Method, computer program, data carrier and data processing device for configuring a firewall or a router

• US 20030074437A1
• Filed: 09/20/2002
• Published: 04/17/2003
• Est. Priority Date: 09/20/2001
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Exenberger, Gerald, Welsing, Stephan
• Application Number:
  US10/247,566
• Publication Number:
  US 20030074437A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method for configuring a firewall or a router, a first computer or a first computer network being connected to a second computer network via the firewall or the router, and the router or the firewall being configured in such a way that a computer communication between a computer of the second computer network and the first computer or a predefined computer of the first computer network is made possible. For the configuration it is necessary to fill out a respective application form which is then automatically translated into a code which is suitable for the configuration. The invention also relates to a computer program which implements this translation, a data carrier on which the computer program is stored, and a data processing device on which the computer program is installed.

Claims

1. A method for configuring a firewall or a router, a first computer or a first computer network being connected to a second computer network via the firewall or the router, and the router or the firewall being configured in such a way that a computer communication between a computer of the second computer network and the first computer or a predefined computer of the first computer network is made possible, the method comprising:

filling out a prepared application form which is assigned to the computer communication; and

automatically translating the filled-out application form into a code which is suitable for the configuration of the firewall or of the router.

2. The method as claimed in claim 1, in which the application form is based on a technical risk analysis which is generated once and assigned to the computer communication.

3. The method as claimed in claim 1, in which, after the automatic translation of the filled-out application form into the suitable code, the firewall or the router is automatically configured.

4. The method as claimed in claim 3, in which, after the automatic configuration of the firewall or of the router, an administrator who maintains the first computer network or the first computer is informed of the configuration.

5. The method as claimed in claim 1, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

6. The method as claimed in claim 1, in which the second computer network is an Intranet, an ISDN network (Integrated Service Digital Network) or the Internet.

7. A computer program which implements translation of the application form as claimed in claim 1.

8. A data carrier on which the computer program as claimed in claim 7 is stored.

9. A data processing device on which the computer program as claimed in claim 7 is installed.

10. The method as claimed in claim 2, in which, after the automatic translation of the filled-out application form into the suitable code, the firewall or the router is automatically configured.

11. The method as claimed in claim 10, in which, after the automatic configuration of the firewall or of the router, an administrator who maintains the first computer network or the first computer is informed of the configuration.

12. The method as claimed in claim 2, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

13. The method as claimed in claim 3, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

14. The method as claimed in claim 4, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

15. The method as claimed in claim 10, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

16. The method as claimed in claim 11, in which the first computer network is an Intranet, an ISDN network (Int Service Digital Network) or the Internet.

17. The method as claimed in claim 2, in which the second computer network is an Intranet, an ISDN network (Integrated Service Digital Network) or the Internet.

18. The method as claimed in claim 3, in which the second computer network is an Intranet, an ISDN network (Integrated Service Digital Network) or the Internet.

19. The method as claimed in claim 4, in which the second computer network is an Intranet, an ISDN network (Integrated Service Digital Network) or the Internet.

20. The method as claimed in claim 5, in which the second computer network is an Intranet, an ISDN network (Integrated Service Digital Network) or the Internet.