55 results about "Configuration Issue" patented technology

A method and apparatus are disclosed for managing a firewall. The disclosed firewall manager facilitates the generation of a security policy for a particular network environment, and automatically generates the firewall-specific configuration files from the security policy simultaneously for multiple gateways. The security policy is separated from the vendor-specific rule syntax and semantics and from the actual network topology. Thus, the security administrator can focus on designing an appropriate policy without worrying about firewall rule complexity, rule ordering, and other low-level configuration issues. In addition, the administrator can maintain a consistent policy in the presence of intranet topology changes. The disclosed firewall manager utilizes a model definition language (MDL) and an associated parser to produce an entity relationship model. A model compiler translates the entity-relationship model into the appropriate firewall configuration files. The entity-relationship model provides a framework for representing both the firewall-independent security policy, and the network topology. The security policy is expressed in terms of “roles,” which are used to define network capabilities of sending and receiving services. A role may be assumed by different hosts or host-groups in the network. A visualization and debugging tool is provided to transform the firewall-specific configuration files into a graphical representation of the current policy on the actual topology, allowing the viability of a chosen policy to be evaluated. A role-group may be closed to prevent the inheritance of roles.

This Invention permits very rapid installation of operating systems onto off-the-shelf hardware. Furthermore, this Invention addresses multiple configuration issues pertaining to the creation of unique “InterNet Hosts”, and thus enables the very rapid installation of operating systems preconfigured to boot into a “ready to internetwork” mode with no subsequent configuration needs. It integrates several different existing security and encryption models which are considered robust. Further, the media on which this Invention will be distributed, and from which it will be run, are read-only CD-ROM, providing further defense against InterNet-based attacks.A variety of scripts generates a series of CD-ROMs which will each boot an Intel-ix86-based PC to an individual network identity, all of which will have the characteristics listed above, and will automatically network if provided with the IEEE 802.11b standard wireless PC Cards.

A broadcast router includes plural input cards, first and second router matrix card and plural output cards. Programmable devices residing on the cards requiring configuration issue a request for configuration to a main controller which resides, with a shared configuration information repository on a configuration control card. After a period of time which allows additional programmable devices to request configuration elapses, the main controller polls the programmable devices residing on the cards to determine which of the programmable devices had requested configuration and, using the configuration information maintained in the shared configuration information repository, configures each programmable device which had requested configuration.

Change management in a relational database may be implemented by indexing changes by copying the database to a new revision when a change is made to one or more items in the database. The new revision may be committed as a single unit and all changes stored together under a single revision. Database users may be notified of the new revision that is available for use. Software configuration issues may be simplified through the use of a configuration language that separates the logical configuration between software components from the specific configuration of those components. Secure data center administration may be handled through the use of control hosts.