公开(公告)号：US20220006842A1

公开(公告)日：2022-01-06

申请号：US16921184

申请日：2020-07-06

Applicant: Cisco Technology, Inc.

Inventor： Alok Lalit Wadhwa ,  James Gabriel Fontenot ,  Ashutosh Kulshreshtha ,  Navindra Yadav ,  Shashidhar Gandham ,  Weifei Zeng

IPC: H04L29/06

Abstract: Disclosed herein are methods, systems, and non-transitory computer-readable storage media for scoring network segmentation policies in order to determine their effectiveness before, during and after enforcement. In one aspect, a method includes identifying one or more applications within an enterprise network; identifying at least one network security policy in association with the one or more applications within the enterprise network; determining a score of the network security policy based on information corresponding to exposure of each of the one or more applications within the enterprise network; and executing the network security policy based on the score

公开(公告)号：US11463483B2

公开(公告)日：2022-10-04

申请号：US16921184

申请日：2020-07-06

Applicant: Cisco Technology, Inc.

Inventor： Alok Lalit Wadhwa ,  James Gabriel Fontenot ,  Ashutosh Kulshreshtha ,  Navindra Yadav ,  Shashidhar Gandham ,  Weifei Zeng

IPC: H04L9/40 ,  H04L29/06

Abstract: Disclosed herein are methods, systems, and non-transitory computer-readable storage media for scoring network segmentation policies in order to determine their effectiveness before, during and after enforcement. In one aspect, a method includes identifying one or more applications within an enterprise network; identifying at least one network security policy in association with the one or more applications within the enterprise network; determining a score of the network security policy based on information corresponding to exposure of each of the one or more applications within the enterprise network; and executing the network security policy based on the score.