Juniper Networks, Inc.

Firdousi Zackariya

Sanjay Agarwal

Nadeem Khan

Amarnath Bachhu Satyan

Ahzam Ali

Anoop Kartha

Kamil Imtiaz

Kamil Khan

An example network system includes a plurality of endpoint computing resources, a business policy graph of a network that includes a set of the plurality of endpoint computing resources configured as a security domain, a set of policy enforcement points ('PEPs') configured to enforce network policies, and a network management module ('NMM'). The NMM is configured to receive an indication of a set of network policies to apply to the security domain, automatically determine a subset of PEPs of the set of PEPs are required to enforce the set of network policies based on physical network topology information readable by the NMM that includes information about the location of the endpoint computing resources and the set of PEPs within the network, and apply the network policies to the subset of PEPs in order to enforce the network policies against the set of endpoint computing resources of the security domain.

Domain-based security policies

Techniques are described for determining reorder commands for updating policy rules in a managed network device based on a longest common subsequence between two lists of policy rules. For example, as described herein, a network management device determines a longest common subsequence of a source list comprising a plurality of policy rules in a first ordering that corresponds to a current policy configuration of a managed network device and of a destination list comprising the plurality of policy rules in a second ordering that corresponds to an updated ordering for the policy configuration. The network management device then iterates through the destination list to generate commands that, when executed by the managed network device, move policy rules in the destination list that are not members of the longest common subsequence to positions in the policy configuration relative to policy rules that are members of the longest common subsequence.

Determining reorder commands for remote reordering of policy rules

Growing community of inventors

Bengaluru, India

Firdousi Zackariya