An administration portal

Abstract

An administration portal for a network security server, including: (i) control elements allowing a user of a network to access respective services, such as email, spam filter, malware filter, and web browser control services, performed by the security server; and (ii) an administration module for maintaining permission attributes for users of the network, the attributes defining access to the control elements. The permission attributes have a delegation hierarchy so a managed security service provider can set a permission attribute for a user to administrator, and the user with an administrator permission attribute can set another user to have a user permission attribute. The permission attributes can also be set on a group basis for a group of said users. The attributes each have associated capability levels defining a level of access for the respective services.

Description

technical field

[0001] The invention relates to a management entrance of a network security system. Background technique

[0002] Perimeter security systems are installed at the edge of corporate LANs and WANs to protect these networks from the outside world. For example, a connection to the Internet may be secured by machines including machines directly connected to the Internet to protect it from, for example, viruses, worms, Trojan horses, phishing, spyware, spam, unwanted content, and hacking A secure server for many types of Internet threats. A security server's configuration files include signature or pattern files that serve as the basis for detecting threats and are updated on a regular basis. Given the frequency with which Internet threats change and arise, security servers are generally updated in a regular and timely manner by a managed security service provider (MSSP) using remote devices from a central network operations center (NOC).

[0003] In addition to ...

Examples

Embodiment Construction

[0022] Such as figure 1 As shown, security server 100 provides Internet threat protection facilities to protect an enterprise's local area network (LAN) 102 from many types of Internet threats. These threats include viruses, worms, Trojan horses, phishing, spyware, spam, unwanted content, and hacking, as well as any other form of unwanted code, traffic, or activity related to LAN 102 . A security server or box 100 is directly connected to an external communication network 104 , such as the Internet, via a router 106 , thereby being located between a LAN 102 and the Internet 104 . LAN 102 connects a plurality of terminals 110 on network 102 . Terminals 110 are computer devices, such as personal computers or telephones, that are capable of handling network traffic and messages, such as email and HTTP requests and responses. A security server or box 100 may also provide support for a demilitarized zone (DMZ) 108, which in an alternative embodiment, server 100 may comprise sever...

technical field

[0001] The invention relates to a management entrance of a network security system. Background technique

[0002] Perimeter security systems are installed at the edge of corporate LANs and WANs to protect these networks from the outside world. For example, a connection to the Internet may be secured by machines including machines directly connected to the Internet to protect it from, for example, viruses, worms, Trojan horses, phishing, spyware, spam, unwanted content, and hacking A secure server for many types of Internet threats. A security server's configuration files include signature or pattern files that serve as the basis for detecting threats and are updated on a regular basis. Given the frequency with which Internet threats change and arise, security servers are generally updated in a regular and timely manner by a managed security service provider (MSSP) using remote devices from a central network operations center (NOC).

[0003] In addition to ...

Examples

Embodiment Construction

[0022] Such as figure 1 As shown, security server 100 provides Internet threat protection facilities to protect an enterprise's local area network (LAN) 102 from many types of Internet threats. These threats include viruses, worms, Trojan horses, phishing, spyware, spam, unwanted content, and hacking, as well as any other form of unwanted code, traffic, or activity related to LAN 102 . A security server or box 100 is directly connected to an external communication network 104 , such as the Internet, via a router 106 , thereby being located between a LAN 102 and the Internet 104 . LAN 102 connects a plurality of terminals 110 on network 102 . Terminals 110 are computer devices, such as personal computers or telephones, that are capable of handling network traffic and messages, such as email and HTTP requests and responses. A security server or box 100 may also provide support for a demilitarized zone (DMZ) 108, which in an alternative embodiment, server 100 may comprise sever...

Images