Hewlett-packard Development Company, L.P.

Hewlett Packard Enterprise Development LP

Matthew Lee Deter

Kimberly Drongesen

Kevin M Worth

Christian Elton Cleveland

John K Gonsalves

John Bigley

Douglas T Albright

Daryl Wong

Shivaun Albright

Freeman Yufei Huang

Lisa Pinio

Shen Li

Hari Babu Ravindran

Jorge Arturo Villavicencio Conejo

Jay Schudel

John P Borz

Kathleen M Takayama

Jeffrey H Soesbe

A system for facilitating data transmission in a switch is provided. During operation, the system can obtain one or more sets of configuration parameters for a plurality of traffic policing filters of the switch. A respective traffic policing filter can correspond to a token bucket. A number of tokens in the token bucket can indicate whether to forward a packet associated with the traffic policing filter. The system can determine the token allocation frequencies for the plurality of traffic policing filters based on the one or more sets of configuration parameters. The system can then select a sampling interval from the token allocation frequencies based on a selection policy and determine a performance rate for the plurality of traffic policing filters based on the sampling interval.

Method and system for meter conformance in a switch

Systems and methods are provided for minimizing traffic leaks during replacement of an access control list for a network interface. The method includes adding a blocking access control entry to an access control list for a network interface of a network switch, wherein the blocking entry causes the network interface to block traffic from passing through the network interface; removing one or more current access control entries from the access control list, except for the blocking entry, after adding the blocking entry to the access control list; adding one or more new access control entries to the access control list, without removing the blocking entry, after removing the one or more current access control entries from the access control list; and removing the blocking entry from the access control list after adding the one or more new access control entries to the access control list.

Minimizing traffic leaks during replacement of an access control list for a network interface

Methods and systems for modifying software programs are disclosed. For instance, an example method for modifying a software program may include extracting, from a configuration program file, a future list of one or more future active entries relating to a future version of the software program and a future list of one or more future ghost entries relating to the future version of the software program, comparing the future lists of future active and ghost entries to current lists of current active entries and current ghost entries of a current version of the software program. Then, at least one upgrade or at least one downgrade of the current version of the software program is performed in response the comparison of the current and future lists.

Software upgrade and downgrade using ghost entries

A system and method for configuring security settings for devices is described. The system determines a security policy to regulate the use of a set of devices, including a first device and a second device. Support information for the first device and the second device can be determined. The security policy is implemented on each of the first device and the second device by selecting, based on the respective support information, a first security mechanism for the first device and a different second security mechanism for the second device, and configuring the first device with the first security mechanism and the second device with the second security mechanism.

Configuring a security setting for a set of devices using a security policy

An example system can comprise a memory to store machine readable instructions. The system can also comprise a processing unit to execute the machine readable instructions. The machine readable instructions can comprise a service layer to generate an office machine security policy for a heterogeneous fleet of office machines. The heterogeneous fleet of office machines can comprise two different office machines. The service layer can also generate a security configuration for each office machine of the office machine fleet. The security configuration for a given office machine of the heterogeneous fleet of office machines can comprise a security setting for the given office machine. The machine readable instructions can comprise can also comprise a device layer to translate the security configuration of the given office machine into security instructions that are executable by the given office machine.

Office machine security policy

In one embodiment, a first instruction prescribing a setting for a feature is defined. A second instruction prescribing a first action is defined. A third instruction prescribing a second action is defined. It is determined whether the feature is present in a computing device, and if present, whether the feature is set to the setting. The first action is initiated if the feature is present and not set to the setting. The second action is initiated if the feature is not present.

Method and system to secure a computing device

Growing community of inventors

Rocklin, CA, United States of America

Matthew Lee Deter