Selection and storage of policies in network management

• US 20070016591A1
• Filed: 09/19/2006
• Published: 01/18/2007
• Est. Priority Date: 08/14/2001
• Status: Abandoned Application

• Current Assignee: ENDFORCE, Inc. (Sophos Group Ltd.)
• Original Assignee: ENDFORCE, Inc. (Sophos Group Ltd.)
• Inventors: Bell, Raymond, Russo, Kevin, Beadles, Mark, Mulh, Kenneth, Emerick, William
• Application Number:
  US11/523,974
• Publication Number:
  US 20070016591A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

User interface and policy loading aspects of a policy-based, outsourced, network management system. In one aspect, a user selects policies using a graphical user interface (GUI) with a two paned window having a tree view of the policies in one pane. In another aspect, the policies are (1) created in the GUI format (e.g., XML), (2) sent over a network (e.g., the internet) to a service center in the same format, and (3) are loaded, manipulated and stored in the same format. In another aspect, the initial loading of the policies is done using a bulk loader in a logic layer. In another aspect, the logic layer also includes a configuration checker which handles changes or additions to policies in a finished network management system. Any aspects of the new or changed policy that are inconsistent with the finished system are parsed and stripped out. In another aspect, where the details of a new policy or change aren'"'"'t specified, a base configuration creator creates a policy with minimal attributes. In another aspect, the logic layer also contains a device control console, which allows bypassing the policy creating and configuring to allow a user to directly access a device for configuration.

Claims

1-9. -9. (canceled)

10. A method of automatically configuring a network device which is subject to a customized user policy, using a base configuration checker, the method comprising:

receiving configuration data for the network device;

identifying configuration elements that are in conflict with said customized user policy;

correcting or reporting to a user said configuration elements in conflict.

11. The method of claim 10 further comprising:

providing a database manager object for retrieving base configuration data for said network device;

providing a rule set object for instantiating different rule objects based upon said base configuration data; and

managing and maintaining a set of step objects with each of said rule objects.

12. The method of claim 10 further comprising:

providing a management system for applying said customized user policy to a plurality of networked devices; and

providing an initial configuration if said network device is not under active management by said management system.

13. The method of claim 12 further comprising:

determining a device ID for said device;

fetching a base configuration for said device based on said device ID and an ID for said customized user policy.

14. A method of automatically configuring a network device which is subject to a customized user policy, the method comprising:

receiving configuration data for the network device;

identifying configuration elements that are in conflict with said customized user policy;

correcting or reporting to a user said configuration elements in conflict;

providing a management system for applying said customized user policy to a plurality of networked devices; and

providing an initial configuration if said network device is not under active management by said management system.

15-21. -21. (canceled)