Dynamic attribute based application policy

US9825814B2 · kind B2 · utility

Assignee

• Cisco Technology, Inc. · US

Inventors

• Joji Thomas Mekkattuparamban · Sunnyvale, US
• Vijay Chander · San Ramon, US
• Saurabh Jain · Saratoga, US
• Van Lieu · San Francisco, US
• Badhri Madabusi Vijayaraghavan · Sunnyvale, US
• Praveen Jain · Gatineau, CA
• Munish Mehta · Fremont, US
• Michael R. Smith · Chicago, US
• Narender Enduri · Cupertino, US

Key dates

• Filing date: Jul 27, 2015
• Grant date: Nov 21, 2017
• Expiry date: Sep 3, 2035

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2101/622
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.