Mcafee, Inc.

James Dool

Brent A Johnston

Mark J McArdle

Philip D R Nathan

A method, system, and policy file data structure stored on computer-readable medium comprise reading a policy identifier field containing data representing an identifier for a security policy. Further, a protocol identifier field is read containing data representing an identifier for a protocol associated with the security policy identified in the policy identifier field. In addition, a protocol element entry containing data representing a protocol element for protocol identified by the protocol identifier field is associated with a network adapter.

Automatically configuring a computer firewall based on network connection

A firewall protecting a computer is automatically configured to a particular security policy based on an address assigned to a network adapter. A zone that contains the network address is determined and a security policy that is assigned to the zone is associated with the network adapter. The security policy specifies the configuration the firewall uses when handling network traffic between the adapter and the network corresponding to the address. In another aspect, the address assigned to the network adapter is also determined.

An application policy engine for a computer blocks access to network resources by applications executing on the computer that are not authorized for such access by an application policy file. The application policy engine monitors outgoing network traffic from the computer and compares an identifier for the application contained in a network access request with application identifiers stored in the application policy file. If the application identifier is associated with an unauthorized application, access to the network is blocked by the application policy engine. In another aspect, an unauthorized application is allowed access to certain resources on a network while being blocked from other resources on the same network. In still a further aspect, an authorized application may be permitted only certain types of access to a network or network resource.

Growing community of inventors

Kitchener, Canada

James Dool