Coordinated network security management

1. A computer-implemented method for implementing coordinated management of network security controls, the method comprising:

determining, by a firewall management server in an Infrastructure as a Service (IaaS) management network, a plurality of managed network devices affected by a set of coordinated security policies, wherein the plurality of managed network devices are on routes to at least one of a web server, an application server, and a database server on a cloud based Infrastructure as a Service (IaaS) network, wherein the managed network devices are determined by calculating impact of the set of coordinated security policies based on a network topology;

converting, by the firewall management server, the set of the coordinated security policies to a firewall rule configuration for each of the plurality of the managed network devices;

adding, by the firewall management server, the firewall rule configuration to a set of firewall rules for the each of the plurality of the managed network devices; and

wherein the firewall management server in the IaaS management network comprises a first program executable to provide an interface for a system administrator to view and manage the network security policies, a second program executable to implement the coordinated management of the network security controls, a plurality of the third programs responsible for respective ones of the plurality of the managed network devices and executable to translate the set of the coordinated security policies into the firewall rule configuration, and a database of the network topology.

2. The computer-implemented method of claim 1 , further comprising the steps of:

determining, by the firewall management server, whether a rule conflict in the set of the firewall rules exists; and

resolving, by the firewall management server, the rule conflict.

3. The computer-implemented method of claim 1 , further comprising the step of: optimizing, by the firewall management server, the set of firewall rules.

4. The computer-implemented method of claim 1 , wherein the plurality of the managed network devices are at least one of: one or more virtual private network routers, one or more network firewalls, one or more hypervisor based firewalls, one or more server based firewalls, one or more router or switch access control lists, and one or more workstation based firewalls.

5. A computer program product for implementing coordinated management of network security controls, the computer program product comprising a computer readable storage medium having program code embodied therewith, the program code executable to:

determine, by a firewall management server in an Infrastructure as a Service (IaaS) management network, a plurality of managed network devices affected by a set of coordinated security policies, wherein the plurality of managed network devices are on routes to at least one of a web server, an application server, and a database server on a cloud based Infrastructure as a Service (IaaS) network, wherein the managed network devices are determined by calculating impact of the set of coordinated security policies based on a network topology;

convert, by the firewall management server, the set of the coordinated security policies to a firewall rule configuration for each of the plurality of the managed network devices;

add, by the firewall management server, the firewall rule configuration to a set of firewall rules for each of the plurality of the managed network devices; and

wherein the firewall management server in the IaaS management network comprises a first program executable to provide an interface for a system administrator to view and manage the network security policies, a second program executable to implement the coordinated management of the network security controls, a plurality of the third programs responsible for respective ones of the plurality of the managed network devices and executable to translate the set of the coordinated security policies into the firewall rule configuration, and a database of the network topology.

6. The computer program product of claim 5 , the computer program product further comprising the program code executable to:

determine, by the firewall management server, whether a rule conflict in the set of the firewall rules exists; and

resolve, by the firewall management server, the rule conflict.

7. The computer program product of claim 5 , the computer program product further comprising the program code executable to: optimize, by the firewall management server, the set of firewall rules.

8. The computer program product of claim 5 , wherein the plurality of the managed network devices are at least one of: one or more virtual private network routers, one or more network firewalls, one or more hypervisor based firewalls, one or more server based firewalls, one or more router or switch access control lists, and one or more workstation based firewalls.

9. A computer system for implementing coordinated management of network security controls, the computer system comprising:

one or more processors, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more computer-readable tangible storage devices for execution by at least one of the one or more processors, the program instructions executable to:

determine, by a firewall management server in an Infrastructure as a Service (IaaS) management network, a plurality of managed network devices affected by a set of coordinated security policies, wherein the plurality of managed network devices are on routes to at least one of a web server, an application server, and a database server on a cloud based Infrastructure as a Service (IaaS) network, wherein the managed network devices are determined by calculating impact of the set of coordinated security policies based on a network topology;

convert, by the firewall management server, the set of the coordinated security policies to a firewall rule configuration for each of the plurality of the managed network devices;

add, by the firewall management server, the firewall rule configuration to a set of firewall rules for each of the plurality of the managed network devices; and

wherein the firewall management server in the IaaS management network comprises a first program executable to provide an interface for a system administrator to view and manage the network security policies, a second program executable to implement the coordinated management of the network security controls, a plurality of the third programs responsible for respective ones of the plurality of the managed network devices and executable to translate the set of the coordinated security policies into the firewall rule configuration, and a database of the network topology.

10. The computer system of claim 9 , further comprising program instructions executable to:

determine, by the firewall management server, whether a rule conflict in the set of the firewall rules exists; and

resolve, by the firewall management server, the rule conflict.

11. The computer system of claim 9 , further comprising program instructions executable to: optimize, by the firewall management server, the set of firewall rules.

12. The computer system of claim 9 , wherein the plurality of the managed network devices are at least one of: one or more virtual private network routers, one or more network firewalls, one or more hypervisor based firewalls, one or more server based firewalls, one or more router or switch access control lists, and one or more workstation based firewalls.