Single configuration for multi-cloud firewall deployment

Inventors: Ganesh Narayanaswamy (Sunnyvale, CA); Praveen Kumar Patnala (Santa Clara, CA); Sreenivasa Kiran Madabhushi (San Jose, CA); Vijay Chander (San Ramon, CA)

Assignee: Cisco Technology, Inc.

H04L63/0263 G06F12/0802 H04B10/25 H04L9/0861 H04L9/3242 H04L9/3247 H04L41/16 H04L63/0227 H04L63/0236 H04L63/083 H04L63/10 H04L63/1416 H04L63/1425 H04L63/145 H04L63/20 H04L67/1008 H04Q11/0066 G06F16/2365 G06F16/27 H04L63/166

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 12683929
App. No.: 18/626,289
Granted: Jul 14, 2026
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Disclosed are systems, apparatuses, methods, and computer-readable media for configuring resources of a service distributed across multiple cloud service providers. A method includes: receiving a request to configure a firewall in a cloud service provider, the request including a tag including a name that identifies a single firewall configuration information; and providing derived firewall information from the single firewall configuration information based on an identity of the cloud service provider and the tag, wherein the single firewall configuration information includes network information for connecting the firewall to a private network in the cloud service provider.

Claims (25)

1 . A method for configuring resources of a service distributed across multiple cloud service providers, comprising:

receiving a request to configure a firewall in a cloud service provider, the request including a tag including a name that identifies a single firewall configuration information, wherein the single firewall configuration information is identified based on a name included in a tag included in the request and directions associated with network traffic included in the tag for egress and ingress firewalls; and

providing derived firewall information from the single firewall configuration information based on an identity of the cloud service provider and the tag, wherein the single firewall configuration information includes network information for connecting the firewall to a private network in the cloud service provider.

2 . The method of claim 1 , wherein the derived firewall information comprises ingress information for an ingress firewall configured for the service in the cloud service provider or egress information for an egress firewall configured for the service in the cloud service provider.

3 . The method of claim 1 , wherein the single firewall configuration information comprises at least one of address information of an ingress firewall for each of a plurality of cloud service providers and address information of an egress firewall for each of the plurality of cloud service providers.

4 . The method of claim 1 , wherein the derived firewall information comprises address information of at least one firewall that is formatted according to an address requirement of the cloud service provider.

5 . The method of claim 1 , wherein the derived firewall information comprises credential information for accessing the cloud service provider and configuring the firewall.

6 . The method of claim 1 , wherein the request is provided by a user of a multi-cloud security platform that controls resources distributed in the multiple cloud service providers.

7 . The method of claim 1 , wherein the request is provided in response to an external notice from at least one third-party service.

8 . An apparatus for configuring resources of a service distributed across multiple cloud service providers, comprising:

a storage configured to store instructions; and

a processor configured to execute the instructions and cause the processor to:

receive a request to configure a firewall in a cloud service provider, the request including a tag including a name that identifies a single firewall configuration information, wherein the single firewall configuration information is identified based on a name included in a tag included in the request and directions associated with network traffic included in the tag for egress and ingress firewalls; and

provide derived firewall information from the single firewall configuration information based on an identity of the cloud service provider and the tag, wherein the single firewall configuration information includes network information for connecting the firewall to a private network in the cloud service provider.

9 . The apparatus of claim 8 , wherein the derived firewall information comprises ingress information for an ingress firewall configured for the service in the cloud service provider or egress information for an egress firewall configured for the service in the cloud service provider.

10 . The apparatus of claim 8 , wherein the single firewall configuration information comprises at least one of address information of an ingress firewall for each of a plurality of cloud service providers and address information of an egress firewall for each of the plurality of cloud service providers.

11 . The apparatus of claim 8 , wherein the derived firewall information comprises address information of at least one firewall that is formatted according to an address requirement of the cloud service provider.

12 . The apparatus of claim 8 , wherein the derived firewall information comprises credential information for accessing the cloud service provider and configuring the firewall.

13 . The apparatus of claim 8 , wherein the request is provided by a user of a multi-cloud security platform that controls resources distributed in the multiple cloud service providers.

14 . The apparatus of claim 8 , wherein the request is provided in response to an external notice from at least one third-party service.

15 . A non-transitory computer readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to:

16 . The non-transitory computer readable medium of claim 15 , wherein the derived firewall information comprises ingress information for an ingress firewall configured for a multi-cloud service in the cloud service provider or egress information for an egress firewall configured for the multi-cloud service in the cloud service provider.

17 . The non-transitory computer readable medium of claim 15 , wherein the single firewall configuration information comprises at least one of address information of an ingress firewall for each of a plurality of cloud service providers and address information of an egress firewall for each of the plurality of cloud service providers.