Patent ID: 11916963
Assignee: JUNIPER NETWORKS, INC.
Field: nan (nan)
Classification: CPC nan | IPC G  H

Claim 0:
1. A network system comprising:
a device comprising processing circuitry, the device associated with a first site; and
a service orchestrator comprising processing circuitry and a database, the service orchestrator configured to:
store network segment prefixes for network segments at a second site in the database, the network segment prefixes having been dynamically learned at the second site via a routing protocol;
translate an intent-based security policy specifying a rule for control of network traffic between the first site and a workgroup at the second site to a security policy specifying a segment-specific queryable resource associated with the workgroup at the second site;
configure the device based on the security policy to query the segment-specific queryable resource; and
in response to a query from the device to the segment-specific queryable resource associated with the workgroup at the second site, transmit at least one of the network segment prefixes for a network segment associated with the workgroup at the second site stored in the database for receipt by the device.