IP Library Granted Patent US 10,462,104
Granted Patent B2
US 10,462,104 · App. 15/440,335 · Granted Oct 29, 2019

Systems and methods for dynamic firewall policy configuration

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,462,104
App. No.
15/440,335
Granted
Oct 29, 2019
Kind
B2
Abstract

Systems and methods for receiving information on network firewall policy configurations are disclosed. Based on the received firewall configuration information, a configuration of a firewall and/or subnet of network devices is automatically provisioned and/or configured to control network traffic to and from the subnet.

Claims (48)

1. A method for firewall configuration comprising:

receiving, at a processing device, input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components;

processing, using the processing device, the input to determine that the firewall configuration and the network component configuration are logically valid prior to configuring the firewall with the firewall configuration;

automatically configuring, using the processing device, the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are logically valid; and

activating, using the processing device, the firewall within the communications network to manage traffic to and from the subnet,

wherein processing the input to determine that the firewall configuration and the network component configuration are logically valid comprises:

executing the firewall configuration at the firewall and the network component configuration at the network component to capture data corresponding to the firewall configuration and the network component configuration, without permanently implementing the firewall configuration at the firewall and the network component configuration at the network component; and

analyzing the data against a set of rules to verify the firewall configuration and the network component configuration are being implemented at the firewall and the network component as expected.

2. The method of claim 1 , wherein the firewall policy is implemented at the firewall and the network component for a specific period of time.

3. The method of claim 1 , wherein the firewall policy includes at least one of a set of source ports for outgoing network traffic, a set of destination ports for incoming network traffic, and at least one protocol for defining the rules of communication of the network traffic when transmitting the network traffic to and from the subnet.

4. The method of claim 1 , further comprising generating a time window for which the firewall policy is applicable to the subnet, wherein the time window is generated based on the received input.

5. The method of claim 1 , further comprising:

receiving a modification to the firewall policy to unblock an application from accessing the subnet;

modifying the firewall policy to allow at least a portion of network traffic associated with the application to pass through the firewall unblocked; and

implementing the modified firewall policy at the firewall.

6. A system for firewall configuration comprising:

a subnet of network components deployed within a communications network, the subnet accessible through a firewall;

at least one processor; and

non-transient computer-readable media communicably coupled to the at least one processor having instructions stored thereon that, when executed by the at least one processor, cause the at least one processor to:

receive input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components;

process the input to determine that the firewall configuration and the network component configuration are logically valid prior to configuring the firewall with the firewall configuration;

automatically configure the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are logically valid; and

activate the firewall within the communications network to manage traffic to and from the subnet,

wherein, to process the input to determine that the firewall configuration and the network component configuration are logically valid, comprises:

execute the firewall configuration at the firewall and the network component configuration at the network component to capture data corresponding to the firewall configuration and the network component configuration, without permanently implementing the firewall configuration at the firewall and the network component configuration at the network component; and

analyze the data against a set of rules to verify the firewall configuration and the network component configuration are being implemented at the firewall and the network component as expected.

7. The system of claim 6 , wherein the firewall policy is implemented at the firewall and the network component for a specific period of time.

8. The system of claim 6 , wherein the firewall policy includes at least one of a set of source ports for outgoing network traffic, a set of destination ports for incoming network traffic, and at least one protocol for defining the rules of communication of the network traffic when transmitting the network traffic to and from the subnet.

9. The system of claim 6 , wherein the at least one processor is further configured to generate a time window for which the firewall policy is applicable to the subnet, wherein the time window is generated based on the received input.

10. The system of claim 6 , wherein the at least one processor is further configured to:

receive a modification to the firewall policy to unblock an application from accessing the subnet;

modify the firewall policy to allow at least a portion of network traffic associated with the application to pass through the firewall unblocked; and

implement the modified firewall policy at the firewall.

11. A non-transitory computer-readable medium for firewall configuration including instructions, executable by a processor, the instructions comprising:

receiving input defining a firewall policy for a firewall managing access to a subnet of network components deployed within a communications network, the firewall policy including a firewall configuration for the firewall and a network component configuration for a network component of the subnet of network components;

processing the input to determine that the firewall configuration and the network component configuration are logically valid prior to configuring the firewall with the firewall configuration;

automatically configuring the firewall configuration at the firewall and the network component configuration at the network component in response to determining that the firewall configuration and the network component configuration are logically valid; and

activating the firewall within the communications network to manage traffic to and from the subnet,

wherein processing the input to determine that the firewall configuration and the network component configuration are logically valid comprises:

executing the firewall configuration at the firewall and the network component configuration at the network component to capture data corresponding to the firewall configuration and the network component configuration, without permanently implementing the firewall configuration at the firewall and the network component configuration at the network component; and

analyzing the data against a set of rules to verify the firewall configuration and the network component configuration are being implemented at the firewall and the network component as expected.

12. The non-transitory computer-readable medium of claim 11 , wherein the firewall policy is implemented at the firewall and the network component for a specific period of time.

13. The non-transitory computer-readable medium of claim 11 , wherein the firewall policy includes at least one of a set of source ports outgoing network traffic, a set of destination ports for incoming network traffic, and at least one protocol for defining the rules of communication of the network traffic when transmitting the network traffic to and from the subnet.

14. The non-transitory computer-readable medium of claim 11 , further comprising generating a time window for which the firewall policy is applicable to the subnet, wherein the time window is generated based on the received input.

15. The non-transitory computer-readable medium of claim 11 , further comprising:

receiving a modification to the firewall policy to unblock an application from accessing the subnet;

modifying the firewall policy to allow at least a portion of network traffic associated with the application to pass through the firewall unblocked; and

implementing the modified firewall policy at the firewall.

Assignments (2)
NOTICE OF GRANT OF SECURITY INTEREST IN INTELLECTUAL PROPERTY (SECOND LIEN) Recorded Nov 4, 2024
From: LEVEL 3 COMMUNICATIONS, LLC; GLOBAL CROSSING TELECOMMUNICATIONS, INC
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS COLLATERAL AGENT
Reel/Frame 069295/0749 →
NOTICE OF GRANT OF SECURITY INTEREST IN INTELLECTUAL PROPERTY (FIRST LIEN) Recorded Nov 4, 2024
From: LEVEL 3 COMMUNICATIONS, LLC; GLOBAL CROSSING TELECOMMUNICATIONS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS COLLATERAL AGENT
Reel/Frame 069295/0858 →