公开(公告)号：US20150156219A1

公开(公告)日：2015-06-04

申请号：US14620901

申请日：2015-02-12

Applicant: Juniper Networks, Inc.

Inventor： Krishna NARAYANASWAMY ,  Roger A. CHICKERING ,  Steven A. MALMSKOG

IPC: H04L29/06

CPC classification number: H04L63/20 ,  G06F9/45558 ,  G06F9/5077 ,  G06F21/53 ,  G06F21/604 ,  G06F2009/45587 ,  G06F2221/2141 ,  G06F2221/2149 ,  H04L63/10 ,  H04L63/1416 ,  H04L63/1433

Abstract: A system includes a virtual machine (VM) server and a policy engine server. The VM server includes two or more guest operating systems and an agent. The agent is configured to collect information from the two or more guest operating systems. The policy engine server is configured to: receive the information from the agent; generate access control information for a first guest OS, of the two or more guest operating systems, based on the information; and configure an enforcer based on the access control information.

Abstract translation: 系统包括虚拟机（VM）服务器和策略引擎服务器。 VM服务器包括两个或多个客户机操作系统和代理。 代理被配置为从两个或多个客户操作系统收集信息。 策略引擎服务器被配置为：从代理接收信息; 基于所述信息生成所述两个或多个客户操作系统的第一客户操作系统的访问控制信息; 并根据访问控制信息配置执行者。