Firewall rule management

US9787641B2 · kind B2 · utility

Assignee

• Nicira, Inc. · US

Inventors

• Kaushal Bansal · Sunnyvale, US
• Uday Masurekar · Sunnyvale, US
• Serge Maskalik · Palo Alto, US
• Shadab Shah · Sunnyvale, US
• Aravind Srinivasan · Santa Clara, US
• Minjal Agarwal · Santa Clara, US

Key dates

• Filing date: Jun 30, 2015
• Grant date: Oct 10, 2017
• Expiry date: Aug 11, 2035

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/0218
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Some embodiments provide a central firewall management system that can be used to manage different firewall devices from a single management interface. This management interface provides a uniform interface for defining different firewall rule sets and deploying these rules sets on different firewall devices (e.g., port-linked firewall engines, firewall service VMs, network-perimeter firewall devices, etc.). Also, this interface allows the location and/or behavior of the firewall rule sets to be dynamically modified. The management interface in some embodiments also provides controls for filtering and debugging firewall rules.