Method and system for communicating with a managed system located behind a firewall

• US 7,735,127 B1
• Filed: 11/26/2002
• Issued: 06/08/2010
• Est. Priority Date: 11/26/2002
• Status: Active Grant

• Current Assignee: Dell Marketing LP (Dell Technologies Inc.)
• Original Assignee: Dell Marketing USA LP (Dell Technologies Inc.)
• Inventors: Rive, Peter Joshua, Rive, Russell S.
• Primary Examiner(s): Smithers; Matthew B
• Assistant Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US10/305,698
• Time in Patent Office: 2,751 Days
• Field of Search: 726/11
• US Class Current: 726/12
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

A method and system for communicating with at least one managed system located behind a firewall are provided. The system includes an agent computer, located behind a firewall, to communicate with the at least one managed system and a management system. The management system communicates with the agent computer to provide computer related services. The management system is located on an opposed side of the firewall and communicates an envelope including at least one executable task to the agent computer for communication to the managed system. The executable task may be included in a script and the agent computer may poll the management system to determine if there is an envelope for it to receive.

Claims

1. A system for communicating with a plurality of managed systems located behind a firewall, the system comprising:

an agent computer communicatively coupled to the plurality of managed systems, the agent computer being external to the plurality of managed systems and located behind the firewall;

the agent computer including a polling module to poll a management system periodically to determine if there is an envelope for the agent computer to receive;

the management system to communicate to the agent computer the envelope including at least one executable task, the executable task to be executed on at least one of the plurality of managed systems, the management system being located on an opposed side of the firewall with respect to the agent computer and the plurality of managed systems;

the agent computer including an interpretation module to extract the at least one executable task from the envelope, analyze contents of the envelope and, in response thereto, selectively communicate the at least one executable task to at least one of the plurality of managed systems using a communication protocol identified in the envelope; and

the plurality of managed systems to receive from the agent computer the at least one executable task.

2. The system of claim 1, in which the executable task is included in a script for the agent computer.

3. The system of claim 1, in which the agent computer includes a script interpreter to execute the script.

4. The system of claim 1, in which the management system compiles the envelope at a network layer and the agent computer includes a decompiler to decompile the envelope prior to communicating the task to the at least one of the plurality of managed systems.

5. The system of claim 1, wherein the task comprises an executable file and the agent computer relays the executable file to the plurality of managed systems.

6. The system of claim 1, wherein the agent computer communicates a completion message to the management system after the task has been executed on at least one of the plurality of managed systems.

7. The system of claim 1, wherein the agent computer analyzes the contents of the envelope and, in response thereto, selectively denies and allows access to at least one of the plurality of managed systems identified in the envelope.

8. The system of claim 1, wherein the task is a system diagnostics query of the at least one of said plurality of managed systems, the results of the query being communicated to the management system via the agent computer.

9. A method of communicating with a plurality of managed systems located behind a firewall, the method comprising:

periodically polling a management system by a polling module of an agent computer to determine if there is an envelope for the agent computer to receive;

receiving the envelope at the agent computer located behind the firewall, the envelope being communicated from the management system on an opposed side of the firewall;

extracting a task from the envelope at the agent computer;

analyzing the envelope at the agent computer to identify a communication protocol; and

selectively communicating the task to at least one of the plurality of managed systems for execution, using the communication protocol.

10. The method of claim 9, in which the executable task is included in a script for interpretation by the agent computer.

11. The method of claim 9, in which the management system compiles the envelope at a network layer, the method including decompiling the envelope at the agent computer prior to communicating the task to the plurality of managed systems.

12. The method of claim 9, wherein the task comprises an executable file, the method including relaying the executable file from the agent computer to at least one of the plurality of managed systems.

13. The method of claim 9, which includes the agent computer communicating a completion message to the management system after the task has been executed on at least one of the plurality of managed systems.

14. The method of claim 9, which includes the agent computer analyzing the contents of the envelope and, in response thereto, selectively denying and allowing access to at least one of the plurality of managed systems identified in the envelope.

15. The method of claim 9, wherein the task is a system diagnostics query of at least one the plurality of managed systems, the method including the agent computer communicating results of the query to the management system.

16. A machine-readable medium storing a sequence of instructions that, when executed by a machine, cause the machine to execute a method of communicating with a plurality of managed systems located behind a firewall, the method comprising:

periodically polling a management system by a polling module of an agent computer to determine if there is an envelope for the agent computer to receive;

receiving the envelope at the agent computer external to the plurality of managed systems and located behind the firewall, the envelope being communicated from the management system on an opposed side of the firewall;

extracting a task from the envelope at the agent computer;

analyzing the envelope at the agent computer to identify a communication protocol; and

selectively communicating the task to at least one of the plurality of managed systems for execution, using the communication protocol.

17. The machine-readable medium of claim 16, wherein the executable task is included in a script for interpretation by the agent computer.

18. The machine-readable medium of claim 16, wherein the management system compiles the envelope at a network layer, the method including decompiling the envelope at the agent computer prior to communicating the task to at least one of the plurality of managed systems.

19. The machine-readable medium of claim 16, wherein the task comprises an executable file, the method including relaying the executable file from the agent computer to at least one of the plurality of managed systems.

20. The machine-readable medium of claim 16, wherein the method includes the agent computer communicating a completion message to the management system after the task has been executed on at least one of the plurality of managed systems.

21. The machine-readable medium of claim 16, wherein the method includes the agent computer analyzing the contents of the envelope and, in response thereto, selectively denying and allowing access to at least one of the plurality of managed systems identified in the envelope.

22. The machine-readable medium of claim 16, wherein the task is a system diagnostics query of at least one of the plurality of managed systems, the method including the agent computer communicating results of the query to the management system.

23. An agent computer for managing a plurality of managed systems located behind a firewall, the agent computer being external to the plurality of the managed systems and comprising:

memory;

a processor coupled to the memory;

a polling module executed by the processor to periodically poll a management system located on an opposed side of the firewall with respect to the agent computer and the plurality of managed systems, and to determine if an envelope is to be communicated to the agent computer; and

an interpretation module executed by the processor to extract a task from the envelope and to analyze the envelope to identify a communication protocol and, in response thereto, using the communication protocol, to selectively communicate the task to at least one of the plurality of managed systems for execution on the plurality of managed systems.

24. The computer of claim 23, wherein the interpretation module is to extract the task that is an executable defined by a script, and wherein the interpretation module is further to interpret the script and to communicate the executable to at least one of the plurality of managed systems.

25. The computer of claim 23, wherein the agent computer is to receive the envelope, and wherein the agent computer includes a decompiler to decompile the envelope.

26. A management system for managing a plurality of managed systems, the management system comprising:

a processor;

memory coupled to the processor;

a control center, retained by the memory, at which a plurality of tasks to be executed on the plurality of managed systems are defined;

an envelope generator, executed by the processor, to generate an envelope including at least one of the plurality of tasks;

a systems tool, executed by the processor, to communicate the envelope to an agent computer in response to a communication from a polling module of the agent computer to the control center periodically polling the control center to determine if there is at least one envelope for the agent computer to receive; and

the control center to task the agent computer to analyze the envelope to identify a communication protocol and, using the communication protocol, to selectively communicate the at least one of the plurality of tasks to at least one of the plurality of managed systems.

27. The system of claim 26, wherein the envelope generator is to generate the at least one of the plurality of tasks, which is an executable defined by a script provided at the control center for execution on at least one of the plurality of managed systems.

28. A method of managing a plurality of managed systems, the method comprising:

initiating at a control center a plurality of tasks to be executed on at least one of the plurality of managed systems;

generating at the control center an envelope including at least one of the plurality of tasks;

communicating the envelope to an agent computer in response to a communication from a polling module of the agent computer to the control center periodically polling the control center to determine if there is at least one envelope for the agent computer to receive; and

at the agent computer analyzing the envelope to identify a communication protocol and using the communication protocol, selectively communicating the at least one of the plurality of tasks to at least one of the plurality of managed systems, the agent computer being external to and communicatively coupled to at least one of the plurality of managed systems.

29. The method of claim 28, wherein the task comprises an executable defined by a script for execution on the agent computer.

30. The method of claim 28, which includes encrypting the envelope prior to communicating the envelope to the agent computer.

31. An agent computer for managing a plurality of managed systems located behind a firewall, the agent computer being external to the plurality of managed systems, the agent computer comprising:

storing means;

processing means coupled to the storing means;

polling means, executed by the processing means, for periodically polling a management system located on an opposed side of the firewall with respect to the agent computer and the plurality of managed systems to determine an envelope is to be communicated to the agent computer;

receiving means, executed by the processing means, for receiving the envelope and extracting a task from the envelope;

analyzing means, executed by the processing means, for analyzing the envelope to identify a communication protocol; and

communicating means, executed by the processing means, for selectively communicating the task to at least one of the plurality of managed systems for execution, using the communication protocol.