Security Feature Orchestration Across Routers and Cloud Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The lack of orchestration across network components, including both local devices and cloud services, leads to inconsistent and inefficient security policy enforcement, requiring manual configuration and duplication of efforts, which is exacerbated by the migration to secure access service edge (SASE) deployments.
Innovation Solution
A method for orchestrating security solutions across computing devices by discovering device capabilities, intelligently distributing security features between local routers and cloud services, and providing a unified management interface to streamline policy implementation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security features are manually configured on each network device and cloud service separately, then security policy enforcement can be implemented, but administrative complexity and time consumption increase significantly
Solution Approach 1:
The patent introduces an intermediary device that acts as a mediator between security administrators and multiple network devices/cloud services. This intermediary automatically distributes and coordinates security policies across all connected devices, eliminating the need for manual configuration on each device while ensuring consistent security enforcement throughout the network.
2Reliability
If security features are distributed across multiple devices and cloud services, then security coverage is improved, but coordination and consistency become difficult to maintain
Solution Approach 1:
The patent merges the coordination function of multiple security devices and cloud services into a single centralized intermediary device. This intermediary consolidates policy management, capability discovery, and feature distribution functions, making it easy to maintain coordination and consistency across the entire security infrastructure while preserving broad security coverage.
3Speed
If all security features are implemented on local network devices, then response time is reduced, but resource requirements and cost increase
Solution Approach 1:
The patent implements local quality by allowing different security features to be distributed based on local device capabilities and requirements. Critical security functions that require fast response are implemented locally on network devices, while less time-sensitive features are handled by cloud services, optimizing both response time and resource utilization across the system.
4Reliability
If security features are duplicated across multiple devices, then redundancy is improved, but resource efficiency decreases
Solution Approach 1:
The patent implements feedback mechanisms where the intermediary device continuously discovers and monitors the capabilities of connected devices and cloud services. Based on this feedback, the system intelligently distributes security features to appropriate devices, ensuring redundancy for critical functions while avoiding duplication on devices that already possess the required capabilities, thus maintaining both reliability and resource efficiency.
Data Source
AI summary
This disclosure describes techniques for orchestrating implementation of a security solution among network devices. The techniques include determining capabilities of routers of the network and capabilities of a cloud security service to perform security features of a security solution. Based at least in part on the capabilities, the techniques include configuring a router of the network to execute a first subset of the security features on data traffic of the network, and configuring the cloud security service to execute a second subset of the security features on the data traffic. The techniques may also include causing the security solution to be presented to a security administrator via a display, the display providing representations of the first subset and the second subset of the security features.