Firewall configuration validation

Details Firewall configuration validation Firewall configuration validation

2008-07-29

2008-07-29

Chang, Jungwon (Department: 2154)

Electrical computers and digital processing systems: multicomput

Computer-to-computer data routing

C726S011000, C709S224000

Reexamination Certificate

active

10321851

ABSTRACT:
The invention relates to processing configuration of a network node, such as for example a firewall, and for sharing the configuration management between several administrators. The configuration comprises a processing rule base, which contains rules to be used in the network node for filtering data packets, the rules comprising one or more identification values for identifying a data packet and an action. The configuration of the network node is validated by determining, whether the processing rule base fulfils requirements defined in a validation rule base. The use of validation rule base enables verifying that processing rule bases managed by different administrators fulfil some set requirements. Additionally, the invention accounts for detecting human errors in configurations.

REFERENCES:
patent: 6009475 (1999-12-01), Shrader
patent: 6158010 (2000-12-01), Moriconi et al.
patent: 6233686 (2001-05-01), Zenchelsky et al.
patent: 6574666 (2003-06-01), Dutta et al.
patent: 6684244 (2004-01-01), Goldman et al.
patent: 6738909 (2004-05-01), Cheng et al.
patent: 6772214 (2004-08-01), McClain et al.
patent: 6772223 (2004-08-01), Corl et al.
patent: 6832322 (2004-12-01), Boden et al.
patent: 6839850 (2005-01-01), Campbell et al.
patent: 6947983 (2005-09-01), Corl et al.
patent: 7027446 (2006-04-01), Rosenfeld et al.
patent: 7039053 (2006-05-01), Freed et al.
patent: 2001/0000193 (2001-04-01), Boden et al.
patent: 2003/0005144 (2003-01-01), Engel et al.
patent: 2003/0074248 (2003-04-01), Braud et al.
patent: 2003/0120622 (2003-06-01), Nurmela et al.
patent: 2003/0149766 (2003-08-01), Syvanne et al.
patent: 2004/0013112 (2004-01-01), Goldberg et al.
patent: 0 856 974 (1998-08-01), None
patent: 2 206 713 (1989-01-01), None
patent: WO 00/62167 (2000-10-01), None
patent: WO 01/04343 (2001-06-01), None
Hazelhurst et al., “Algorithms for Improving the Dependability of Firewall and Filter Rule Lists,” Proceedings International Conference on Dependable Systems and Networks, Jun. 25-28, 2000, NY, International Conference on Dependable Systems and Networks, Los Alamitos, CA: IEEE Comp. Soc. US. pp. 576-585.

Affiliated with

Also associated with

Rating

Firewall configuration validation does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Firewall configuration validation, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Firewall configuration validation will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3942571