 精致的元数据可以被提供用于在终端上显示。 精细化元数据可以包括较大连接元数据的子集，这可以减少向终端设备显示和/或发送监控信息所需的开销。 精细元数据可以包括可以基于聚合标准形成的连接组，诸如连接源，目的地，应用，安全策略，协议，端口等。 可以根据排序标准对连接组进行排名。