Fortinet, Inc.

Yuk Suen Cheng

Ratinder Paul Singh Ahuja

Manuel Nedbal

Jitendra B Gaitonde

Manoj Ahluwalia

Mark Raymond Lubeck

Rajiv Sreedhar

Gary Nool

Suresh Rajanna

David Dvir Adler

Ojas Milind Kale

Systems, methods, and apparatuses enable one or more security microservices to optimize a security configuration of a networked environment by applying security policies to resource groups passively to determine whether network sets, resource groups, or security policies should be modified, prior to active enforcement. When security policies are applied passively, security actions that are performed in response to a violation of security policy do not impact network traffic. The one or more security microservices evaluate the results of the passive application of security policies to determine whether there is at least one recommended modification to network sets, resource groups, or security policies. When there is at least one recommended modification, the modification is applied. When there are no recommended modifications or the recommended modifications have been performed, the one or more security microservices initiate active enforcement of at least a subset of the security policies on the network traffic.

Optimizing a security configuration of a networked environment

Growing community of inventors

Redwood City, CA, United States of America

Yuk Suen Cheng