Granted Patent B1

US 8,776,230 · App. 09/969,686 · Granted Jul 8, 2014

Abstract

Claims (56)

1. A computerized method of distributing security policies comprising:

maintaining a security policy at a master policy server;

periodically synchronizing the master policy server and a local policy server to replicate the security policy at the local policy server;

wherein the local policy server manages security with respect to a plurality of client platforms operating anti-virus programs and wherein the local policy server is configured to consolidate security statistics received from each of the plurality of client platforms, and wherein the synchronizing further comprises obtaining the consolidated security statistics associated with the client platforms from the local policy server, and wherein the master policy server is configured to schedule the synchronizing at times when less data traffic is experienced on a network associated with the master policy server and the local policy server, and wherein the master policy server is configured to maintain global level security policy configurations to be used by the local policy server for deriving set-up policies for the anti-virus programs of the client platforms;

requesting the consolidated security statistics from the local policy server by the master policy server;

receiving the consolidated security statistics from the local policy server by the master policy server; and

deriving a global status from the consolidated security statistics.

2. The computerized method of claim 1 further comprising: replicating the security policy to the local policy server upon request to the master policy server.

3. The computerized method of claim 2 , wherein a plurality of security policies are capable of being created at the master policy server.

4. The computerized method of claim 3 , wherein the local policy server requests a specific security policy from the plurality of security policies.

5. The computerized method of claim 1 further comprising:

creating the security policy at the local policy server; and

transferring the security policy to the master policy server.

6. The computerized method of claim 1 further comprising: creating the security policy at the master policy server.

7. The computerized method of claim 1 , wherein the synchronizing is performed securely across a communications medium coupling the master policy server and the local policy server.

8. The computerized method of claim 1 , further comprising:

deriving security policy parameters particular to each client platform from global security parameters, the security policy at the master policy comprising the global security parameters.

9. The computerized method of claim 1 , wherein the plurality of client platforms managed by the local policy server are determined according to hardware and software platform type.

10. The computerized method of claim 1 , wherein the plurality of client platforms managed by the local policy server are determined according to at least one of a domain name, a site location, and a physical or logical region.

11. The computerized method of claim 1 , wherein the local policy server schedules checks for updated policies in addition to periodically synchronizing with the master policy server.

12. A non-transitory computer-readable medium having executable instructions to cause a computer to perform a method comprising:

maintaining a security policy at a master policy server;

periodically synchronizing the master policy server and a local policy server to replicate the security policy at the local policy server;

wherein the local policy server manages security with respect to a plurality of client platforms operating anti-virus programs and wherein the local policy server is configured to consolidate security statistics received from each of the plurality of client platforms, and wherein the synchronizing further comprises obtaining the consolidated security statistics associated with the client platforms from the local policy server, and wherein the master policy server is configured to schedule the synchronizing at times when less data traffic is experienced on a network associated with the master policy server and the local policy server, and wherein the master policy server is configured to maintain global level security policy configurations to be used by the local policy server for deriving set-up policies for the anti-virus programs of the client platforms;

requesting the consolidated security statistics from the local policy server by the master policy server;

receiving the consolidated security statistics from the local policy server by the master policy server; and

deriving a global status from the consolidated security statistics.

13. The non-transitory computer-readable medium of claim 12 , wherein the method further comprises:

replicating the security policy to the local policy server upon request to the master policy server.

14. The non-transitory computer-readable medium of claim 12 , wherein the method further comprises:

creating the security policy at the local policy server: and

transferring the security policy to the master policy server.

15. The non-transitory computer readable medium of claim 12 , wherein the method further comprises:

creating the security policy at the master policy server.

16. The non-transitory computer readable medium of claim 12 , wherein the synchronizing is performed securely across a communications medium coupling the master policy server and the local policy server.

17. The non-transitory computer readable medium of claim 12 , wherein the method further comprises:

deriving security policy parameters particular to each client platform from global security parameters, the security policy at the master policy comprising the global security parameters.

18. A computer system comprising:

a processor and a memory coupled through a bus;

a network interface coupled to the processor through the bus; and

a master server process executed from the memory by the processor to cause the processor to maintain a security policy and to periodically synchronize with a local policy server through the network interface to replicate the security policy at the local policy server;

wherein the local policy server manages security with respect to a plurality of client platforms operating anti-virus programs and wherein the local policy server is configured to consolidate security statistics received from each of the plurality of client platforms, and wherein the synchronizing further comprises obtaining the consolidated security statistics associated with the client platforms from the local policy server, and wherein the master server process is configured to schedule the synchronizing at times when less data traffic is experienced on a network associated with the master server process and the local policy server, and wherein the master server process is configured to maintain global level security policy configurations to be used by the local policy server for deriving set-up policies for the anti-virus programs of the client platforms; and

wherein the master server process is further configured to request the consolidated security statistics from the local policy server, receive the consolidated security statistics from the local policy server and derive a global status from the consolidated security statistics.

19. The computer system of claim 18 , wherein the master server process further causes the processor to receive a request from the local policy server and to replicate the security policy to the local policy server in response.

20. The computer system of claim 18 , wherein the master server process further causes the processor to create the security policy.

21. The computer system of claim 18 , wherein the master server process further causes the processor to couple the network interface to a secure communications medium for synchronization.

22. A computer system comprising:

a processor and a memory coupled through a bus;

a network interface coupled to the processor through the bus; and

a local server process executed from the memory by the processor to cause the processor to periodically synchronize with a master policy server through the network interface to receive a security policy from a master policy server;

wherein the local server process manages security with respect to a plurality of client platforms operating anti-virus programs and wherein the local server process is configured to consolidate security statistics received from each of the plurality of client platforms, and wherein the synchronizing further comprises obtaining the consolidated security statistics associated with the client platforms from the local server process, and wherein the master policy server is configured to schedule the synchronizing at times when less data traffic is experienced on a network associated with the master policy server and the local server process, and wherein the master policy server is configured to maintain global level security policy configurations to be used by the local server process for deriving set-up policies for the anti-virus programs of the client platforms; and

wherein the local server process is further configured to receive a request for the consolidated security statistics from the master policy server and send the consolidated security statistics to the master policy server; and

wherein the master policy server is configured to derive a global status from the consolidated security statistics.

23. The computer system of claim 22 , wherein the local server process further causes the processor to request a security policy from the master policy server through the network interface and to receive the security policy in response.

24. The computer system of claim 22 , wherein the local server process further causes the processor to create the security policy and to transfer the security policy to a master policy server through the network interface.

25. The computer system of claim 22 , wherein the local server process further causes the processor to derive security policy parameters particular to each client platform from global security parameters, the security policy at the master policy comprising the global security parameters.

Assignments (20)