Juniper Networks, Inc.

Other

Vinuth Tulasi

Srivathsa Sarangapani

Arnav Shrivastava

Pradeep H Krishnamurthy

A device may obtain information regarding firewall rules. The information, for a firewall rule of the firewall rules, may include one or more match condition values and a ranking value. The firewall rule may be applicable to packets that are associated with packet information that matches the match condition values. A match condition value may be associated with a match count that identifies a quantity of times that packets match the match condition value. The ranking value may identify a quantity of times that the firewall rule has been applied to the packets. The device may obtain a new firewall rule. The device may predict a ranking value of the new firewall rule based on match condition values of the new firewall rule and/or based on analyzing the information regarding the plurality of firewall rules. The device may perform an action based on the predicted ranking value.

Predicting firewall rule ranking value

A system and method for minimizing a requirement of screen space of displaying auxiliary content based on selected content are provided. The method includes following steps of (a) obtaining an input to select the content displayed in at least one of (i) a webpage or (ii) an application, and triggering the selected content; (b) processing the selected content; (c) generating a semantic representation of the selected content from the parse tree data structure; (d) determining a theme for the selected content based on the semantic representation of the selected content; (e) determining a template, that matches with the theme; (f) providing named entity extracted values in the template based on the semantic representation of the selected content; (g) obtaining the auxiliary content associated with the selected content and (h) displaying the auxiliary content in a screen space where the selected content is displayed.

System and method for minimizing screen space required for displaying auxiliary content

A device may receive rule information, associated with a firewall policy, that includes a set of N rules. The device may add a rule, of the set of N rules, to a detector tree associated with the firewall policy. The device may identify other rules to which the rule is to be compared. The other rules may be included in the set of N rules, and may include a quantity of rules approximately equal to a result of a logarithm to base 2 of N. The device may compare the rule and the other rules, and may detect a rule anomaly based on comparing the rule to the other rules. The rule anomaly may be associated with a conflict between the rule and a particular rule of the other rules. The device may identify the rule anomaly within the detector tree, and may output information regarding the rule anomaly.

Detector tree for detecting rule anomalies in a firewall policy

A two-dimensional data input plane represents a set of objects along an x-axis and a set of values that can be assigned to the objects along a y-axis. Plotting a point on the graph causes a value corresponding to the horizontal component of the point to be assigned to an object corresponding to the vertical component of the point. In one example, a device includes a user interface to display a graph, identifiers for a set of objects along an x-axis of the graph, and a set of values along a y-axis of the graph, and a processor to receive a selection of an intersection of one of the identifiers of the objects along the x-axis and one of the values along the y-axis from the user interface, and to assign the one of the values to the one of the objects corresponding to the one of the identifiers.

Assigning values to objects using a two-dimensional data input plane

In general, this disclosure describes techniques for testing and verifying the functionality of networks and network devices without requiring the deployment of specialized testing components. For example, as described herein, a device management protocol (e.g., SNMP or NETCONF) typically used for remote configuration of devices has been extended to allow traffic patterns to be seamlessly injected into the existing network devices that form the enterprise network. For instance, a network management device sends configuration data to a managed network device in accordance with a device management protocol and calls, using a test packet parameter, a device configuration function exposed by a managed device. When the device configuration function is called, the managed device processes the test packet to produce a result in accordance with the configuration data as if the test packet had been received from the network, and the managed device returns a test packet processing result.

Growing community of inventors

Bengaluru, India

Vinuth Tulasi