Juniper Networks, Inc.

Sunil G Rawoorkar

Srinivas Nimmagadda

Jeffrey S Marshall

Prakash T Seshadri

Kartik Krishnan S Iyyer

Srinivasan Veeraraghavan

Yasmin Zarina

Krishnaiah Gogineni

A device receives information identifying a specific host threat to a network, where the information includes a list of network addresses associated with the specific host threat. The device identifies network elements, of the network, associated with the specific host threat to the network, and determines a network control system associated with the identified network elements. The device determines a policy enforcement group of network elements, of the identified network elements, that maps to the list of network addresses associated with the specific host threat, where the network control system is associated with the policy enforcement group of network elements. The device determines a threat policy action to enforce for the specific host threat, and causes, via the network control system, the threat policy action to be enforced by the policy enforcement group of network elements.

Enforcing threat policy actions based on network addresses of host threats

A device receives policy information indicating a policy to be implemented for an application hosted by multiple cloud domains, and receives, from the multiple cloud domains, different application resource tags and addresses associated with the application. The device maps the different application resource tags to a generic identifier, and associates the policy with the generic identifier and with the addresses associated with the application. The device provides, based on associating the policy with the generic identifier and with the addresses associated with the application, the policy to the multiple cloud domains to permit the multiple cloud domains to implement the policy.

Enforcing policies in cloud domains with different application nomenclatures

Growing community of inventors

Pleasanton, CA, United States of America

Sunil G Rawoorkar