Selection and storage of policies in network management

• US 7,130,854 B2
• Filed: 08/13/2002
• Issued: 10/31/2006
• Est. Priority Date: 08/14/2001
• Status: Expired due to Term

• Current Assignee: Sophos Limited (Sophos Group Ltd.)
• Original Assignee: ENDFORCE, Inc. (Sophos Group Ltd.)
• Inventors: Bell, Raymond J., Russo, Kevin A., Emerick, William S., Mulh, Kenneth E., Beadles, Mark A.
• Primary Examiner(s): MIZRAHI, DIANE D
• Application Number:
  US10/219,096
• Publication Number:
  US 20030037040A1
• Time in Patent Office: 1,540 Days
• Field of Search: 707 1- 10, 707100-1041, 707200-206, 709/224, 713/201, 705/21, 345/736, 370/338
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

User interface and policy loading aspects of a policy-based, outsourced, network management system. In one aspect, a user selects policies using a graphical user interface (GUI) with a two paned window having a tree view of the policies in one pane. In another aspect, the policies are (1) created in the GUI format (e.g., XML), (2) sent over a network (e.g., the internet) to a service center in the same format, and (3) are loaded, manipulated and stored in the same format. In another aspect, the initial loading of the policies is done using a bulk loader in a logic layer. In another aspect, the logic layer also includes a configuration checker which handles changes or additions to policies in a finished network management system. Any aspects of the new or changed policy that are inconsistent with the finished system are parsed and stripped out. In another aspect, where the details of a new policy or change aren'"'"'t specified, a base configuration creator creates a policy with minimal attributes. In another aspect, the logic layer also contains a device control console, which allows bypassing the policy creating and configuring to allow a user to directly access a device for configuration.

Claims

1. A computer implemented method of selecting network policies for a plurality of customer network devices over a connecting network, the method comprising:

displaying lists of network policies and their associated attributes over the connecting network to the customer viewable on the customer'"'"'s GUI, wherein said policies and their associated attributes are stored in a directory;

presenting said network policies in a tree structure such that branches of the tree can be selectively accessed for viewing; and

selecting a set of policies from the displayed policy lists for the plurality of customer network devices.

2. The method of claim 1 wherein said directory is displayed in said tree structure in a first pane of a window and wherein the lists of policies and their associated attributes are displayed in a second pane of the window.

3. The method of claim 1 wherein said connecting network is the internet.

4. The method of claim 3 wherein said user GUI is an internet browser.