Salesforce, Inc.

Varun Kulkarni Somashekhar

Prabhat Singh

Santhosh Ram Vetrinadar Manohar

Toan Van Nguyen

Jose Lejin P J

Sriram Srinivasan

Arthur Jones

Praveenkumar Sowpati

Aditya Suresh Kumar

Megha Dixit

Gianstefano Monni

Amitabh B Chakrabarty

Deepanshu Badola

Stephen Fung

Bogdan Florin Romanescu

Ashwin Shroff

Darragh Connaughton

Vamshi Karnati

Christopher Jason Donley

Dheeraj Kakkar

Adam J Salter

Vinod Vasant Pai

Qiyuan Zheng

Syed Abdullah Shah

Disclosed are examples of systems, apparatus, methods and computer program products for automation of network security policy analysis and deployment. A server system can obtain a system input comprising two versions of a policy output. The system can generate a severity characteristic that indicates a severity of deploying the second version of the policy output. The system can then determine whether to deploy the second version of the policy output based on the severity characteristic. The system can then, in response to determining that the second version of the policy output is to be deployed, deploy the second version of the policy output to one of a plurality of clouds.

Automation of cloud network security policy analysis and deployment

Methods, systems, and devices for data processing in a computing system are described. The computing system may receive a notification of an update to network security objects hosted in diverse substrates within the computing system. The computing system may retrieve a network security policy for a service instance impacted by the update. The computing system may update the network security policy for the service instance according to a network security configuration of the hosting substrate. The computing system may translate the updated network security policy into access control lists (ACLs) for network entities managing communications between service instances within the computing system. The computing system may store the ACLs in respective data repositories that are accessible to the network entities. The computing system may transmit a notification that the ACLs are available for deployment, thereby causing the network entities to retrieve the ACLs from the respective data repositories.

Systems and methods for automatically rendering and deploying network security policies

A system is disclosed for acquiring and managing data regarding external IP (EIP) addresses of services offered in a trusted public cloud environment. The system monitors an application program interface of a service executing in a trusted public cloud environment for occurrence of an event that is related to an EIP of the service. When an event is detected, the system extract EIP related data and metadata of the service, generates a message with the extracted EIP data, and posts the message to a central message queue. The system monitors the message queue for the presence of a new message. Upon detecting a new message, the system processes the message, extracts EIP related data. metadata, and identifies an action. A central database that stores EIP related information of services executing in the trusted public cloud environment is updated based on the identified action.

Automated external IP address discovery of services in a public cloud environment

Disclosed are examples of systems, apparatus, methods and computer program products providing network security orchestration and management across different clouds. In some implementations, network security information includes a set of security policies indicating permitted communications between or among computing resources. The network security information is converted to a cloud-independent representation. From the cloud-independent representation, policy sets can be generated, where each policy set is specific to a different cloud.

Network security orchestration and management across different clouds

Growing community of inventors

Fremont, CA, United States of America

Varun Kulkarni Somashekhar