Automatically generating rules for connection security

US8490153B2 · kind B2 · utility

Assignee

• Microsoft Corporation · US

Inventors

• Charles D. Bassett · Seattle, US
• Eran Yariv · Redmond, US
• Ian Carbaugh · Redmond, US
• Lokesh Srinivas Koppolu · Redmond, US
• Maksim Noy · Kirkland, US
• Sarah A. Wahlert · Bellevue, US
• Pradeep Bahl · Redmond, US

Key dates

• Filing date: Nov 8, 2011
• Grant date: Jul 16, 2013
• Expiry date: Nov 8, 2031

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/20
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.