Selection and storage of policies in network management

• US 7,882,152 B2
• Filed: 09/19/2006
• Issued: 02/01/2011
• Est. Priority Date: 08/14/2001
• Status: Active Grant

• Current Assignee: Sophos Limited (Sophos Group Ltd.)
• Original Assignee: Sophos Plc (Sophos Group Ltd.)
• Inventors: Bell, Raymond J., Russo, Kevin A., Emerick, William S., Mulh, Kenneth E., Beadles, Mark A.
• Primary Examiner(s): Mizrahi; Diane
• Application Number:
  US11/524,414
• Publication Number:
  US 20070016597A1
• Time in Patent Office: 1,596 Days
• Field of Search: 707/101, 707/607, 707/803, 707/804, 707/805, 707/827, 707/829, 709/224, 717/114, 719/327, 700/86, 710/81
• US Class Current: 707/804
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

User interface and policy loading aspects of a policy-based, outsourced, network management system. In one aspect, a user selects policies using a graphical user interface (GUI) with a two paned window having a tree view of the policies in one pane. In another aspect, the policies are (1) created in the GUI format (e.g., XML), (2) sent over a network (e.g., the internet) to a service center in the same format, and (3) are loaded, manipulated and stored in the same format. In another aspect, the initial loading of the policies is done using a bulk loader in a logic layer. In another aspect, the logic layer also includes a configuration checker which handles changes or additions to policies in a finished network management system. Any aspects of the new or changed policy that are inconsistent with the finished system are parsed and stripped out. In another aspect, where the details of a new policy or change aren'"'"'t specified, a base configuration creator creates a policy with minimal attributes. In another aspect, the logic layer also contains a device control console, which allows bypassing the policy creating and configuring to allow a user to directly access a device for configuration.

Claims

1. A method of selecting and deploying network policies for a plurality of customer network devices under control of a policy-based network management system over a connecting network, the method comprising:

receiving a file that identifies the plurality of customer network devices in a format that is directly viewable on a user GUl and is directly transportable over the connecting network;

converting the file into hierarchical data;

writing the hierarchical data to an Active Directory; and

storing a user selection of network policies for the plurality of customer network devices in the Active Directory.

2. The method of claim 1 wherein said connecting network is the Internet.

3. The method of claim 1 wherein said user GUI is an Internet browser.

4. The method of claim 1 wherein said file format is XML.

5. The method of claim 1 wherein the file identifies each one of the plurality of network customer devices by a device type, an IP address and a base configuration.

6. The method of claim 1 further comprising:

retrieving data from the Active Directory and processing the data to provide service-based, device-neutral policy data; and

storing the service-based, device-neutral policy data in a policy store.

7. The method of claim 6 further comprising using a device plug-in to translate the service-based, device neutral policy data stored in the policy store into a device-specific configuration for one of the customer network devices.

8. The method of claim 7 further comprising transferring the device-specific configuration to the one of the customer network devices.