Application onboarding within workload protection solutions
Devices, systems, methods, and processes for facilitating new application onboarding within a workload protection solution is described herein. As new applications are introduced into a system, users or network administrators may not be knowledgeable on how to properly onboard the application sufficient to effect proper segmentation, monitoring, and the like. Without proper onboarding, the system may not be optimized and can become less optimal over time as new applications are added. By automating at least a portion of that process, a more optimal system can be achieved. This automation may be achieved through a series of prompts to the user to input various characteristics about the application that can be utilized to generate a recommended policy to apply to the application in order to onboard it into the system. The policy can be reviewed, confirmed, and applied through a graphical user interface or the like.
1 . A device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a workload protection logic that is configured to:
receive an application onboarding request;
generate a plurality of prompts configured for user input;
receive user input data;
generate an application configuration;
define one or more scopes and labels associated with an application based on the user input data;
select an application name representative of the application based on the user input data or one or more data points;
add one or more subnets and internet protocol (IP) addresses associated with the application; and
select one or more workloads associated with the defined scopes based on the user input data.
2 . The device of claim 1 , wherein the application onboarding request is associated with a specific application.
3 . The device of claim 2 , wherein the plurality of prompts are generated based on at least the specific application.
4 . The device of claim 1 , wherein the plurality of prompts are displayed on a graphical user interface.
5 . The device of claim 4 , wherein the graphical user interface is associated with a workload protection solution.
6 . The device of claim 1 , wherein the workload protection logic is further configured to:
determine one or more workloads associated with the user input data; and
provide a selection of workloads configured for user selection.
7 . The device of claim 6 , wherein the selection of workloads is provided on a graphical user interface.
8 . The device of claim 6 , wherein the workload protection logic is further configured to receive a workload selection.
9 . The device of claim 1 , wherein the workload protection logic is further configured to generate an application configuration based at least on the user input data and workload selection data.
10 . The device of claim 1 , wherein the workload protection logic is further configured to apply the application configuration to the network.
11 . The device of claim 1 , wherein the user input data comprises at least a valid application name.
12 . The device of claim 1 , wherein the user input data comprises at least a defined scope.
13 . The device of claim 12 , wherein a selection of workloads provided is associated with the defined scope.
14 . The device of claim 13 , wherein the workload protection logic is further configured to provide one or more prompts configured for subnet boundary input.
15 . The device of claim 13 , wherein the workload protection logic is further configured to provide one or more prompts configured for internet protocol address input.
16 . The device of claim 15 , wherein the workload protection logic is further configured to determine if an initial workspace will be required.
17 . The device of claim 16 , wherein the initial workspace is utilized for policy evaluation.
18 . A method of onboarding an application, comprising:
receiving an application onboarding request;
generating a plurality of prompts configured for user input;
receive user input data;
generating application configuration;
defining one or more scopes and labels associated with an application based on the user input data;
selecting an application name representative of the application based on the user input data or one or more data points;
adding one or more subnets and internet protocol (IP) addresses associated with the application; and
selecting one or more workloads associated with the defined scopes based on the user input data.
19 . A device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a workload protection logic that is configured to:
receive an application onboarding request;
receive user input data;
define a scope associated with an application based on the user input data;
select an application name representative of the application based on the user input data:
add one or more subnets associated with the application; and
select one or more workloads associated with the defined scopes based on the user input data.