Dynamically managing firewall ports of an enterprise network

1. An apparatus comprising:

at least one processor;

a memory coupled to the at least one processor;

a firewall engine residing in the memory and executed by the at least one processor that dynamically manages a plurality of firewalls in an enterprise network system, wherein the firewall engine modifies baseline port profile configurations to build a dynamic port profile and applies the dynamic port profile to the plurality of firewalls in the enterprise network,

wherein the firewall engine includes a port profile database that includes the dynamic port profile and historic port profile data, and

wherein the firewall engine uses a network monitoring technology to inspect system data flows to determine how to build the dynamic port profile by modifying the baseline port profile configurations, wherein the system data flows include: terminal access point monitoring; syslog and simple network monitoring protocol, switch point analyzer; and network monitoring software.

2. The apparatus of claim 1 wherein the firewall engine uses natural language processing to consider availability scans, change management, a change management database and vendor documents.

3. The apparatus of claim 1 wherein the firewall engine inspects system data flows to determine what changes to make to the dynamic port profile.

4. The apparatus of claim 1 wherein the firewall engine continues to monitor for system changes and dynamically updates the dynamic port profile including denying traffic.

5. The apparatus of claim 4 wherein the firewall engine continues to monitor for system changes and dynamically updates the dynamic port by using natural language processing to consider availability scans, change management, change management database and vendor documents.

6. The apparatus of claim 4 wherein the firewall engine continues to monitor for system changes and dynamically updates the dynamic port profile using pattern analysis.

7. The apparatus of claim 4 wherein the firewall engine continues to monitor for system changes and dynamically updates the dynamic port by using load per flow.

8. A computer-implemented method executed by at least one processor for dynamically managing a plurality of firewalls in an enterprise network system comprising:

providing a baseline port profile configuration;

using machine learning and natural language processing to determine configuration needs;

inspecting system data flows to determine how to build a dynamic port profile by modifying the baseline port profile configuration;

building the dynamic port profile; and

applying the dynamic port profile to the plurality of firewalls in the enterprise network,

wherein a firewall engine uses a network monitoring technology to inspect system data flows to determine how to build the dynamic port profile by modifying the baseline port profile configuration, wherein the system data flows include: terminal access point monitoring; syslog and simple network monitoring protocol, switch point analyzer; and network monitoring software.

9. The method of claim 8 wherein using natural language processing includes using availability scans, using change management, using change management database and using vendor documents.

10. The method of claim 8 further comprising continuing to monitor for system changes and dynamically updating the dynamic port profile.

11. The method of claim 10 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes using natural language processing to use availability scans, change management, change management database and vendor documents.

12. The method of claim 10 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes using pattern analysis.

13. The method of claim 10 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes using load per flow.

14. The method of claim 10 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes denying traffic.

15. The method of claim 10 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes determining when a current data rate exceeds an expected data rate by a threshold provided in a baseline port profile configuration.

16. A computer-implemented method executed by at least one processor for dynamically managing a plurality of firewalls in an enterprise network system comprising:

providing a baseline port profile configuration;

using natural language processing to determine configuration needs, including using availability scans, using change management, using change management database and using vendor documents;

building a dynamic port profile;

applying the dynamic port profile to the plurality of firewalls in the enterprise network; and

continuing to monitor for system changes using pattern analysis and dynamically updating the dynamic port profile using pattern and trend analysis,

wherein the firewall engine includes a port profile database that includes the dynamic port profile and historic port profile data;

the historic port profile data includes past snapshots in time of the dynamic port profile that taken together show a history of how and why the dynamic port profile was changed; and

the firewall engine uses a network monitoring technology to inspect system data flows to determine how to build the dynamic port profile by modifying the baseline port profile configuration, wherein the system data flows include: terminal access point monitoring; syslog and simple network monitoring protocol, switch point analyzer; and network monitoring software.

17. The method of claim 16 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes using load per flow.

18. The method of claim 16 wherein continuing to monitor for system changes and dynamically updating the dynamic port profile includes denying traffic.