Multi-level affinitization for enterprise security management
Methods and systems for assigning security settings to one or more nodes within an enterprise network are disclosed. One method includes receiving network concordance data at an enterprise security management configuration tool from a plurality of nodes within an enterprise network, and receiving, in a configuration user interface, a selection of an affinitization level selected from a plurality of discrete affinitization levels, each of the discrete affinitization levels corresponding to a different extent to which nodes within an enterprise are grouped into profiles. The method also includes automatically grouping each of the plurality of nodes identified in the network concordance data into a plurality of profiles based on the selected affinitization level, and applying a common security policy to each of the nodes included in one of the plurality of profiles.
1. A system comprising:
an enterprise security management configuration server comprising:
a programmable circuit;
a memory storing computer-executable instructions that, when executed by the programmable circuit, cause the enterprise security management configuration server to:
receive network concordance data at the enterprise security management configuration tool from a plurality of nodes within an enterprise network;
receive, in a configuration user interface, a selection of an affinitization level selected from a plurality of discrete affinitization levels, each of the discrete affinitization levels corresponding to a different extent to which nodes within an enterprise are grouped into profiles;
automatically group each of the plurality of nodes identified in the network concordance data into a plurality of profiles based on the selected affinitization level; and
apply a common security policy to each of the nodes included in one of the plurality of profiles.
2. The system of claim 1 , wherein automatically grouping each of the plurality of nodes generates an enterprise topology graph within the configuration user interface.
3. The system of claim 2 , wherein the enterprise topology graph includes the plurality of profiles, a plurality of solutions, and at least one channel.
4. The system of claim 3 , wherein the plurality of profiles are linked to at least one solution of the plurality of solutions by the at least one channel.
5. The system of claim 1 , wherein the configuration user interface includes an affinitization selector movable among a plurality of positions, each position corresponding to one of the discrete affinitization levels.
6. The system of claim 1 , wherein the affinitization selector comprises a knob.
7. The system of claim 1 , further comprising, in response to automatically grouping each of the plurality of nodes, displaying an icon for each profile in the configuration user interface.
8. The system of claim 7 , wherein the enterprise security management configuration tool is further configured to:
receive a user input requesting a modification to a security setting at a user interface sub-region, the sub-region associated with a profile from among the plurality of profiles;
in response to receiving the user input, modify security settings for each of the nodes included in the profile.
9. The system of claim 1 , wherein the configuration user interface includes a palette, the palette including a plurality of network configuration tools including an affinitization tool.
10. A method of assigning security settings to one or more nodes within an enterprise network, the method comprising:
receiving network concordance data at an enterprise security management configuration tool from a plurality of nodes within an enterprise network;
receiving, in a configuration user interface, a selection of an affinitization level selected from a plurality of discrete affinitization levels, each of the discrete affinitization levels corresponding to a different extent to which nodes within an enterprise are grouped into profiles;
automatically grouping each of the plurality of nodes identified in the network concordance data into a plurality of profiles based on the selected affinitization level; and
applying a common security policy to each of the nodes included in one of the plurality of profiles.
11. The method of claim 10 , wherein receiving the network concordance data includes importing the network concordance data into a project within the enterprise security management configuration tool.
12. The method of claim 10 , further comprising displaying the plurality of profiles, a plurality of solutions, and at least one channel.
13. The method of claim 12 , wherein displaying the plurality of profiles includes displaying a single icon for each profile without displaying, by default, each of the plurality of nodes within each profile.
14. The method of claim 12 , further comprising, in response to selecting a profile, displaying a sub-region within the configuration user interface in which each of the nodes grouped within the profile can be displayed.
15. The method of claim 12 , further comprising, in response to selecting a profile, displaying a sub-region within the configuration user interface exposing one or more security settings associated with the profile.
16. The method of claim 15 , further comprising applying a common policy including a common set of security settings to each of the nodes included within the profile.
17. The method of claim 10 , further comprising receiving a selection, in a palette displayed in the configuration user interface, of a tool to create a new profile in addition to the plurality of profiles.
18. The method of claim 10 , wherein the discrete affinitization levels represent levels of operational commonality among nodes.
19. The method of claim 18 , wherein the discrete affinitization levels include compete affinitization, low affinitization, and moderate affinitization.
20. A method of assigning security settings to one or more nodes within an enterprise network, the method comprising:
importing network concordance data at an enterprise security management configuration tool from a plurality of nodes within an enterprise network;
selecting, in a configuration user interface, an affinitization level selected from a plurality of discrete affinitization levels, each of the discrete affinitization levels corresponding to a different extent to which nodes within an enterprise are grouped into profiles;
selecting a profile having a plurality of nodes automatically grouped therein based on the selected discrete affinitization level;
selecting one or more security settings to be included in a common security policy associated with the selected profile in a sub-region of the configuration user interface displayed in response to selecting the profile; and
deploying the common security policy to each of the plurality of nodes.