Visualization of firewall rules in an auto provisioning environment

• US 7,392,539 B2
• Filed: 05/25/2004
• Issued: 06/24/2008
• Est. Priority Date: 05/18/2004
• Status: Expired due to Fees

• Current Assignee: Trend Micro Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: BROOKS, Patrick J., GREFF, Andrew J., Hyman, Stewart J., Keizner, Artur
• Primary Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US10/854,112
• Publication Number:
  US 20050262554A1
• Time in Patent Office: 1,491 Days
• Field of Search: 726 11- 12, 726/14, 726/22, 709220-221, 709/218, 709/249, 709223-225, 713/188, 707/9, 715/700, 715/741, 715736-737
• US Class Current: 726/11
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

Various aspects of the invention provide a method, apparatus, and software for selecting interconnectivity rules for a computer network environment and visualization on a display of a data processing system interconnectivity rules in an auto provisioning environment, including: selecting a network environment specification having characteristics describing the environment, the characteristics including: number of network security tiers, firewalls, and other network constraints; displaying a graphical representation of the selected network environment, including security tiers, and proposed firewalls, to a user on the display; selecting network objects for the selected network environment, the network objects being selected from a group of objects including: operating systems and other software applications having predefined or configurable characteristics including interconnectivity rules, and firewall rules; populating the displayed network environment with the selected objects; determining network interconnectivity requirements in the selected network environment for the selected objects from their characteristics; and displaying graphical visualizations of the selected objects and graphical visualizations of the network interconnectivity requirements of the objects in appropriate regions of the displayed network environment.

Claims

1. A method for selecting interconnectivity rules for a computer network environment and visualization on a display of a data processing system interconnectivity rules in an auto provisioning environment, comprising:

selecting a network environment specification having characteristics describing said environment, said characteristics including;

number of network security tiers, firewalls, and other network constraints;

displaying a graphical representation of said selected network environment, including security tiers, and proposed firewalls, to a user on said display;

selecting network objects for said selected network environment, said network objects being selected from a group of objects including;

operating systems and other software applications having predefined or configurable characteristics including interconnectivity rules, and firewall rules;

populating said displayed network environment with said selected objects;

determining network interconnectivity requirements in said selected network environment for said selected objects from their characteristics; and

displaying graphical visualizations of said selected objects and graphical visualizations of said network interconnectivity requirements of said objects in appropriate regions of said displayed network environment.

2. The method of claim 1, further including configuring said configurable characteristics before determining network interconnectivity requirements.

3. The method of claim 1, wherein said graphical visualizations of said network objects identify said network objects and populate said firewalls with visualizations of respective firewall rules for said network objects including identification of said respective firewall rules.