Method for configuring ACLS on network device based on flow information

• US 20090154348A1
• Filed: 12/18/2007
• Published: 06/18/2009
• Est. Priority Date: 12/18/2007
• Status: Active Grant

• Current Assignee: Greg Newman
• Original Assignee: SolarWinds Worldwide LLC (SolarWinds Corp.)
• Inventors: Newman, Greg
• Granted Patent: US 8,295,198 B2
• Time in Patent Office: Days
• US Class Current: 370/230
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

Embodiments of the present invention provide a system and method for using network flows records exported from network routers to provide information about the traffic entering/exiting the device. Network routers or hubs can be configured to authorize or deny various types of network traffic between two network devices whose traffic transits via the router. The method presented describes the creation and application of access control lists on the router from information derived from the network flow information exported by the network router.

Claims