专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09906496B2 Zone-based firewall policy model for a virtualized data center 有权
公开(公告)号：US09906496B2
公开(公告)日：2018-02-27
申请号：US15270476
申请日：2016-09-20
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Rajesh Kumar Sethuraghavan
IPC分类号： H04L29/04 , H04L29/06 , H04L12/931 , H04L29/08 , G06F9/455 , G06F21/62
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/08927 , H04L29/08972 , H04L49/356 , H04L49/70 , H04L63/0218 , H04L63/0227
摘要： Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.

2. 发明授权

US09658876B2 Location-aware virtual service provisioning in a hybrid cloud environment 有权
公开(公告)号：US09658876B2
公开(公告)日：2017-05-23
申请号：US15060758
申请日：2016-03-04
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Murali Anantha
IPC分类号： G06F15/16 , G06F9/455 , H04L12/64 , H04L12/24 , H04L12/931 , H04L29/08
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L12/6418 , H04L41/12 , H04L49/70 , H04L67/10
摘要： A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a second virtual network. A first message is sent to the second virtual network, the first message comprising information configured to start a virtual switch in the second virtual network that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. A second message is sent to the second virtual network, the second message comprising information configured to start a virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.

3. 发明申请

US20150163200A1 Zone-Based Firewall Policy Model for a Virtualized Data Center 审中-公开
标题翻译：虚拟化数据中心基于区域的防火墙策略模型
公开(公告)号：US20150163200A1
公开(公告)日：2015-06-11
申请号：US14627223
申请日：2015-02-20
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Rajesh Kumar Sethuraghavan
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/08927 , H04L29/08972 , H04L49/356 , H04L49/70 , H04L63/0218 , H04L63/0227
摘要： Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.
摘要翻译：提供了实现基于区域的防火墙策略的技术。在虚拟网络设备处，定义和存储表示虚拟防火墙策略的安全管理区域的信息，该虚拟防火墙策略包括与安全区域相关联的应用的一个或多个公共属性。定义表示安全区域的防火墙规则的信息，并且包括用于匹配与安全区域相关联的应用的通用属性的第一条件以及要对应用流量执行的动作。接收到与正确配置的虚拟机相关联的与应用程序流量相关联的参数。确定应用业务参数是否满足防火墙规则的条件，并且响应于确定满足条件，执行动作。

4. 发明申请

US20130312056A1 Zone-Based Firewall Policy Model for a Virtualized Data Center 审中-公开
公开(公告)号：US20130312056A1
公开(公告)日：2013-11-21
申请号：US13945091
申请日：2013-07-18
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Rajesh Kumar Sethuraghavan
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/08927 , H04L29/08972 , H04L49/356 , H04L49/70 , H04L63/0218 , H04L63/0227
摘要： Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.

5. 发明授权

US09965317B2 Location-aware virtual service provisioning in a hybrid cloud environment 有权
公开(公告)号：US09965317B2
公开(公告)日：2018-05-08
申请号：US15465654
申请日：2017-03-22
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Murali Anantha
IPC分类号： G06F15/16 , G06F9/455 , H04L12/931 , H04L29/08 , H04L12/64 , H04L12/24
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L12/6418 , H04L41/12 , H04L49/70 , H04L67/10
摘要： A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a first virtual service node in the first virtual network. A second virtual network receives the subscription to the virtual network services and starts a virtual switch that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. The second virtual network starts a second virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.

6. 发明申请

US20170012940A1 Zone-Based Firewall Policy Model for a Virtualized Data Center 审中-公开
标题翻译：虚拟化数据中心基于区域的防火墙策略模型
公开(公告)号：US20170012940A1
公开(公告)日：2017-01-12
申请号：US15270476
申请日：2016-09-20
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Rajesh Kumar Sethuraghavan
IPC分类号： H04L29/06 , G06F9/455
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/08927 , H04L29/08972 , H04L49/356 , H04L49/70 , H04L63/0218 , H04L63/0227
摘要： Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.
摘要翻译：提供了实现基于区域的防火墙策略的技术。在虚拟网络设备处，定义和存储表示虚拟防火墙策略的安全管理区域的信息，该虚拟防火墙策略包括与安全区域相关联的应用的一个或多个公共属性。定义表示安全区域的防火墙规则的信息，并且包括用于匹配与安全区域相关联的应用的通用属性的第一条件以及要对应用流量执行的动作。接收到与正确配置的虚拟机相关联的与应用程序流量相关联的参数。确定应用业务参数是否满足防火墙规则的条件，并且响应于确定满足条件，执行动作。

7. 发明申请

US20160188359A1 LOCATION-AWARE VIRTUAL SERVICE PROVISIONING IN A HYBRID CLOUD ENVIRONMENT 有权
标题翻译：位于混合云环境中的位置虚拟服务提供
公开(公告)号：US20160188359A1
公开(公告)日：2016-06-30
申请号：US15060758
申请日：2016-03-04
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Murali Anantha
IPC分类号： G06F9/455 , H04L12/931 , H04L12/24 , H04L29/08 , H04L12/64
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L12/6418 , H04L41/12 , H04L49/70 , H04L67/10
摘要： A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a second virtual network. A first message is sent to the second virtual network, the first message comprising information configured to start a virtual switch in the second virtual network that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. A second message is sent to the second virtual network, the second message comprising information configured to start a virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.
摘要翻译：将分布式虚拟交换机组件的位置感提供到服务提供方案中，以减少在混合云环境中跨网络进行策略评估时观察到的延迟。第一虚拟网络中的管理应用订阅由第二虚拟网络提供的虚拟网络服务。将第一消息发送到第二虚拟网络，第一消息包括被配置为启动第二虚拟网络中的虚拟交换机的信息，该第二虚拟网络切换第二虚拟网络中的一个或多个虚拟机的网络流量，所述虚拟机被配置为扩展由第一个虚拟网络进入第二个虚拟网络。第二消息被发送到第二虚拟网络，第二消息包括被配置为启动在第二虚拟网络中为一个或多个虚拟机提供网络业务服务的虚拟服务节点的信息。

8. 发明申请

US20170192815A1 LOCATION-AWARE VIRTUAL SERVICE PROVISIONING IN A HYBRID CLOUD ENVIRONMENT 审中-公开
公开(公告)号：US20170192815A1
公开(公告)日：2017-07-06
申请号：US15465654
申请日：2017-03-22
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Murali Anantha
IPC分类号： G06F9/455 , H04L12/24 , H04L12/64 , H04L12/931 , H04L29/08
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L12/6418 , H04L41/12 , H04L49/70 , H04L67/10
摘要： A sense of location is provided for distributed virtual switch components into the service provisioning scheme to reduce latency observed in conducting policy evaluations across a network in a hybrid cloud environment. A management application in a first virtual network subscribes to virtual network services provided by a first virtual service node in the first virtual network. A second virtual network receives the subscription to the virtual network services and starts a virtual switch that switches network traffic for one or more virtual machines in the second virtual network that are configured to extend services provided by the first virtual network into the second virtual network. The second virtual network starts a second virtual service node in the second virtual network that provides network traffic services for the one or more virtual machines.

9. 发明授权

US09467382B2 Elastic service chains 有权
标题翻译：弹性服务链
公开(公告)号：US09467382B2
公开(公告)日：2016-10-11
申请号：US14170750
申请日：2014-02-03
申请人： Cisco Technology, Inc.
发明人： Surendra Kumar , David Chang , Nagaraj Bagepalli , Abhijit Patra
IPC分类号： H04L1/00 , H04L12/803 , H04L12/911 , H04L12/721 , H04L12/24 , H04L29/06
CPC分类号： H04L47/125 , H04L41/50 , H04L45/38 , H04L47/782 , H04L63/20
摘要： Presented herein are elastic service chain techniques. In one example, a network element receives data traffic to be processed by a service chain that specifies an ordered sequence of service pools including a first service pool and second service pool, wherein each service pool comprises a plurality of network services. A network service is determined from the first service pool to be applied to the data traffic, and data traffic is forwarded to the network service in the first service pool.
摘要翻译：这里提出的是弹性服务链技术。在一个示例中，网络元件接收要由服务链处理的数据流量，所述服务链指定包括第一服务池和第二服务池的服务池的有序序列，其中每个服务池包括多个网络服务。从要应用于数据流量的第一服务池确定网络服务，并将数据流量转发到第一服务池中的网络服务。

10. 发明授权

US09461968B2 Zone-based firewall policy model for a virtualized data center 有权
公开(公告)号：US09461968B2
公开(公告)日：2016-10-04
申请号：US14627223
申请日：2015-02-20
申请人： Cisco Technology, Inc.
发明人： David Chang , Abhijit Patra , Nagaraj Bagepalli , Rajesh Kumar Sethuraghavan
IPC分类号： H04L12/721 , H04L29/06 , H04L12/931 , H04L29/08 , G06F21/53
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/08927 , H04L29/08972 , H04L49/356 , H04L49/70 , H04L63/0218 , H04L63/0227
摘要： Techniques are provided for implementing a zone-based firewall policy. At a virtual network device, information is defined and stored that represents a security management zone for a virtual firewall policy comprising one or more common attributes of applications associated with the security zone. Information representing a firewall rule for the security zone is defined and comprises first conditions for matching common attributes of applications associated with the security zone and an action to be performed on application traffic. Parameters associated with the application traffic are received that are associated with properly provisioned virtual machines. A determination is made whether the application traffic parameters satisfy the conditions of the firewall rule and in response to determining that the conditions are satisfied, the action is performed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式