公开(公告)号：US20210028971A1

公开(公告)日：2021-01-28

申请号：US17039328

申请日：2020-09-30

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: H04L12/24

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.

公开(公告)号：US20190097918A1

公开(公告)日：2019-03-28

申请号：US15713895

申请日：2017-09-25

Applicant: Cisco Technology, Inc.

Inventor： Kannan Ponnuswamy ,  Navneet Yadav ,  Arvind Chari ,  Paul Andrew Raytick

IPC: H04L12/703 ,  H04L12/24

CPC classification number: H04L45/28 ,  H04L41/0654 ,  H04L41/5009 ,  H04L43/0817 ,  H04L45/22

Abstract: Systems, methods, and computer-readable media for providing network assurance. In some embodiments, a method can include receiving input used to identify an endpoint. At least one logical object associated with the endpoint of logical objects in a network environment is identified based on the input. A health of the at least one logical object associated with the endpoint is determined. Additionally, a health of the network environment with respect to the endpoint operating to provide services through the network environment is determined based on the determined health of the at least one logical object associated with the endpoint.

公开(公告)号：US20220360484A1

公开(公告)日：2022-11-10

申请号：US17752329

申请日：2022-05-24

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: H04L41/046 ,  H04L41/12 ,  H04L41/0873

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.

公开(公告)号：US20180367390A1

公开(公告)日：2018-12-20

申请号：US15663601

申请日：2017-07-28

Applicant: Cisco Technology, Inc.

Inventor： Kannan Ponnuswamy ,  Advait Dixit ,  Arvind Chari ,  Paul Andrew Raytick ,  Sanchay Harneja

IPC: H04L12/24 ,  H04L12/26

Abstract: Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations

公开(公告)号：US20190379572A1

公开(公告)日：2019-12-12

申请号：US16002981

申请日：2018-06-07

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: H04L12/24

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.

公开(公告)号：US10333833B2

公开(公告)日：2019-06-25

申请号：US15713895

申请日：2017-09-25

Applicant: Cisco Technology, Inc.

Inventor： Kannan Ponnuswamy ,  Navneet Yadav ,  Arvind Chari ,  Paul Andrew Raytick

IPC: H04L12/703 ,  H04L12/24 ,  H04L12/26 ,  H04L12/707

Abstract: Systems, methods, and computer-readable media for providing network assurance. In some embodiments, a method can include receiving input used to identify an endpoint. At least one logical object associated with the endpoint of logical objects in a network environment is identified based on the input. A health of the at least one logical object associated with the endpoint is determined. Additionally, a health of the network environment with respect to the endpoint operating to provide services through the network environment is determined based on the determined health of the at least one logical object associated with the endpoint.

公开(公告)号：US20180367541A1

公开(公告)日：2018-12-20

申请号：US15794908

申请日：2017-10-26

Applicant: Cisco Technology, Inc.

Inventor： Kannan Ponnuswamy ,  Navneet Yadav ,  Arvind Chari

IPC: H04L29/06

CPC classification number: H04L63/101 ,  H04L63/20

Abstract: Systems, methods, and computer-readable media for migrating to and maintaining a white-list network security model. Network traffic identified from permit-all access logs can be analyzed to determine whether it should be white-listed, and if so, a specific permit-access, without logging, policy is generated for the identified network traffic. The addition of specific permit-access policies is repeated on permit-all access logs, at which point, permit-all access policy is converted into deny-all access. In some examples, a system or method can obtain hit counts, from both hardware (eg: TCAM) and software tables, for the specific permit-access policy to determine existence of identified network traffic over a period of time. After analyzing hit counts, the specific permit-access policy can either continue to exist or be removed to maintain a white-list network security model.

公开(公告)号：US11902082B2

公开(公告)日：2024-02-13

申请号：US17752329

申请日：2022-05-24

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: H04L12/24 ,  H04L41/046 ,  H04L41/0873 ,  H04L41/12

CPC classification number: H04L41/046 ,  H04L41/0873 ,  H04L41/12

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.

公开(公告)号：US11374806B2

公开(公告)日：2022-06-28

申请号：US17039328

申请日：2020-09-30

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: G06F15/173 ,  H04L41/046 ,  H04L41/12 ,  H04L41/0873

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.

公开(公告)号：US10812315B2

公开(公告)日：2020-10-20

申请号：US16002981

申请日：2018-06-07

Applicant: Cisco Technology, Inc.

Inventor： Navneet Yadav ,  Kannan Ponnuswamy ,  Arvind Chari ,  Chengguo Zhu ,  Tarique Shakil

IPC: G06F15/173 ,  H04L12/24

Abstract: Systems, methods, and computer-readable media for providing cross-domain assurance for networks in different network domains. In some embodiments, a method can include collecting first fabric data for a first network in a first network domain and second fabric data for a second network in a second network domain. The second fabric data for the second network can be normalized based on the first network domain to create normalized second fabric data. The first fabric data can then be correlated with the normalized second fabric data to create correlated fabric data. Subsequently, assurance can be provided across the first network in the first network domain and the second network in the second network domain using the correlated fabric data.